Security Directory

D

Digia Oyj

digia.com

63

Digia Oyj is a well-established Finnish software and service company founded in 1997, specializing in digital transformation, AI, analytics, and cybersecurity services. The company targets businesses and organizations seeking to leverage technology for smarter business operations and sustainable futures. Their market position is strong in Finland with a large company size and a comprehensive service portfolio. The website is professionally designed, mobile-optimized, and uses HubSpot CMS with modern marketing and analytics tools. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the website reflects a credible, professional, and trustworthy business presence.

P

Parasta Lapsille ry

parastalapsille.fi

60

Parasta Lapsille ry is a well-established Finnish non-profit organization focused on child welfare and family well-being. The organization offers camps, weekend activities, and volunteer opportunities to support children and families, emphasizing multicultural inclusion. The website reflects a mature digital presence with clear branding, comprehensive content, and active social media engagement. Technically, the site is built on WordPress with modern plugins and is hosted behind Cloudflare, ensuring good performance and security. Privacy compliance is robust, featuring GDPR-aligned cookie consent and a detailed privacy policy. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the domain WHOIS data aligns well with the organization's identity, supporting high legitimacy and trust.

P

ProAgria

proagria.fi

58

ProAgria is a Finnish company specializing in expert services and knowledge to enhance the competitiveness of agriculture and rural business operations. The company offers a broad range of services including management, finance, accounting, crop production, animal production, and sustainable development. Positioned as a leading service provider in Finland's agricultural sector, ProAgria targets farms and rural enterprises seeking professional consulting and development support. The website reflects a mature digital presence with a modern CMS (Craft CMS), responsive design, and structured data for SEO. The technical infrastructure includes modern JavaScript frameworks and delayed Google Tag Manager loading to optimize performance. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit cookie consent mechanisms and published security policies are absent. Overall, the site is professional, trustworthy, and well-aligned with the business's market position and audience.

O

Oulun yliopisto

oulu.fi

75

Oulun yliopisto is a large, internationally active research university based in Finland, providing higher education and producing scientific knowledge and solutions. The website reflects a mature digital presence built on Drupal 10, integrating modern analytics and consent management tools such as Google Analytics, Matomo, and CookieInformation. The site is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. Security posture is strong with HTTPS enforced and Cloudflare used for hosting and protection, although explicit security policies and incident response contacts are not published. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the domain registration and website content are consistent and trustworthy, representing a legitimate educational institution.

M

Martat

martat.fi

62

Martat is a Finnish non-profit organization dedicated to promoting home and family wellbeing and the appreciation of household management. The website serves as a comprehensive portal for membership, educational courses, events, publications, and community engagement. It targets Finnish households and families interested in sustainable and responsible living. The organization has a strong national presence with local chapters and a variety of services including international aid projects. Technically, the site is built on WordPress with WooCommerce and integrates modern JavaScript libraries and third-party services for analytics, feedback, and chat support. The site is well-optimized for SEO, mobile-friendly, and accessible. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

R

Rideer Nordic Oy

synergybus.se

42

SynergyBus, operated by Rideer Nordic Oy, is an online platform specializing in connecting taxi and bus companies with customers seeking transportation services in the Nordic region. The website positions itself as a leading marketplace for order traffic, offering a large volume of daily offer requests and facilitating business growth for transport providers. The platform's business model revolves around generating and managing transportation service quotes, targeting primarily taxi and bus operators. The company is relatively young, founded in 2022, and maintains a consistent brand presence with trust certifications and EU co-funding indicators. Technically, the website employs a modern tech stack including Bootstrap for responsive design, jQuery, FontAwesome icons, and integrates multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and Ahrefs Analytics. The site is mobile-optimized with good SEO practices but lacks some accessibility features and advanced security headers. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks DNSSEC, security headers, and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security governance. The WHOIS data is consistent with the business claims, showing a legitimate domain registration without privacy protection, appropriate domain age, and active status. Overall, SynergyBus presents a professional and functional online presence with solid business credibility but requires enhancements in privacy compliance and security best practices to strengthen its risk posture and regulatory adherence.

R

Ridee Nordic Oy

bokabuss.nu

52

Bokabuss.nu is a Swedish transportation service platform that enables users to request and compare quotes for bus and minibus transportation across Sweden. The company, operated by Ridee Nordic Oy, has been active since 2011 and maintains a medium-sized presence in the Nordic transportation market. The website is professionally designed with a clear user journey for submitting transport requests and accessing operator offers. Technically, the site uses modern frameworks such as Bootstrap and jQuery, integrates Google Analytics and marketing tools, and employs Cloudflare for hosting and security. The cookie consent mechanism is comprehensive and GDPR compliant, reflecting a mature approach to privacy. Security posture is good with HTTPS enforced, though some security headers could be improved and DNSSEC is not enabled. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is trustworthy, professional, and well-positioned in its market niche.

