Security Directory

Hybris.cz is a cultural magazine website affiliated with the Theatre Faculty of the Academy of Performing Arts in Prague (DAMU). It publishes articles, editorials, reviews, and reflections primarily focused on theatre criticism and cultural discourse in Czech and Slovak languages. The site targets students, academics, theatre professionals, and enthusiasts interested in these topics. The business model is non-profit and educational, serving a niche audience within the Czech cultural and academic community. Technically, the website is built on Drupal 9 CMS, utilizing modern JavaScript libraries such as jQuery and jQuery UI, and includes Google Fonts for typography. The site is mobile-optimized and accessible with a clear navigation structure. However, performance is moderate, and SEO optimization is basic. No advanced analytics or advertising scripts were detected, indicating a focus on content rather than monetization. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No contact information or incident response details are provided, limiting transparency. The WHOIS data for the domain is unavailable, which raises concerns about domain legitimacy verification, although the content and institutional affiliation suggest a legitimate operation. Overall, the website is a well-structured cultural publication with good content quality and technical implementation but needs improvements in privacy compliance, security best practices, and transparency to enhance trust and regulatory adherence.

D

Divadlo DISK

divadlodisk.cz

63

Divadlo DISK is a well-established theatre institution based in Prague, Czech Republic, with a history dating back to 1945. It offers theatrical performances, cultural events, and collaborates with academic and research institutions. The website reflects a professional cultural organization with clear contact information, active social media presence, and a focus on audience engagement through newsletters and event promotions. Technically, the site uses modern web technologies including JavaScript libraries like jQuery and Fancybox, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and accessible, with a cookie consent mechanism in place, though it lacks a published privacy policy and terms of service, which are important for compliance. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but could be improved by adding security headers and formal security policies. Overall, the website is trustworthy and serves its audience effectively, but should address compliance gaps to enhance privacy and security transparency.

I

Institut intermédií

iim.cz

51

Institut intermédií is an academic and research institute based in Prague, Czech Republic, focusing on the intersection of technology and art. Affiliated with Czech Technical University and the Academy of Performing Arts, it offers study programs, research projects, events, and space rental services. The website is professionally designed, targeting students, researchers, and artists interested in interdisciplinary studies. Technically, the site is built on WordPress using modern frameworks like Foundation and Leaflet.js, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal privacy/cookie policies. WHOIS data is unavailable, which slightly reduces trustworthiness, but institutional affiliations and clear contact information support legitimacy. Overall, the site is a credible educational resource with room for improvement in privacy compliance and security best practices.

F

FAMU

famu.cz

59

FAMU is a reputable film and television school based in the Czech Republic, offering a wide range of academic programs including bachelor's, master's, and specialized one-year courses in various audiovisual disciplines. The website reflects a well-structured educational institution with international partnerships and student support services. Technically, the site employs modern web technologies such as Google Analytics, Facebook Pixel, Mapbox, and Font Awesome, indicating a mature digital infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and explicit privacy policies suggests room for improvement. The lack of WHOIS data limits domain trust verification but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing privacy disclosures, implementing security headers, and maintaining regular audits of third-party scripts to strengthen security and compliance.

T

Theatre faculty of Academy of Performing Arts in Prague

damu.cz

63

The Theatre Faculty of the Academy of Performing Arts in Prague (DAMU) is a reputable academic institution specializing in theatre arts education. It offers a variety of study programs, including those in English, and engages in research, cultural events, and community outreach. The website reflects a well-structured educational platform targeting students, academics, and theatre professionals. Technically, the site employs modern web technologies such as Google Analytics, Facebook Pixel, Mapbox, and uses a custom CMS developed or maintained by WDF s.r.o. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and a published privacy policy, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, but the website content and affiliations strongly indicate legitimacy. Overall, the site is safe, professional, and serves its educational mission effectively.

I

Inspire Metz

inspire-metz.com

47

Inspire Metz is the official agency responsible for promoting the attractiveness of the Eurométropole de Metz region in France. The website serves as a comprehensive portal for visitors, investors, and new residents, highlighting the region's cultural, economic, and sustainable development assets. The agency positions itself as a key player in regional economic development and tourism promotion, offering services such as event organization support and investment facilitation. Technically, the website is built on WordPress with modern SEO and privacy compliance tools, including Weglot for multilingual support and Tarteaucitron for cookie consent management. The site demonstrates excellent design quality, mobile optimization, and user experience. Security-wise, the site uses HTTPS and integrates consent mechanisms but lacks explicit security headers and incident response contacts, which are recommended for improvement. The absence of WHOIS data for the domain is a notable anomaly, suggesting either privacy protection or data unavailability, which slightly impacts trustworthiness. Overall, Inspire Metz's website is professional, content-rich, and well-structured, supporting its role as a regional promotional entity.

PagesJaunes is a leading French online local business directory platform owned by Solocal. It provides consumers access to millions of local professionals with enriched information such as hours, reviews, and services. The platform supports business profile management and advertising services, positioning itself as a key player in the French local search market. Technically, the website is built with modern JavaScript frameworks and integrates advanced analytics and consent management tools, hosted on Google Cloud Platform. Security posture is strong with HTTPS enforced and GDPR compliance mechanisms in place, though explicit security policies and vulnerability disclosure channels are not publicly visible. Overall, the site is professional, trustworthy, and well-optimized for user experience and mobile devices.

