Security Directory

V

Vouch Concierge

vouchconcierge.com

70

Vouch Concierge operates a professional website offering a comprehensive front-to-back-end operations ecosystem for hotels, targeting small to enterprise-sized hospitality businesses. Their solutions include self check-in systems, virtual assistants, guest experience platforms, and operational automation, positioning them as an innovative technology provider in the hospitality sector. The website is built on WordPress with modern page builders and includes multilingual support, indicating a mature digital presence. Security posture is generally good with HTTPS and no exposed sensitive data, but lacks explicit privacy and cookie policies, which are critical for compliance. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the professional site and client logos mitigate some risk. Overall, the site demonstrates good business credibility and technical implementation but requires improvements in privacy compliance and domain registration transparency.

The domain egoi.site currently serves a 403 Forbidden error page with no accessible content, preventing any meaningful analysis of the business or website functionality. The domain is registered with eNom, Inc. since 2021 and is active with a clientTransferProhibited status, indicating some level of domain security. However, the lack of DNSSEC and absence of HTTPS or security headers suggests minimal security hardening. No metadata, structured data, or business information is available, and no privacy or cookie policies are present. This severely limits the ability to assess the company's market position, services, or compliance posture. The website is effectively inaccessible, resulting in a very low AI score and high risk from a security and trust perspective.

E

E-goi

e-goi.com

68

E-goi is a marketing automation platform specializing in AI-driven marketing solutions for e-commerce, retail, and service industries. The company offers key services such as email marketing, SMS marketing, and multichannel campaign management, positioning itself as a competitive player in the marketing technology sector. The website demonstrates a professional and consistent brand presence with good content quality and user experience. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, including Google Tag Manager and Microsoft Clarity. The security posture is solid with HTTPS enforced and security headers implemented, though some minor CSP issues were detected. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and ownership transparency. Overall, the website is trustworthy and functional but would benefit from clarifying domain registration details and enhancing security policy disclosures.

EbizIndia Consulting Pvt. Ltd. is a small-sized technology company based in Kolkata, India, specializing in custom business software development, CRM, workflow automation, and SEO services primarily targeting SMEs, manufacturers, and traders. The company emphasizes personalized service, long-term client relationships, and pilot projects to demonstrate value. Their market position is supported by 19+ years of experience and a high client retention rate, with a global client base including industry leaders. Technically, the website is modern, responsive, and SEO-optimized, leveraging Bootstrap and Cloudflare Insights for performance and analytics. Security posture is good with HTTPS implied, but lacks explicit security headers and published security policies. The absence of WHOIS domain registration data raises legitimacy concerns, though the website content and client testimonials support business credibility. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security disclosures.

L

La Nouvelle République

lanouvellerepublique.fr

65

La Nouvelle République is a prominent regional news media outlet serving the Centre-Val de Loire and Poitou regions in France, providing live updates on politics, justice, economy, and other societal topics. The website is well-positioned as a trusted source for regional and national news, targeting a broad general audience interested in current events. Technically, the site employs modern web frameworks such as Next.js and React, integrates advanced advertising technologies including Prebid.js and Amazon APS, and uses multiple analytics and tracking services to optimize content delivery and monetization. Security-wise, the site enforces HTTPS, uses standard security headers, and implements consent management for GDPR compliance, although explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates a mature digital presence with good content quality and technical implementation, though improvements in transparency and contact availability could enhance trust further.

S

Sud Ouest

sudouest.fr

57

Sud Ouest is a prominent French regional news media company providing continuous local and international news coverage, including politics, economy, sports, and cultural content. The website offers both free and subscription-based access, supported by advertising revenue. It targets a general audience primarily in the South West of France. The digital infrastructure is modern, leveraging JavaScript frameworks, Google Tag Manager, and a consent management platform to ensure compliance with privacy regulations. The site is well-structured with good SEO and mobile optimization. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, Sud Ouest demonstrates a mature and professional online presence with strong privacy compliance and trustworthy branding.

M

Midi Libre

midilibre.fr

58

Midi Libre is a prominent regional news media outlet serving Montpellier and its surrounding regions in France. The website offers a comprehensive range of local news, sports, culture, and economic information, enriched with multimedia content such as videos and podcasts. It operates on a subscription and advertising business model, targeting residents and interested readers in the region. The site is well-branded and professionally maintained, reflecting a strong market position as a leading regional news source. Technically, the website employs modern web technologies including Google Tag Manager, Google Identity Services, and Materialize CSS framework. It integrates advanced tracking and consent management tools, ensuring GDPR compliance and user privacy. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience across devices. From a security perspective, the site enforces HTTPS and uses consent management platforms for cookies. While explicit security headers are not fully confirmed, the overall security posture is strong with no evident vulnerabilities. However, the absence of published security policies or incident response contacts is a gap. The WHOIS data is unavailable from the AFNIC server, which slightly reduces trust but does not undermine the site's legitimacy given its professional content and branding. Overall, Midi Libre presents a low-risk profile with a mature digital presence and strong business credibility. Strategic improvements in publishing security policies and enhancing WHOIS transparency would further strengthen trust and compliance.