L

LUGA

luga.lu

63

LUGA is a cultural event organizer hosting an ephemeral urban garden exhibition in Luxembourg from May to October 2025. The website serves as an information and engagement platform for visitors, volunteers, and partners, showcasing event details, locations, and news. The site is well designed, multilingual, and optimized for SEO and accessibility, reflecting a mature digital presence. Technically, it leverages WordPress CMS, Cloudflare for DNS and CDN, and integrates modern analytics and consent management tools, indicating a good level of digital maturity. Security posture is solid with HTTPS, security headers, and cookie consent, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

W

Worldsoft AG

worldsoft-partner.website

60

Worldsoft-Partner.website is a German-language franchise platform operated by Worldsoft AG, a Swiss company established in 2000. The website offers a turnkey business concept for individuals and entrepreneurs to start their own internet agency, leveraging Worldsoft's 20+ years of experience and a large customer base. The business model focuses on creating mobile-optimized websites quickly using proprietary tools, supported by online training, marketing materials, and personal coaching. Technically, the site uses a modern JavaScript stack with multiple analytics and marketing integrations, including Google Analytics, Facebook Pixel, LinkedIn Insight, Hotjar, and Elfsight widgets. The website is mobile-optimized and well-structured, providing a professional user experience. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and visible security headers. Privacy compliance is partially met with a privacy policy linked externally but lacks a cookie consent mechanism. Overall, the domain registration is consistent with the business claims, indicating legitimacy and trustworthiness.

Sherpas TECH, s.r.o. is a Czech-based technology and marketing company specializing in retention marketing and technology integration services. The company offers a range of services including email marketing strategy, technology implementation for retention marketing, data engineering in CRM systems, and advanced customer analytics. Their website reflects a professional and consistent brand image, targeting B2B clients seeking to optimize marketing performance through technology. The company demonstrates a solid market position supported by client references and a clear business focus. Technically, the website employs modern tools such as Google Analytics, Google Tag Manager, and CookieScript for consent management, indicating a mature digital infrastructure. The site is built likely on the Nette Framework, with responsive design and good SEO practices. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site uses HTTPS with no visible critical vulnerabilities. Cookie consent is implemented with opt-in mechanisms, and forms include anti-bot measures. However, there is no publicly available security policy or incident response information, which could be improved to enhance trust and compliance. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR cookie consent requirements. Strategic recommendations include publishing security and incident response policies, enhancing security headers, and improving accessibility. The domain WHOIS data aligns well with the website content, supporting legitimacy and trustworthiness.

T

Tabernas 21, s.r.o.

citybee.cz

58

CityBee.cz is a Czech online media platform focused on providing curated event listings, venue recommendations, and cultural tips primarily for Prague residents and visitors. The website operates under the company Tabernas 21, s.r.o., established around 2012, and positions itself as a trusted local guide with editorial content and advertising services. The platform integrates advertising partnerships and offers business registration services for local venues. Technically, the site uses legacy JavaScript libraries like jQuery 1.8.3, Google Tag Manager, and Facebook SDK, with a moderate performance profile and basic mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks modern security headers and uses outdated libraries, which could pose risks. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for media businesses. Overall, the site is professional, content-rich, and safe for general audiences.

S

StavbaWeb

stavbaweb.cz

51

StavbaWeb is a Czech-language online platform dedicated to sharing information about construction products, architectural projects, and companies in the architecture and construction sectors. It serves as a niche media outlet providing news, project showcases, and industry insights primarily targeting architects, construction professionals, and related stakeholders in the Czech Republic. The website features a modern WordPress-based infrastructure with various plugins supporting GDPR compliance and user engagement. It integrates Google Tag Manager and Facebook SDK for analytics and marketing purposes. Security posture is moderate with HTTPS enforced and some security plugins in place, but lacks explicit security headers and published security policies. The absence of WHOIS data limits domain trust assessment, though the site appears professional and well-maintained. Privacy compliance is partial, with cookie consent implemented but no clear privacy policy page found. Overall, the site is a credible resource within its industry niche but would benefit from enhanced transparency and security documentation.

Luxembourg for Finance is a government-related agency focused on the development and promotion of Luxembourg's financial services industry. Established in 2008, it serves as a key player in identifying new business opportunities and supporting the financial sector's growth. The website reflects a professional and consistent brand image, targeting financial industry stakeholders and investors interested in Luxembourg's market. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and integrates analytics tools including Google Analytics and Piwik PRO. It employs Google Tag Manager and reCAPTCHA for enhanced tracking and security. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features could be improved. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms to comply with GDPR. However, it lacks visible security headers and explicit security or incident response policies on the site. The absence of WHOIS domain registration data raises concerns about domain transparency and legitimacy, although the professional content and social media presence mitigate some risk. Overall, the website presents a moderate risk profile with good content quality and technical implementation but requires improvements in privacy transparency, contact information availability, and domain registration clarity. Strategic recommendations include publishing comprehensive privacy and terms of service policies, enhancing security headers, and verifying domain registration details to strengthen trust and compliance.