F

France Télévisions

francetv.fr

61

France TV is the official streaming platform for France Télévisions, the French public national television broadcaster. The website offers live TV streaming, replay services, video on demand, podcasts, and articles covering a wide range of programming including documentaries, series, news, and children's content. It serves a broad general audience in France and is a key player in the French media landscape. Technically, the site is built using modern web technologies such as Next.js and React, with good mobile optimization and accessibility features. The platform uses analytics tools like Piano Analytics and integrates privacy management SDKs. Security-wise, the site enforces HTTPS and uses privacy-related scripts but lacks explicit security headers and published security policies. No WHOIS data is available, likely due to privacy protection, but the domain is consistent with a legitimate public media entity. Overall, the site is professional, content-rich, and trustworthy, though it could improve transparency around privacy and security policies.

M

Marie Claire

marieclaire.fr

63

Marie Claire is a well-established French women's fashion and beauty magazine offering a wide range of content including fashion news, beauty tips, lifestyle articles, and subscription services. The website targets a female audience interested in fashion and beauty, maintaining a strong brand presence in the media sector. Technically, the site employs modern JavaScript libraries, consent management tools, and integrates multiple marketing and analytics services, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses security headers, and implements consent mechanisms, though it lacks explicit security policy and incident response disclosures. The absence of WHOIS data is a minor concern but does not detract significantly from the site's legitimacy given its professional presentation and brand recognition. Overall, the site is secure, privacy-conscious, and professionally maintained, suitable for its audience and business model.

M

MEDIAOBS

mediaobs.com

57

MEDIAOBS is a French independent media advertising agency specializing in managing a portfolio of 56 media brands and serving qualified expert communities. The company offers print and digital advertising services, special operations including events and podcasts, and creative studio services. The website is professionally designed using WordPress with modern SEO and gallery plugins, and it is optimized for mobile devices. Security posture is good with HTTPS and reCAPTCHA implemented, but lacks explicit security headers and privacy/cookie policies. WHOIS data is missing, raising concerns about domain registration legitimacy. Overall, the website is functional, professional, and targets media and advertising clients in France.

RFI (Radio France Internationale) is an established international news broadcaster providing comprehensive news coverage from France, Europe, Africa, and worldwide. The website offers political, cultural, sporting news, and live streaming services targeting a general audience. The brand is well recognized with consistent branding and multiple official social media presences. Technically, the website employs modern web standards, including responsive design, consent management via Didomi, and robust SEO practices. Security posture is strong with HTTPS enforced and standard security headers present, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR regulations, though WHOIS data is privacy protected, which is typical for media entities. Strategic recommendations include publishing explicit security and incident response policies and enhancing transparency around data protection roles.

Cdiscount is a major French e-commerce platform offering a wide range of products including furniture, electronics, home improvement, garden, and sports goods. The website targets French consumers looking for affordable prices and convenient online shopping experiences. It provides services such as secure payment options, installment plans, free delivery over certain amounts, and a loyalty program. The platform also offers mobile plans and travel booking services, indicating a diversified e-commerce ecosystem. Technically, the website employs modern web technologies including React and jQuery, with a responsive design optimized for mobile and desktop users. The presence of JSON-LD structured data and comprehensive meta tags supports good SEO practices. Performance is moderate with extensive use of JavaScript and external resources. Accessibility features and SEO optimizations are well implemented. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes security headers such as Content Security Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. However, explicit security policies and incident response contacts are not prominently published, which could be improved to enhance transparency and trust. Overall, the website is professional, trustworthy, and compliant with GDPR, featuring clear privacy and cookie policies with consent mechanisms. The lack of WHOIS data reduces domain registration transparency but does not significantly impact the site's legitimacy given its established market presence. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to further strengthen security posture and user trust.

F

Ferrero Hazelnut Company

ferrerohazelnutcompany.com

69

Ferrero Hazelnut Company is a division of the Ferrero Group focused on the entire hazelnut value chain, from cultivation to processing, emphasizing sustainability and quality. The company operates globally with agribusiness development programs and a commitment to responsible sourcing. The website reflects a professional corporate presence with detailed information about their mission, programs, and sustainability efforts. Technically, the site is built on Drupal CMS, uses modern web technologies, and integrates Google Tag Manager for analytics. The site is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers are not detected and privacy compliance could be improved. WHOIS data is unavailable, which raises some concerns about domain registration transparency but does not negate the apparent legitimacy given the strong brand association. Overall, the site is trustworthy, professional, and well-maintained, serving as an effective corporate communication platform.

F

Ferrero Caribe

ferreropr.com

50

Ferrero Caribe operates a consumer-facing website promoting its well-known confectionery brands such as Mon Chéri, Ferrero Rocher, and Raffaello. The site targets general consumers interested in premium chocolate products, primarily in the Caribbean region. The business model focuses on brand promotion and consumer engagement through product information and social media channels. The website is built on Drupal 10 CMS and leverages modern front-end libraries including Bootstrap and jQuery, indicating a moderate level of digital maturity. Mobile optimization and responsive design are well implemented, providing a good user experience. Security posture is moderate; while HTTPS is presumably enabled (not explicitly confirmed), the absence of security headers and cookie consent mechanisms indicates room for improvement. No forms or direct contact information are provided, limiting direct user interaction and data collection. Overall, the site is professional and trustworthy but could enhance privacy compliance and security transparency.

