Security Directory

N

Nexent Bank

crediteurope.nl

69

Nexent Bank is a Dutch financial institution specializing in retail banking products such as savings accounts and term deposits. The website targets Dutch customers and emphasizes competitive interest rates and deposit protection under the Dutch Deposit Guarantee Scheme. The digital infrastructure includes modern tracking and consent management tools like Google Tag Manager and Cookiebot, indicating a mature approach to privacy compliance. However, explicit contact information and security policies are not prominently displayed, which could be improved to enhance trust and transparency. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content.

N

Nexent Bank

crediteurope.de

70

Nexent Bank is a digital banking institution focused on providing secure and transparent savings products such as Tagesgeld and Festgeld accounts. The bank targets private customers in Germany and emphasizes a modern, user-friendly online banking experience. The website reflects a rebranding from Credit Europe Bank, maintaining trust and continuity for existing customers. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and Cookiebot for consent management, hosted via Akamai CDN for performance and security. Security posture is good with HTTPS enforced and anti-CSRF cookies, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and well-optimized for mobile users.

N

Nexent Bank

nexentbank.de

70

Nexent Bank is a digital banking institution focused on retail customers in Germany, offering savings products such as Tagesgeld and Festgeld with competitive interest rates. The bank has rebranded from Credit Europe Bank and emphasizes secure, transparent, and modern online banking services. The website reflects a professional and consistent brand image targeting retail savers seeking flexible and fixed-term deposit products. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and Cookiebot for compliance and analytics, hosted on Akamai CDN infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are not evident. Contact information is clearly provided via phone, but no direct email or social media links are found. Overall, the site is well-structured, mobile-optimized, and compliant with GDPR requirements, presenting a trustworthy online presence for a mid-sized banking entity.

N

Nexent Bank N.V.

nexentbank.com

71

Nexent Bank N.V. is a medium-sized boutique bank headquartered in Amsterdam, Netherlands, established in 1994. It specializes in corporate banking, trade and commodity finance, supply chain finance, and online retail banking, serving small to medium-sized businesses and individual clients. The bank operates internationally with offices in Germany, Malta, Romania, and other countries, offering tailored financial services and leveraging a lean organizational structure for efficient client service. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and Cookiebot for privacy compliance, with a moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and incident response policies are not explicitly published. The absence of WHOIS data is a concern for domain transparency but does not detract from the professional presentation and trustworthiness of the site. Overall, the website is well-designed, compliant with privacy regulations, and provides clear business and contact information.

N

Ninja Casino

ninjacasino.com

62

Ninja Casino operates as an online gambling platform offering casino games and sportsbook betting services primarily targeting adult users interested in online gaming and betting. The website employs modern frontend technologies such as React and integrates multiple third-party analytics and tracking services including Google Analytics, Google Tag Manager, and Facebook Pixel. A cookie consent mechanism is implemented via Cookiebot, indicating some level of privacy compliance. However, the absence of visible privacy policies, terms of service, and contact information on the site limits transparency and user trust. The WHOIS data for the domain is unavailable, which raises concerns about domain registration legitimacy and reduces overall trustworthiness. Security posture is moderate with no detected security headers and unknown SSL configuration, suggesting room for improvement in security best practices.

K

Keywee

keywee.co

66

Keywee is a US-based technology company specializing in content distribution and audience engagement solutions aimed at helping publishers and marketers grow their revenue streams. The company operates a SaaS platform and targets content creators and marketing professionals. The website is built on WordPress with Elementor and integrates multiple third-party marketing and analytics tools such as Google Tag Manager, Cookiebot, and Clearbit, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are not visible. The domain is privacy protected but has a long registration history consistent with the company's founding date, supporting legitimacy. Overall, the website presents a professional and trustworthy front with good content quality and technical implementation.

T

Trackdesk

trackdesk.com

72

Trackdesk is a well-established affiliate tracking software provider founded in 2002, offering a comprehensive SaaS platform for managing affiliate, referral, and partnership programs. The company positions itself as a cost-effective and reliable alternative to major competitors, with a strong focus on integrations with popular payment and e-commerce platforms such as Stripe, PayPal, Shopify, and WooCommerce. Their business model includes a free tier for startups and scalable paid plans, complemented by premium services like onboarding and migration assistance. The website demonstrates excellent content quality, professional design, and clear navigation, targeting businesses across SaaS, e-commerce, agencies, and affiliate networks. Technically, the site uses modern frameworks like SvelteKit, is hosted on Google Cloud infrastructure, and employs best practices for performance and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent managed via Cookiebot, though explicit security policies and incident response information are not published. WHOIS data confirms domain legitimacy with a long registration history and no privacy protection, consistent with the business claims. Overall, Trackdesk presents a trustworthy and professional online presence with room for improvement in privacy and security transparency.

C

CommerceGate Payment Solutions

commercegate.com

65

CommerceGate Payment Solutions is a company focused on providing secure and licensed payment processing services primarily targeting businesses operating in the LATAM region. Their website emphasizes boosting authorization rates and reducing payment costs, positioning them as a specialized payment solutions provider in the finance sector. The company appears to have been founded around 2021, with a medium-sized business profile and consistent branding across their digital presence. Technically, the website is built on WordPress and leverages modern marketing and analytics tools such as HubSpot, Cookiebot, Google Tag Manager, and Facebook Pixel, indicating a mature digital infrastructure. The site is mobile-optimized and implements GDPR-compliant cookie consent mechanisms, reflecting attention to privacy regulations. Security-wise, the website enforces HTTPS and uses cookie consent banners but lacks some advanced security headers and publicly available security policies or incident response information. The absence of WHOIS data for the domain www.commercegate.com is a notable concern, as it reduces the transparency and trustworthiness of the domain registration. Overall, the website is professional and functional but would benefit from enhanced transparency and security disclosures.

