Security Directory

A

APPA Renovables

appa.es

56

APPA Renovables is a well-established national association representing companies in the renewable energy sector in Spain. With over 30 years of experience, it advocates for renewable technologies including wind, photovoltaic, biomass, and hydraulic energy. The website reflects a professional and consistent brand presence, targeting industry professionals and companies involved in renewable energy. The business model is non-profit and focused on sector representation, advocacy, and member services. Technically, the site is built on WordPress with a modern plugin ecosystem including WooCommerce, Yoast SEO, and event management tools, indicating a mature digital infrastructure. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though explicit security headers and incident response information are not publicly detailed. Overall, the site is trustworthy, compliant with privacy regulations, and provides clear contact channels. The lack of WHOIS data is due to query restrictions but does not detract from the site's legitimacy. Strategic recommendations include enhancing security header implementation and publishing a vulnerability disclosure policy.

G

GECV: Grupo Español para el Crecimiento Verde

grupocrecimientoverde.org

50

The Grupo Español para el Crecimiento Verde (GECV) is a Spanish non-profit association established in 2016, dedicated to fostering public-private collaboration to address environmental challenges and promote sustainable, circular, and efficient economic growth. The website serves as a platform to share news, documents, working groups, and member information, targeting stakeholders interested in green growth and sustainability in Spain. The organization holds a solid market position as a recognized environmental non-profit with a medium-sized membership base. Technically, the website is built on WordPress with Elementor and Yoast SEO, hosted by Webempresa, and integrates modern web technologies including jQuery, Swiper.js, and GDPR compliance plugins. The site demonstrates good mobile optimization, SEO practices, and accessibility features, although some accessibility aspects could be improved. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, DNSSEC is not enabled, and advanced security headers are not explicitly detected, representing areas for enhancement. No critical vulnerabilities or exposed sensitive data were found. Privacy policies and cookie policies are comprehensive and clearly accessible, supporting strong privacy compliance. Overall, the website is professional, trustworthy, and well-maintained, with no signs of adult or questionable content. The domain registration is consistent with the business history and shows legitimacy. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing security headers to further strengthen the security posture.

F

Fundación Conama

fundacionconama.org

51

Fundación Conama is a Spanish non-profit foundation dedicated to promoting sustainable development through knowledge exchange, events, reports, and collaborative projects. It holds a leading position in Spain and Iberoamerica as an organizer of major environmental congresses and networking platforms. The website is professionally designed using WordPress and Elementor, with strong SEO and accessibility features. It integrates modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, while providing clear privacy and cookie policies with consent management. Security posture is good with HTTPS and no evident vulnerabilities, though some security headers could be improved. WHOIS data is privacy protected, which is justified for this type of organization. Overall, the website is trustworthy, well-maintained, and serves its target audience effectively.

A

Asociación Empresarial Hotelera de Madrid

aehm.es

55

The Asociación Empresarial Hotelera de Madrid (AEHM) is a prominent industry association representing over 300 hospitality establishments in the Madrid region, encompassing hotels, hostels, and apartments with more than 75,000 accommodation places. The organization serves as a key advocate and promoter of the hotel sector, providing services such as employment facilitation, event management, and sector representation. Their website is professionally designed using WordPress and Elementor, featuring comprehensive content and clear navigation tailored to industry stakeholders and professionals. Technically, the site employs modern web technologies and plugins, including Yoast SEO for search optimization and Complianz for GDPR cookie compliance. The presence of Google Analytics and Metricool tracking indicates moderate user behavior tracking, balanced with visible cookie consent mechanisms ensuring privacy compliance. Mobile optimization and accessibility are adequately addressed, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and includes cookie consent banners, but lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data due to registry restrictions limits domain trust verification, though the website's professional presentation and consistent branding support its legitimacy. Overall, AEHM's digital presence reflects a mature and credible organization within the hospitality sector, with room for improvement in security transparency and WHOIS data availability to enhance trust and compliance posture.

A

AEDIVE

aedive.es

56

AEDIVE is a Spanish business association dedicated to the development and promotion of electric mobility, representing a broad industrial, technological, service, and institutional value chain. The organization holds a strong market position in Spain, supported by institutional partners and a diverse membership base. Their services include advocacy, networking, events, consultancy, and legislative influence, positioning them as a key player in the electric vehicle ecosystem. Technically, the website employs a modern technology stack including jQuery, Handlebars, RequireJS, Bootstrap 5, and Swiper.js, with good mobile optimization and performance. The site integrates analytics and marketing tools with a GDPR-compliant cookie consent mechanism, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and implements cookie consent controls, but lacks visible security headers and explicit incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to .es domain query restrictions, but the website's professional presentation and institutional backing support its legitimacy. Overall, AEDIVE's website is professional, secure, and compliant, with strong business credibility and user experience. Strategic improvements in security headers and incident response transparency could further enhance trust and resilience.

D

Das WeltAuto®

dasweltauto.cz

51

Das WeltAuto® is a well-established brand specializing in the sale of certified pre-owned vehicles, primarily targeting consumers in the Czech Republic. The website reflects a professional automotive business model under the Volkswagen Group umbrella, offering quality assurance and dealer network support for used car buyers. The digital infrastructure leverages modern frontend technologies such as Angular and Swiper.js, complemented by cookie consent mechanisms to address privacy requirements. While the website is accessible and well-structured, the absence of WHOIS data and explicit privacy and terms of service policies indicates areas for improvement in transparency and compliance. Security posture is adequate with HTTPS enforced, but could benefit from enhanced security headers and published security policies. Overall, the site presents a trustworthy and professional image consistent with a large automotive brand.