Ferrero North America operates as a major confectionery company serving the US and Canadian markets with iconic brands such as Ferrero Rocher, Nutella, Tic Tac, and Kinder. The website reflects a mature digital presence with comprehensive brand information, news updates, and social responsibility initiatives. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and Google Tag Manager, hosted likely on Akamai CDN, ensuring moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved and outdated libraries updated. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the strong brand presence and consistent content. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

T

Toyota Financial Services Czech s.r.o.

toyotafinance.cz

65

Toyota Financial Services Czech s.r.o. is a specialized financial services provider focused on branded vehicle financing for Toyota and Lexus in the Czech Republic. The company offers a range of financial products including loans for new and used cars, operational leasing, and insurance services tailored for both private individuals and businesses. With over 25 years of market experience and strong partnerships with Toyota and Lexus dealer networks, the company holds a solid position in the automotive finance sector within the region. The website reflects a professional and consistent brand image, providing clear and accessible information to its target audience. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager for analytics and marketing, and a proprietary CMS platform (Edee.one). The site is mobile-optimized, accessible, and SEO-friendly with structured data enhancing search engine visibility. Performance is moderate with no critical errors detected. Privacy and cookie policies are implemented with consent mechanisms, indicating compliance with GDPR requirements. From a security perspective, the site uses HTTPS with a good SSL configuration and no visible vulnerabilities or exposed sensitive data. However, security headers are not explicitly detected, and no public security policy or incident response information is provided. The WHOIS data is not publicly available, likely due to privacy protection, which is common and justified for financial institutions. Overall, the security posture is solid but could be improved by adding explicit security headers and incident response details. The overall risk assessment is low with recommendations to enhance security transparency and header implementation. The website is trustworthy, professionally maintained, and compliant with relevant privacy regulations, making it a reliable platform for its users.

N

Nonin Medical Inc

nonin.com

53

Nonin Medical Inc is a healthcare-focused company specializing in the design and manufacture of noninvasive pulse oximeters, regional oximeters, sensors, and related software platforms. The company positions itself as a leading global provider of pulse and regional oximetry solutions, serving healthcare professionals, hospitals, clinics, OEM customers, and homecare providers. Their product portfolio includes FDA-cleared devices and a cloud-based data management platform aimed at improving clinical workflows and patient care. Technically, the website is built on WordPress CMS with a modern tech stack including jQuery, UIkit, and multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Piwik PRO. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a professional and consistent branding approach. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS registration data reduces trust signals, but the website's professional content and external references support its legitimacy. Overall, the website presents a strong business and technical profile with good privacy compliance and user experience. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance trust and security posture.

T

Terumo Corporation

terumo.com

66

Terumo Corporation is a leading global healthcare company specializing in medical devices and solutions across multiple sectors including interventional systems, cardiovascular care, and blood and cell technologies. The website reflects a mature enterprise with a strong global presence and comprehensive business information targeting healthcare professionals, investors, and partners. Technically, the site is built on Drupal 11 with modern web technologies, optimized for mobile and accessibility, and integrates Google Tag Manager and Ensighten for analytics and marketing. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit incident response and vulnerability disclosure information are not found. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable, slightly impacting domain trust assessment.

S

Stereotaxis

stereotaxis.com

65

Stereotaxis is a medical technology company specializing in pioneering endovascular robotics to advance interventional medicine and improve patient care. The company targets healthcare professionals, patients, caregivers, and investors, positioning itself as an innovator in robotic systems for vascular procedures. The website reflects a professional and consistent brand presence with multimedia content and active social media engagement. Technically, the site uses modern web technologies including Bootstrap 4, jQuery, and Google Analytics, delivering a moderate performance and good mobile optimization. However, the absence of visible security headers and privacy policies indicates gaps in security and compliance maturity. The WHOIS data is missing, which raises concerns about domain registration transparency and trustworthiness. Overall, the site is functional and professional but would benefit from enhanced security practices and clearer privacy disclosures.

S

Spectrum Dynamics

spectrum-dynamics.com

57

Spectrum Dynamics is a healthcare technology company specializing in advanced digital SPECT imaging solutions for nuclear medicine. Their product portfolio includes innovative cardiology and total body SPECT/CT scanners leveraging CZT solid-state detector technology, positioning them as leaders in nuclear medicine imaging innovation. The website targets hospitals, clinics, and cardiology centers, providing detailed product information and clinical care resources. Technically, the site is built on WordPress with Elementor and uses modern web technologies including Google Analytics for tracking. The site is hosted with Cloudflare DNS and registrar services, ensuring domain security and stability. However, the site lacks explicit privacy and cookie policies, and security headers are not detected, indicating room for improvement in compliance and security posture. Overall, the domain is well aged and consistent with the business history, supporting legitimacy. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and publishing incident response information to enhance trust and compliance.