C

Cognyte

cognyte.com

81

Cognyte is a globally recognized leader in security analytics software, providing actionable intelligence solutions primarily targeted at governments and large enterprises. Their market position is strong, supported by professional branding and a comprehensive online presence. The company offers advanced analytics and intelligence services designed to enhance security and safety worldwide. The website reflects a mature digital infrastructure with modern technologies such as WordPress CMS, Google Tag Manager, HubSpot marketing tools, and Cookiebot for privacy compliance. The site is well-optimized for SEO, mobile responsiveness, and accessibility, indicating a high level of digital maturity. Security posture is robust with HTTPS enforcement, security headers, and privacy consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS registrant data is a notable concern, potentially indicating privacy protection or registration issues, which slightly impacts trustworthiness. Overall, Cognyte presents as a professional and credible enterprise with room for improvement in transparency around security policies and domain registration details.

E

Epom AdTech Solutions

epom.com

63

Epom AdTech Solutions is a well-established company specializing in advertising technology, offering scalable adtech tools including a white-label ad server and demand-side platform (DSP). With over 13 years of industry leadership and a client base of 350+ global leaders, Epom positions itself as a trusted provider of programmatic and direct ad serving solutions tailored for publishers, advertisers, agencies, and brands. Their business model focuses on B2B SaaS with customizable platforms and comprehensive support. Technically, the website demonstrates a mature digital infrastructure leveraging modern analytics (Matomo, Google Tag Manager), marketing tools (Cookiebot for consent, Drift chat), and security features such as HTTPS and reCAPTCHA. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a high level of digital maturity. From a security perspective, Epom employs standard best practices including encrypted communications, consent management, and bot protection. However, there is room for improvement in publishing explicit security policies, incident response contacts, and enabling DNSSEC. No critical vulnerabilities or exposed sensitive data were detected. Overall, Epom presents a low-risk profile with strong business credibility, good privacy compliance, and a professional online presence. Strategic recommendations include enhancing security transparency and further hardening DNS security to maintain trust and compliance in the evolving adtech landscape.

S

SafeToNet Limited

netnanny.com

68

Net Nanny, operated by SafeToNet Limited, is a well-established provider of parental control software designed to give parents comprehensive control and visibility over their children's online activities. The company targets parents and guardians, offering a subscription-based SaaS model with features including internet filtering, screen time management, social media monitoring, and alerts. The website presents a professional and consistent brand image with good content quality and clear navigation, supporting a positive user experience. Technically, the website employs modern web technologies such as Bootstrap, Google Tag Manager, and Cookiebot for cookie consent management. It supports multiple platforms including Windows, Mac OS, Android, and iOS. Performance is moderate with good mobile optimization, though accessibility features could be enhanced. The site uses HTTPS and integrates reCAPTCHA for form security, reflecting a solid security posture. Security-wise, the site demonstrates good practices with HTTPS and cookie consent but lacks explicit security headers and a dedicated security policy or incident response page. No vulnerabilities were detected in the visible content. Privacy compliance is strong, with GDPR-aligned cookie management and a comprehensive privacy policy. However, the absence of direct company contact emails and phone numbers on the homepage and missing WHOIS data reduce transparency. Overall, Net Nanny's website is credible and professional, though improvements in explicit security headers, contact transparency, and WHOIS data availability would enhance trust and compliance. Strategic recommendations include implementing security headers, publishing a security.txt file, and providing clearer contact information for security and business inquiries.

Q

Qustodio

qustodio.com

73

Qustodio operates as a parental control and digital wellbeing software provider trusted by over 7 million parents globally. The company offers subscription-based services focused on managing children's screen time and ensuring safe digital experiences across devices. The website reflects a mature digital presence with professional design, clear messaging, and compliance with privacy regulations such as GDPR, evidenced by the use of Cookiebot for cookie consent management. Technically, the site is built on WordPress with the Divi theme and integrates modern analytics and marketing tools including Google Tag Manager and Grafana Faro Web SDK. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published, representing an area for improvement. The absence of WHOIS data limits domain trust assessment, but the overall digital footprint suggests a legitimate and established business. Strategic recommendations include publishing security and incident response policies, enhancing accessibility, and improving business contact transparency to strengthen trust and compliance.

T

The Contractor Health and Safety Assessment Scheme

chas.co.uk

75

CHAS (The Contractor Health and Safety Assessment Scheme) is a well-established UK organization specializing in health and safety compliance and risk management services for contractors and suppliers. The website positions CHAS as a leader in the UK market, offering accreditation and certification services that help organizations demonstrate compliance with industry standards and reduce supply chain risks. The business model revolves around membership and certification, targeting contractors and organizations requiring verified health and safety credentials. The company has been operating since 1997 and maintains a strong brand presence with consistent messaging and professional content.