L

La Gazette des Communes

lagazettedescommunes.com

62

La Gazette des Communes is a French media outlet specializing in news and information related to the territorial public service and local government. It provides comprehensive coverage of public sector careers, recruitment, legal matters, and thematic professional clubs. The website targets public sector professionals and local government officials in France, offering news, analysis, and events. Technically, the site is built on WordPress with modern JavaScript libraries and monitoring tools such as New Relic and Google Tag Manager. It employs a consent management platform (Didomi) to comply with privacy regulations. Security posture is good with HTTPS enforced and standard security headers present, though no explicit security policy or incident response information is publicly available. The absence of WHOIS data suggests privacy protection or registry restrictions, which is common for media websites. Overall, the site is professional, trustworthy, and compliant with GDPR, but could improve transparency around security and contact information.

L

La Dépêche du Midi

ladepeche.fr

63

La Dépêche du Midi operates as a prominent regional news media outlet serving the Occitanie region in France. The website provides real-time news updates, local and regional information, and multimedia content including photos and videos. Its business model is primarily based on advertising revenue and subscription services, offering both free access with personalized advertising and premium content for subscribers without personalized cookies. The site maintains a strong brand presence with consistent and professional design, targeting a general audience interested in regional news, sports, politics, and culture. Technically, the website employs modern web technologies including Google Tag Manager for analytics, Didomi for consent management, and Materialize CSS for responsive design. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices. Performance is moderate, with multiple third-party scripts integrated for advertising and user tracking. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. Consent management is robust, aligning with GDPR requirements. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement in transparency and security maturity. Overall, the website is trustworthy and professional, though the lack of WHOIS registration data reduces domain trust verification. Strategic recommendations include publishing detailed security policies, establishing incident response contacts, and adding vulnerability disclosure information to enhance security posture and user trust.

A

Ach@t Solutions

achatsolutions.com

65

Ach@t Solutions is a leading French software publisher specializing in public procurement and transport management solutions. The group serves a large client base including public sector entities and private partners, supported by six expert subsidiaries. Their digital offerings include innovative software and a dematerialization portal (AW Solutions) aimed at optimizing buyer-supplier relationships in the public sector. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site is built on Drupal 8 with modern libraries and frameworks, ensuring good performance and accessibility. Security posture is moderate with cookie consent implemented but lacks explicit security headers and published security policies. WHOIS data is missing, which raises concerns about domain registration transparency, though the overall business credibility remains high due to detailed company information and certifications. Recommendations include enhancing security headers, publishing security and incident response policies, and verifying domain registration details to improve trust.

A

Ach@t Solutions

achatsolutions.fr

65

Ach@t Solutions is a French software group specializing in digital solutions for public procurement and transport management, serving a large client base of public and private sector entities. The company operates through six expert subsidiaries and offers innovative digital services including AI and data management. The website is professionally designed using Drupal 8 and modern web technologies, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies are missing. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high due to consistent branding and certifications. The site is free of adult or questionable content and complies with GDPR requirements.

Agglo Béziers Méditerranée is a French local government entity serving the Béziers metropolitan area and its 17 communes. The website serves as an official portal providing residents and businesses with information on local government activities, urban planning, cultural events, public services, and economic development initiatives. It holds a strong regional presence and acts as a key communication channel for the community. Technically, the site is built on WordPress with a modern tech stack including jQuery, Owl Carousel, and Font Awesome, and it integrates GDPR-compliant cookie consent mechanisms. The website is mobile-optimized and offers good navigation and content relevance. Security-wise, the site uses HTTPS and has basic security best practices in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, but the domain is a .fr domain consistent with the French government entity it represents. Overall, the site demonstrates a solid digital maturity for a public sector organization with good privacy compliance and user trust indicators.

L

L'Agglo Hérault Méditerranée

agglo-heraultmediterranee.net

64

L'Agglo Hérault Méditerranée is a regional French government entity providing a broad range of public services including waste management, water and sanitation, public transportation, housing, cultural activities, and environmental protection. The website serves as an information portal for residents and businesses within the Hérault Méditerranée territory, offering access to services, news, and project updates. The organization positions itself as a key regional authority supporting sustainable development and quality of life. Technically, the website is built on WordPress using a custom WonderWP child theme and Bootstrap framework. It employs modern web technologies and is mobile-optimized with good SEO practices. The site uses Google Analytics for audience measurement with a clear cookie consent mechanism, reflecting a moderate level of digital maturity. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements cookie consent aligned with GDPR. However, it lacks explicit security headers and a published vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is incomplete, which raises some concerns, but the website content and external links strongly indicate legitimacy as a public government entity. Overall, the website is professional, trustworthy, and serves its public service mission effectively. Strategic recommendations include enhancing security headers, publishing a security policy, improving accessibility, and maintaining regular security audits to strengthen the security posture and compliance.