K

Kultur | lx – Arts Council Luxembourg

kulturlx.lu

58

Kultur | lx – Arts Council Luxembourg is a governmental cultural promotion organization dedicated to supporting artists and promoting Luxembourg's cultural creation. The website serves as a comprehensive platform for cultural news, events, funding opportunities, and resources, targeting artists, cultural professionals, and the general public interested in Luxembourg's arts scene. The organization holds a strong national position as the official arts council, supported by government partnerships and a clear mission to foster cultural development. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and integrates Google services like Tag Manager and reCAPTCHA. Accessibility features and GDPR-compliant cookie management via Axeptio demonstrate digital maturity and compliance. The site is mobile-optimized and well-structured, providing a positive user experience. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though the absence of explicit security headers and incident response information suggests room for improvement. No vulnerabilities or exposed sensitive data were detected. The lack of WHOIS data limits domain trust verification, but the professional presentation and official branding mitigate concerns. Overall, the website is a trustworthy, well-maintained digital presence for a government cultural entity, with recommendations to enhance security headers and incident response transparency to further strengthen its security posture.

L

Luxinnovation

luxinnovation.lu

79

Luxinnovation is Luxembourg's national innovation agency dedicated to empowering companies to innovate and fostering a sustainable and digital economy. The website reflects a mature digital presence with comprehensive content targeting startups, businesses, and research organizations. The technical infrastructure leverages modern web technologies, including Tailwind CSS, Alpine.js, Kentico CMS, and integrates multiple analytics and marketing tools such as Matomo, Google Tag Manager, Facebook Pixel, and LinkedIn Insight. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy compliance is partial, with cookie consent implemented but lacking a visible privacy policy or terms of service. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

V

Visit Turku Archipelago Oy

visitturku.fi

44

Visit Turku Archipelago Oy operates the official tourism website for Turku and its archipelago, providing comprehensive information on local attractions, dining, accommodation, and events. The website serves both tourists and local residents, positioning itself as a trusted source for travel inspiration and practical information. The business model focuses on promoting regional tourism and supporting local partners through digital content and event listings. Technically, the site employs modern web technologies including Google Tag Manager, Google Maps API, and Vimeo for multimedia content, hosted with Azure DNS services. The site is mobile-optimized and accessible, with good SEO practices and a clear navigation structure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or suspicious patterns were detected. Overall, the domain registration data aligns well with the business, indicating legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing explicit security policies, and adding a vulnerability disclosure channel to further strengthen trust and compliance.

T

Trimble

asiointi.fi

62

The website upa.trimble.com/fi-fi/ratkaisut/asiointi serves as a Finnish regional portal for Trimble's Utilities & Public Administration division. Trimble is a global technology company specializing in advanced solutions for sectors such as energy, public administration, and utilities. The site targets Finnish utilities and public sector organizations, offering digital transformation and operational efficiency solutions. The business model is B2B, focusing on providing software and technology services to utility companies and government entities. The website branding and content align well with Trimble's global identity, indicating a strong market position in the regional sector. Technically, the website employs modern web technologies including React, Webpack, and integrates multiple marketing and analytics tools such as Google Tag Manager, Google Analytics, Marketo Munchkin, and Leadfeeder. The site is moderately optimized for performance and mobile use, with basic accessibility features. However, explicit security headers and privacy policies are not evident in the provided HTML snapshot, suggesting areas for improvement in compliance and security transparency. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent from the content. However, the absence of visible security headers and privacy/cookie policies reduces the overall security posture score. Incident response and vulnerability disclosure information are also missing, which could be enhanced to improve trust and compliance. Overall, the website is professional, trustworthy, and aligned with Trimble's business objectives. The main risks relate to privacy compliance and security transparency, which can be addressed by adding clear policies and security headers. The domain WHOIS data for the subdomain is not available, which is typical, but the main domain trimble.com is well-established and legitimate, supporting the site's credibility.

T

Timmi Software Oy

timmi.fi

62

Timmi Software Oy is a Finnish software company specializing in time management and smart infrastructure solutions for public sector and healthcare organizations. With over 30 years of experience, they serve more than 100 Finnish companies and public institutions, offering products like Smart City and Smart Hospital software. Their market position is strong within Finland, supported by trusted client references and a focus on integration and ease of use. Technically, the website is built on Webflow with modern analytics and consent tools, demonstrating digital maturity and good performance. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent, though explicit security policies and headers could be improved. Overall, the company presents a professional, trustworthy online presence with clear contact channels and compliance with GDPR.

Ramboll Group is a leading international design and consultancy firm specializing in sustainable solutions across private and public sectors worldwide. With over 18,000 experts, Ramboll delivers engineering, environmental, and construction consulting services focused on creating positive societal impact. The website reflects a mature digital presence with modern technologies such as Next.js, React, and Chakra UI, supported by advanced analytics and consent management tools. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although the absence of a public security policy and incident response contact is noted. The missing WHOIS data is unusual but does not detract significantly from the overall trustworthiness given the professional branding and comprehensive content. Strategic recommendations include publishing explicit security and incident response policies and verifying domain registration details for completeness.

L

Liana Technologies Oy

liana.fi

65

Liana Technologies Oy is a Finnish technology company specializing in digital marketing and communication tools under the Liana®Cloud product family. The company targets marketing and communication teams, offering SaaS solutions such as marketing automation, email marketing, webinar hosting, and analytics. The website reflects a professional and consistent brand image with a focus on digital marketing efficiency. Technically, the site employs modern web technologies including jQuery, Bootstrap, Matomo analytics, and integrates third-party services like Stripe for payments and Pipedrive for chatbot functionality. Security posture is strong with HTTPS enforced, cookie consent implemented, and privacy-respecting analytics in use. However, explicit privacy policies and terms of service pages were not found in the provided content, indicating room for improvement in compliance transparency. Overall, the website is well-designed, mobile-optimized, and trustworthy, with a moderate to high security maturity level.