G

GEISTER MEDIZINTECHNIK GMBH

geister.com

54

GEISTER MEDIZINTECHNIK GMBH is a German-based manufacturer specializing in premium reusable surgical instruments, including titanium instruments and various clamps for cardiovascular and thoracic surgery. The company emphasizes German craftsmanship, precision, and sustainability, targeting medical professionals and OEM partners globally. Their website reflects a mature digital presence with multilingual support and detailed product highlights. Technically, the site uses modern JavaScript frameworks such as Vue.js and integrates Google Tag Manager for analytics, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security headers and incident response information suggests room for improvement. The WHOIS data is notably missing, which raises some concerns about domain registration transparency but does not directly contradict the professional business presence. Overall, the website is trustworthy and well-maintained but would benefit from enhanced security disclosures and contact transparency.

F

Fumedica Deutschland

fumedica.de

45

Fumedica Deutschland operates in the healthcare sector, providing medical-related products or services primarily targeted at the German market. The website presents basic information with limited interactive features and lacks comprehensive privacy, cookie, or terms of service policies. The technical infrastructure relies on older technologies such as jQuery 2.2.4 and Font Awesome 6 Pro, hosted on servers associated with kreativmedia.ch. Security posture is minimal with no evident security headers or advanced protections, and no contact or incident response information is available. Overall, the website serves as a basic informational platform with moderate digital maturity but requires improvements in security, privacy compliance, and user engagement features.

F

Finapres Medical Systems

finapres.com

74

Finapres Medical Systems is a specialized healthcare technology company focused on providing continuous non-invasive hemodynamic monitoring solutions. Their flagship product, the Finapres NOVA, offers accurate blood pressure monitoring using finger cuff technology, serving clinical diagnostics, hemodynamic evaluation, and educational purposes. The company operates as a medium-sized entity under the Demcon group, targeting healthcare professionals and researchers. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, with integrations for analytics and privacy compliance tools like Google Tag Manager and Cookiebot. Security posture is strong with HTTPS enforcement, security headers, and bot protection via reCAPTCHA, though there is room for improvement in publicly disclosing security policies and incident response contacts. The absence of WHOIS data slightly impacts trust but is mitigated by professional branding and certifications. Overall, the website demonstrates a mature digital presence with good content quality, technical implementation, and privacy compliance.

D

DIXI medical

diximedical.com

71

DIXI medical is a well-established French medical device company specializing in precision SEEG electrodes for epilepsy care, boasting over 50 years of expertise. The company positions itself as a global leader in the field, offering advanced intracerebral electrodes and related implantation accessories, alongside clinical support and educational programs. Their target audience primarily includes healthcare professionals such as neurosurgeons, neurologists, and researchers focused on epilepsy treatment. The website reflects a mature business model centered on manufacturing, direct sales, and knowledge dissemination through training and partnerships. Technically, the website is built on the Webflow platform, leveraging modern web technologies including GSAP for animations, Google Fonts, and Cloudflare services for security and performance. The site is well-optimized for mobile devices, fast loading, and incorporates accessibility and SEO best practices. Security measures include HTTPS, security headers, and a cookie consent mechanism compliant with GDPR standards. From a security perspective, the site demonstrates a strong posture with no detected vulnerabilities or exposed sensitive data. However, it lacks explicit security policies or incident response contacts, which could be areas for improvement. The WHOIS data corroborates the legitimacy of the domain, showing a long registration history consistent with the company's claimed experience and no privacy protection, indicating transparency. Overall, the website presents a professional, trustworthy, and compliant digital presence for DIXI medical, supporting its market position as a leader in SEEG electrode technology. Strategic recommendations include enabling DNSSEC, publishing formal security policies, and establishing a vulnerability disclosure program to further enhance trust and security maturity.

A

Abbott Laboratories

abbott.com

76

Abbott Laboratories is a well-established multinational healthcare corporation founded in 1888, specializing in innovative medical devices and health care solutions across multiple sectors including cardiovascular health, diabetes management, diagnostics, nutrition, and medicines. The website reflects a mature digital presence with comprehensive content targeting consumers, healthcare professionals, investors, and job seekers. The company maintains strong branding consistency and trust indicators such as verified social media profiles and structured data markup. Technically, the website leverages modern web technologies including Adobe Experience Manager CMS, New Relic monitoring, Adobe Launch tag management, and TrustArc consent management, indicating a high level of digital maturity. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance metrics. From a security perspective, the site enforces HTTPS and implements consent mechanisms, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance appears robust with clear privacy and cookie policies. Overall, the website presents a low-risk profile with strong business credibility and technical implementation. The absence of WHOIS data is noted but likely due to privacy protection and does not detract from the legitimacy of the site. Strategic recommendations include enhancing security headers, publishing security policies, and establishing a vulnerability disclosure program to further strengthen trust and security posture.