M

MADE IN CIMA s.r.l.

madeincima.it

57

MADE IN CIMA s.r.l. is a small Italian digital agency specializing in responsive web design, digital communication strategies, ecommerce, SEO, social media, and consultancy services. The company targets businesses seeking tailored digital solutions, primarily in Italy, with a strong regional presence in Trento and Torino. Their portfolio includes luxury hospitality and cultural clients, indicating a reputable market position. Technically, the website is built on WordPress with modern plugins and analytics tools such as Matomo and Google Analytics, demonstrating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some HTTP security headers could be improved. Privacy compliance is well addressed with comprehensive privacy and cookie policies. Overall, the website reflects a trustworthy and professional business with good digital maturity.

G

GINEVRA S.R.L.

plusco.it

56

Plus (GINEVRA S.R.L.) is a science-driven creative agency based in Italy, specializing in branding, marketing communication, and project development using their proprietary Mastermind Method©. The company targets businesses seeking innovative and scientifically grounded creative solutions, with a strong presence in luxury hospitality, food, and cultural sectors. Their market position is supported by notable projects and associations with recognized industry groups. Technically, the website is built on WordPress with modern plugins and libraries, including Yoast SEO, Matomo analytics, and Lottie animations, reflecting a moderate to good digital maturity. The site is mobile-optimized and SEO-friendly, with a professional design and clear navigation. Security posture is solid with HTTPS, cookie consent mechanisms, and privacy-focused analytics, though formal security policies and incident response contacts are absent. Overall, the website is trustworthy, compliant with GDPR, and professionally maintained, with room for improvement in security transparency and accessibility.

S

Südtiroler Kulturinstitut

tanzbozen.it

48

Tanz Bozen / BolzanoDanza is a well-established cultural and educational institution based in Italy, specializing in contemporary dance workshops and festivals. The organization operates under the Südtiroler Kulturinstitut and has been active since 2004, offering a variety of dance courses, events, and community engagement activities. Their website reflects a professional and consistent brand image targeting dance students, professionals, and cultural event attendees. The business model focuses on event organization and cultural education with a strong international presence in the dance community. Technically, the website is built on TYPO3 CMS and incorporates modern frontend technologies such as jQuery, Slick Carousel, Google reCAPTCHA, and Google Tag Manager. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, performance is moderate and accessibility features are basic. SEO practices are adequately implemented. From a security perspective, the site uses HTTPS and includes a cookie consent mechanism compliant with GDPR. However, the domain registration has recently expired, posing a risk to continuity and trust. No advanced security headers were detected, and DNSSEC is not enabled. There is no visible security policy or incident response contact information, which could be improved to enhance trust and compliance. Overall, the website is trustworthy and professional, with good privacy compliance and business credibility. Strategic recommendations include renewing the domain registration promptly, enabling DNSSEC, implementing security headers, and publishing security and incident response policies to strengthen the security posture and user trust.

K

Kellerei Terlan

cantina-terlano.com

48

Kellerei Terlan is a winery based in Terlan, South Tyrol, Italy, specializing in the production and sale of wines with a strong emphasis on terroir and wine aging. The website presents a professional and well-structured digital presence with multilingual support (German, English, Italian) targeting wine consumers and enthusiasts. The company leverages social media channels and maintains a clear contact presence, enhancing its market visibility. Technically, the website employs modern web technologies including Matomo for analytics, Facebook Pixel for marketing, and Iubenda for cookie consent management, reflecting a mature digital infrastructure. The site is mobile-optimized with good SEO practices and moderate performance. However, no CMS or hosting provider details were identified. From a security perspective, the site uses HTTPS and cookie consent mechanisms aligned with GDPR requirements. While no explicit security headers or incident response policies are published, no vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain raises concerns about domain registration transparency, slightly impacting trustworthiness. Overall, the website is professionally maintained with good privacy compliance and user experience. Strategic improvements in publishing security policies and clarifying domain registration details would enhance trust and security posture.

P

Parkhotel Laurin

laurin.it

63

Parkhotel Laurin is a historic luxury hotel located in Bolzano, Italy, established in 1910. The website presents a comprehensive hospitality business offering hotel accommodations, gourmet dining, bar services, meeting and event spaces, and direct booking benefits. The site targets tourists and business travelers seeking premium services in the South Tyrol region. Technically, the website employs modern tracking and consent management tools such as Google Tag Manager, Matomo Analytics, and Usercentrics CMP, hosted likely on Zeppelin Group infrastructure. The design is professional, mobile-optimized, and SEO-friendly, with clear navigation and multilingual support. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though additional security headers could enhance protection. Privacy compliance is supported by a consent mechanism, but explicit privacy and terms of service pages were not detected. WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website is trustworthy, professional, and well-maintained.