M

Māmiņu klubs - Portāls topošajiem un jaunajiem vecākiem

maminuklubs.lv

62

Māmiņu klubs is a Latvian online portal and TV show aimed at expectant and new parents, offering childbirth preparation courses, activities for mothers with children, events, and childcare services. The website is designed to serve a niche audience focused on parenting and family support in Latvia. Technically, the site uses modern JavaScript technologies, integrates Cookiebot for GDPR-compliant cookie consent, and Google Tag Manager for analytics and marketing. The site is accessible without any WAF or blocking mechanisms, indicating good availability. Security posture is moderate, with HTTPS usage and cookie consent but lacks visible security headers and explicit privacy or terms of service pages. The absence of contact information and WHOIS data limits full trust assessment. Overall, the site is functional and professionally presented but would benefit from enhanced transparency and security practices.

N

Neural DSP

neuraldsp.com

67

Neural DSP is a technology company specializing in advanced guitar and bass tone design software and hardware products. Established in 2017, the company has positioned itself as a leader in the music technology sector, offering a range of plugins, hardware devices like the Nano Cortex and Quad Cortex, and cloud services. Their products are trusted by top musicians worldwide, reflecting a strong market presence and a focus on high-quality audio solutions for musicians and producers. Technically, Neural DSP employs a modern web infrastructure leveraging React and Next.js frameworks, hosted behind Cloudflare DNS and CDN services. The website demonstrates excellent performance, mobile optimization, and accessibility, supported by comprehensive cookie consent mechanisms and integration with multiple analytics and marketing tools such as Google Analytics, Hotjar, Klaviyo, and various advertising pixels. The use of Shopify for e-commerce functionalities is inferred from asset URLs. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. The cookie consent system is robust and GDPR compliant, providing granular control over cookie categories. However, the absence of DNSSEC and a publicly available security policy or incident response page are minor gaps. No critical vulnerabilities or exposed sensitive data were detected. Overall, Neural DSP presents a professional, secure, and privacy-conscious online presence with a high level of technical maturity. Strategic recommendations include enabling DNSSEC, publishing terms of service and security policies, and providing explicit security contact channels to enhance trust and compliance further.

J

Jodel

jodel.com

74

Jodel operates a hyperlocal community social networking platform primarily targeting young professionals and students (Gen Z and Y). The platform facilitates instant connections within local areas and offers tailored advertising solutions for brands aiming to reach this demographic. The website is built on a WordPress CMS with Elementor and integrates modern marketing and analytics tools such as Google Tag Manager, Cookiebot for consent management, and Brevo for email marketing. Hosting and DNS services are provided by Cloudflare, ensuring robust performance and security. Security posture is strong with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. Contact information is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the website presents a professional and trustworthy digital presence with good technical and privacy practices.

M

Mijndomein

mijndomein.nl

68

Mijndomein is a well-established Dutch company specializing in domain registration, web hosting, and website building services, targeting small to medium businesses and individual entrepreneurs primarily in the Netherlands. The company operates under the parent company TransIP Group B.V., with a strong market presence and a comprehensive service offering including managed WordPress hosting and webshop solutions. Their website is professionally designed, mobile-optimized, and provides clear navigation and relevant content to their target audience. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and integrates multiple third-party services such as Hubspot for marketing automation, Cookiebot for cookie consent management, and Cloudflare for CDN and security. The site demonstrates good performance and SEO practices, though accessibility features could be improved. The use of HTTPS and a Content Security Policy enhances the security posture. From a security perspective, Mijndomein shows a mature approach with enforced HTTPS, cookie consent mechanisms, and reputable third-party integrations. However, there is room for improvement by adding additional security headers and publishing explicit security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, Mijndomein presents a low-risk profile with strong business credibility, good privacy compliance, and a solid technical foundation. Strategic recommendations include enhancing security headers, formalizing security policies, and improving accessibility to further strengthen their digital maturity and trustworthiness.

S

SIXT Leasing

sixt-leasing.lv

56

SIXT Leasing is a well-established automotive leasing and fleet management company operating primarily in Latvia and the Baltic region. The company offers a comprehensive range of services including full-service leasing, fleet management, vehicle sales, and short-term rentals, targeting business clients. It is affiliated with the global Element-Arval alliance and the SIXT brand, which enhances its market credibility and reach. The website reflects a professional business presence with clear service offerings and contact information. Technically, the site is built on an older TYPO3 CMS version but integrates modern tracking and consent management tools such as Cookiebot and Google Tag Manager. Security posture is generally good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with a detailed privacy policy and cookie management. Overall, the site presents a trustworthy and professional image suitable for its B2B audience.

E

Elenger

elenger.ee

52

Elenger is an Estonian energy provider specializing in electricity and gas supply services, targeting both consumers and businesses within Estonia. The company presents itself as a convenient one-stop solution for energy needs, with a website that supports multiple languages including Estonian, English, and Russian. The domain is registered since 2018 with a reputable Estonian registrar, consistent with the business's operational timeline. Technically, the website is built on WordPress, leveraging modern web technologies such as jQuery, Google Tag Manager, and Cookiebot for cookie consent management. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement in loading speed and security headers. From a security perspective, the site enforces HTTPS and uses a robust cookie consent mechanism compliant with GDPR. However, DNSSEC is not enabled, and additional security headers could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. The absence of explicit security policies or incident response contacts suggests an opportunity to strengthen transparency and readiness. Overall, Elenger's website reflects a professional and trustworthy energy service provider with a solid digital presence. Strategic enhancements in security configurations and clearer contact information would further improve user trust and compliance posture.

C

centraltirgus.lv

centraltirgus.lv

68

Rīgas Centrāltirgus is a prominent retail marketplace in Latvia, recognized as the largest shopping venue in the country and one of the largest markets in Europe. The website showcases the market's offerings including fresh products, local delicacies, and vendor information, targeting local shoppers and tourists. The business model revolves around providing a physical marketplace with vendor and catering services, supported by an informative and visually appealing website. Technically, the site is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various plugins for enhanced user experience and SEO. The site is mobile-optimized and accessible, with good SEO practices implemented. Security-wise, the website enforces HTTPS and uses a comprehensive cookie consent mechanism, but lacks some advanced security headers and explicit privacy and terms of service documentation. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the website is professional, trustworthy, and well-maintained, with room for improvement in security policies and contact transparency.

M

Melngalvju Nams

melngalvjunams.lv

64

Melngalvju Nams is a Latvian cultural and historical site providing exhibitions, events, and visitor services. The website targets tourists, cultural enthusiasts, and event organizers, positioning itself as a local landmark and event venue. The digital infrastructure includes modern JavaScript frameworks, Google Analytics, Facebook Pixel, and Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied and cookie consent implemented, but lacks visible advanced security headers and explicit privacy or security policies. The absence of WHOIS data limits domain legitimacy assessment, but the website content and external links appear consistent and trustworthy. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, and improving accessibility compliance.

S

Splendid Palace

splendidpalace.lv

59

Splendid Palace is a cinema business positioned as the most luxurious cinema in the Baltic region, targeting cinema-goers primarily in Riga, Latvia. The website provides information about movie screenings, special offers, excursions, and event hosting services. The business model focuses on cinema exhibition and hospitality services. The website content is professionally designed with good navigation and mobile optimization, reflecting a solid digital presence. Technically, the website uses modern JavaScript libraries and frameworks including YII, Google Analytics, Facebook Pixel, Cookiebot for cookie consent management, and Push Monkey for push notifications. The site demonstrates moderate performance and basic accessibility features. However, explicit security headers are not detected, and SSL configuration details are unknown from the provided data. From a security perspective, the site employs CSRF tokens and a detailed cookie consent mechanism, indicating awareness of privacy and security best practices. The use of multiple third-party analytics and marketing tools suggests extensive user tracking, but the site provides granular consent options compliant with GDPR principles. The absence of published security policies or incident response contacts is a gap in transparency. Overall, the website is accessible without WAF or blocking mechanisms, and the content is consistent with a legitimate cinema business. The lack of WHOIS data limits domain registration trust verification, but no suspicious patterns are evident. Strategic recommendations include enhancing HTTP security headers, publishing security and privacy policies, and providing clear contact information for security incidents to improve trust and compliance.

T

TRUST IT

trustit.eu

64

TRUST IT is a Dutch-based company specializing in debtor management software tailored for professionals. Their platform offers extensive reporting capabilities that provide management with insights into key performance indicators and control metrics. The website positions TRUST IT as a professional software provider in the credit management sector, targeting businesses requiring efficient debtor administration solutions. The company maintains a professional online presence with consistent branding and a focus on delivering value through software services. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site incorporates Google Tag Manager and Cookiebot for analytics and privacy compliance, respectively, and employs Google reCAPTCHA to mitigate bot activity. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, reflecting adherence to basic security and privacy standards. However, the absence of explicit privacy policy and terms of service pages represents a compliance gap. Overall, TRUST IT demonstrates a solid digital maturity with room for improvement in privacy transparency and contact accessibility.

K

Kaskipuu Oy

kaski.fi

58

Kaskipuu Oy is a well-established Finnish family-owned manufacturing company specializing in high-quality windows and doors. Founded in 1978, it has grown into the largest domestic window and door family business in Finland and operates internationally. The website reflects a professional corporate presence with clear branding and a focus on quality products. The company targets both professional customers and consumers interested in premium construction materials. Technically, the website is built on WordPress with WooCommerce, integrating modern libraries and tools such as FontAwesome, jQuery, and Cookiebot for GDPR compliance. Hosting and domain registration are managed by Cloud City Oy, a Finnish provider, ensuring local infrastructure support. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. The site uses extensive tracking and advertising technologies including Google Analytics, Facebook Pixel, and LinkedIn cookies, but maintains good privacy compliance through Cookiebot. Overall, the website is trustworthy, well-maintained, and aligned with the company's business profile.

V

Viking Line

vikingline.ee

58

Viking Line is a well-established transportation company specializing in ferry and cruise services across the Baltic Sea region, including routes to Helsinki, Stockholm, and Åland. The website reflects a mature digital presence with multi-language support targeting Nordic and Baltic markets. Key services include line ferry trips, cruises, hotel packages, and group travel, positioning Viking Line as a major regional player in maritime passenger transport. The website content is professionally structured and relevant to its target audience of travelers and business clients. Technically, the site uses modern web technologies such as Cookiebot for cookie consent management and Google Tag Manager for analytics, with a custom or proprietary CMS. Performance and mobile optimization are good, though accessibility could be improved. Security posture is strong with HTTPS enforced, proper security headers, and no visible vulnerabilities or exposed sensitive data. However, the site lacks a dedicated security policy and incident response contact information, which are recommended for enhanced trust and compliance. WHOIS data confirms the domain's legitimacy and consistency with the business's long history. Overall, Viking Line's website is professional, secure, and compliant, supporting its business credibility and customer trust.

J

Jackrabbit Design

jumpingjackrabbit.com

69

Jackrabbit Design is a Boston-based full-service branding agency specializing in graphic design, marketing, web design, web development, and strategic marketing communications. The company targets businesses and organizations seeking comprehensive branding and marketing solutions. Their market position is that of an established regional agency with a diverse portfolio of notable clients and a broad range of creative services. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress and uses modern technologies such as jQuery, Google Tag Manager, and Cookiebot for analytics and compliance. The site is mobile optimized with good SEO practices implemented via the Rank Math plugin. Performance is moderate, and accessibility is basic but functional. The presence of a cookie consent banner and privacy policy indicates attention to privacy compliance. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and professional presentation suggest a legitimate business. Overall, the security posture is moderate with room for improvement in security headers and transparency. The overall risk assessment is moderate. The main concern is the missing WHOIS data which should be verified externally. Strategic recommendations include implementing security headers, publishing security policies, adding a security.txt file, enhancing accessibility, and auditing third-party scripts regularly to maintain security and trust.

C

CityBee

citybee.lv

73

CityBee is a Latvian car-sharing service offering vehicle rental solutions primarily targeting local residents and visitors. The website presents a professional and consistent brand image with a clear focus on transportation services. The business operates in the transportation sector with a medium market presence and was founded around 2021. The website is built on WordPress and integrates common marketing and analytics tools such as Google Tag Manager and Facebook Pixel, alongside a cookie consent mechanism via Cookiebot, indicating a moderate level of digital maturity. From a security perspective, the website uses HTTPS, which is mandatory for secure communications. However, no explicit security headers were detected in the HTML content, and there is a lack of visible contact information for incident response or security policies. The absence of a published privacy policy and terms of service reduces the privacy compliance score, although the cookie consent banner suggests some GDPR awareness. No WHOIS data was available due to query limits, limiting the ability to fully verify domain legitimacy and registration details. Overall, the website is functional, well-designed, and provides relevant content for its target audience. The security posture is moderate but could be improved by implementing additional security headers, publishing privacy and terms documents, and providing clear contact information. The risk assessment indicates a generally trustworthy site with room for compliance and security enhancements.

Z

Zanotta S.p.A.

zanotta.it

63

Zanotta S.p.A. is a well-established Italian company specializing in modern and contemporary Italian design furniture. The company offers a wide range of high-quality furniture products made in Italy, targeting consumers and businesses interested in premium design furniture. Zanotta holds a strong market position supported by its heritage, craftsmanship, and multiple Compasso d'Oro awards, reflecting its excellence in Italian design. The company operates both physical stores worldwide and an online presence, supported by a professional and content-rich website. From a technical perspective, the website employs modern technologies including Google Tag Manager, Google Analytics, Facebook Pixel, Hotjar, and Cookiebot for consent management. The site is well-optimized for mobile devices, has good accessibility features, and demonstrates solid SEO practices. Performance is moderate, with no critical technical issues detected. Security posture is strong with HTTPS enforced, presence of key security headers, and privacy compliance mechanisms such as cookie consent and IP anonymization. No vulnerabilities or exposed sensitive data were found. However, the absence of WHOIS data reduces transparency and slightly impacts trustworthiness. No explicit incident response or vulnerability disclosure information is provided. Overall, Zanotta presents a professional and trustworthy digital presence with good security and privacy practices. Strategic recommendations include publishing a security.txt file, providing incident response contacts, and clarifying Data Protection Officer details to enhance transparency and compliance.

O

Opera Contemporary

operacontemporary.com

76

Opera Contemporary is a luxury contemporary furniture company based in Italy, specializing in high-end bedroom furniture and contract projects for residential, public, and yacht spaces. The company positions itself in the luxury design market, targeting affluent customers and businesses seeking elegant and contemporary furniture solutions. The website reflects a professional digital presence built on WordPress, utilizing modern plugins and tools such as Yoast SEO, LayerSlider, and Cookiebot for cookie consent management. The technical infrastructure is hosted on AWS-related services, ensuring reliable performance and availability. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, the absence of security headers and explicit privacy and terms policies indicates room for improvement. No contact emails or phone numbers are explicitly provided, which may affect user trust and compliance. Overall, the website is well-designed and optimized for SEO and mobile devices but lacks some critical compliance and security documentation.

A

Amini Carpets

amini.it

53

Amini Carpets is a small Italian company specializing in the design and sale of artisanal handcrafted carpets. The company targets luxury consumers, interior designers, and retailers seeking unique, high-quality carpet products. Their market position is niche, focusing on craftsmanship and exclusivity. The website is built on WordPress and integrates modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Cookiebot for privacy compliance. The technical infrastructure is standard for small to medium e-commerce sites, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, though additional security headers could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Contact is primarily via a web form, with no direct emails or phone numbers publicly listed. Overall, the site is professional and trustworthy, supporting the company’s artisanal brand image.

L

Lega Basket Serie A

legabasket.it

66

Lega Basket Serie A operates as the official governing body and organizer of Italy's premier professional basketball league. The website serves as a comprehensive portal offering news, statistics, schedules, ticketing links, and multimedia content to basketball fans and stakeholders. It maintains a strong market position as the authoritative source for Italian basketball league information. Technically, the site leverages modern web technologies including Next.js and Chakra UI, ensuring a responsive and accessible user experience. The infrastructure appears to be hosted on AWS with integration of third-party services for analytics, advertising, and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are not fully visible. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service pages. Overall, the site is professional, trustworthy, and well-maintained, with room for improvement in transparency and security documentation.

V

Visibility

visibility-digital.com

66

Visibility is a well-established digital marketing agency founded in 2012, headquartered in Bratislava, Slovakia. The company offers a comprehensive suite of marketing services including SEO, PPC, social media marketing, web development, branding, and training. It holds a reputable market position as a Google Premier Partner and demonstrates a strong commitment to client education and corporate values. The website is professionally designed, content-rich, and targets businesses seeking effective digital marketing solutions. Technically, the site is built on WordPress with WooCommerce integration, leveraging modern technologies such as Google Tag Manager, Matomo Analytics, and Cookiebot for privacy compliance. Hosting is provided by Websupport.sk, a known Slovak hosting provider. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and social media presence.

Seed&Spark is a specialized crowdfunding platform focused on film and storytelling projects, fostering a community that celebrates diverse voices and creative expression. Founded in 2011, the company has established a niche market position supporting filmmakers and storytellers through crowdfunding, events, and community engagement. The website reflects a medium-sized business with a clear mission and targeted audience. Technically, the site employs modern JavaScript libraries and analytics tools, hosted via Cloudflare, ensuring reliable performance and security. The presence of cookie consent mechanisms and privacy policies indicates compliance with GDPR and privacy best practices. Security posture is solid with HTTPS and domain protections, though improvements could be made by enabling DNSSEC and publishing explicit security policies. Overall, the site is professional, trustworthy, and well-structured, supporting its business goals effectively.

F

Farm Frites

farmfrites.com

76

Farm Frites is a global manufacturer specializing in fries, potato specialties, and appetizers. The company collaborates closely with farmers to produce high-quality potato products distributed worldwide. Their website reflects a professional presence with clear branding and a focus on sustainability, as evidenced by their Sustainability Report 2024. The digital infrastructure is modern, leveraging Next.js and React frameworks, with integrations for analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity. The site is mobile-optimized and provides a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced, but lacks some advanced security headers and explicit incident response or vulnerability disclosure information. The absence of WHOIS data for the domain raises questions about domain registration transparency, though the website content and structure suggest a legitimate business. Overall, the site is well-designed and functional, but could improve in security transparency and contact information availability.

F

Food Union

foodunion.com

67

Food Union operates a professional website focused on food-related products or services, targeting consumers and businesses interested in the food industry. The company appears to be a small-sized entity founded in 2014, with consistent branding and a clear digital presence. The website uses WordPress CMS with Elementor, supported by Cloudflare for DNS and CDN services, and integrates Google Analytics and Tag Manager for analytics and marketing purposes. Cookiebot is implemented for GDPR-compliant cookie consent management, reflecting a good privacy posture. Technically, the website is well-structured with modern technologies and good SEO practices, including structured data and Open Graph metadata. The site is mobile-optimized and performs moderately well. Security-wise, HTTPS is enforced with a good SSL configuration, and cookie consent is granular. However, there is room for improvement in publishing explicit security policies, incident response contacts, and enabling DNSSEC for enhanced DNS security. Overall, the website demonstrates a solid security posture with no critical vulnerabilities detected. Privacy compliance is good, with clear cookie consent and a comprehensive privacy policy. Business credibility is supported by consistent branding and transparent domain registration. Strategic recommendations include adding terms of service, security policies, and vulnerability disclosure mechanisms to further enhance trust and compliance.

S

SITE Global

siteglobal.com

70

SITE Global is a well-established foundation focused on safety, security, and risk management primarily within the energy sector. The organization offers membership services, educational resources, and events aimed at professionals and organizations concerned with safety and risk. The website reflects a mature digital presence with a modern Drupal 10 CMS, integrated analytics, and a comprehensive cookie consent mechanism ensuring GDPR compliance. The domain is long-standing, registered since 2001, and hosted with a reputable provider, indicating operational stability. Technically, the website employs industry-standard tools such as Google Tag Manager, Google Analytics, Adobe DTM, and Cookiebot for consent management. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security posture is solid with HTTPS enforced and domain transfer protections in place, though improvements could be made by enabling DNSSEC and implementing additional security headers. Security-wise, the site shows good practices in user consent and data protection but lacks publicly visible security policies or incident response contacts. No critical vulnerabilities or WAF blocking were detected, supporting a trustworthy user experience. Overall, SITE Global demonstrates a professional and credible online presence aligned with its mission and audience. Strategic recommendations include enhancing DNS security with DNSSEC, publishing explicit security and incident response policies, and expanding contact information visibility to improve user trust and compliance transparency.

M

MK2

mk2.com

69

MK2 operates as a cinema exhibition company based in Paris, France, offering film screenings, events, festivals, and avant-premières targeting cinema enthusiasts. The website is professionally designed with a focus on French-speaking audiences and provides detailed information about movie schedules and events. Technically, the site uses modern web frameworks such as Next.js and React, with Prismic CMS for content management, and integrates multiple third-party services for analytics, advertising, and payment processing. Security posture is solid with HTTPS and cookie consent mechanisms implemented, though explicit security headers could be better documented. The absence of WHOIS data raises concerns about domain registration legitimacy, which impacts overall trust. Privacy compliance is partially met with cookie consent but lacks a clearly accessible privacy policy page. Overall, the website is functional and professional but would benefit from improved transparency and contact information.

H

Hostnet

hostnet.lv

58

Hostnet is a Latvian-based full-service cloud and hosting provider offering a range of services including web hosting, server rental, virtual servers, domain registration, and SSL certificates. The company targets small to medium businesses and enterprises requiring reliable hosting and cloud infrastructure. The website demonstrates a professional digital presence with modern technologies such as WordPress and Elementor, supported by analytics and customer support tools like Google Tag Manager, Microsoft Clarity, and Zendesk. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits domain registration verification, but the website content and structure indicate a legitimate and established business. Overall, the site is well-optimized for SEO, mobile, and user experience, with moderate user tracking and good advertising transparency.

F

fruits

fruits.co

63

fruits.co operates as a specialized online domain sales platform targeting domain buyers and sellers with a focus on ease of use, low commission fees, and AI-driven innovations. The platform offers automated billing, VAT services, and buyer protection, positioning itself as a niche player in the domain marketplace industry. The website is professionally designed using modern web technologies such as Webflow, integrated with analytics and marketing tools including Segment, Facebook Pixel, Intercom, and Trustpilot, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, CSRF protection, and comprehensive cookie consent mechanisms, although explicit security headers are not evident in the HTML content. Privacy compliance is well addressed with a detailed privacy policy and cookie management, reflecting GDPR awareness. However, the absence of explicit contact information and redacted WHOIS data suggests a privacy-protected domain registration, common in this business sector. Overall, the website presents a trustworthy and professional front with moderate risk, suitable for its business model.

C

CoroPrevention

coroprevention.eu

57

CoroPrevention is an EU-funded research initiative focused on preventing coronary heart disease through personalized prevention strategies and clinical research. The website serves as an information portal for patients, researchers, and healthcare professionals, providing health information, research updates, and trial participation details. The project operates within the healthcare sector, targeting European audiences concerned with cardiovascular health. Technically, the website is built on the concrete5 CMS platform, utilizing jQuery, Google Tag Manager, Google Analytics, and Cookiebot for consent management and analytics. The site demonstrates moderate to good performance and mobile optimization, with a professional and consistent design. Security posture is strong with HTTPS enforced and appropriate security headers present, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed through a clear privacy policy and a comprehensive cookie consent mechanism. Overall, the website is trustworthy and professionally maintained, suitable for its research and public health mission.

Veho Group is a company specializing in sustainable mobility solutions, operating primarily in the Nordic and Baltic regions. The company positions itself as a sustainability leader in the automotive industry, focusing on delivering superior customer experiences and environmentally responsible products and services. Their website reflects a professional corporate presence with clear messaging about sustainability and customer-centric values. Technically, the website is built on the Crasman Stage CMS platform, uses modern JavaScript libraries, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Hosting and DNS services are managed via Cloudflare, providing good performance and security. Security posture is strong with HTTPS enforced, clientTransferProhibited domain status, and a comprehensive cookie consent mechanism. However, there is room for improvement in publishing explicit security policies, incident response contacts, and vulnerability disclosure information. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements, making it suitable for its target audience and business goals.

V

Veho SIA

veho.lv

64

Veho SIA is the sole official representative of Mercedes-Benz AG and Daimler Truck AG in Latvia, providing a comprehensive range of automotive services including new and used vehicle sales, servicing, parts, and financial services. The company holds a strong market position as the exclusive dealer and service provider for these prestigious brands, targeting both private and commercial customers within Latvia. The website reflects a mature digital presence with modern technologies such as Next.js and React, integrated consent management, and analytics tools, supporting a professional and user-friendly experience. Security posture is solid with HTTPS enforcement and consent-based data collection, though there is room for improvement in security headers and accessibility compliance. Overall, the site demonstrates high trustworthiness and business credibility, though WHOIS data limitations restrict full domain registration verification.

P

Prepend

prepend.nl

70

Prepend is a well-established Atlassian Platinum Solution Partner based in the Netherlands, offering comprehensive services including consultancy, training, licensing, cloud migration, and hosting for Atlassian products such as Jira and Confluence. The company holds multiple certifications and awards, including ISO 27001 and Atlassian Partner of the Year 2020, positioning it as a leading Atlassian specialist in its market. The website reflects a professional and trustworthy business with clear service offerings and strong customer references. Technically, the website employs a modern tech stack with jQuery, Slick Slider, Cookiebot for cookie consent, and Google Tag Manager for analytics. The site is hosted on an IBM Domino CMS platform, optimized for performance and mobile responsiveness, with good SEO and accessibility features. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Security posture is strong with HTTPS enforced, presence of security headers, and ISO 27001 certification. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a public incident response contact or vulnerability disclosure policy, which could be improved to enhance security transparency. Overall, Prepend's website demonstrates a mature digital presence with strong business credibility and security practices, suitable for its role as a trusted Atlassian partner. Strategic recommendations include publishing explicit incident response contacts and vulnerability disclosure information to further strengthen security posture and trust.

S

Stretch Addera

stretchaddera.com

58

Stretch Addera is a specialized Atlassian Enterprise Platinum Solution Partner focused on delivering Atlassian consulting, cloud migration, and team collaboration solutions across Scandinavia. The company operates as part of the Communardo Group and targets organizations seeking to optimize their agile teams using Atlassian products. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content about their services and campaigns. Technically, the site is built on WordPress with modern plugins and integrations such as Google Tag Manager, Cookiebot, and reCAPTCHA, ensuring good performance and user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the business credibility is high, supported by trust indicators like Atlassian certifications and a LinkedIn presence.

M

Meira Oy

meira.fi

48

Meira Oy is a well-established Finnish company specializing in the manufacturing and retail of coffee and seasoning products. With over a century of history, the company operates from its own factory in Helsinki and targets Finnish consumers who appreciate quality coffee and culinary spices. The website reflects a mature market position with a focus on sustainability and responsibility. Technically, the site is built on WordPress, leveraging modern web technologies such as jQuery, Google Tag Manager, and Cookiebot for consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security-wise, the website employs HTTPS with good SSL configuration and security headers, and no critical vulnerabilities were detected. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the domain registration details align well with the business identity, supporting the legitimacy and trustworthiness of the site.

D

Digita

digita.fi

71

Digita is a Finnish company specializing in building digital infrastructure to enable a modern digital society. The company positions itself as a key national player in telecommunications and digital infrastructure, offering services that support living, entrepreneurship, and societal advancement in Finland. The website reflects a professional digital presence with a focus on clear branding and user experience, targeting Finnish citizens and businesses interested in digital infrastructure. Technically, the site is built on WordPress with modern technologies including jQuery, Google Tag Manager, Cookiebot for consent management, and Hotjar for analytics. The presence of multiple third-party marketing and analytics tools indicates a mature digital marketing strategy, although Google Analytics is not fully configured. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers visible in the HTML. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially met with a comprehensive cookie consent mechanism but lacks a clearly accessible privacy policy in the provided content. Overall, the site is trustworthy and professionally maintained, with room for improvement in privacy policy visibility and security header implementation.

T

The MTM Agency

themtmagency.com

70

The MTM Agency is a well-established integrated marketing agency founded in 2016, headquartered in Southampton, UK, with multiple offices including London, Manchester, Leeds, and New York. They specialize in combining marketing, PR, brand, and digital services to accelerate business growth for a diverse client base. Their market position is strong, supported by a professional website showcasing case studies, client logos, and a comprehensive service offering. Technically, the website is modern, fast, and mobile-optimized, leveraging Cloudflare for DNS and CDN, and employing multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and Cookiebot for consent management. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies could be improved. Privacy compliance is robust with clear privacy and cookie policies and active consent mechanisms. Overall, the website reflects a credible, professional business with a high level of digital maturity.

Lara Translate is a technology-focused company providing online translation services including text, conversation, and document translation. Established in 2017, it offers both free and paid tiers, including API access and interpreter services, targeting a broad audience needing reliable and fast translation solutions. The website is professionally designed with a modern tech stack leveraging React, Tailwind CSS, and cloud hosting on AWS. It integrates analytics and cookie consent tools to manage user tracking and privacy. Security posture is adequate with HTTPS enforced and domain registration transparency, but lacks advanced security headers and published security policies. Privacy compliance is basic with accessible privacy and terms pages but no explicit GDPR compliance statements or data protection officer contact. Overall, the site is functional, trustworthy, and professionally maintained with room for improvement in security and compliance transparency.

S

SIA GelvoraSergel

gelvorasergel.lv

60

SIA GelvoraSergel operates as a Latvian service provider specializing in debt recovery, reminder services, and real estate listings. The company targets Latvian individuals and businesses requiring financial recovery and property services, offering a client self-service portal for enhanced user experience. The website is multilingual, supporting Latvian, English, and Russian, reflecting a regional focus. The business appears small-sized, founded around 2014, with a consistent and professional online presence. Technically, the website is built on WordPress 6.5.3, utilizing modern plugins such as Yoast SEO and Cookiebot for privacy compliance. It integrates Google Tag Manager and reCAPTCHA for analytics and security. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. Security best practices include HTTPS enforcement and form protection, but some security headers are not visibly implemented, suggesting room for improvement. From a security perspective, the site shows a mature posture with cookie consent mechanisms and secure form handling. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms indicates potential compliance gaps. WHOIS data was unavailable due to query limits, limiting domain legitimacy verification. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, but could enhance security transparency and technical hardening. Strategic recommendations include implementing security headers, publishing security policies, and conducting regular vulnerability assessments to strengthen the security posture and trustworthiness.

T

Translated

translated.com

66

Translated is a well-established professional language solutions provider founded in 2000, offering expert human translation services enhanced by AI technology. The company serves a large global client base with over 379,817 customers and delivers services in 236 languages across 40 areas of expertise. Their market position is strong, supported by high customer satisfaction and a broad portfolio including enterprise solutions and developer tools. Technically, the website is modern, fast, and mobile-optimized, leveraging advanced analytics and consent management tools. Security posture is solid with HTTPS and secure forms, though explicit security policies and incident response contacts are not published. Overall, the site reflects a mature, credible business with excellent content quality and user experience.