Coroneo is a specialized medical device company focused on innovative cardiac surgery implants and instruments, particularly for aortic valve repair. The company positions itself as a world leader with a history dating back to 1997, offering products that preserve native valves and improve surgical outcomes. Their market presence spans North America, Europe, and Asia through dedicated distributors. Technically, the website is built on WordPress with modern plugins and demonstrates good mobile optimization and user experience. Security measures include HTTPS and Google reCAPTCHA, but lack some advanced security headers and published security policies. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the website content and certifications suggest a credible business. Overall, the site is professional and compliant with cookie consent regulations but would benefit from enhanced transparency and security disclosures.

C

CardioFocus

cardiofocus.com

59

CardioFocus is a healthcare technology company specializing in providing innovative tools for electrophysiologists to treat atrial fibrillation. The website targets medical professionals in the cardiac electrophysiology field and presents a professional and focused business model. The domain is well-established since 1999, indicating a mature presence in the healthcare sector. Technically, the website is built using Framer CMS with Google Fonts integration, offering a good design and mobile optimization, though lacking advanced accessibility and SEO features. Security posture is moderate with HTTPS likely enabled but missing key security headers and policies such as privacy and cookie consent. No contact or incident response information is provided, which limits transparency and user trust. Overall, the website is functional and professional but would benefit from enhanced security and compliance features.

The website www.ucetni-program.com provides detailed guidance on selecting accounting software, primarily promoting the POHODA program by STORMWARE s.r.o., a Czech software vendor. The content is targeted at small business owners and entrepreneurs seeking to choose suitable accounting solutions. The site is informational, well-structured, and includes cookie consent mechanisms aligned with GDPR requirements. Technically, it uses Google Tag Manager and an older version of jQuery, with moderate performance and basic mobile optimization. Security posture is adequate but could be improved by updating libraries and adding security headers. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional content and external links to established companies. Overall, the site is trustworthy but would benefit from enhanced transparency and technical updates.

A

Artbees

artbees.net

60

Artbees is a well-established technology company specializing in premium WordPress themes and web design products, with a strong market presence since 2010. The company has a medium-sized team and a large customer base, supported by recognized achievements such as the Envato Power Elite badge. Their technical infrastructure leverages WordPress, Elementor, and modern web technologies, hosted on Bluehost with Cloudflare DNS and CDN for performance and reliability. Security posture is solid with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partially met with a clear privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the website is professional, user-friendly, and trustworthy, with moderate user tracking via Google Tag Manager. Strategic enhancements in security and privacy practices would further strengthen their digital maturity and compliance.

S

Stanford Medicine Children's Health

stanfordchildrens.org

73

Stanford Medicine Children's Health operates a comprehensive pediatric and obstetric healthcare network, recognized nationally for excellence and specialized care. The website reflects a mature digital presence with extensive patient resources, service information, and research initiatives. Technically, the site leverages Adobe Experience Manager and integrates multiple analytics and marketing tools, ensuring a modern and responsive user experience. Security posture is strong with HTTPS enforcement and appropriate security headers, though the absence of a public security policy and incident response contacts suggests room for improvement. The lack of WHOIS data limits domain registration trust insights but does not detract from the site's evident legitimacy and professional standing. Overall, the site is a trustworthy and authoritative resource for patients, families, and health professionals.

S

Stanford Health Care

stanfordhealthcare.org

63

Stanford Health Care is a leading academic medical center and healthcare provider based in the United States, delivering comprehensive medical services including cancer treatment, heart disease care, brain disorder treatment, primary and specialty care, and clinical trials. The website reflects a mature digital presence with a focus on patient engagement through services like the MyHealth portal and video visits. The organization maintains a strong market position in the Bay Area healthcare sector with consistent branding and professional content. Technically, the website is built on Adobe Experience Manager and hosted on Amazon AWS infrastructure, leveraging modern web technologies and analytics tools such as Google Analytics, Google Tag Manager, Adobe Launch, and Qualtrics. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. From a security perspective, the site enforces HTTPS and employs domain registration protections. However, DNSSEC is not enabled, and some security headers like Content-Security-Policy are missing. There is no visible vulnerability disclosure or security policy page, which could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, professional, and secure with minor areas for improvement in security hardening and transparency. The risk profile is low, and the site effectively supports the business objectives of Stanford Health Care.

G

Home Page - Stanford Cardinal - Official Athletics Website

gostanford.com

61

The website gostanford.com serves as the official athletics platform for Stanford Cardinal, providing sports news, schedules, and multimedia content targeted at sports fans and the Stanford University community. The site demonstrates a consistent branding approach with a professional design and good user experience, optimized for mobile devices. Technically, it employs modern CSS frameworks such as Tailwind CSS and uses Google Fonts, hosted under Google Domains DNS services. However, the site lacks visible security headers, privacy and cookie policies, and explicit contact information, which are critical for compliance and trust. The domain is well-established, created in 1997, and registered with a reputable registrar, indicating high legitimacy. Overall, the site is functional and professional but requires improvements in security posture and privacy compliance to enhance trust and regulatory adherence.

The website kh-berlin.de represents Weißensee Kunsthochschule Berlin, a specialized public art university in Germany offering various art and design degree programs. The site is well-structured with detailed academic and institutional information targeting students, academics, and art professionals. The technical infrastructure is based on TYPO3 CMS with jQuery and Matomo analytics, indicating a moderate level of digital maturity. The site is mobile optimized and provides good navigation clarity. Security posture is moderate with HTTPS implied but lacking visible security headers and updated libraries. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the site is professional but could improve in privacy compliance and security best practices.

