Security Directory

B

BTFLEX S.r.l.

bt-flex.com

58

BTFLEX S.r.l., part of the Witzenmann Group, is a medium-sized manufacturing company specializing in flexible metallic elements for various industrial sectors including automotive, aerospace, HVAC, and energy. The company offers both custom and series production solutions and maintains a strong international presence with subsidiaries and partner sites worldwide. The website is professionally designed, multilingual, and provides comprehensive product and solution information targeting industrial clients and OEMs. Technically, the site uses modern web technologies, including Usercentrics for consent management and Google Tag Manager for analytics, ensuring compliance with privacy regulations. Security posture is strong with HTTPS enforced and security headers present, though explicit security policies and incident response details are not published. Overall, the website reflects a credible and established business with good digital maturity.

Den Nationale Whistleblowerordning is a Danish government-operated whistleblower reporting platform managed by Datatilsynet. It provides a secure channel for employees and partners to report serious legal violations and other critical issues encountered in their work environment. The service is positioned as a national authority resource, offering guidance, protection, and multiple reporting methods including anonymous submissions. The website is primarily in Danish with some English support, targeting whistleblowers within Denmark's jurisdiction. Technically, the website is built on ASP.NET Web Forms with jQuery and standard web technologies. It demonstrates good mobile optimization, accessibility, and SEO practices. The site uses HTTPS but lacks advanced security headers and DNSSEC, indicating room for security enhancements. No advertising or tracking technologies are present, aligning with its government service nature. From a security perspective, the site enforces HTTPS and uses secure form handling but does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is supported by a privacy and cookie policy, though no explicit cookie consent mechanism is implemented. Contact information is clearly provided, enhancing trust and credibility. Overall, the website is a trustworthy, professional government platform with a solid technical foundation and good content quality. Strategic improvements in security headers, cookie consent, and incident response transparency would further strengthen its security posture and compliance.

Vinařství Winberg Mikulov is a small, regionally focused winery based in South Moravia, Czech Republic, specializing in quality white and red wines. The website supports their business model by offering an e-shop for wine sales, accommodation services, and event hosting such as tastings and teambuilding. The site is professionally designed using Bootstrap and includes mobile optimization and clear navigation. However, the technical infrastructure uses some outdated components such as the legacy Google Analytics ga.js script. Security posture is moderate with HTTPS implied but lacking explicit security headers and modern analytics. Privacy compliance is limited with no dedicated privacy or cookie policy pages, though terms and conditions are present. The site enforces age verification for alcohol sales, indicating regulatory awareness. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Some suspicious external links embedded in the footer code suggest possible SEO spam or injection, which should be addressed.

V

Vinařství pod Hradem s.r.o.

vinarstvipodhradem.cz

45

Vinařství pod Hradem s.r.o. is a small family-owned winery located in the Pálava region of the Czech Republic, specializing in wine production, hospitality services including unique accommodation in wooden barrels and cottages, and online sales of wine and gift vouchers. The company positions itself as a premium local winery offering experiential tourism and wine tasting in the highest wine-growing village in Pálava. The website reflects a professional and consistent brand image with good content quality and clear navigation aimed at wine enthusiasts and tourists. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, enhanced by popular plugins such as WPBakery Page Builder and Revolution Slider. It integrates modern analytics and tracking tools including Google Tag Manager, Hotjar, and Microsoft Clarity, indicating a mature digital marketing approach. The site is mobile optimized and uses HTTPS, but lacks explicit security headers and documented security policies. Security posture is moderate with no visible critical vulnerabilities or exposed sensitive data, but the absence of security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement. The WHOIS data is unavailable, which limits domain trust assessment, but the website content and business information appear legitimate and professional. Overall, the website presents a trustworthy and well-maintained online presence for a small winery business, with recommendations to enhance security headers, maintain plugin updates, and improve transparency around security and privacy practices.

Vinařství Kern is a small winery based in Moravia, Czech Republic, specializing in the production and sale of quality wines. The company targets wine consumers and enthusiasts primarily in the Czech market, offering direct sales through an e-commerce enabled WordPress website. The site is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the website leverages WordPress with WooCommerce and several popular plugins, including LayerSlider and WPBakery Page Builder, indicating a moderate level of digital maturity. The presence of Google Analytics and Facebook Pixel shows active marketing and user tracking efforts. Security posture is solid with HTTPS and standard security headers, though the absence of published security policies and incident response information suggests room for improvement. The lack of WHOIS data reduces transparency and slightly impacts trustworthiness. Overall, the website is suitable for mature audiences due to its alcohol-related content and complies with GDPR requirements through visible privacy and cookie policies.