S

Synology Inc.

sy.to

76

Synology Inc. is a well-established technology company specializing in data management, storage, backup, and cloud solutions. The company offers a broad portfolio of products including NAS and SAN storage systems, backup and recovery solutions, surveillance systems, networking devices, and productivity software. Positioned as a global leader in the data storage industry, Synology targets both business and individual users seeking scalable and secure data management platforms. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with its market position. Technically, the website employs modern web technologies such as Vue.js and jQuery, integrates Google Tag Manager and LiveChat for analytics and customer engagement, and demonstrates good performance and mobile optimization. The site is well-structured with proper SEO and accessibility considerations, indicating a high level of digital maturity. From a security perspective, Synology demonstrates strong commitment through HTTPS enforcement, detailed security policies, a secure development lifecycle, supply chain risk management, and a public bounty program. Cookie consent mechanisms and privacy policies align with GDPR compliance, enhancing user trust. No critical vulnerabilities or security issues were detected in the analysis. Overall, the website presents a low-risk profile with strong business credibility, technical robustness, and privacy compliance. Strategic recommendations include publishing a security.txt file to facilitate vulnerability reporting and explicitly listing a Data Protection Officer contact to further enhance compliance transparency.

P

Poutapilvi

poutapilvi.fi

71

Poutapilvi is a Finnish digital agency specializing in digital service design, WordPress and WooCommerce development, and content marketing support. The company positions itself as a reliable partner for businesses and organizations seeking professional web solutions, emphasizing accessibility, usability, and customer service excellence. Their market presence is supported by multiple references and a high credit rating, indicating strong business credibility. Technically, the website is built on WordPress with a modern tech stack including Algolia search, Matomo analytics, and Google Tag Manager. The site demonstrates excellent performance, mobile optimization, and accessibility features, reflecting a mature digital infrastructure. Privacy compliance is well addressed with clear cookie consent mechanisms and comprehensive privacy policies. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though the absence of explicit security policies and incident response contacts suggests room for improvement. No critical vulnerabilities or suspicious indicators were found, supporting a high trust level. Overall, Poutapilvi presents a professional, secure, and privacy-conscious digital presence suitable for its target audience. Strategic enhancements in security transparency and incident readiness would further strengthen their position.

S

Seravo

seravo.com

78

Seravo is a Finnish company specializing in premium managed WordPress hosting services, focusing on site speed, security, and automatic updates with continuous 24/7 monitoring. The company positions itself as a niche provider targeting WordPress site owners and agencies seeking reliable and secure hosting solutions. Their business model is subscription-based, emphasizing high-quality service and compliance with industry standards such as ISO 27001 and GDPR. The website reflects a professional and consistent brand image with comprehensive business and security information.

V

Visit Naantali

visitnaantali.com

55

Visit Naantali operates as the official tourism website for the Naantali region in Finland, providing comprehensive information about local attractions, events, accommodations, and activities. The site targets tourists and visitors seeking to explore Naantali, positioning itself as a trusted and authoritative source for travel planning in the area. The business model focuses on tourism promotion and visitor engagement through digital content and booking facilitation. Technically, the website is built on WordPress with modern technologies including Bootstrap 5 for responsive design, Yoast SEO for search optimization, and Cookiebot for GDPR-compliant cookie consent management. The infrastructure includes Google Tag Manager and Matomo Analytics for tracking and performance monitoring. The site demonstrates good mobile optimization and accessibility features, though some accessibility aspects could be enhanced. From a security perspective, the website enforces HTTPS and employs clientTransferProhibited status on the domain to prevent unauthorized transfers. Cookie consent is actively managed, and no critical vulnerabilities or exposed sensitive data were detected. However, DNSSEC is not enabled, and additional HTTP security headers could be implemented to strengthen security posture further. Overall, the website presents a professional, trustworthy, and user-friendly platform for tourism promotion with a solid technical foundation and good privacy compliance. The absence of explicit privacy policy and terms of service pages in the scanned content is a gap that should be addressed to improve compliance and user trust.

T

THEMESPRIDE

themespride.com

68

THEMESPRIDE operates as a specialized e-commerce platform offering premium WordPress themes and theme bundles primarily targeting web developers, designers, and businesses seeking professional website templates. The company leverages the Shopify platform to deliver a streamlined shopping experience, supported by integrations with marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Klaviyo, and Judge.me for customer reviews. The website presents a professional design with clear navigation and mobile optimization, enhancing user experience and engagement. From a technical perspective, THEMESPRIDE utilizes a modern tech stack centered around Shopify's Dawn theme, supported by JavaScript libraries like jQuery and various third-party scripts for analytics and marketing. The site benefits from Shopify's hosting infrastructure, ensuring fast performance and reliable uptime. Security measures include HTTPS enforcement and the use of hCaptcha for form protection, alongside a cookie consent mechanism compliant with GDPR requirements. However, explicit security headers and a dedicated security policy are absent, representing areas for improvement. The security posture is generally sound with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through comprehensive privacy and cookie policies, though incident response and vulnerability disclosure information are lacking. The absence of WHOIS data due to privacy protection or unregistered status slightly diminishes trust but is common among small e-commerce businesses. Overall, THEMESPRIDE demonstrates a mature digital presence with room to enhance transparency and security best practices. Strategically, THEMESPRIDE should focus on implementing explicit security headers, publishing a security policy, and establishing incident response contacts to bolster trust and compliance. Regular audits of third-party scripts and enhanced transparency on data retention will further strengthen their security and privacy posture. These steps will support sustained growth and customer confidence in a competitive market.