P

Porsche Česká republika s.r.o.

cupraofficial.cz

59

CUPRA Česká republika operates as a premium automotive brand website focused on high-performance sports and electric vehicles. The site is professionally designed, featuring rich multimedia content, detailed product offerings including plug-in hybrids and electric models, and integrated configurator and stock vehicle listings. The brand is affiliated with Porsche Česká republika s.r.o., indicating strong market positioning in the Czech automotive sector. Technically, the website leverages modern frameworks such as Next.js and React, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with comprehensive privacy and cookie policies. Overall, the site presents a trustworthy and professional digital presence with minor areas for improvement in security transparency.

A

Audi Česká republika

audi.cz

58

Audi Česká republika operates as the official regional website for the Audi brand in the Czech Republic, providing comprehensive information about Audi's vehicle models, electric vehicles, financing options, servicing, and promotional offers. The site targets consumers interested in premium automotive products and services, supporting Audi's market position as a leading luxury car manufacturer. The website demonstrates a high level of digital maturity, utilizing modern web technologies such as Next.js and Google Tag Manager, and incorporates cookie consent management via OneTrust. Security posture is generally strong with HTTPS enforced, though some security headers and explicit privacy policies are not detected in the provided content. The absence of WHOIS data limits domain registration trust verification, but the website's branding and content strongly indicate legitimacy. Overall, the site offers a professional, user-friendly experience with rich multimedia content and clear navigation.

D

Digital Depo | Strategický online marketing a weby do celého světa

digitaldepo.cz

43

Digital Depo is a Czech-based digital agency specializing in strategic online marketing and website development services aimed at businesses seeking to expand their online presence globally. The website is built on WordPress using the Elementor framework, incorporating modern web technologies and multiple analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. The site demonstrates good design quality, mobile optimization, and SEO practices, although some accessibility features are basic. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit security policies. The absence of public WHOIS data due to privacy protection limits full trust assessment, and no explicit privacy or cookie policies were found, indicating room for compliance improvement.

V

Ville de Lyon

lyon.fr

69

The website www.lyon.fr is the official digital portal for the City of Lyon, France, providing comprehensive information on administrative procedures, cultural events, practical life, and urban projects. It serves residents and visitors with a well-structured, content-rich platform that reflects the city's public service mission. The site leverages Drupal 9 CMS and employs privacy-focused analytics (Matomo) with a robust cookie consent mechanism, demonstrating a strong commitment to user privacy and GDPR compliance. Technically, the site is modern, mobile-optimized, and accessible, though it could benefit from enhanced security headers and a published security policy. The WHOIS data confirms the domain's legitimacy and consistency with the municipal identity. Overall, the site presents a high level of professionalism, trustworthiness, and compliance, suitable for a large government entity.

M

Métropole de Lyon

grandlyon.com

68

The Métropole de Lyon website serves as the official digital presence of the metropolitan government authority for Lyon, France. It provides comprehensive information and services to residents and professionals across 58 communes and a population of 1.4 million. The site focuses on public services such as waste management, housing, transportation, citizen engagement, and economic development, positioning itself as a key regional government resource. The website is well-branded, professionally designed, and consistent with government standards, targeting a broad audience within the metropolitan area. Technically, the site is built on TYPO3 CMS with modern front-end technologies including Bootstrap 5 and Popper.js, ensuring responsive design and good accessibility. It employs privacy-respecting analytics via Matomo and uses a robust cookie consent management system (Tarteaucitron.js), reflecting a mature digital infrastructure with strong privacy compliance. The site is performant with good SEO and accessibility features. From a security perspective, HTTPS is enforced, and privacy best practices are observed, including cookie consent and minimal tracking. However, the absence of visible security headers and a published security policy or incident response contact suggests room for improvement in security transparency and defense-in-depth. No vulnerabilities or suspicious content were detected. Overall, the website is a trustworthy, professional government portal with excellent content quality and privacy compliance. The lack of WHOIS data is a minor concern but likely due to querying limitations or privacy protection. Strategic recommendations include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure channel to further strengthen trust and security posture.

W

Windcoop SCIC SA

wind.coop

52

Windcoop SCIC SA is a French maritime cooperative based in Lorient specializing in low-carbon cargo transport using sail-powered container ships. The company operates an innovative business model focused on sustainability and cooperative ownership, targeting individuals, businesses, and communities interested in ethical and ecological maritime transport. Their flagship project is a 90-meter sail cargo ship designed to reduce CO2 emissions by 60% compared to conventional vessels, with operations planned between Marseille and Madagascar starting in 2027. The website reflects a professional and modern digital presence built on WordPress, featuring comprehensive content, multimedia, and clear calls to action for investment and membership. Technical infrastructure includes Matomo analytics and Google Tag Manager, with a strong emphasis on privacy and cookie consent compliance. Security posture is good with HTTPS and domain transfer protections, though improvements such as DNSSEC and explicit security policies are recommended. Overall, Windcoop presents a credible, transparent, and innovative player in the sustainable transportation sector.