The Universität der Künste Berlin (UdK Berlin) is a large, well-established public university in Germany specializing in artistic education, research, and cultural activities. It offers over 70 study programs to approximately 4,000 students, covering all artistic disciplines and related sciences. The university has a strong market position with a history spanning over 50 years in its current form and roots extending over three centuries. The website reflects a professional and comprehensive digital presence, targeting students, staff, alumni, and partners. It provides extensive information about faculties, events, news, and services.

K

KHSB

khsb-berlin.de

60

KHSB is an educational institution based in Germany, providing higher education services primarily targeting students and the academic community. The website is built on TYPO3 CMS and demonstrates a moderate level of digital maturity with modern technologies and a responsive design. The presence of Cookiebot for cookie consent and Matomo for analytics reflects a commitment to privacy and GDPR compliance, although explicit privacy and terms of service pages are not detected in the provided content. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but could be improved with additional security headers and published policies. Overall, the website is professional and trustworthy, serving its educational purpose effectively.

I

Internationale Psychoanalytische Universität Berlin

ipu-berlin.de

51

The Internationale Psychoanalytische Universität Berlin (IPU) is a private, state-recognized university specializing in psychoanalytic psychology and psychotherapy education. Founded in 2009, it offers unique bachelor and master programs with a strong psychoanalytic focus, supported by interdisciplinary research and international partnerships. The website reflects a mature academic institution with comprehensive content, clear navigation, and professional branding. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and integrates Google Analytics and Tag Manager for analytics. Security practices include HTTPS, CSRF protection, and a robust cookie consent mechanism, though some security headers and explicit incident response policies are absent. Overall, the domain and website are consistent with the institution's identity and demonstrate a high level of trustworthiness and compliance with GDPR.

H

Humboldt-Universität zu Berlin

hu-berlin.de

70

Humboldt-Universität zu Berlin is a prominent German university offering a wide range of academic programs and research initiatives. The website reflects its role as a leading educational institution with a strong emphasis on interdisciplinary research and social cohesion. It targets students, researchers, academic staff, and the general public interested in academic content. The university maintains a large-scale presence with consistent branding and professional content quality. Technically, the website is built on the Plone CMS platform, utilizing modern JavaScript libraries such as jQuery and bxSlider for interactive elements. It employs Matomo analytics with user consent mechanisms, indicating a mature approach to privacy. The site is hosted likely within academic networks in Germany, ensuring reliability and performance rated as moderate to good. Mobile optimization and accessibility features are well implemented. From a security perspective, the site enforces HTTPS and uses script integrity attributes, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear cookie consent and a comprehensive privacy policy. Business credibility is high, supported by certifications and trust signals. Overall, the website is professional, secure, and compliant, with minor recommendations to enhance security headers and publish vulnerability disclosure information to further strengthen trust and security posture.

H

Hochschule für Wirtschaft und Recht Berlin

hwr-berlin.de

54

Hochschule für Wirtschaft und Recht Berlin (HWR Berlin) is a large public university in Germany specializing in economics, law, and administration. The website offers comprehensive information about its 55 degree programs including Bachelor, Master, MBA, and dual study options, targeting students, prospective students, and academic staff. The site is well-structured with extensive navigation and content in German and English, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS and uses a self-hosted Matomo analytics platform, indicating a focus on data control and privacy. Security posture is adequate with HTTPS and asynchronous script loading, but lacks visible security headers and explicit privacy or cookie policies. No contact emails or phone numbers were found in the provided content, which may impact user support and trust. Overall, the site is professional, safe, and trustworthy but could improve privacy compliance and security transparency.

H

Hochschule für Technik und Wirtschaft Berlin

htw-berlin.de

63

HTW Berlin is a prominent University of Applied Sciences located in Germany, offering a wide range of Bachelor, Master, and MBA programs across multiple disciplines including engineering, business, design, and health. The institution is well-ranked nationally and provides extensive research and continuing education services. The website reflects a mature digital presence with clear navigation, multilingual support, and active engagement with its target audiences such as prospective students, current students, alumni, and industry partners. Technically, the site uses modern web standards, integrates Matomo analytics with user consent, and maintains good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved and explicit security policies are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

H

Hochschule für Schauspielkunst Ernst Busch

hfs-berlin.de

60

Hochschule für Schauspielkunst Ernst Busch is a prestigious German higher education institution specializing in performing arts education, offering six specialized degree programs including acting, directing, dramaturgy, puppetry, play and object, and choreography. The institution enjoys a strong international reputation and serves students, faculty, and theater enthusiasts primarily in Germany. The website is well-structured, professionally designed, and rich in relevant content, supporting the institution's educational mission and community engagement. Technically, the site is built on TYPO3 CMS, uses privacy-conscious Matomo analytics, and integrates partner and donation widgets, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and no exposed sensitive data, though improvements are recommended in cookie consent and security headers. Overall, the website demonstrates high business credibility and trustworthiness with clear contact information and social media presence.