M

Marlene®

marlene.it

50

Marlene® is a well-established brand specializing in the promotion and marketing of South Tyrolean apples, emphasizing quality, sustainability, and culinary inspiration. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern web technologies and a CMS platform (Consisto.CMS), with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit privacy and cookie policies. Analytics usage is moderate with Google Analytics and Tag Manager implemented, but privacy compliance could be improved. Overall, the website is trustworthy and serves its business purpose effectively.

L

Loacker

loacker.it

71

Loacker is a well-established confectionery brand operating a professional e-commerce platform targeting consumers in Italy and beyond. The website offers a wide range of products including classic wafers and gift packages, leveraging BigCommerce as its platform. The technical infrastructure is modern, utilizing trusted third-party services such as Google Analytics, Trustpilot, and Cookiebot for analytics, reviews, and compliance. The site demonstrates good digital maturity with responsive design and SEO optimization. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is trustworthy, compliant with GDPR, and provides a positive user experience.

K

Kia

kia.com

69

Kia's Finnish website serves as a localized portal for the global automotive brand, offering detailed information about their vehicle lineup, including electric and hybrid models, with a strong emphasis on a 7-year warranty. The site targets Finnish consumers interested in purchasing or learning about Kia vehicles, providing tools such as a car configurator, service booking, and dealer locator. The business model focuses on automotive manufacturing and retail, supported by a consistent and professional online presence.

D

DB Fernverkehr AG

bahn.de

69

Deutsche Bahn's website www.bahn.de serves as the primary digital portal for train travel in Germany, offering comprehensive services including ticket booking, travel information, and loyalty programs. The site targets a broad audience of travelers within Germany and Europe, positioning itself as the leading national railway operator. The business model focuses on transportation services with integrated digital ticketing and customer engagement through programs like BahnCard and BahnBonus. The website reflects a mature enterprise with consistent branding and a strong market presence.

The website palais-hoertenberg.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain is newly registered in September 2023 and lacks any visible business or contact information on the landing page. The absence of privacy, cookie, or terms of service policies, combined with no detectable scripts or analytics, indicates a very early or inactive stage of the website. The technical infrastructure shows no DNSSEC enabled and no security headers present, which are minor security gaps. Overall, the site’s security posture is weak due to lack of HTTPS information and blocked content. The business credibility is low given the lack of any business details or trust indicators. This severely limits the ability to assess the company’s market position or services. Strategic recommendations include enabling DNSSEC, implementing HTTPS and security headers, publishing privacy and cookie policies, and providing accessible content with clear business information.

M

mouvement

mouvement.net

54

Mouvement.net is a French cultural magazine established since 1993, focusing on interdisciplinary arts including dance, theater, visual arts, cinema, music, and literature. The website serves a French-speaking audience interested in cultural content and offers subscription services alongside editorial articles and event coverage. Technically, the site employs modern JavaScript libraries such as jQuery and ScrollReveal, uses Google Tag Manager for analytics, and appears mobile-optimized with a good user experience. However, the absence of WHOIS data raises questions about domain registration legitimacy, although the active and professional nature of the site suggests a legitimate operation. Security posture is moderate with HTTPS usage but lacks visible security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices.

D

DNZ MEDIA

danzaedanza.com

65

Danza&Danza is a specialized Italian media company focused on dance culture, providing a bimonthly magazine and a dynamic website with news, reviews, and multimedia content. The company, DNZ MEDIA, has a long-standing presence since 1985 and targets professionals and enthusiasts in the dance sector. The website supports subscription sales, advertising, and content publishing, positioning itself as a niche leader in Italian dance journalism. Technically, the website uses standard web technologies (HTML, CSS, JavaScript) with a custom or unknown CMS. It is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. The domain is registered with a reputable registrar and protected against unauthorized transfers, though DNSSEC is not enabled. Security-wise, the site uses HTTPS and implements a cookie consent mechanism and secure login forms with CSRF tokens. However, it lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. No critical vulnerabilities or suspicious content were detected, and privacy policies are present and GDPR compliant. Overall, the website is professional, trustworthy, and well-aligned with its business goals. Strategic improvements in security headers and DNS security would further strengthen its posture. The site is safe for general audiences and maintains a clear, consistent brand identity.

A

Artribune srl

artribune.com

68

Artribune srl operates a well-established Italian digital media platform focused on contemporary art and culture since 2011. The website offers a rich array of editorial content, including news, interviews, event calendars, podcasts, and a freepress magazine distributed nationally. Its target audience includes art enthusiasts, professionals, and cultural consumers interested in diverse creative fields such as architecture, design, music, and literature. The business model combines digital publishing, newsletter subscriptions, and event promotion, positioning Artribune as a key player in Italy's cultural media landscape. Technically, the website is built on WordPress with WooCommerce and Gravity Forms, integrating modern advertising and analytics technologies such as Google Tag Manager, Google Analytics, and multiple ad networks. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Security posture is adequate with HTTPS and consent management in place, but lacks advanced security headers and explicit vulnerability disclosure mechanisms. The absence of WHOIS data for the domain www.artribune.com is a notable anomaly, reducing domain trustworthiness despite the professional and consistent web presence. No blocking or WAF challenges were detected, allowing full content access. Privacy and cookie policies are not explicitly found in the provided content, indicating room for compliance improvement. Overall, Artribune presents a credible and professional digital media presence with strong content quality and business credibility. Strategic enhancements in security headers, privacy disclosures, and domain registration transparency would further strengthen its trust and compliance posture.

R

Rai Cultura

raicultura.it

58

Rai Cultura is a cultural portal operated by RAI, Italy's national public broadcasting company, providing rich content across various cultural domains such as art, literature, history, philosophy, music, cinema, theater, dance, and science. The website targets a broad audience interested in cultural enrichment and serves as a trusted source of cultural information and events in Italy. Technically, the site employs modern web technologies including JavaScript frameworks, Google Tag Manager for analytics, and responsive design principles to ensure accessibility across devices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and GDPR-aligned cookie consent. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical maturity.

R

Rai

raiplaysound.it

64

RaiPlay Sound is the digital audio platform of Rai, Italy's public broadcaster, offering live radio streaming, podcasts, and audiobooks. The platform targets a broad audience interested in Italian radio content and digital audio entertainment. It provides user account features for personalized experiences and supports mobile applications on iOS and Android. The website demonstrates a mature digital infrastructure with modern web technologies, responsive design, and integration with major analytics and advertising services. Privacy and cookie consent mechanisms are robust and GDPR compliant, reflecting the organization's commitment to user data protection. Security posture is strong with HTTPS enforcement and standard best practices, though explicit security headers and vulnerability disclosure mechanisms could be enhanced. Overall, RaiPlay Sound presents a professional, trustworthy, and user-friendly digital media service.

R

Radiotelevisione Italiana S.p.A.

rai.it

69

Rai.it is the official website of Radiotelevisione Italiana S.p.A., Italy's leading public broadcaster. The site offers a comprehensive range of content including news, entertainment, sports, and cultural programming, supported by streaming platforms RaiPlay and RaiPlay Sound. The website demonstrates a mature digital presence with modern technologies, CDN usage, and a strong focus on user privacy and consent management. Security posture is robust with HTTPS enforcement and cookie consent mechanisms, although explicit security and incident response policies are not prominently published. Overall, Rai.it presents a professional, trustworthy, and user-friendly platform serving a broad general audience in Italy.

A

Alperia Fornitura Luce e Gas 100% Green

alperia.eu

73

Alperia is a prominent energy supplier specializing in 100% green electricity and CO₂ compensated gas, targeting residential and business customers primarily in Italy and German-speaking regions. The company emphasizes renewable energy solutions and sustainability, positioning itself as a leader in the regional energy market. Their digital presence is built on a modern WordPress platform with multilingual support, SEO optimization, and integrated marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and no evident vulnerabilities, although there is room for improvement in incident response transparency and vulnerability disclosure. Overall, the website and domain present a trustworthy and professional image aligned with the company's business objectives.

F

Fondazione Haydn di Bolzano e Trento

haydn.it

48

Fondazione Haydn di Bolzano e Trento is a cultural foundation dedicated to promoting classical music, opera, dance, and educational programs primarily in the Trentino-Alto Adige region of Italy. The website serves as a portal for event information, ticketing, and cultural engagement, positioning itself as a regional leader in the performing arts sector. The foundation targets a broad audience including classical music enthusiasts, families, and educational institutions. The business model is non-profit, focusing on cultural dissemination and community engagement through live performances and educational outreach. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO for optimization, Matomo for privacy-conscious analytics, and various JavaScript libraries for enhanced user experience such as Flickity and Flatpickr. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be improved. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism compliant with GDPR. It uses Matomo analytics with cookies disabled by default to respect user privacy. However, there is no explicit security policy or incident response contact information published, and security headers are not evident. No critical vulnerabilities or suspicious activities were detected, indicating a solid security posture for a cultural foundation website. Overall, the website is professional, trustworthy, and compliant with privacy regulations. Strategic recommendations include publishing a formal security policy, adding incident response contacts, enhancing security headers, and considering a vulnerability disclosure policy to further strengthen security and trust.

K

KOMETA

kometatype.com

64

KOMETA is an independent type design studio specializing in progressive retail and custom typefaces. The company operates a professionally designed website showcasing its retail font collections and bespoke typography services. The target audience includes designers, studios, and brands seeking unique and future-facing fonts. The business model is focused on retail font sales and custom typography projects, positioning KOMETA as a niche player in the type foundry market. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, hosted and registered via Cloudflare, ensuring good performance and security basics like HTTPS. However, DNSSEC is not enabled, and security headers are not detected, indicating room for improvement in security hardening. Privacy compliance is weak, with no visible privacy or cookie policies, and no GDPR indicators. Contact information is not explicitly provided, which may affect user trust and compliance. Overall, the website is functional and professional but would benefit from enhanced privacy, security policies, and contact transparency.

4

426 Agency Srl

426.agency

72

426 Agency Srl is a small Italian technology company specializing in custom software solutions and e-commerce development, particularly leveraging Shopware 6. The company positions itself as a technical partner for international brands, offering services including e-commerce, B2B e-commerce, interface programming, cloud services, and custom software development. Their website reflects a professional and consistent brand image with clear navigation and relevant content targeted at businesses seeking digital transformation and integration solutions. Technically, the site uses modern frameworks and tools such as Shopware, jQuery, Google reCAPTCHA, HubSpot, and Google Analytics 4, indicating a mature digital infrastructure. Security posture is good with HTTPS and anti-bot measures, though security headers and formal policies are lacking. The absence of WHOIS data reduces domain trustworthiness, but the website content and structured data support legitimacy. Overall, the site is well-built but would benefit from enhanced privacy and security disclosures.

CrediNet.bg is a Bulgarian online microcredit service specializing in fast loans up to 5000 Bulgarian leva, targeting local consumers seeking quick credit solutions with minimal documentation (only ID card required). The website presents a professional and consistent brand image with a clear business focus on microcredit lending. The technical infrastructure includes modern web technologies, integration with Cookiebot for cookie consent, and Cloudflare DNS with DNSSEC enabled, indicating a secure domain setup. However, the absence of explicit privacy policy and terms of service pages, as well as lack of direct contact information, limits full compliance and trust signals. Security posture is generally good with HTTPS and DNSSEC, but could be improved by adding security headers and publishing security policies. Overall, the site is safe, well-structured, and serves its business purpose effectively, though improvements in transparency and compliance documentation are recommended.

SmileCredit is a Bulgarian online lending platform specializing in fast payday loans and installment credit products up to 10,000 BGN. The company targets individuals seeking quick and accessible credit solutions with minimal documentation, emphasizing ease of use and speed. Their market position is that of an active microfinance lender with clear product offerings and a digital-first approach. Technically, the website employs modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and reCAPTCHA Enterprise, indicating a mature digital infrastructure. The site is mobile-optimized and uses HTTPS, ensuring secure communications. However, it lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is generally good but could be improved by adding security headers and publishing vulnerability disclosure information. Overall, the website is professional and trustworthy, but improvements in privacy compliance and security transparency are recommended.

The website at casethemes.net is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. This prevents a full assessment of the business, services, or security posture. The domain is registered since 2018 with Tucows Domains Inc. and uses SiteGround nameservers, indicating a legitimate hosting setup. However, the lack of accessible content, absence of privacy or cookie policies, and no contact information severely limit trust and credibility. Technically, no scripts, analytics, or security headers are present in the provided HTML, and no HTTPS or SSL details are available. Overall, the site appears to be restricted or blocked rather than protected by a WAF challenge. This results in a very low AI score and an incomplete analysis.

Campus Nantes Terre Atlantique is a public educational institution specializing in agricultural education and training, serving the Nantes region and surrounding areas including Saint-Herblain, Guérande, and Nozay. The institution offers a variety of educational pathways including general and technological schooling, professional training, apprenticeships, and adult continuing education. The website reflects a well-structured and regionally focused educational campus with a clear mission to support agricultural career development.

I

Isema

isema.fr

57

Isema is a specialized business school located in Avignon, France, focusing on commerce and management education in the agri-agro and naturality sectors. It offers degree programs up to Bac+5 level, including bachelor and MBA courses, with a strong emphasis on immersive pedagogy, entrepreneurship, and real-world projects. The school is recognized by the French state and is a member of the prestigious Conférence des Grandes Écoles, enhancing its market credibility. Partnerships with ISARA and AGRIVIA further strengthen its academic and research capabilities. Technically, the website is built on WordPress using the Genesis Framework and incorporates modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, Facebook Pixel, and Matomo. The site is mobile-optimized, accessible, and provides a good user experience with clear navigation and rich content including multimedia elements. Privacy and cookie policies are implemented with GDPR compliance, and a cookie consent mechanism is active. From a security perspective, the site uses HTTPS with a strong SSL configuration but lacks some recommended security headers. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust verification, but the professional presentation and state recognition support legitimacy. Overall, the website demonstrates a mature digital presence with room for security enhancements. Strategically, Isema should focus on implementing additional security headers, publishing a security policy and incident response plan, and adding a security.txt file to improve transparency and trust. These steps will strengthen its security posture and compliance, supporting its reputation as a reputable educational institution.