M

Mikulovská rozvojová, s. r. o.

zpravodajmikulov.cz

44

The website zpravodajmikulov.cz serves as the official local news portal for the city of Mikulov, Czech Republic. It is published by Mikulovská rozvojová, s. r. o., a small-sized company focused on disseminating municipal news, cultural events, school updates, and other community information. The site targets residents and visitors interested in local affairs and cultural happenings. The business model revolves around providing timely and relevant local news content, supported by municipal backing and community engagement. Technically, the website is built on the Joomla CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and UIkit for responsive design and user interface components. It integrates social media widgets from Facebook and Google, enhancing community interaction. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. Hosting and domain registration are consistent with Czech providers, reinforcing local presence. From a security perspective, the site uses HTTPS (assumed from base href and external scripts), but lacks explicit security headers in the HTML content. A cookie consent banner is implemented, indicating awareness of privacy compliance, though no dedicated privacy or terms of service pages were found. No vulnerabilities or exposed sensitive data were detected in the content. The security posture is moderate but could be improved with enhanced headers and clearer policies. Overall, the website is trustworthy, professionally maintained, and serves its community purpose effectively. Strategic recommendations include adding comprehensive privacy and terms policies, implementing security headers, and enhancing SEO and accessibility features to improve compliance and user experience.

S

Studio Marta

studiomarta.cz

10

Studio Marta is a theatrical studio affiliated with the Janáček Academy of Music and Performing Arts (JAMU) in Brno, Czech Republic. It focuses on theatrical education, student performances, and cultural events, serving students, academics, and theatre enthusiasts. The website provides program schedules, student profiles, and ticketing links, positioning itself as a niche educational and cultural institution with a strong local presence. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses reputable plugins for enhanced user experience and content delivery. The site is mobile-optimized and has good SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks some advanced security headers and a formal security policy. Privacy compliance is adequate with cookie consent mechanisms and a privacy policy in place. Overall, the site is professional, trustworthy, and well-maintained, reflecting the institution's credibility and cultural mission.

G

GSS Mikulov

gymik.cz

51

Gymnázium a střední odborná škola Mikulov is a public secondary education institution in the Czech Republic offering both maturitní (graduation) and vocational programs including culinary, mechanical, and caregiving fields. The website serves students, parents, and staff with educational information, services, and contact details. It maintains a moderate market position as a regional educational provider with partnerships across local government and industry. The technical infrastructure is based on WordPress CMS, enhanced with Google Analytics and Tag Manager for tracking, and Typekit for fonts. The site is mobile optimized and provides a cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and well maintained.

A

AFS

afs.cz

46

AFS Česká Republika is a well-established non-profit organization focused on intercultural education and exchange programs. The website presents a professional and comprehensive digital presence, offering detailed information about study abroad programs, hosting foreign students, volunteering, and scholarships. The organization targets students, parents, volunteers, and educational institutions, positioning itself as a key player in intercultural educational services within the Czech Republic and globally through the AFS network. Technically, the site is built on WordPress with modern SEO and analytics integrations, including Google Analytics, Hotjar, and Facebook Pixel, supported by a CDN for performance. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security headers could be enhanced. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the organization's transparency and social proof. Overall, the site is safe, user-friendly, and compliant with GDPR, reflecting a mature digital strategy for a non-profit educational entity.

M

Mikulovská rozvojová s.r.o.

mikulovskarozvojova.cz

45

Mikulovská rozvojová s.r.o. is a municipally owned company founded in 2006, serving as a key organizer and promoter of cultural, wine, and social events in Mikulov, Czech Republic. The company also manages municipal assets such as the city cinema, pension, and amphitheater, providing venue rentals and advertising services. Their market position is primarily local and regional, focusing on cultural and hospitality sectors. The website reflects a professional and consistent brand presence with good content quality and clear navigation. Technically, the site is built on Joomla CMS with UIkit and jQuery frameworks, and uses Google Analytics and Tag Manager for tracking. The site is mobile optimized and performs moderately well.

A

AWIS Holding, a.s.

awiscz.com

52

AWIS Holding, a.s. is a Czech joint-stock company established in 1992, specializing in software development, consulting, and hardware sales primarily for the hospitality, business, and property management sectors. The company emphasizes blending modern technology with traditional Czech hospitality culture, holding ISO 9001 and 14001 certifications that underline its commitment to quality and environmental standards. Their website reflects a professional and consistent brand image targeting business clients in the Czech Republic. Technically, the site is built on WordPress with standard technologies like jQuery and PHP, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Privacy compliance is limited, with no explicit cookie consent mechanism or detailed privacy policy pages. WHOIS data is missing, which slightly reduces trustworthiness but does not contradict the professional business presentation. Overall, the site is functional and trustworthy but could improve in security and privacy transparency.