T

TSC

tsc.lv

61

TSC is a Latvian-based service provider specializing in the repair of mobile phones, tablets, smartwatches, laptops, electric scooters, and audio equipment. The company targets general consumers in Latvia seeking device repair services. The website is professionally designed with consistent branding and provides clear information about its services, primarily in Latvian. The business operates in the technology sector with a small company size and a local market focus. Technically, the website employs modern technologies including Bootstrap for responsive design, Google Tag Manager for analytics, and Cookiebot for cookie consent management. The site uses HTTPS with good SSL configuration and includes security headers, indicating a solid technical foundation. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the website demonstrates good practices such as enforced HTTPS, cookie consent mechanisms, and no visible exposure of sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website presents a trustworthy and professional online presence with moderate technical maturity and good privacy compliance. Strategic improvements could focus on enhancing accessibility, publishing security policies, and adding incident response information to strengthen security posture and user trust.

K

Kampus Hybernská

kampushybernska.cz

59

Kampus Hybernská is a cultural and educational hub located in Prague, focusing on fostering creativity, innovation, and academic collaboration. The website showcases a variety of events including lectures, performances, exhibitions, and workshops aimed at students, artists, researchers, and the general public. The platform is supported by partnerships with the Prague city government and Charles University, enhancing its credibility and community impact. Technically, the site is built on Webflow with modern JavaScript libraries and includes analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is strong with HTTPS and security headers in place, complemented by GDPR-compliant privacy and cookie policies. However, the absence of WHOIS data limits domain trust verification. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for a medium-sized educational and cultural institution.

H

HESTIA

hest.cz

45

HESTIA is a Czech non-profit organization established in 2001, specializing in volunteer services, coordination, and educational programs. The website presents a well-structured platform offering multiple volunteer programs, corporate volunteering initiatives, and training courses. It targets volunteers, non-profit organizations, companies interested in corporate social responsibility, donors, and media. The organization maintains partnerships with government bodies and foundations, enhancing its credibility and market position within the Czech Republic's volunteer sector. Technically, the website uses a custom CMS (Toolkit) hosted by ECN Studio, with integration of Google Analytics and Google Tag Manager for visitor tracking. The site is mobile-optimized with good navigation and content quality. However, some technical improvements are recommended, including the implementation of security headers and enhanced accessibility features. From a security perspective, the site uses HTTPS (implied by external Google Analytics scripts loaded over HTTPS), has a cookie consent mechanism compliant with GDPR, and does not expose sensitive data. There is no visible security or incident response policy, and no contact emails or phone numbers are provided on the homepage, which could be improved for transparency and user trust. Overall, the website is professional, trustworthy, and serves its non-profit mission effectively. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and providing clearer contact information to improve user confidence and compliance posture.

C

CANS Global

cans.com

62

CANS Global is a small Czech Republic-based e-commerce company specializing in natural sparkling alpine water with real fruit juice. The company emphasizes purity and natural ingredients, targeting general consumers interested in healthy beverage options. The website is built on the Shopify platform, leveraging modern web technologies and analytics tools such as Google Analytics and Microsoft Clarity. The site is well-designed, mobile-optimized, and provides a good user experience, although it lacks some standard compliance documents such as privacy policy and terms of service. Security posture is adequate with HTTPS and domain protections but could be improved by enabling DNSSEC and publishing security policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

E

ekolo.cz s.r.o.

ekolo.cz

47

Ekolo.cz s.r.o. operates a leading Czech e-commerce and physical retail platform specializing in electric bicycles and related accessories. Established in 2007, the company has built a strong market position with over 18 years of experience, offering a wide range of products including over 700 e-bike variants from 16 manufacturers. Their services include sales, rental, and servicing of e-bikes, targeting cycling enthusiasts and urban commuters primarily in the Czech Republic. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive product information. Technically, the site leverages modern JavaScript libraries such as Swiper.js, Google Tag Manager, and integrates security features like Google reCAPTCHA to protect user interactions. Hosting is inferred to be on DigitalOcean with CDN support for performance. Security posture is strong with HTTPS enforced and secure form handling, though some HTTP security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR adherence, and consent mechanisms. Contact information is transparent and includes multiple channels. Overall, the site demonstrates high professionalism, trustworthiness, and digital maturity.