éthi'Kdo is a French e-commerce platform specializing in eco-responsible gift cards that promote ethical gifting for individuals, businesses, and employee committees. The website presents a well-structured and professionally designed interface with a focus on sustainability and social responsibility. The technical infrastructure leverages modern JavaScript, CSS, and HTML5 technologies, integrating third-party services such as Sentry for error monitoring, Google Analytics for user behavior tracking with IP anonymization, and Crisp Chat for customer support. Security posture is strong with HTTPS enforced and appropriate security headers in place, though explicit privacy and cookie policies are absent, indicating room for compliance improvement. Overall, the website demonstrates a high level of business credibility and technical maturity, with no detected vulnerabilities or suspicious activity.

R

Réseau Citiz

citiz.coop

56

Réseau Citiz operates as a cooperative carsharing network in France, providing flexible vehicle rental services across more than 80 cities. The website presents a professional and consistent brand image, targeting both individual and professional users seeking shared mobility solutions. Technically, the site employs modern tracking and consent management tools, including Google Analytics, Facebook Pixel, and tarteaucitron.js for cookie consent, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are absent. Privacy compliance is partial, with cookie consent present but no dedicated privacy policy page found. Overall, the site is trustworthy and well-positioned in its market niche.

L

laNef

lanef.com

63

La Nef is a French cooperative ethical bank established in 1988, focusing on financing projects with ecological, social, and cultural impact. It serves both individuals and professionals, offering savings products, loans, and cooperative membership opportunities. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, it is built on WordPress with modern libraries and analytics tools, ensuring good performance and SEO. Security posture is strong with HTTPS and security headers, though it lacks a public vulnerability disclosure and incident response contacts. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be investigated further. Overall, the site demonstrates high trustworthiness and professionalism, suitable for its target audience.

C

CoopCircuits

coopcircuits.fr

48

CoopCircuits is a French cooperative e-commerce platform founded in 2019 that facilitates short food supply chains by leveraging the open source Open Food Network software. It enables organizers and consumers to collaboratively manage and participate in local organic product distribution. The platform supports diverse economic models and emphasizes community governance and transparency. Technically, the site uses modern frameworks such as AngularJS and Ruby on Rails, integrates secure payment processing via Stripe, and employs error monitoring with Bugsnag. The website is well-designed, mobile-optimized, and provides clear navigation and relevant content. Security posture is strong with HTTPS enforced, PCI-compliant payments, and no visible vulnerabilities, though some security headers could be improved. Privacy and legal policies are present and GDPR compliant, though cookie consent mechanisms could be enhanced. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

C

Commown

commown.coop

63

Commown is a French cooperative specializing in ethical and sustainable electronics, offering eco-designed devices primarily through a long-term rental model without purchase options. The cooperative model (SCIC) ensures governance transparency and aligns with their mission to combat planned obsolescence. Their market position is that of a responsible technology provider targeting both individual consumers and professionals who value sustainability and ethical practices. Technically, the website is built using the Hugo static site generator, hosted on Infomaniak servers, and employs modern web standards with good mobile optimization and accessibility. Security posture is solid with HTTPS and hCaptcha integration, though improvements could be made by enabling DNSSEC and adding security headers. Privacy compliance is adequate with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

Mobicoop.fr is a French-based free and commission-free carpooling platform established in 2017. The website offers a service aimed at facilitating daily and occasional ride sharing as a common good, targeting a general audience interested in sustainable and economical transportation options. The platform positions itself as a niche player in the transportation sector, emphasizing openness and community values. Technically, the website is hosted by OVH and uses HTTPS with a moderate performance profile. It employs Matomo analytics with a consent-based tracking mechanism, reflecting a privacy-conscious approach. The site uses modern web fonts and icons but does not appear to rely on a major CMS or framework. Mobile optimization and SEO are adequately addressed, though accessibility features are basic. From a security perspective, the site benefits from HTTPS and respects user consent for analytics. However, it lacks explicit security headers and formal security policies such as a privacy policy, terms of service, or vulnerability disclosure. No contact information or incident response channels are clearly provided, which could be improved to enhance trust and compliance. Overall, Mobicoop.fr presents a trustworthy and professional online presence for its business model but would benefit from enhanced transparency in privacy and security policies, as well as improved contact and incident response information to strengthen its security posture and compliance with regulations.

T

TeleCoop

telecoop.fr

51

TeleCoop is a French cooperative telecommunications operator founded in 2012, offering transparent, no-contract mobile plans with a strong focus on ecological and social responsibility. Positioned as the first cooperative telecom operator in France, it targets consumers who value sustainability and democratic governance in telecom services. The company provides a variety of mobile plans including options for children and teenagers, leveraging the 4G network of Orange, France's leading mobile network. TeleCoop emphasizes customer service based in France and promotes digital sobriety and ecological impact reduction among its subscribers. Technically, the website is built on the Kirby CMS platform and employs modern web technologies such as Matomo for analytics, Google Tag Manager, and Axeptio for cookie consent management. The site is well-optimized for mobile devices, fast loading, and accessible, with good SEO practices and structured data enhancing search engine visibility. Hosting and domain registration are managed by GANDI, a reputable registrar, with consistent WHOIS data supporting the legitimacy of the business. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers like Content-Security-Policy and does not publish a dedicated security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie management in place. The business credibility is reinforced by clear contact information, verified customer reviews, and social proof. Overall, TeleCoop presents a professional, trustworthy, and well-maintained online presence aligned with its cooperative and ecological mission. Strategic improvements could include publishing a security policy, adding security headers, and establishing a vulnerability disclosure channel to further enhance trust and security posture.