A

Antir, s.r.o.

antir.cz

46

Antir, s.r.o. is a Czech Republic-based small manufacturing company specializing in custom stainless steel production, including railings, staircases, and winery equipment such as tanks and vinification vessels. Founded in 2007, the company offers end-to-end services from measurement and design to installation and delivery, targeting clients in construction, interior design, and the wine industry. The website reflects a professional presence with clear business information and a gallery of references, positioning the company as a specialist in its niche market. Technically, the website employs common and reliable web technologies such as jQuery, Bootstrap, and Owl Carousel, providing a responsive and user-friendly experience. However, the site lacks advanced security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security maturity. The contact form collects personal data but does not show explicit anti-spam or privacy compliance mechanisms. From a security perspective, the site uses HTTPS as implied by URLs but does not demonstrate implementation of security best practices such as Content Security Policy or HSTS headers. No incident response or vulnerability disclosure information is provided, which could be a gap in readiness. No suspicious or malicious content was detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance documentation, and incident response transparency to improve trust and reduce risk. Strategic improvements in these areas will strengthen the company’s digital maturity and customer confidence.

S

Srdce v domě, p. o.

srdcevdome.cz

58

Srdce v domě, p. o. is a non-profit social service organization established by the Jihomoravský kraj (South Moravian Region) in the Czech Republic. The organization provides protected housing and support services primarily for persons with disabilities, operating facilities in Klentnice, Mikulov, and Lednice. Their website reflects a regional government-affiliated entity focused on social welfare, with clear contact information and service descriptions. The business model is non-profit, supported by regional government funding, targeting individuals seeking social housing and care services. Technically, the website is built on an ASP.NET WebForms framework with modern front-end libraries such as jQuery, Bootstrap, and Slick Carousel. It employs Google Tag Manager for analytics and tracking, and includes cookie consent mechanisms and a privacy policy, indicating a reasonable level of digital maturity. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data reduces transparency and trust slightly, but the website's content and affiliations strongly support its legitimacy. Overall, the website presents a trustworthy and professional front for a regional non-profit social service provider. Strategic improvements in security headers and public disclosure of incident response policies would enhance its security posture and compliance standing.

M

MYD Sailing

myd-sailing.com

48

MYD Sailing is a small yacht charter business operating primarily in Croatia, offering a fleet of sailing yachts for vacationers and sailing enthusiasts. The website is professionally designed using WordPress and Elementor, providing clear navigation, multilingual support, and integrated booking functionality. The technical infrastructure is modern with standard plugins and Google Tag Manager for analytics. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and no explicit security.txt or incident response contacts are published. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the website presents a trustworthy and professional image suitable for its niche market.

A

Adriatic Fantasy Cruises

waves-more.com

43

Waves More is a recently established Croatian sailing and tour company offering yacht and catamaran charters along with customizable Adriatic tours. The business targets tourists and sailing enthusiasts seeking vacation experiences in the Adriatic Sea. The website is built on WordPress using Elementor and demonstrates moderate technical maturity with HTTPS enabled and a clean design, but lacks comprehensive privacy and security policies. Security posture is basic with no DNSSEC or security headers implemented. Contact information is minimal, limited to a single email address. Overall, the site is functional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

D

Datatilsynet

datatilsynet.dk

71

Datatilsynet is the central independent Danish authority responsible for supervising compliance with data protection regulations, including GDPR. The organization provides guidance, handles complaints, and conducts oversight of public authorities and businesses. Positioned as a government regulatory body, Datatilsynet serves a broad audience including companies, citizens, and youth, emphasizing responsible data use in a digital society. The website reflects a professional and authoritative presence with comprehensive content tailored to various stakeholders. Technically, the site is built on a custom ASP.NET platform with jQuery and modern web standards, delivering good performance and accessibility. Security posture is solid with HTTPS usage and no visible vulnerabilities, though security headers and explicit incident response policies could be improved. Overall, the site demonstrates strong business credibility and compliance focus, with minor gaps in cookie consent mechanisms and vulnerability disclosure. The WHOIS data is unavailable, likely due to privacy protection common in .dk domains, but the domain and content strongly indicate legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and implementing cookie consent to further strengthen compliance and trust.

LETOV AIR s.r.o. is a small, dynamically growing private aviation company based in the Czech Republic, offering a broad range of aviation services including air transport, pilot training, aircraft maintenance, and sales. The company emphasizes compliance with aviation regulations such as PART 145 and CAMO management, positioning itself as a professional service provider in the regional aviation market. The website content is relevant and informative, targeting general aviation clients and enthusiasts. Technically, the website employs legacy JavaScript libraries like jQuery and Fancybox, with Google Analytics integrated for user tracking. The site shows basic mobile optimization and accessibility but lacks modern responsive design and advanced SEO features. Security measures are minimal, with no visible HTTPS enforcement or security headers, though a cookie consent banner and email obfuscation are implemented to enhance privacy. From a security perspective, the absence of WHOIS data limits domain trust verification, and the lack of HTTPS and security headers presents vulnerabilities. No privacy policy or terms of service pages are published, which may impact compliance with GDPR and other regulations. The overall risk is moderate, with recommendations to improve security posture, privacy compliance, and technical modernization to enhance trust and user experience.