3

Pizza your way | 360 Pizza

360pizza.com

68

360 Pizza operates an e-commerce platform focused on pizza ordering and courier shipping services. The website presents a modern, visually consistent brand with a focus on user experience and mobile optimization. The business appears to be established since 2005, with a domain age supporting its longevity. The technical infrastructure leverages modern web technologies including React with Next.js, Mapbox for mapping, and multiple analytics platforms such as Google Analytics, TikTok, Facebook, and Smartlook. Cookie consent is managed via Cookiebot, indicating some level of privacy compliance awareness. However, explicit privacy policies, terms of service, and contact information are not found on the analyzed page, which may impact user trust and regulatory compliance. Security posture is generally good with HTTPS enforced and domain transfer protection enabled, but DNSSEC is not enabled, and security headers beyond domain status are not explicitly identified. Overall, the website is functional and professional but could improve transparency and compliance documentation.

B

Bageterie Boulevard

bb.cz

58

Bageterie Boulevard is a well-established fast casual gourmet sandwich and food service chain primarily operating in the Czech Republic with some presence in Slovakia. The company offers a variety of freshly prepared sandwiches and related products, emphasizing quality and speed. Their business model includes physical retail locations, online ordering platforms, catering services, and franchise opportunities. The website reflects a mature digital presence with multiple branches listed, a mobile app promotion, and loyalty programs. Technically, the site uses a mix of legacy and modern web technologies including jQuery, Google Maps API, and various marketing and analytics tools such as Google Analytics, Facebook Pixel, and Cookiebot for consent management. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and vulnerability disclosure policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting a large retail hospitality business.

A

ANEXIA® Internetdienstleistungs GmbH

backboneeurope.com

57

Anexia Internetdienstleistungs GmbH operates Backbone Europe, a major network infrastructure project enhancing connectivity and DDoS protection across key European cities. The company provides IT services including software development, hosting, and network solutions primarily targeting enterprise customers. The website reflects a mature digital presence with modern technologies and interactive content, supporting a professional brand image. Security posture is moderate with HTTPS usage and domain transfer protection, but lacks DNSSEC and explicit security headers. Privacy compliance is partial, with a privacy policy linked externally but no cookie consent mechanism visible. Overall, the site is trustworthy and business-focused, with room for improvement in security and privacy transparency.

B

Business Finland

businessfinland.fi

68

Business Finland is a Finnish government agency dedicated to fostering growth by supporting Finnish companies in internationalization and innovation funding. The website serves as an authoritative portal for Finnish businesses seeking funding and international growth opportunities. It reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its target audience. The technical infrastructure leverages modern technologies including Azure hosting, Google Tag Manager, and Cookiebot for consent management, indicating a well-maintained and secure platform. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response contacts are not prominently published. Overall, the website demonstrates a high level of professionalism and trustworthiness suitable for a government entity.

A

AllSides Education Fund

allsideseducationfund.org

64

AllSides Education Fund is a nonprofit organization dedicated to strengthening democratic society by enhancing media literacy, providing balanced news access, and fostering constructive conversations across political divides. Founded in 2015 as a joint initiative of AllSides, Living Room Conversations, and the Mediators Foundation, it offers educational resources, scholarships, and grants primarily targeting educators and community leaders. The website serves as a platform to promote these services and facilitate donations and grant applications. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and GiveWP for donations, with a responsive design optimized for accessibility and SEO. Hosting is supported by Amazon AWS infrastructure, and the site employs Google Tag Manager for analytics and tracking. While the site uses HTTPS and has domain transfer protections, it lacks DNSSEC and some security headers, indicating room for security improvements. From a security perspective, the site demonstrates a moderate security posture with no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies and incident response information, along with missing DNSSEC, suggests potential compliance and security gaps. Privacy policies and cookie policies are present but do not include explicit consent mechanisms, which may affect GDPR compliance. Overall, the website is professional, trustworthy, and well-aligned with its nonprofit educational mission. Strategic recommendations include enhancing DNS security, implementing security headers, and improving privacy compliance mechanisms to strengthen trust and security posture.

C

CFL multimodal

cfl-mm.lu

61

CFL multimodal is a Luxembourg-based logistics and transportation company specializing in rail freight, multimodal hubs, and comprehensive logistics services. It operates as part of the CFL Group, providing sustainable and efficient freight solutions across Europe. The website reflects a professional and well-structured digital presence with clear service offerings and a focus on environmental responsibility. Technically, the site uses modern web technologies including jQuery, Bootstrap, FontAwesome, and integrates analytics tools such as Google Tag Manager and Matomo. The security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security headers and policies are not evident. The absence of WHOIS data limits domain trust assessment, but the overall business credibility is supported by consistent branding and social media presence. Privacy compliance is well addressed with GDPR-aligned policies and cookie management.

C

College Magazine, LLC

collegemagazine.com

65

College Magazine, LLC operates a professional online media platform focused on providing college-related content authored by students nationwide. The website offers comprehensive guides on colleges, majors, internships, career advice, and student life, positioning itself as a niche educational media outlet. The platform leverages a modern WordPress infrastructure with advanced SEO and analytics tools, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement and privacy management tools, though explicit privacy and terms pages are missing, which should be addressed to improve compliance and trust. WHOIS data is unavailable or privacy protected, slightly impacting domain trust but not detracting from the professional presentation and content quality. Overall, the site is a credible resource for college students and prospective applicants.