E

Enercoop

enercoop.fr

54

Enercoop is a French cooperative network providing 100% renewable electricity sourced from a broad network of citizen and local authority-owned production sites. The company positions itself as a key player in the energy transition with a cooperative and citizen-focused business model. Their services include electricity supply, energy efficiency consulting, and support for renewable energy producers. The website is professionally designed, mobile-optimized, and uses modern technologies including Prismic CMS, Matomo analytics, and Google Tag Manager. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit privacy and terms of service pages are not detected in the provided content. Overall, Enercoop demonstrates a mature digital presence aligned with its cooperative values and market positioning.

A

Agence Parisienne du Climat

adaptaville.fr

47

Adaptaville.fr is a French-language informational platform initiated by the Agence Parisienne du Climat, focused on providing ecological solutions to adapt to climate change in the Île-de-France region. The website serves local authorities, policymakers, and ecological actors by listing proven adaptation solutions, offering news, resources, and a map of solutions. The platform operates as a non-profit, supported by partnerships with public entities such as Métropole du Grand Paris and Ville de Paris. Technically, the site uses modern JavaScript libraries like jQuery and Lucide icons, and employs Plausible Analytics for privacy-conscious user tracking. The hosting is provided by Infomaniak Network SA, a reputable registrar and hosting provider. Security posture is adequate with HTTPS enforced, but lacks visible security headers and cookie consent mechanisms. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the site is professional, trustworthy, and well-branded, though improvements in privacy compliance and security headers are recommended.

CoachCopro is a French public service platform dedicated to supporting co-ownerships in their energy renovation projects. It operates as part of the national energy renovation service, France Rénov'. The website provides informational resources and accompaniment services tailored to co-ownership renovation needs. Technically, the site is built using modern JavaScript frameworks such as Nuxt.js and Vue.js, with integration of the TinyMCE editor for content management. The site demonstrates good design quality and user experience, optimized for mobile devices, but lacks comprehensive privacy and cookie policies, which are critical for compliance. Security posture is moderate due to absence of visible security headers and unknown SSL configuration. WHOIS data is unavailable, which raises concerns about domain registration transparency. Overall, the platform appears legitimate and focused on its public service mission but would benefit from enhanced compliance and security measures.

The website leadexplorer.com is currently inaccessible, returning a 503 Service Temporarily Unavailable error with minimal HTML content. Due to this, no business content, metadata, or contact information could be extracted or analyzed. The domain is registered with Amazon Registrar, Inc. since 2015, indicating a potentially established business presence, but the lack of accessible content prevents validation of business operations or services. Technically, the site lacks visible security headers, privacy policies, or any compliance indicators. The security posture cannot be fully assessed, but the absence of HTTPS and security best practices is a concern. Overall, the site is currently non-functional from a user and security perspective, resulting in a low AI score and limited insights.

D

DOMIREST, s. r. o.

hoteltrebic.cz

57

Hotel Alfa, operated by DOMIREST, s. r. o., is a small hospitality business located in Třebíč, Czech Republic, offering accommodation and restaurant services. The hotel is positioned as a convenient and comfortable lodging option near the city center and UNESCO heritage sites, targeting tourists and business travelers. The website is professionally designed, bilingual (Czech and English), and integrates modern booking and analytics technologies. The technical infrastructure is based on WordPress with common libraries and external services such as Google Analytics and Previo booking. Security posture is adequate with HTTPS and secure forms, though security headers and explicit policies could be improved. The domain registration data aligns well with the business information, supporting legitimacy. Overall, the website provides a trustworthy and user-friendly experience with clear contact and business details.

N

NEONUS, s.r.o.

neonus.sk

69

NEONUS, s.r.o. is a Slovak digital agency specializing in custom web development, e-commerce, B2B online shops, design, and data synchronization services. The company targets businesses seeking tailored digital solutions and technical support for their online presence. With over 15 years of experience and more than 500 projects completed, NEONUS holds a solid regional market position. The website reflects a professional and consistent brand image with comprehensive service offerings and client references. Technically, the website employs modern web technologies including GSAP for animations, Google Tag Manager and Analytics for tracking, and Tawk.to for live chat support. The site is built likely on WordPress with WooCommerce integration, optimized for mobile devices, and demonstrates good SEO and accessibility practices. Performance is moderate, with room for improvement in accessibility and loading speed. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and secures user data collection via forms with CAPTCHA. However, it lacks a publicly available security policy, incident response contacts, and vulnerability disclosure information. Security headers are not explicitly detected, suggesting potential areas for enhancement. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. The risk profile is low, but strategic improvements in security transparency and technical optimizations are recommended to further strengthen the security posture and user trust.