C

Czech Airlines Technics, a.s.

csatechnics.com

55

Czech Airlines Technics, a.s. is a medium-sized, established provider of aircraft maintenance and technical services based in the Czech Republic. The company offers a comprehensive range of services including base and line maintenance, landing gear overhaul, component maintenance, structural repairs, and CAMO support, targeting airlines and aviation operators. Their market position is supported by a decade-plus domain age and a professional web presence. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and Cookiebot for privacy compliance, reflecting a moderate to good digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and DNSSEC are missing. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements. Recommendations include enhancing security headers, publishing incident response policies, and enabling DNSSEC to further strengthen trust and security.

G

Glamour Guardian s.r.o.

vseprovlasy.cz

55

Glamour Guardian s.r.o., operating the website vseprovlasy.cz, is a well-established Czech retail business specializing in professional hair cosmetics and hairdressing equipment. With over 27 years of experience, the company serves both professional hairdressers and end customers, offering a wide range of products, expert seminars, and personalized services including free regional delivery and loyalty discounts. The website reflects a mature e-commerce platform with a clear focus on the hair care industry and a strong local market presence. Technically, the website is built on the FastCentrik e-shop platform using ASP.NET technologies, enhanced with modern JavaScript libraries such as Owl Carousel and Google reCAPTCHA for security. The site is mobile-optimized, accessible, and incorporates SEO best practices, ensuring a good user experience. Privacy and cookie consent mechanisms are well implemented, demonstrating compliance with GDPR requirements. From a security perspective, the site uses HTTPS and includes anti-spam measures like Google reCAPTCHA. While explicit security headers are not fully confirmed, the site shows no signs of vulnerabilities or exposed sensitive data. However, the absence of a public WHOIS record suggests domain privacy protection, which is common and justified for this business type but limits domain age verification. Overall, the website presents a professional, trustworthy, and compliant online presence with moderate to good technical and security posture. Strategic recommendations include enhancing security headers, publishing a security.txt file for vulnerability disclosure, and providing incident response contact information to further strengthen trust and security readiness.

D

Dům barev (PPG)

dumbarev.cz

63

Dům barev is an established e-commerce retailer specializing in paints and painting accessories in the Czech Republic. The website offers a broad range of products including paints for walls, wood, metal, and related accessories, targeting both B2B and B2C customers. The business is associated with PPG Industries, a global leader in coatings, which enhances its market credibility. Technically, the website is built on the Kentico CMS platform, leveraging modern web technologies such as jQuery, Google Tag Manager, and Didomi for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and product information. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy linked to the parent company and an active cookie consent banner. The absence of WHOIS data suggests privacy protection or domain registration issues, but the website content and corporate affiliation support legitimacy. Overall, the site is professional, secure, and compliant, suitable for its retail business model.

U

UNEX

unex.cz

42

UNEX is a well-established metallurgical and engineering group specializing in manufacturing bucket wheel excavators and heavy engineering components. Operating multiple plants in the Czech Republic and Slovakia, it serves multinational industrial clients globally. The company holds multiple ISO certifications, underscoring its commitment to quality and environmental standards. The website reflects a professional industrial business with clear service offerings and export focus. Technically, the site uses standard web technologies such as jQuery and Typekit fonts, with moderate performance and good mobile optimization. Security posture is adequate but could be improved by implementing security headers and publishing comprehensive privacy and security policies. The absence of WHOIS data is a notable concern, reducing domain trustworthiness despite the legitimate business presence indicated by the website content and certifications. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

T

Topenářské centrum Tespo

tespo-su.cz

42

Topenářské centrum Tespo is a small local business based in Šumperk, Czech Republic, specializing in the sale, installation, and servicing of heating, plumbing, and gas equipment. Their website presents a professional image with clear service offerings including sales of boilers and heat pumps, installation services, and maintenance. The company targets residential, commercial, and industrial customers within their region. Technically, the website uses common JavaScript libraries such as jQuery and UI components like Venobox and Slick Carousel, with Google Fonts for typography. The site is mobile optimized and provides a cookie consent mechanism, but lacks a dedicated privacy policy or terms of service pages. Security posture is basic, with no advanced security headers detected and no visible SSL configuration details. WHOIS data is unavailable, which reduces domain trustworthiness, though the website content and contact information appear legitimate. Overall, the site scores moderately on content quality and business credibility but should improve security and compliance documentation.

A

AnyBigData

anybigdata.com

51

AnyBigData is a technology-focused business intelligence provider offering data-driven insights to help businesses gain a competitive edge and drive smarter strategies. The website is branded as powered by The Dutch Selection, indicating a parent company relationship. The site targets businesses seeking reliable data analytics solutions. Technically, the website uses a modern Ruby on Rails stack with contemporary frontend libraries and analytics tools, demonstrating a moderate level of digital maturity. Security posture is adequate with HTTPS and CSRF protections but lacks comprehensive security headers and visible privacy or cookie policies. The absence of WHOIS registration data is a significant concern, impacting trust and legitimacy. Overall, the website is professional and functional but requires improvements in transparency and security disclosures.