H

Hochschule für Musik Hanns Eisler Berlin

hfm-berlin.de

42

Hochschule für Musik Hanns Eisler Berlin is a well-established public music university founded in 1950, recognized as one of Europe's leading music institutions. The website provides comprehensive information about its academic offerings, ensembles, events, and student services, targeting prospective and current students, faculty, and music professionals. Technically, the site is built on TYPO3 CMS and hosted by Hetzner, featuring a well-structured, accessible, and mobile-optimized design. Security posture is solid with HTTPS enabled and secure form handling, but lacks visible security headers and formal privacy or cookie policies. No incident response or vulnerability disclosure mechanisms are evident, which could be improved to enhance trust and compliance. Overall, the site is professional, trustworthy, and content-rich, but would benefit from enhanced privacy and security transparency.

H

Hochschule für soziale Arbeit und Pädagogik (HSAP)

hsap.de

47

Hochschule für soziale Arbeit und Pädagogik (HSAP) is a specialized higher education institution based in Berlin, Germany, focusing on social work, childhood pedagogy, and inclusive education. The institution offers a variety of bachelor and master degree programs, including dual and part-time study formats, often in cooperation with external partners such as the Paritätische Akademie. The website reflects a professional and well-maintained digital presence with clear navigation, relevant content, and active updates on news and publications. Technically, the website is built on TYPO3 CMS, utilizing common JavaScript libraries like jQuery and Slick Carousel for interactive elements. It employs Google Tag Manager for analytics with a strong emphasis on user consent and privacy compliance, including GDPR-aligned cookie management. The site is served over HTTPS with good SSL configuration, although some security headers are missing, which could be improved. From a security perspective, the website demonstrates a solid baseline with encrypted connections and consent management but lacks published security policies or incident response contacts. No vulnerabilities or suspicious activities were detected in the content or WHOIS data. Overall, the site is trustworthy and suitable for its educational audience. Strategically, HSAP should consider enhancing its security posture by implementing recommended HTTP security headers and publishing a formal security policy and incident response information to further build trust and compliance.

H

Hertie School

hertie-school.org

68

The Hertie School is a well-established educational institution based in Berlin, Germany, specializing in governance, public policy, and related social sciences. Founded in 2004 and supported by the Hertie Foundation, it offers a range of graduate and doctoral programs, executive education, and conducts interdisciplinary research. The school is recognized and accredited by reputable bodies, positioning itself as a top-ranked university in its field in Europe. The website reflects a professional and consistent brand image, targeting students, researchers, and professionals seeking advanced education and knowledge in governance and public affairs. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as Flickity, Slick Carousel, and Selectize to enhance user experience. It integrates Google Tag Manager for analytics and employs a cookie consent mechanism to comply with privacy regulations. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. From a security perspective, the site enforces HTTPS and implements privacy and cookie policies aligned with GDPR requirements. However, it lacks explicit security headers and a public security policy or incident response contact, which are recommended for enhanced security posture. No vulnerabilities or suspicious activities were detected in the content or technical setup. Overall, the Hertie School's website demonstrates a strong digital presence with high content quality, good technical implementation, and solid privacy compliance. The absence of WHOIS data limits domain registration insights, but the professional nature of the site and its consistent branding support its legitimacy. Strategic recommendations include improving security headers and publishing a security policy to further strengthen trust and security.

E

Evangelische Hochschule Berlin

eh-berlin.de

67

The Evangelische Hochschule Berlin (EHB) is a specialized higher education institution based in Germany, focusing on practical degree programs in social work, health, nursing, and education. The website serves as an information portal for prospective and current students, offering detailed navigation through academic programs, research, international opportunities, and continuing education. The institution positions itself as a medium-sized university of applied sciences with a clear focus on social and health sectors. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web standards such as HTML5, CSS, and JavaScript. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The absence of advanced analytics or tracking scripts suggests a privacy-conscious approach or limited digital marketing. From a security perspective, the site lacks visible security headers and explicit security or privacy policies, which lowers its security posture. No blocking mechanisms or WAF challenges were detected, indicating open accessibility. The WHOIS data is minimal, with generic DNS servers and no detailed registrant information, which slightly impacts trust but is not uncommon for educational institutions. Overall, the website is professional and functional but would benefit from enhanced transparency in privacy and security policies, improved security headers, and clearer contact information to strengthen trust and compliance.

D

Deutsche Film- und Fernsehakademie Berlin GmbH

dffb.de

43

The Deutsche Film- und Fernsehakademie Berlin GmbH (DFFB) is a well-established educational institution specializing in film and television training. The website presents a professional and comprehensive digital presence, targeting aspiring filmmakers and media professionals globally. It offers detailed information about its academic programs, events, and film projects, positioning itself as a leading film academy in Germany with international outreach. Technically, the site is built on WordPress with modern SEO and cookie compliance tools, ensuring good performance and user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and a public security policy. Overall, the site is trustworthy, compliant with GDPR, and safe for general audiences.