H

HZ Vinařství s.r.o.

valtickepodzemi.cz

49

Valtické Podzemí is a hospitality and wine tourism business based in the Czech Republic, specializing in historic wine cellar tours, wine tastings, and cultural events. The company operates a unique project connecting 13 historic wine cellars dating back to the 13th century, offering individual visits, group programs, and private events. The business holds a prestigious award, CHAMPION TOP VINAŘSKÝ CÍL ČR, underscoring its quality and reputation in the local market. The website is professionally designed, mobile-optimized, and rich in relevant content targeting wine enthusiasts, tourists, and corporate clients. Technically, the website is built on WordPress with modern JavaScript libraries such as Swiper.js and AOS for animations. It employs performance optimization tools like WP Rocket and SEO enhancements via Yoast SEO. The site uses Google Tag Manager and Microsoft Clarity for analytics and tracking, with a GDPR-compliant cookie consent mechanism in place. Social media integration and partner links further enhance its digital presence. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks explicit security policy and incident response information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust verification, but the presence of clear contact information and business details supports legitimacy. Overall, the site demonstrates a strong security posture with room for improvement in transparency and formal security documentation. Strategically, the business should focus on publishing a security policy, establishing incident response contacts, and enhancing domain registration transparency to improve trust. Continued monitoring of third-party scripts and regular security audits will help maintain a robust security posture. The website's excellent content quality and user experience position it well for growth in the wine tourism sector.

E

ESSENS Restaurant

essensrestaurant.cz

41

ESSENS Restaurant is a fine dining establishment located in South Moravia, Czech Republic, offering Michelin-quality gastronomic experiences focused on regional and seasonal ingredients. The website presents a professional and visually appealing interface with clear navigation and multilingual support, targeting discerning clients seeking high-end culinary experiences. The technical infrastructure leverages popular front-end libraries such as Bootstrap, jQuery, and Flexslider, alongside tracking and marketing tools including Google Tag Manager, Facebook Pixel, and Adform. While the site is mobile optimized and performs moderately well, some libraries are outdated and security headers are not evident, indicating room for improvement in security posture. The absence of privacy and cookie policies and missing WHOIS data represent compliance and trust concerns. Overall, the website is functional and professional but would benefit from enhanced security and privacy measures to align with best practices and regulatory requirements.

V

Vinařství Hraniční Zámeček

hzvinarstvi.cz

47

Vinařství Hraniční Zámeček is a small premium winery based in Lednice, Czech Republic, offering exclusive wines and hospitality services including a hotel resort and wine tastings. The website is professionally designed using WordPress and Elementor, featuring modern SEO practices and structured data to enhance search visibility. Privacy and cookie policies are implemented with GDPR compliance, and tracking technologies such as Google Tag Manager and Facebook Pixel are used for marketing and analytics. However, no direct contact emails or phone numbers are found on the site, and WHOIS data is unavailable, which slightly reduces transparency. Security posture is good with HTTPS and cookie consent, but could be improved with additional security headers and explicit vulnerability disclosure. Overall, the site presents a trustworthy and mature brand image targeting wine consumers and hospitality guests.

S

SUNLUX, s.r.o.

sunlux.cz

45

SUNLUX, s.r.o. is a Czech Republic-based company specializing in photovoltaic energy solutions for residential, commercial, and industrial clients. With over 15 years of experience since 2009, the company offers comprehensive services including design, consultation, installation, and ongoing maintenance of photovoltaic systems. Their market position is supported by multiple certifications and memberships in industry organizations, reflecting a strong local presence and expertise in renewable energy solutions. The website is professionally designed using WordPress and Elementor, optimized for performance and mobile devices, and includes a cookie consent mechanism to comply with privacy regulations. However, explicit privacy and terms of service pages are not found, which could be improved for better compliance and transparency. The company uses Google Tag Manager for analytics and tracking, indicating a moderate level of user data collection.

P

Peak Advisory Consulting s.r.o.

peakconsulting.cz

51

Peak Advisory Consulting s.r.o., operating under the brand Peak Consulting, is a professional HR services provider based in the Czech Republic. The company offers a comprehensive range of HR solutions including recruitment, HR advisory, training and e-learning, HR legal services, and GDPR compliance. Their market position is that of an independent, trusted HR partner focused on delivering tailored HR outsourcing and consultancy services to businesses of various sizes. The website reflects a professional and consistent brand image with detailed service descriptions and client references, targeting businesses seeking flexible and expert HR support.

The website ivisitprague.com is a small-scale tourism service provider specializing in tours and travel assistance in Prague, Czech Republic. Established in 2015, the business targets tourists seeking local travel experiences. The website is built on WordPress using the Elementor framework, featuring a professional and consistent design optimized for mobile devices. The technical infrastructure is moderate in performance, hosted by Forpsi, with HTTPS enabled ensuring secure connections. However, DNSSEC is not enabled, and security headers are absent, indicating room for improvement in security posture. Privacy and cookie policies are not present, which may affect compliance with GDPR and user trust. Contact information is limited to contact forms without explicit emails or phone numbers. Overall, the website presents a moderate risk profile with good business credibility but requires enhancements in privacy compliance and security best practices.

S

Svatební centrum Caxa Brno

caxabrno.cz

49

Svatební centrum Caxa Brno is a well-established wedding and formal wear rental and sales business located in Brno, Czech Republic. The company offers a wide range of wedding dresses, formal dresses, men's suits, and accessories, complemented by wedding coordination services. The website reflects a professional and comprehensive digital presence with rich content, customer testimonials, and active social media engagement. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern plugins and tracking tools such as Google Analytics and Facebook Pixel. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits domain trust verification, but the overall business credibility is supported by consistent branding and detailed service offerings. Privacy compliance is strong with clear policies and consent management. Strategic recommendations include enhancing security headers, adding incident response information, and maintaining up-to-date software to mitigate vulnerabilities.

S

studio AMMI

ammi.cz

63

Studio AMMI is a small, established florist business based in Brno, Czech Republic, specializing in fresh flower arrangements, delivery services, wedding flowers, funeral wreaths, and houseplants. The company has a strong local market presence supported by a professional website that offers e-commerce capabilities and detailed product galleries. The business emphasizes quality and customer satisfaction, as evidenced by testimonials and references to awards. Technically, the website is built on WordPress with the MioWeb theme and uses modern tracking and consent management tools such as Google Tag Manager and Cookiebot. Security posture is good with HTTPS enforced and no visible vulnerabilities, although security headers and incident response information are lacking. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

H

Hudební agentura Arte per tutti

artepertutti.cz

59

Hudební agentura Arte per tutti is a small Czech music agency specializing in live music performances for weddings, concerts, corporate events, and other celebrations. Founded in 2017 by Jitka Břízová, who also acts as manager and violinist, the agency emphasizes quality, originality, and personalized service. Their offerings include tailored musical ensembles and guaranteed substitutes for musicians in case of illness. The website presents a professional image with testimonials and clear contact information, targeting clients seeking live music experiences in the Czech Republic. Technically, the website is built on the Webnode CMS platform, leveraging modern web technologies such as HTML5, CSS3, JavaScript, and uses Amazon Cloudfront CDN for content delivery. It integrates Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile-optimized and features a cookie consent mechanism, though it lacks some advanced security headers and a published privacy policy. From a security perspective, the site uses HTTPS with a good SSL configuration but does not implement common security headers like Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data and privacy policy reduces trustworthiness. There is no visible incident response or vulnerability disclosure information. Overall, the website is functional, professional, and safe for general audiences, but improvements in transparency, security headers, and domain registration verification are recommended to enhance trust and compliance.

A

Artyp

artyp.cz

49

Artyp is a small artisanal e-commerce business based in the Czech Republic specializing in handcrafted, hand-painted wedding invitations, birthday and christening invitations, and related paper goods. The company emphasizes originality, quality, and eco-friendly packaging, targeting individuals planning special events. The website is professionally designed with good content quality, clear navigation, and mobile optimization. It uses a modern technology stack including jQuery, Bootstrap, Google Analytics, and Facebook Pixel, supporting a mature digital presence. Security posture is solid with HTTPS and CAPTCHA protections, though lacking some HTTP security headers and formal security policies. Privacy compliance is partial with a cookie consent mechanism but no dedicated privacy policy page found. Contact information is clear and trustworthy, supported by customer testimonials and social media presence. However, the absence of WHOIS registration data limits domain trust assessment, which is a notable risk factor.

R

RIKI.TO SUSHI

riki-to-sushi.com

57

RIKI.TO SUSHI is a small hospitality business based in the Czech Republic specializing in sushi lessons, catering, and professional sushi training. The company holds prestigious awards such as the WORLD SUSHI SKILL INSTITUTE TOKYO and advisory titles from the Japanese Sushi Association, positioning it as a recognized expert in its niche market. The website is built on the Wix platform, leveraging Wix's proprietary technologies and hosting services. While the site presents professional content and clear contact information, it lacks key compliance documents such as privacy and terms of service pages. Security posture is adequate with HTTPS enabled and error monitoring via Sentry, but could be improved by adding security headers and vulnerability disclosure mechanisms. Overall, the site is functional and trustworthy but would benefit from enhanced privacy compliance and domain registration transparency.

W

WeiserStudio

weiserstudio.cz

57

WeiserStudio is a small videoproduction company based in Brno, Czech Republic, specializing in creating professional videos tailored to client needs, including weddings, advertising, events, and custom projects. The company emphasizes emotional storytelling and high-quality production values. The website is built on WordPress using modern page builders and plugins, hosted via a Czech registrar with Cloudflare DNS. The site is well-designed, mobile-optimized, and provides clear navigation and relevant content. Security posture is adequate with HTTPS enabled but lacks security headers and visible privacy or cookie policies. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website presents a professional image with moderate trustworthiness but would benefit from enhanced privacy compliance and security best practices.

C

Catering Brno Slunečnice

cateringbrnoslunecnice.cz

49

Catering Brno Slunečnice is a small hospitality business specializing in comprehensive catering services for events such as weddings, corporate parties, and family celebrations in Brno and surrounding areas. The company operates under the Slunečnice Food network with multiple related venues, emphasizing quality and customer service. The website is professionally designed using the Webnode CMS platform, leveraging modern CDN and analytics technologies to deliver content efficiently. However, the absence of privacy and cookie policies and lack of visible contact information limit its compliance and trustworthiness. The security posture is generally good with HTTPS enforced, but missing security headers and incident response details are areas for improvement. The domain WHOIS data is unavailable, which raises concerns about registration transparency and business legitimacy. Overall, the site is safe, well-structured, and suitable for its target audience but requires enhancements in privacy compliance and business transparency to improve trust and security.

RealityDudes.com is an adult entertainment website specializing in streaming high-quality amateur gay pornographic videos featuring nude male models. The platform operates under Aylo Premium Ltd., a company known for managing adult content brands. The site targets an adults-only audience and offers subscription-based access to a wide variety of categorized video content. It maintains a professional market position within the niche of amateur gay adult entertainment. Technically, the website leverages modern web technologies including React, JavaScript ES modules, and integrates with multiple Project1content.com services for navigation, media delivery, and user management. It uses Google Fonts and Flickity for UI components and carousels. Payment processing is handled via trusted third-party services such as Probiller and Vend-o, ensuring secure transactions. The site is mobile optimized and includes cookie consent mechanisms aligned with GDPR requirements. From a security perspective, the site enforces HTTPS and implements several security best practices such as hiding the X-Powered-By header and enabling HTTP Parameter Pollution protection. However, the Content-Security-Policy header is disabled, representing a potential security gap. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are comprehensive and prominently linked, supporting compliance and user trust. Overall, the website presents a moderate to good security posture and technical maturity. The absence of publicly available WHOIS data for the domain is a notable transparency concern but does not necessarily indicate illegitimacy given the professional presentation and trusted payment integrations. Strategic recommendations include enabling CSP headers, improving accessibility features, and publishing a security.txt file for vulnerability disclosures.

Gitoyen is a French non-profit association established in 2000, dedicated to maintaining a decentralized and neutral Internet by supporting small network operators. It operates as a local Internet registry (LIR) and provides Internet transit, routing, switching, and equipment hosting services primarily to its members. The organization positions itself as a niche player in the telecommunications sector with a strong community and non-profit ethos. Technically, the website uses legacy JavaScript libraries and basic web technologies, hosted under Scaleway SAS, with moderate performance and basic mobile optimization. Security posture is moderate with notable gaps such as lack of DNSSEC, outdated libraries, and missing security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in security and compliance aspects.

shop.fotokino.com is a niche e-commerce platform specializing in artist books, prints, and limited editions, collaborating closely with artists and designers. The website is professionally designed using the Shopify platform, offering a curated selection of art publications and related products. It targets art collectors, enthusiasts, and the general public interested in artist projects on paper. The business operates primarily in France with distribution partnerships extending internationally. Technically, the site leverages modern web technologies, including Shopify's Dawn theme, JavaScript ES modules, and secure payment integrations such as Apple Pay and PayPal. The site is mobile-optimized, accessible, and performs well with fast loading times. Security posture is solid with HTTPS enforced and form protection via hCaptcha, though explicit security headers and privacy policies are missing. The absence of WHOIS registration data is a concern for domain legitimacy but does not detract from the professional presentation and trust signals on the site. Overall, the site is a credible, well-maintained e-commerce platform with room for improvement in privacy and security transparency.

The website petitesimmensites.org is a small French-language informational platform focused on educating users about the benefits and usage of VPNs for accessing geo-restricted streaming content. It provides detailed explanations of VPN technology, usage instructions, and recommends Surfshark VPN as a preferred service. The site targets French-speaking internet users interested in streaming and privacy technologies. Technically, the site is built with basic HTML, CSS, and jQuery, hosted behind Cloudflare DNS but lacks DNSSEC and advanced security headers. The site is mobile responsive at a basic level and has moderate performance. Security posture is minimal with no visible security policies or incident response information. Privacy compliance is lacking as no privacy or cookie policies are present. Business credibility is low due to absence of contact or company information. Overall, the site is safe for general audiences and does not contain adult or explicit content.

T

Tangible design festival

tangible-festival.org

44

The Tangible design festival website represents a cultural event based in Marseille, France, dedicated to various forms of design expression. The festival is scheduled for October 2025 and features exhibitions, workshops, and meetings across multiple local venues. The business model centers on event organization and cultural promotion within the local design community, targeting a general audience interested in contemporary design and art. Technically, the website is built with modern web standards including HTML, CSS, and JavaScript, and uses HTTPS with hosting provided by OVH sas. The site includes minimal external dependencies, notably the Umami analytics platform for visitor tracking. The site is mobile optimized and accessible with good SEO practices, but lacks advanced frameworks or CMS platforms. From a security perspective, the site benefits from HTTPS and domain status protections but lacks DNSSEC and security headers, which are recommended for enhanced security. No privacy or cookie policies are present, and no contact or incident response information is provided, indicating gaps in compliance and user trust features. The WHOIS data shows a suspicious future domain creation date, which undermines domain legitimacy and trustworthiness. Overall, the website is functional and professionally designed for its purpose but requires improvements in privacy compliance, security hardening, and transparency to enhance trust and regulatory adherence.

Frac Nouvelle-Aquitaine MÉCA is a regional public art fund based in France, managing a public collection of approximately 1200 artworks. The institution focuses on exhibitions, cultural events, educational collaborations, and publishing editions related to contemporary art. The website serves as an information portal for visitors, collaborators, and the general public interested in the cultural offerings of the Nouvelle-Aquitaine region. Technically, the site is built on WordPress with modern front-end technologies such as Swiper.js and jQuery, and it employs SEO best practices via the Yoast SEO plugin. The site is hosted by IONOS SE and secured with HTTPS, providing a safe browsing experience. However, some security headers are not visibly present, and Google Analytics is installed but not configured, indicating room for improvement in analytics and security monitoring. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, though no explicit GDPR compliance statements or data protection officer contacts are found. Overall, the site is professional, trustworthy, and well-maintained, serving its cultural mission effectively.