R

RKM

die-deutschen-musikhochschulen.de

43

Die deutschen Musikhochschulen is a German association representing music universities and conservatories, providing organizational information, event details, and competition announcements. The website serves students, educators, and stakeholders in the music education sector in Germany. The business operates as a non-profit association with a clear focus on education and cultural promotion. Technically, the website is built on WordPress using the Divi theme, leveraging jQuery and Owl Carousel for interactive elements. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. No vulnerabilities or tracking scripts were detected. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though improvements in security headers and transparency policies are recommended.

S

Stadtwerke Rostock AG

swrag.de

56

Stadtwerke Rostock AG operates as a regional energy provider serving the Rostock area and coastal regions in Germany. The company offers a broad portfolio of energy services including electricity, natural gas, district heating, heat pumps, internet services, and eco-mobility solutions such as electric vehicle charging and bio-CNG. Their business model focuses on providing personalized service both in physical locations and online, targeting private and business customers. The website reflects a strong regional market position with community engagement and customer-centric offerings.

A

Archiv der Hansestadt Wismar

zeitreise-wismar.de

65

Zeitreise Wismar is a specialized historical archive portal affiliated with the Hansestadt Wismar city archive. It provides extensive access to historical documents, city views, newspapers, and cultural heritage information primarily targeting local residents, historians, and visitors interested in Wismar's history. The website is built on a modern WordPress infrastructure using Astra theme and Elementor page builder, hosted by Raidboxes, indicating a stable and professional technical foundation. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security policies and vulnerability disclosure information. Privacy compliance is partial due to missing privacy and terms of service pages. Overall, the site is trustworthy and professionally presented, serving a niche educational and governmental function.

P

PPush

ppush.eu

54

PPush is a German-based technology service offering a free push notification app designed for organizations such as clubs, municipalities, and local businesses to send regional news and updates without requiring a dedicated app. The service emphasizes GDPR compliance and privacy by enabling anonymous message reception without collecting personal data like email or phone numbers. The website is professionally designed, multilingual, and provides comprehensive information about the service, including FAQs, testimonials, and API integration options. Technically, the site is built on WordPress with modern plugins for security, multilingual support, and cookie consent management. Security posture is strong with HTTPS, Wordfence protection, and Google reCAPTCHA integration. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanism. Overall, the site presents a trustworthy and professional digital presence for a niche technology service focused on privacy and regional communication.

F

Fondsverband BVI

bvi.de

63

Fondsverband BVI is a prominent German finance industry association representing the interests of the fund management sector nationally and internationally. The website serves as a knowledge and service center for its members, offering information on regulatory developments, events, research, and publications. The target audience includes fund companies, financial advisors, and private investors. The organization positions itself as a key player in promoting the German investment fund market. Technically, the website is built on TYPO3 CMS, hosted on Colt's infrastructure, and employs Matomo analytics with a GDPR-compliant cookie consent mechanism. The site is well-structured, mobile-optimized, and professionally designed, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though some security headers and explicit incident response policies are absent. Overall, the website is trustworthy, compliant, and serves its business purpose effectively.

G

Gradska knjižnica i čitaonica Vinkovci

gkvk.hr

47

Gradska knjižnica i čitaonica Vinkovci is a public library serving the Vinkovci community in Croatia, providing access to a catalog, membership services, and cultural events. The website is professionally designed using WordPress with Elementor and the Litho theme, offering a responsive and accessible user experience. The site includes a cookie consent mechanism and a privacy policy compliant with GDPR, reflecting a commitment to user privacy. Security posture is solid with HTTPS enforced and no exposed sensitive data, though some security headers could be improved. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate institution.

D

DiVan

divan.hr

56

DiVan is a Croatian media platform focused on providing comprehensive information about events, places, and cultural activities in Zagreb. It serves a local audience interested in concerts, festivals, gastronomy, and social happenings, positioning itself as a niche event guide with a strong community presence. The platform offers additional services such as newsletters and mobile applications to enhance user engagement. Technically, the website is built on WordPress with a modern tech stack including WooCommerce, Google Analytics, and GDPR-compliant cookie management, reflecting a mature digital infrastructure. Security measures include HTTPS enforcement and CAPTCHA protections, although some security headers could be improved. The website demonstrates good privacy compliance and transparent user consent mechanisms. Overall, DiVan presents a professional and trustworthy online presence with moderate technical performance and solid business credibility.

M

Monoplay

monoplay.eu

41

Monoplay is a well-established international contemporary dance festival based in Zadar, Croatia, specializing in solo dance performances and educational workshops. The website reflects a mature digital presence built on WordPress with modern plugins and SEO optimization. The festival targets dance professionals, students, and the general public interested in contemporary dance. While the site is professionally designed and content-rich, it lacks critical privacy and cookie policies, which affects compliance. Security posture is moderate with HTTPS enabled but missing some security headers. Contact information is primarily via forms, with no explicit emails or phone numbers published. Overall, the site is trustworthy and credible but would benefit from enhanced privacy compliance and security hardening.

T

Teatar EXIT

teatarexit.hr

41

Teatar EXIT is a well-established Croatian theatre company founded in 2003, specializing in provocative and innovative theatrical performances. The website serves as a digital platform to showcase their program, ticket sales, and festival events, targeting a general audience interested in cultural arts. The company maintains a consistent brand presence with active social media channels and a mobile app offering, indicating a moderate level of digital maturity. Technically, the site is built on WordPress with modern libraries and frameworks such as Bootstrap and jQuery, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Security measures include HTTPS, GDPR-compliant consent mechanisms, and Google reCAPTCHA on forms, although there is room for improvement in implementing security headers and explicit incident response policies. Overall, the website is professional, secure, and compliant, with a high trustworthiness rating and no detected malicious content.

I

Institute for New Media and E-democracy

edemokracija.hr

49

The website www.edemokracija.hr represents the Institute for New Media and E-democracy (InMed), a Croatian academic and research institution focused on new media, e-democracy, and journalism. The site serves as a platform for disseminating information about conferences, calls for papers, and research activities. It targets academics, researchers, and media professionals interested in these fields. The business model is non-profit and research-oriented, with a niche market position in Croatia and international academic circles. Technically, the website is built on WordPress and utilizes a modern tech stack including jQuery, Bootstrap, and various JavaScript libraries for enhanced user experience. The site is hosted by CARNET, a Croatian academic network, which aligns with the institute's educational nature. The website is mobile optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and does not provide a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the website's academic and Croatian identity, enhancing trustworthiness. Overall, the website is professional, trustworthy, and serves its academic audience well. To improve security posture and compliance, the institute should consider adding security headers, a vulnerability disclosure policy, and clearer contact information for security incidents. These steps would enhance user trust and align with best practices for academic institutions operating online.

T

Tina Kadoic

tinakadoic.com

50

Tina Kadoic is a freelance filmmaker specializing in capturing dance, movement, and action, with a strong focus on creating dynamic dance visuals. The website positions Tina as an experienced professional with 13 years in the industry and a portfolio that includes work for major brands. The business model is service-oriented, targeting artists, creators, and dance studios needing specialized video content. The site is well-branded, visually appealing, and integrates multimedia content effectively to showcase expertise. Technically, the website is built on WordPress using popular plugins such as Yoast SEO and WPBakery Page Builder, ensuring good SEO and content management capabilities. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. Hosting and domain registration are stable and consistent with the business claims. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, DNSSEC is not enabled, and no advanced security headers were detected. There is no explicit security or incident response policy published, which could be improved to enhance trust and compliance. Overall, the website presents a professional and trustworthy image with strong business credibility and good privacy compliance. Strategic improvements in security practices and explicit policy disclosures would further strengthen the security posture and user trust.

Z

ZnajomaMarka.pl

znajomamarka.pl

38

ZnajomaMarka.pl is a Polish creative agency specializing in comprehensive branding, website development, SEO, copywriting, and social media marketing services. The company targets businesses and individuals seeking to establish or enhance their online presence with professional design and marketing solutions. The website showcases a diverse portfolio of projects, indicating active engagement in the creative sector since its founding in 2024. Technically, the site is built on WordPress with Elementor, integrating modern web technologies and Google analytics tools, providing a solid digital infrastructure. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks advanced security headers and visible security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

M

med update GmbH

radio-onko-update.com

53

The website radio-onko-update.com represents a professional platform operated by med update GmbH, focused on delivering specialized educational seminars and updates in the field of radiation oncology. It targets medical professionals, providing expert commentary on recent studies, seminar materials, and networking opportunities. The business is well established with a domain age since 2009 and strong accreditations from recognized oncology societies. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and GDPR compliance, offering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in DNSSEC and security headers are recommended. Overall, the site demonstrates high trustworthiness and professionalism suitable for its healthcare audience.

M

med update GmbH

pneumo-update.com

50

Pneumo Update 2025 is a well-established medical education platform specializing in pneumology updates, organized by med update GmbH. The website serves healthcare professionals by providing access to annual seminars held in Mainz and Berlin, with options for livestream participation and access to seminar materials. The platform is supported by reputable scientific leadership and pharmaceutical sponsors, reinforcing its credibility in the healthcare education sector. Technically, the site is built on WordPress with modern plugins and tools, offering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in DNSSEC and security headers are recommended. Privacy compliance is strong, with clear GDPR-aligned policies and cookie management. Overall, the site demonstrates a professional and trustworthy presence with a moderate to high AI score reflecting content quality, technical implementation, security, privacy, and business credibility.

M

med update GmbH

gyn-onko-update.com

51

The website gyn-onko-update.com represents a specialized medical education platform focused on gynecological oncology updates, organized by med update GmbH. It targets healthcare professionals, providing annual seminar events with expert presentations and clinical research reviews. The business model centers on event organization and professional education, supported by pharmaceutical sponsors and cooperation partners. The website is well-branded, professionally designed, and content-rich, serving a niche but important audience in the healthcare sector in Germany. Technically, the site is built on WordPress with a modern plugin ecosystem including SEO, analytics (Matomo), and GDPR compliance tools. It uses common web technologies such as jQuery and Slider Revolution for interactive content. Performance and mobile optimization are adequate, though accessibility features are basic. Hosting details are not explicit but DNS and registrar data indicate a stable setup. Security posture is good with HTTPS enforced and cookie consent mechanisms in place. However, no advanced security headers were detected, and no explicit security or incident response policies are published. No vulnerabilities or suspicious content were found. Privacy compliance is strong with clear policies and consent management. Overall, the site is trustworthy, professional, and well-maintained, with a low risk profile. Strategic improvements could include enhanced security headers, explicit security policies, and more direct contact information for incident response. These would further strengthen trust and compliance in a healthcare context.

M

med update GmbH

derma-update.com

53

Derma Update is a well-established German medical event organizer specializing in dermatology update seminars. The company hosts hybrid events attracting thousands of medical professionals, providing expert lectures and clinical study reviews. Their market position is strong within the dermatology education sector, supported by reputable scientific leadership and pharmaceutical sponsorships. Technically, the website is built on WordPress with modern plugins for SEO, analytics, and GDPR compliance, delivering a professional and user-friendly experience. Security posture is good with HTTPS and cookie consent mechanisms, though improvements in DNSSEC and security headers are recommended. Overall, the site reflects a legitimate, professional business with a solid digital presence.

M

med update GmbH

anaesthesie-update.com

54

Anästhesie Update 2025 is a specialized medical education platform operated by med update GmbH, focused on delivering annual seminars and updates in anesthesiology and related medical fields. The website serves healthcare professionals with event information, livestream access, and digital educational materials. The platform is well-established with a domain age consistent with its business history and is supported by reputable scientific leadership and partnerships. Technically, the site is built on WordPress with modern plugins for video, analytics, and GDPR compliance, offering a good user experience and mobile optimization. Security posture is solid with HTTPS, domain status locks, and cookie consent mechanisms, though DNSSEC is not enabled and some security headers could be improved. Overall, the site demonstrates a high level of professionalism and trustworthiness suitable for its target audience.

M

meducating!

meducating.com

53

meducating! is a German-based network specializing in healthcare communication, offering integrated services including strategic consulting, PR, marketing, and event management across digital, hybrid, and in-person formats. The website reflects a mature business with a medium-sized network of partner companies, demonstrating consistent branding and professional content tailored to healthcare professionals and organizations. Technically, the site is built on WordPress with the Divi theme, leveraging modern libraries and plugins, and employs Matomo analytics with privacy-conscious configurations. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and DNSSEC are recommended. Overall, the site is trustworthy and compliant with GDPR, but lacks explicit security policies and incident response information.

Messe Husum & Congress GmbH & Co. KG operates a modern and versatile event venue located in Husum, Germany, specializing in hosting trade fairs, conferences, private celebrations, and stage programs. Positioned as a regional leader in Schleswig-Holstein, the company offers flexible spaces for 10 to 1,500 guests, equipped with modern presentation technology and extensive indoor and outdoor areas. The website reflects a professional and well-branded digital presence, targeting event organizers and businesses seeking quality venues. Technically, the website is built on WordPress with Elementor, leveraging jQuery and Borlabs Cookie for consent management. The infrastructure is hosted under InterNetX GmbH with secure HTTPS enabled. The site demonstrates good mobile optimization and SEO practices, although security headers could be improved. Analytics are implemented via Google Analytics and Tag Manager with user consent mechanisms in place. From a security perspective, the site maintains a good posture with no visible vulnerabilities or exposed sensitive data. The domain registration is transparent and consistent with the business profile, though the domain age is relatively new. Privacy compliance is strong, with comprehensive privacy and cookie policies and GDPR-aligned consent mechanisms. However, no explicit security policy or incident response contacts are published. Overall, Messe Husum & Congress presents a trustworthy and professional online presence with solid business credibility and compliance. Strategic improvements in security headers and incident response transparency would further enhance their security posture and stakeholder trust.

S

Stadtarchiv Garching

stadtarchiv-garching.de

47

Stadtarchiv Garching operates as a municipal archive providing historical sources, publications, and projects related to the city of Garching. The website serves as an informational portal targeting historians, local citizens, and researchers interested in local history. Technically, the site is built on WordPress with a modern theme and plugins, hosted on a reputable provider, and shows good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced but lacks advanced security headers and cookie consent mechanisms. Overall, the site is trustworthy and professionally maintained, though improvements in privacy compliance and security policies are recommended.

B

Bürgerhaus Garching / Kultur Garching

kultur-garching.de

51

The website www.kultur-garching.de serves as the official cultural portal for the town of Garching, Germany, providing comprehensive information about local cultural events, ticket sales, and related services. It targets local residents and visitors interested in cultural activities, positioning itself as a key local cultural institution with a focus on event promotion and community engagement. The business model is primarily public service oriented, supported by partnerships with established ticketing platforms such as Münchenticket. Technically, the site is built on the EGOTEC CMS platform, leveraging modern JavaScript frameworks like Angular and libraries such as jQuery and Slick Carousel for interactive features. Hosting is provided by SchlundTech, a reputable German hosting provider, ensuring stable and localized infrastructure. Security posture is adequate with HTTPS enforced and email obfuscation implemented, but lacks advanced security headers and explicit vulnerability disclosure mechanisms. Privacy compliance is supported by a comprehensive GDPR-compliant privacy policy, though cookie consent mechanisms are absent. Overall, the site demonstrates good content quality, usability, and trustworthiness appropriate for a government cultural service portal.

G

Girona Softwareentwicklung GmbH

konsentas.de

49

Konsentas.de is a professional website operated by Girona Softwareentwicklung GmbH offering a modular online appointment scheduling system tailored for German government authorities. The platform supports various public sector applications including resident registration, health offices, vehicle registration, and COVID-19 related tools. The website demonstrates a solid market position with multiple municipal clients and a clear focus on e-government digital transformation. Technically, the site uses modern front-end technologies such as Bootstrap, jQuery, and Google Fonts, and integrates Google Analytics and LinkedIn tracking for marketing insights. The site is mobile-optimized and well-structured, providing a good user experience. Security posture is moderate with cookie consent implemented but lacking explicit security headers and published security policies. WHOIS data aligns with the business identity, indicating legitimacy. Overall, the website is trustworthy and professionally maintained, suitable for its target audience.

R

RankNet Webdesign

rank-net.de

60

RankNet Webdesign is a small internet agency based in Munich, Germany, specializing in web design, programming, and search engine optimization services. The company has been operational since 2014 and targets businesses seeking professional digital presence and marketing solutions. The website is built on WordPress using the Avada theme and incorporates SEO best practices via the Yoast SEO plugin, indicating a moderate level of digital maturity. Technically, the site uses modern web technologies such as jQuery and Google Fonts, and it is mobile optimized with good navigation and content relevance. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable compliance gap. Overall, the website presents a professional image but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

Z

Zoho Corporation Pvt. Ltd.

zohorecruit.eu

77

Zoho Recruit is a comprehensive cloud-based recruitment platform designed for HR teams and staffing agencies to efficiently find, track, evaluate, and hire candidates. Positioned as a market leader in talent acquisition technology, Zoho Recruit offers an integrated ATS and CRM solution with extensive automation and over 50 integrations, including mobile app support. The platform targets corporate HR departments, staffing agencies, and temporary workforce management, providing scalable and customizable recruitment tools. Technically, the website employs modern JavaScript frameworks and Zoho's proprietary scripts, delivering fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and multiple ISO certifications, although explicit security headers could be more visible. Privacy compliance is robust, with comprehensive policies and GDPR adherence. Overall, Zoho Recruit presents a professional, trustworthy, and user-friendly digital presence aligned with Zoho Corporation's enterprise-grade standards.

M

med update GmbH

med-update.com

60

med update GmbH is a German-based company specializing in medical education, offering update seminars and digital learning solutions primarily for healthcare professionals. Established in 2004, it holds a solid market position within the German-speaking medical education sector, providing a range of seminar programs and cooperating with medical societies and partners. The website reflects a professional and consistent brand image with a focus on delivering relevant medical content and services to its target audience. Technically, the site is built on WordPress with a mature technology stack including popular plugins for SEO, analytics, and GDPR compliance. The infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is strong with clear privacy and cookie policies and GDPR-aligned consent management. Overall, the website is trustworthy and professionally maintained, with no critical security or content safety concerns detected.

Danacord is a specialized classical music record label and e-commerce platform focusing on Danish and other classical composers. The website offers a webshop for purchasing physical and digital music products, supported by a WordPress WooCommerce infrastructure. The site is functional but marked as under construction, with a recommendation to visit their Danish catalogue site for full listings. Technically, the site uses modern CMS and e-commerce frameworks but lacks some advanced security headers and cookie consent mechanisms. The domain registration is consistent and legitimate, supporting the business's credibility. Security posture is moderate with room for improvement in DNSSEC and security policies. Overall, the site presents a niche, small-sized business with a focused target audience and moderate digital maturity.