C

Charité – Universitätsmedizin Berlin

charite.de

64

Charité – Universitätsmedizin Berlin is a leading university hospital based in Berlin, Germany, providing comprehensive medical services, research, and education for patients, doctors, scientists, and students. The website serves as an information hub showcasing their healthcare offerings, research activities, career opportunities, and organizational details. The site targets a broad audience including patients seeking treatment, medical professionals, and academic communities. Technically, the website is built on TYPO3 CMS and employs a variety of JavaScript libraries such as jQuery, Modernizr, and FlexSlider to enhance user experience. The site is mobile-optimized and uses HTTPS, ensuring secure communication. However, some modern security best practices like security headers are not evident, and privacy compliance documentation is lacking. From a security perspective, the site benefits from HTTPS and does not expose sensitive data or use vulnerable libraries visibly. Nonetheless, the absence of explicit privacy policies, cookie consent mechanisms, and vulnerability disclosure pages indicates room for improvement in compliance and transparency. No WAF or blocking mechanisms were detected, and the content is fully accessible and safe for general audiences. Overall, the website reflects a professional and trustworthy healthcare institution with good technical implementation but requires enhancements in privacy compliance and security transparency to align with best practices and regulatory requirements.

B

Berliner Hochschule für Technik

beuth-hochschule.de

65

Berliner Hochschule für Technik (BHT) is a public technical university in Berlin offering over 70 Bachelor and Master degree programs in engineering, natural sciences, and economics. The institution emphasizes practical, family-friendly education with strong ties to industry and research. The website is built on TYPO3 CMS and features comprehensive content including study programs, research focus, events, and student services. Technically, the site uses modern web technologies and provides good mobile optimization and accessibility. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site reflects a professional, trustworthy educational institution with a strong digital presence.

B

Barenboim-Said Akademie

barenboimsaid.de

67

The Barenboim-Said Akademie website represents a well-established educational and cultural institution focused on music education and cultural exchange. The site offers a range of services including masterclasses, concerts, and digital content, targeting students, music professionals, and cultural enthusiasts. The business model is non-profit and niche, with a strong cultural and educational focus primarily in Germany. The website is professionally designed with consistent branding and good content quality, supporting its mission effectively. From a technical perspective, the website employs modern technologies such as Vue.js, integrates with multiple third-party platforms like Vimeo, Google Analytics, Spotify, and Bandcamp, and uses Cookiebot for GDPR-compliant cookie management. Hosting appears to be stable and secure, likely leveraging Cloudflare services. Performance and mobile optimization are good, though accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly identified and could be improved. No public security policy or incident response contacts are found, which could enhance trust and preparedness. No vulnerabilities or critical issues were detected. Overall, the website is safe, trustworthy, and compliant with privacy regulations. It does not contain adult or questionable content and is accessible without WAF or security challenges. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen the site’s security and user experience.

B

Bard College

bard.edu

69

Bard College is a well-established four-year liberal arts and sciences institution located in upstate New York, approximately 90 miles north of New York City. The college offers a broad range of undergraduate and graduate programs, including early college and international study opportunities. Bard emphasizes scholarship, the arts, and civic engagement, positioning itself as a private college operating in the public interest. The website reflects a professional and consistent brand image, targeting prospective students, current students, faculty, alumni, and families. Technically, the website employs a modern technology stack including jQuery, Google Analytics, Google Tag Manager, TikTok Analytics, and various UI/UX libraries such as AOS and Jarallax for animations and parallax effects. The site is mobile-optimized, accessible, and SEO-friendly, with a custom CMS backend inferred from PHP includes. Performance is moderate with asynchronous loading of scripts and multimedia content. From a security perspective, the site enforces HTTPS with good SSL configuration and anonymizes IP addresses in analytics. However, it lacks visible security headers and a cookie consent mechanism, which are important for privacy compliance. WHOIS data is unavailable due to the .edu domain registry policies, but the domain and content strongly indicate legitimacy. No critical vulnerabilities or suspicious patterns were detected. Overall, Bard College's website demonstrates a mature digital presence with strong business credibility and good security posture, though improvements in privacy compliance and security headers are recommended to enhance trust and regulatory adherence.

A

Alice Salomon Hochschule Berlin

ash-berlin.eu

66

Alice Salomon Hochschule Berlin (ASH Berlin) is the largest German state university specializing in social work, health, education, and upbringing, offering 20 Bachelor and Master degree programs. The institution targets students, researchers, and continuing education participants, including international students. The website reflects a professional and comprehensive digital presence with rich content about academic programs, research, events, and student support services. The business model is that of a public higher education institution with a strong emphasis on social responsibility and international cooperation. Technically, the website is built on TYPO3 CMS and uses modern web technologies such as jQuery, Bootstrap, and MediaElement.js. It is mobile-optimized, accessible, and SEO-friendly. The site employs Matomo analytics with a cookie consent mechanism, indicating a privacy-conscious approach. No blocking or WAF challenges were detected, and the site is served over HTTPS with good security practices, although some security headers could be improved. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the WHOIS data is privacy protected and unavailable, which is common for EU domains but limits transparency. The website maintains GDPR compliance with a comprehensive privacy policy and cookie consent. Overall, the site is trustworthy, professional, and well-maintained. The main risk is the lack of publicly available WHOIS registrant data, but given the institutional nature and consistent content, this is not a significant concern. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and adding a security.txt file to improve vulnerability disclosure transparency.