Demcon is a well-established technology group headquartered in the Netherlands, specializing in innovative product development and manufacturing across diverse sectors such as aerospace, healthcare, energy, and smart industry. The company operates through multiple specialized subsidiaries, leveraging collective expertise to deliver advanced technological solutions that create social impact. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to technology-minded audiences. Technically, the site uses modern frameworks like Nuxt.js and Vue.js, integrates Google Tag Manager and reCAPTCHA for analytics and security, and employs a cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced and bot protection in place, though some security headers and explicit policies could be improved. Overall, Demcon demonstrates high business credibility and digital maturity with room for enhanced transparency in security policies and incident response.

G

GEISTER MEDIZINTECHNIK GMBH

gbluelabel.de

41

GEISTER MEDIZINTECHNIK GMBH is a well-established German company specializing in the manufacture and supply of premium surgical instruments under the G BLUE LABEL™ brand. With a heritage spanning approximately 100 years, the company targets medical professionals and institutions requiring high-quality, innovative surgical tools. Their business model is primarily B2B, focusing on product excellence and custom solutions to meet surgical needs. The website reflects a professional and consistent brand image, supporting their market position as a premium instrument provider. Technically, the website employs modern JavaScript frameworks such as Vue.js and Axios, alongside jQuery and FontAwesome for UI elements. The site is mobile-optimized with good navigation and SEO practices, though performance is moderate. The CMS appears custom-built with PHP components. Analytics are implemented via Google Analytics and Tag Manager, indicating moderate user tracking. From a security perspective, the site uses HTTPS and includes verification meta tags for Google and Facebook, but lacks visible security headers and explicit cookie consent mechanisms. No sensitive data exposure or vulnerabilities were detected in the content. The WHOIS data is minimal but consistent with the business, showing no suspicious patterns. However, contact information is not explicitly provided on the main page, which could impact user trust. Overall, the website is professional and trustworthy with room for improvement in privacy compliance and security best practices. Strategic enhancements in cookie consent, security headers, and contact transparency would strengthen their security posture and user confidence.

V

VT Symposium

vtsymposium.com

51

VT Symposium is a specialized healthcare educational event focusing on ventricular arrhythmias, offering both in-person and virtual attendance options. The website provides detailed information about the symposium's agenda, faculty, and registration, targeting medical professionals and researchers in cardiology. Technically, the site uses a modern CMS (ProgressSitefinity) with Bootstrap and jQuery frameworks, and integrates Google Analytics and Twitter widgets for analytics and social media engagement. Security posture is moderate with HTTPS implied but lacking visible security headers and privacy policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the professional content and branding suggest a credible event. Overall, the site is well-designed and informative but would benefit from enhanced privacy compliance and clearer domain registration transparency.

S

Stereotaxis

roboticheartcare.com

67

Robotic Heart Care, operated under the Stereotaxis brand, is a healthcare technology website focused on promoting and educating about robotic magnetic navigation (RMN) technology for cardiac ablation procedures. The site targets patients and physicians interested in advanced cardiac care solutions, emphasizing safety, precision, and clinical efficacy. The company positions itself as a global provider with adoption in over 100 hospitals and over 150,000 patients treated, supported by extensive clinical data and peer-reviewed publications. Technically, the website is built on WordPress using modern plugins such as WPBakery Page Builder and Yoast SEO, with embedded Vimeo videos and Google Analytics for tracking. The site demonstrates good mobile optimization, clear navigation, and professional design, although some accessibility features could be improved. SEO practices are well implemented with comprehensive metadata and structured data. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, no explicit security headers were detected, and privacy and cookie policies are absent, indicating gaps in compliance and user data protection. The WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy despite the professional appearance and branding consistency. Overall, the website is informative and professionally presented but requires improvements in privacy compliance, security headers, and domain registration transparency to enhance trustworthiness and regulatory adherence.

S

Stereotaxis

roboticep.com

53

The website www.roboticep.com serves as an informational and educational platform focused on robotic electrophysiology technology, specifically robotic magnetic navigation (RMN) for catheter navigation in cardiac procedures. It targets physicians, hospitals, fellows, and patients by providing clinical data, videos, and advocacy resources. The site is professionally designed using WordPress with modern plugins and SEO tools, demonstrating a good level of digital maturity. Social media integration and multimedia content enhance user engagement. However, the absence of a privacy policy and terms of service pages, as well as missing WHOIS registration data, slightly diminish trust and compliance posture. Security measures such as HTTPS and reCAPTCHA are implemented, but security headers are not evident, suggesting room for improvement in security hardening. Overall, the site is a credible resource in the healthcare technology niche but would benefit from enhanced transparency and security documentation.

IDcomet is a small technology company operating under Tall Pines Data, LLC, providing website traffic intelligence services through software that identifies website visitors using an enhanced IP address database. The company targets website owners who seek detailed visitor insights, operating a SaaS business model with a niche market position. The website is professionally designed using modern frontend technologies such as Vue.js and Material Design Lite, offering a good user experience and mobile optimization. However, the site lacks some advanced SEO and accessibility features. From a security perspective, the website uses HTTPS and has domain registration protections in place, but lacks DNSSEC and explicit security headers, which are recommended for improved security posture. No privacy or cookie consent mechanisms are present, and no direct contact emails or phone numbers are provided, limiting transparency. The WHOIS data is consistent with the business identity, showing a stable domain registration with a long expiry date. Overall, the website is functional and professional but could improve in security practices and privacy compliance. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, and providing clearer contact information to enhance trust and compliance.