É

École d'Ingénieurs de PURPAN

purpan.fr

49

École d'Ingénieurs de PURPAN is a French engineering school specializing in future-oriented sectors such as agriculture, food, and environment. It serves students and professionals seeking engineering education and training in these fields. The institution holds a solid market position in France as a reputable educational entity with a focus on innovation and sustainability. The website reflects a professional and consistent brand image, targeting prospective students and academic partners. Technically, the site is built on WordPress with modern optimization plugins like WP Rocket and Yoast SEO, ensuring good performance and SEO readiness. Mobile optimization is good, though accessibility features could be improved. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, but lacks explicit security policies or incident response information. WHOIS data is unavailable, which slightly impacts trust but the overall site professionalism supports legitimacy. Privacy compliance is well addressed with GDPR-aligned policies and cookie management. Overall, the site is safe, professional, and well-suited for its educational purpose.

P

Pôle Sup Nature

polesupnature.fr

45

Pôle Sup Nature is an independent higher education institution based in Montpellier, France, specializing in environmental and sustainable development training. The website offers detailed information about their diploma and certificate programs, including BTSA Gestion et Protection de la Nature and a Bachelor in Expertise Naturaliste des Milieux. The institution targets students with a BAC or equivalent, professionals in reconversion, and those seeking specialized environmental education. The site is well-branded, professionally designed, and provides clear navigation and contact information, including social media channels. Technically, the website runs on WordPress with modern performance optimizations such as WP Rocket and lazy loading, hosted on reputable French providers. Security posture is good with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and cookie consent mechanisms. The domain registration is consistent with the business profile, enhancing trustworthiness.

I

International Union for Conservation of Nature (IUCN)

iucncongress2025.org

54

The IUCN World Conservation Congress website serves as the official digital platform for the quadrennial global event focused on nature conservation. It targets conservation experts, leaders, and decision-makers worldwide, providing comprehensive information about the Congress components, schedules, speakers, and partners. The site is well-branded, consistent, and professionally designed, reflecting the stature of the IUCN organization and its global conservation mission. Technically, the site is built on Drupal 10, leveraging modern web technologies and third-party integrations such as Google Tag Manager and social media pixels. While performance and mobile optimization are good, there is room for improvement in security headers and DNSSEC implementation. The security posture is solid with HTTPS and domain registrar protections, but lacks explicit incident response and security policy disclosures. Privacy compliance is partially addressed with cookie consent mechanisms, though a dedicated privacy policy page is not clearly found. Overall, the site is trustworthy, safe, and professionally maintained, suitable for its non-profit event purpose.

A

Acquia

acquiadam.com

72

Acquia is a recognized enterprise technology company specializing in digital experience management solutions, including digital asset management and content management. The analyzed website is a Salesforce Experience Cloud community portal dedicated to Acquia's Digital Asset Management product, targeting developers, marketers, and enterprise customers. The site integrates multiple payment gateways and analytics services, reflecting a mature technical infrastructure. Security posture is strong with HTTPS and strict Content-Security-Policy headers, though additional security headers could enhance protection. Privacy and cookie policies are not detected in the provided content, indicating room for compliance improvement. Overall, the site presents a professional and trustworthy digital presence aligned with Acquia's business model.

LASI Bibliothek is an online educational resource or library platform targeting German-speaking users. The website is currently in maintenance mode, limiting available content and business information. The platform is built on WordPress and hosted by IONOS SE, a reputable hosting provider. Technical infrastructure is basic with standard WordPress plugins and jQuery libraries. Security posture is minimal with HTTPS enabled but lacking DNSSEC and security headers. No privacy or cookie policies are published, and no contact information is provided, which impacts trust and compliance. Overall, the site is functional but lacks content and security maturity.

I

Ikanos GmbH

ikanos.de

47

Ikanos GmbH is a German-based small technology company specializing in designing and developing websites and applications with a strong focus on user experience, accessibility, and TYPO3 CMS expertise. The company positions itself as a trusted partner for businesses across various industries, emphasizing comprehensive consulting and technical excellence. The website reflects a professional and consistent brand image with clear contact information and client references. Technically, the site uses modern frontend technologies including Bootstrap, Font Awesome, jQuery, and the Yii framework, with TYPO3 as the CMS platform. The site is mobile optimized and accessible, though performance is moderate. Security posture is adequate with HTTPS and CSRF tokens but lacks explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional but could improve in security and privacy transparency.

E

Eventim USA

eventim.com

57

Eventim USA operates a professional and comprehensive online ticketing platform specializing in concerts, sports, festivals, theater, and other live events. The company is positioned as a major player in the e-commerce ticketing market, supported by a strong brand and international presence under the parent company CTS EVENTIM AG & Co. KGaA. The website offers a rich user experience with advanced search capabilities, promotional content, and newsletter subscriptions, targeting a broad audience interested in live entertainment. Technically, the site employs modern web technologies including jQuery, Swiper.js, Google Analytics, and Akamai performance monitoring, ensuring fast and responsive user interactions. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant consent management. However, WHOIS data for the domain is unavailable, likely due to privacy protection or registry issues, which slightly impacts trust but is mitigated by the professional site and known parent company affiliation. Overall, the site demonstrates a mature digital infrastructure and a solid business model with good compliance and security practices.

The website kundenserver.de currently presents no accessible content, with an empty HTML body and no metadata, scripts, or visible elements. This lack of content prevents any meaningful analysis of the business, its services, or its compliance posture. The domain is hosted on 1&1 IONOS, a reputable hosting provider, and the WHOIS data indicates consistent registration with no privacy protection or suspicious patterns. However, the absence of HTTPS and security headers, as well as the lack of privacy or cookie policies, indicates a very low security and compliance maturity level. Overall, the site appears inaccessible or blocked, limiting the ability to assess its business or technical infrastructure.

B

BAD AACHEN

bad-aachen.net

59

BAD AACHEN is a regional city magazine focused on the Aachen area, providing local news, cultural insights, event information, and lifestyle content. The business operates primarily through print and digital magazine editions, including an ePaper and a mobile app, targeting residents and visitors interested in the regional scene. The website is professionally designed using the Weblication CMS platform and integrates several JavaScript libraries such as jQuery and Fancybox for UI enhancements. Hosting and domain registration are managed by IONOS SE, a reputable provider, with the domain established since 2004, indicating a stable market presence. Technically, the website demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured navigation. Security posture is moderate; while HTTPS is presumably enabled (not explicitly stated), no DNSSEC is configured, and security headers are absent, which could expose the site to certain risks. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism, which is a GDPR compliance gap. Overall, the site is safe with no adult or questionable content detected. The business credibility is supported by consistent branding, a long domain age, and active social media channels. However, improvements in security practices and privacy compliance are recommended to enhance trust and regulatory adherence.

H

Hammerwerk Erft

hammerwerk-erft.de

63

Hammerwerk Erft is a German manufacturing company specializing in forging technology, delivering high-quality forged components such as seamless rolled rings, forged rings, shaped shafts, and die-forgings. The company targets industrial clients requiring technically advanced and customized metal components, emphasizing quality and timely delivery. The website reflects a medium-sized enterprise with a consistent brand presence and a clear product portfolio. Technically, the website uses modern frontend technologies including Bootstrap and Swiper.js, with responsive design and cookie consent mechanisms implemented via Klaro. Security posture is moderate, with HTTPS implied but lacking visible security headers or published security policies. Contact information is clearly provided, including phone, email, and social media links, enhancing business credibility. No privacy policy or terms of service were found in the provided content, indicating room for compliance improvement. Overall, the website is professional and trustworthy but could benefit from enhanced security and privacy disclosures.

E

ECOBAT Technologies Ltd.

ecobatgroup.com

46

ECOBAT Technologies Ltd. is a leading global company specializing in the production and recycling of lead, particularly from lead-acid batteries. They operate a closed recycling loop, ensuring sustainable and environmentally responsible lead production. The company holds multiple ISO and EMAS certifications, underscoring their commitment to quality and environmental standards. Their market position as the world's largest producer and recycler of lead highlights their industry leadership and extensive operational footprint across Europe and beyond. Technically, the website is built on the Weblication CMS platform using legacy JavaScript libraries such as jQuery and jQuery UI. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Hosting details are limited, but the domain is registered with NameCheap and has a stable history since 2011. From a security perspective, the site uses HTTPS and has domain transfer protections enabled but lacks DNSSEC and visible security headers. There is no cookie consent mechanism or explicit privacy compliance features, which may pose regulatory risks. Contact information is primarily via web forms, with no direct emails or phone numbers visible. No incident response or vulnerability disclosure policies are published. Overall, the website is professional and trustworthy with good business credibility but could improve in privacy compliance and security best practices. Strategic enhancements in security headers, cookie consent, and transparency around incident response would strengthen their security posture and regulatory compliance.

R

RheinFit Sportakademie GmbH

adventure-minigolf-duisburg.de

40

Adventure Minigolf Duisburg, operated by RheinFit Sportakademie GmbH, is a small-scale recreational business offering a unique adventure minigolf experience in Duisburg, Germany. The website presents a family-friendly environment with 24 creatively designed minigolf courses and additional sports activities such as Fußballbillard. The business targets families and children aged six and above, positioning itself as a local leisure destination. Technically, the website is built on WordPress with the Divi theme, leveraging LiteSpeed caching and jQuery, hosted likely by Kasserver. The site is moderately performant, mobile-optimized, and SEO-friendly with structured data markup enhancing search visibility. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and well-aligned with its business goals.