I

Indiana University Bloomington

indiana.edu

68

Indiana University Bloomington is the flagship campus of the Indiana University system, offering a comprehensive higher education experience with a strong emphasis on research, innovation, and academic freedom. The website reflects a mature digital presence with professional design, clear navigation, and relevant content targeting prospective and current students. The university leverages modern web technologies including Google Tag Manager and Siteimprove Analytics to monitor and optimize user experience. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure; however, explicit security headers and privacy policies are not evident in the provided content, indicating areas for improvement. The domain is a subdomain of iu.edu, which is consistent with institutional practices, though WHOIS data for the subdomain is unavailable. Overall, the site is trustworthy, professional, and safe for general audiences.

V

vseosaunovani.cz

vseosaunovani.cz

55

The website vseosaunovani.cz is a niche informational platform focused on sauna bathing, its health benefits, traditions, and local sauna recommendations primarily targeting the Czech Republic audience. The site operates as a content and blog platform, providing articles and advice related to sauna culture and wellness. It is built on the Wix platform, leveraging Wix's CMS and hosting infrastructure, with integrations such as Google Tag Manager and Cookiebot for analytics and cookie consent management. Technically, the site demonstrates moderate performance and good mobile optimization, though accessibility and SEO could be improved. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and incident response information. The absence of WHOIS data and privacy policy reduces trust and compliance confidence. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

S

Saunia

saunia.sk

55

Saunia operates as a regional sauna and wellness service provider primarily targeting customers seeking relaxation and health benefits through sauna experiences. The website presents a professional and consistent brand image, with content focused on promoting their sauna worlds and wellness offerings. The company appears to be established in the Czech Republic, serving a general audience interested in wellness and leisure. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, Cookiebot for consent management, and various plugins for social sharing and popups. The site is mobile-optimized and includes structured data for SEO and organization information, indicating a mature digital presence. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is supported by cookie disclosures and consent but lacks a clearly accessible privacy policy page in the provided content. Overall, the website is trustworthy and professionally maintained, with no blocking or WAF interference detected. The absence of WHOIS data limits domain registration insights but does not detract from the site's apparent legitimacy. Strategic recommendations include enhancing security headers, publishing privacy and security policies, and adding vulnerability disclosure information to improve trust and compliance.

S

Saunia

saunia.de

52

Saunia operates as a regional wellness and sauna service provider primarily targeting customers in the Czech Republic and neighboring countries. The website presents a professional and well-structured digital presence, leveraging WordPress CMS and integrating multiple marketing and analytics tools such as Google Analytics, Microsoft Clarity, and Cookiebot for consent management. The business focuses on delivering sauna experiences and wellness services, positioning itself as a trusted brand in the hospitality sector. However, the absence of publicly available WHOIS data and explicit privacy or terms of service pages slightly detracts from the overall trustworthiness. Technically, the site is well-optimized for mobile devices and SEO, though there is room for improvement in accessibility and security header implementation. The security posture is solid with HTTPS enforced and no visible vulnerabilities, but could benefit from enhanced transparency through published security policies and vulnerability disclosure mechanisms.

E

Eurogroup for Animals

eurogroupforanimals.org

49

Eurogroup for Animals is a pan-European non-profit advocacy organization dedicated to improving animal welfare and defending animal interests across Europe. The website serves as a platform to communicate their mission, campaigns, and policy initiatives to a broad audience including NGOs, policymakers, and the general public interested in animal welfare. The organization positions itself as a key voice in European animal advocacy with a focus on policy influence and public awareness. Technically, the website is built on Drupal 10, leveraging modern web technologies including Font Awesome for icons, Google Tag Manager for analytics, and Cookiebot for cookie consent management. The site demonstrates good digital maturity with mobile optimization, accessibility features, and a cookie consent mechanism that complies with GDPR requirements. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and implements cookie consent with granular user controls. However, explicit security headers like Content-Security-Policy and X-Frame-Options were not detected in the provided data, suggesting an area for improvement. No vulnerabilities or exposed sensitive data were found. The WHOIS data is unavailable or privacy protected, which is typical for non-profit organizations and does not raise immediate concerns. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it would benefit from enhanced security header implementation and clearer contact information. The risk profile is low, with no critical issues detected.

L

Langley Advance Times

langleyadvancetimes.com

68

Langley Advance Times is a regional news media outlet serving the Langley area in British Columbia, Canada. It provides local news, community events, sports, entertainment, and obituaries, targeting local residents and readers interested in regional news. The site operates under the parent company Black Press Media, a known media group. The business model is primarily advertising and subscription-based, with a focus on community engagement and local journalism. Technically, the website uses a modern tech stack including Google Tag Manager, Google Analytics, Rubicon Project for advertising, and Marfeel SDK for mobile optimization. The CMS appears proprietary to Black Press Media. The site is mobile optimized, has good SEO practices, and loads with moderate performance. Accessibility features are basic but present. From a security perspective, the site enforces HTTPS and uses several security best practices, though some security headers are not explicitly visible. There is no visible security.txt or vulnerability disclosure policy, and cookie consent mechanisms are minimal or absent. WHOIS data for the domain is unavailable, which reduces trust slightly but the site’s professional appearance and affiliation with Black Press Media support its legitimacy. Overall, the site is a trustworthy local news source with good content quality and technical implementation. Strategic improvements in privacy compliance, security disclosures, and WHOIS transparency would enhance trust and security posture.

B

Boston Herald

bostonherald.com

64

Boston Herald is a prominent local news media organization serving the Boston, Massachusetts area, providing comprehensive coverage of news, sports, politics, entertainment, weather, and obituaries. The website demonstrates a mature digital presence with a subscription-based business model supported by a parent company, MediaNews Group. The site is well-branded and targets a general audience seeking timely and relevant local information. Technically, the site is built on WordPress and integrates multiple modern technologies including Google Tag Manager, Auth0 for authentication, and sophisticated ad and analytics platforms such as Google Ad Manager and Parsely. The site is mobile optimized and employs consent management via Osano, reflecting a commitment to privacy compliance. From a security perspective, the site enforces HTTPS, uses standard security headers, and manages cookie consent effectively. However, the absence of a public WHOIS record and lack of explicit security policies or incident response contacts slightly reduce trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, Boston Herald's website is professional, secure, and compliant with privacy regulations, though improvements could be made in transparency around security policies and contact information. The domain WHOIS data absence warrants monitoring but does not currently undermine the site's legitimacy.

I

Information Week

informationweek.com

73

InformationWeek is a well-established technology news and analysis media brand founded in 1979 and currently owned by Informa PLC. The website serves IT professionals and business leaders by providing in-depth coverage of IT management, artificial intelligence, cybersecurity, cloud computing, and data privacy. It holds a strong market position as a trusted source of technology insights. Technically, the website employs a modern technology stack including JavaScript frameworks, New Relic monitoring, and various analytics and marketing tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and content-rich, though the lack of publicly available WHOIS data slightly impacts trust scores.

A

Artha Platform | Rianta Capital Zurich

arthaimpact.com

47

Artha Impact operates as an impact investing network and platform focused primarily on social ventures in India, with a history dating back to 2007 as part of Rianta Capital advising the Singh Family Trust. The platform facilitates collaboration and capital deployment among investors, entrepreneurs, and support organizations through an invite-only online network and associated SaaS offerings. The website presents a professional and consistent brand image with clear navigation and comprehensive content about its mission, sectors of interest, and partner ecosystem. Technically, the site is built on WordPress using modern libraries such as Bootstrap and jQuery, with integration of Google Analytics, Tag Manager, and Microsoft Clarity for analytics and tracking. Security posture is generally good with HTTPS enforced, but lacks DNSSEC and explicit security headers. Privacy and cookie policies are present and appear comprehensive, supporting GDPR compliance. No contact emails or phone numbers are explicitly listed, which may impact direct communication. Overall, the domain registration data is consistent and legitimate, supporting the credibility of the business.

V

Vastuu Group

tilaajavastuu.fi

65

Vastuu Group is a Finnish technology service provider specializing in digital solutions that facilitate employee data management, compliance with labor laws, and reporting obligations primarily for the construction sector and related industries. The company offers a broad portfolio of services including Valtti+, Valttikortti, and electronic signature solutions, positioning itself as a key enabler of digital transformation and regulatory compliance in its market. Recent acquisitions such as Linnunmaa Lex indicate strategic growth and expansion of service offerings. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies and integrating analytics and marketing tools such as Google Tag Manager and Facebook Pixel. The site demonstrates good performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. From a security perspective, Vastuu Group maintains a strong posture with HTTPS enforcement, ISO 27001 certification, and comprehensive privacy and cookie policies. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public incident response policy and security.txt file suggests areas for improvement in transparency and vulnerability management. Overall, Vastuu Group presents a professional, trustworthy, and compliant digital presence aligned with its business objectives. The company is well-positioned in its sector with a clear focus on compliance, digital services, and customer support.

K

Kappa Data France

kappadata.fr

57

Kappa Data France is a value-added IT distributor specializing in network infrastructure and security solutions for businesses. Established in 1986, the company offers reliable products, technical expertise, and support services targeting IT resellers, SMEs, and large enterprises. The website reflects a mature digital presence with a professional design, multi-language support, and modern WordPress infrastructure. Security posture is solid with HTTPS and Cloudflare DNS, though explicit security headers and privacy policies are missing. Analytics are implemented via Google Tag Manager, indicating moderate user tracking. Overall, the site is trustworthy and well-positioned in the technology distribution sector.

M

Molfar Intelligence Firm

molfar.com

70

Molfar Intelligence Firm is a Ukrainian private intelligence agency specializing in OSINT investigations and business consulting across finance, government, law, and IT sectors. Established in 2012 and operational since 2019, the firm serves a global clientele with expertise in over 60 countries, focusing on markets such as CIS, USA, UK, China, and Israel. Their key offerings include background checks, litigation support, risk consulting, market research, strategic communication, military intelligence, and OSINT training through their institute. Technically, the website is built on Webflow with modern JavaScript libraries and analytics tools, hosted with Cloudflare DNS, and employs HTTPS with domain transfer lock for security. Privacy and cookie policies are comprehensive and GDPR compliant, with user consent mechanisms in place. Security posture is strong with no critical vulnerabilities detected, though DNSSEC is not enabled. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity.