Security Directory

I

International Taekwon-Do Federation

itftkd.org

50

The International Taekwon-Do Federation (ITF) operates a comprehensive online platform serving the global Taekwon-Do community. The website acts as a central hub providing access to official federation information, event details, a dedicated database, live event streaming, and an e-commerce store for official merchandise. The organization positions itself as the supreme authority in ITF Taekwon-Do, targeting practitioners, members, and enthusiasts worldwide. The business model is non-profit and community-focused, emphasizing legacy and authenticity of the martial art founded by Gen. Choi Hong Hi. Technically, the website is built on WordPress using the Twenty Twenty-One theme, enhanced with JavaScript libraries such as jQuery and Owl Carousel for interactive content. The site is hosted likely via GoDaddy, with HTTPS enabled and basic performance and mobile optimization. Accessibility and SEO are implemented at a basic to good level, with internationalization supported through Google Translate integration. From a security perspective, the site benefits from HTTPS and domain locking status but lacks advanced DNS security (DNSSEC) and security headers. There are no visible forms collecting personal data on the main page, and no published security or incident response policies. Privacy compliance is partial, with privacy and cookie policies present but no active cookie consent mechanism. The domain registration is consistent and appropriate for the organization's history, enhancing trustworthiness. Overall, the website is professional, trustworthy, and well-aligned with its mission, though improvements in security headers, privacy compliance, and incident response transparency are recommended to strengthen its security posture and regulatory adherence.

O

Obec Psáry

psary.cz

45

The website psary.cz serves as the official online presence for the municipality of Psáry and Dolní Jirčany in the Czech Republic. It provides residents and visitors with comprehensive local government information, including news, events, public notices, waste management, and contact details. The site targets local citizens and community members, offering a centralized platform for municipal services and community engagement. Technically, the website is built on WordPress CMS, utilizing common web technologies such as jQuery and Bootstrap for responsive design and user interface components. It integrates Google reCAPTCHA to protect forms from spam and abuse. The site is hosted likely by Active24, the domain registrar, and employs HTTPS for secure communications. Mobile optimization and SEO practices are adequately implemented, though some accessibility features could be enhanced. From a security perspective, the website demonstrates a moderate security posture with HTTPS enabled and reCAPTCHA integration. However, it lacks explicit security headers and a vulnerability disclosure policy, which are recommended best practices. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism. Contact information is clearly provided, enhancing trust and transparency. Overall, psary.cz is a well-maintained municipal website with good content quality and user experience. Strategic improvements in security headers, privacy compliance, and incident response policies would further strengthen its security posture and regulatory adherence.

M

Město Mníšek pod Brdy

mnisek.cz

40

Mníšek pod Brdy's official municipal website serves as a comprehensive portal for residents and visitors, providing detailed information on local governance, services, cultural events, and community resources. The site is well-structured and targets the local population with relevant municipal content. Technically, the website is built on WordPress using Elementor and several plugins that enhance event management, GDPR compliance, and accessibility. The presence of a cookie consent banner and a detailed privacy policy PDF demonstrates adherence to EU data protection regulations. Security-wise, the site employs HTTPS and uses CAPTCHA services to mitigate automated abuse, though some security headers could be improved. The absence of WHOIS data is likely due to privacy protection, which is reasonable for a municipal entity. Overall, the website is professional, trustworthy, and compliant, with moderate technical performance and good user experience.

M

Město Sázava

mestosazava.cz

51

Město Sázava operates an official municipal website serving residents and visitors with comprehensive information about local governance, services, cultural events, and public notices. The site is well-structured, featuring news updates, event calendars, waste collection schedules, and contact details, reflecting a mature digital presence for a small government entity. The technical infrastructure leverages common web technologies such as jQuery, Bootstrap, and Swiper.js, ensuring responsive design and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data is a notable gap, potentially impacting domain trustworthiness, but the website's content and branding strongly indicate legitimacy as a municipal portal. Overall, the site balances usability and compliance well, serving its community effectively.

M

Město Zdice

mesto-zdice.cz

9

Město Zdice operates an official municipal website serving the local community of Zdice in the Czech Republic. The site provides comprehensive information about the town, including news, events, municipal services, and contact details. It targets residents, visitors, and local government stakeholders, positioning itself as a trusted source of official information. The website's business model is focused on public service and community engagement, typical for a local government entity. Technically, the website employs a custom CMS with common web technologies such as jQuery, Bootstrap 4.4.1, and other JavaScript libraries. The site is mobile-optimized and features a cookie consent mechanism, indicating some level of digital maturity. However, there is room for improvement in accessibility and performance optimization. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or security policies. No vulnerabilities or exposed sensitive data were detected, but the absence of WHOIS data and security.txt reduces overall trust. The cookie consent banner is a positive privacy compliance indicator, though a dedicated privacy policy page is missing. Overall, the website is functional, professional, and safe for general audiences. The main risk lies in the lack of transparency in domain registration and limited privacy documentation. Strategic improvements in security headers, privacy policies, and WHOIS transparency would enhance trust and compliance.

G

Ge-Baek Hosin Sool

filipinoma.cz

50

The website www.filipinoma.cz represents a small martial arts school specializing in Filipino martial arts (FMA) training in the Czech Republic. It offers detailed information about its training programs, events, tuition fees, and contact details. The business targets martial arts enthusiasts of all ages, including families, and operates primarily through in-person training sessions and seminars. The site content is well-structured and professionally presented, supporting the school's niche market position. Technically, the website is built on ASP.NET Web Forms with client-side enhancements using jQuery and AOS for animations. It integrates Google Analytics with a consent mechanism that denies ad and analytics storage by default, indicating some privacy awareness. The site is mobile-optimized with good navigation and content relevance, though accessibility features are basic. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or security policies. The WHOIS data is missing, which raises concerns about domain registration transparency and trustworthiness. No vulnerability disclosures or incident response contacts are provided. Overall, the security posture is moderate but could be improved with better policy disclosures and technical hardening. The overall risk is moderate with no critical issues detected. Strategic improvements in privacy policy publication, security headers, and WHOIS transparency would enhance trust and compliance.

W

Webthinx s.r.o.

cernovous.cz

46

Ekopark Černovous is a small ecological park and family-run business located in the Brdy hills of the Czech Republic. The business focuses on sustainable living, animal husbandry including chickens and bees, and local ecological responsibility. It offers ecological eggs, honey, and plans for future expansion into other animal products and local produce. The website is professionally designed using WordPress and Oxygen builder, with a clear navigation structure and mobile optimization. Social media presence on Instagram, Facebook, and YouTube supports community engagement. Contact information is clearly provided including phone numbers, email, physical address, and a contact form. However, the site lacks explicit privacy and cookie policies and does not implement a cookie consent mechanism, which impacts GDPR compliance.

P

PilsnerGolf Resort Hořehledy

golf-horehledy.cz

54

PilsnerGolf Resort Hořehledy is a small hospitality and sports business located in the Czech Republic, offering a family-friendly 9-hole golf course, hotel accommodation, restaurant services, and golf training programs. The website is professionally designed with good content quality and clear navigation, targeting golf enthusiasts and tourists seeking recreational services. The business maintains partnerships with local golf courses and hospitality providers, enhancing its regional market position. Technically, the website is built on WordPress using the Oxygen Builder framework, incorporating modern web technologies such as jQuery and Google Analytics with IP anonymization. The site is mobile optimized and performs moderately well, although some accessibility features could be improved. Security posture is decent with HTTPS enforced, but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. The absence of WHOIS data limits the ability to fully verify domain legitimacy, which slightly impacts trustworthiness. No critical vulnerabilities or adult content were detected, and the site maintains a safe environment for general audiences. Strategic improvements in privacy compliance and security headers would enhance the overall security and trust profile of the website.

S

Státní úřad inspekce práce

suip.cz

72

The website www.suip.cz is the official portal of the Státní úřad inspekce práce, the Czech Republic's State Labor Inspection Office. It serves as a comprehensive resource for labor inspection, occupational safety, employment relations, and labor law compliance. The site targets employers, employees, and businesses within the Czech Republic, offering services such as online certificate requests, advisory services, and complaint submissions. The portal is well-structured, multilingual, and professionally designed, reflecting its government affiliation and public service mandate. Technically, the site is built on the Liferay CMS platform, utilizing modern JavaScript libraries including React and jQuery, and integrates Google Analytics for traffic monitoring. The infrastructure supports HTTPS with strong security headers, indicating a good security posture. Accessibility and mobile optimization are well addressed, ensuring a broad user reach. Security-wise, the site demonstrates adherence to best practices with no visible vulnerabilities or exposed sensitive data. However, it lacks a publicly stated vulnerability disclosure policy and incident response contact details, which are recommended for enhanced transparency and security readiness. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR regulations. The absence of WHOIS data is consistent with CZ NIC's privacy policies and does not detract from the site's legitimacy. Strategic recommendations include publishing a vulnerability disclosure policy, incident response contacts, and continuous monitoring of third-party libraries to maintain security integrity.

e-masters GmbH & Co. KG operates a specialized community platform serving the electrical and SHK trades in Germany, providing marketing cooperation, discounts, and training opportunities to its members. The website is well-structured, professionally designed, and targets trade professionals with relevant content and offers. Technically, the site is built on TYPO3 CMS, integrates modern tools like Google Tag Manager and Cookiebot for consent management, and employs secure login mechanisms for members. The security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Overall, the site demonstrates good compliance with GDPR and privacy standards, with clear cookie policies and consent mechanisms. No critical vulnerabilities or suspicious activities were detected, indicating a trustworthy and professional online presence.

A

Ahmling Elektrotechnik

ahmling-elektrotechnik.de

47

Ahmling Elektrotechnik is a small, regional master electrical engineering company based near Itzehoe, Germany. The company specializes in electrical installations for old and new buildings, photovoltaic systems, wallboxes for electric vehicles, smart home solutions, lighting planning, and telecommunications. Their market position is that of a trusted local expert with partnerships and memberships in relevant industry associations, serving residential and commercial clients. The website is professionally designed, well-structured, and optimized for SEO, reflecting a mature digital presence. Technically, the site is built on WordPress with common plugins and libraries, hosted on a reputable German hosting provider. Security posture is good with HTTPS and cookie consent implemented, though security headers are missing and no dedicated security or incident response policies are found. Overall, the website is safe, trustworthy, and compliant with GDPR, with clear contact information and business details.

C

Caspersen Energie & Haustechnik GmbH

elektro-caspersen.de

63

Caspersen Energie & Haustechnik GmbH is a well-established German company specializing in electrical installations, photovoltaic systems, smart home solutions, and safety inspections such as DGUV V3 and E-Check. With over 60 years of experience, the company positions itself as a reliable and innovative service provider for both residential and commercial clients. The website reflects a professional and trustworthy business with clear service offerings and customer engagement features. Technically, the site is built on WordPress using Elementor and optimized with modern SEO and performance tools. Security posture is good with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is compliant with GDPR and provides comprehensive contact information, enhancing business credibility.

D

Dieter Moch GmbH

dietermoch.de

45

Dieter Moch GmbH is a regional German company specializing in heating, sanitary, and electrical services, with over 25 years of experience serving the Pinneberg and Hamburg areas. Their business model focuses on installation, maintenance, and renovation services tailored to residential and commercial customers. The website reflects a professional and consistent brand image, providing clear contact information and job opportunities, indicating active operations. Technically, the site is built on WordPress using a commercial theme and common plugins, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though lacking advanced security headers and explicit security policies. Overall, the site is trustworthy and compliant with GDPR requirements.

Dieter Krauss GmbH is a small, family-run business specializing in heating, sanitation, ventilation, and renewable energy solutions, operating primarily in Klein Offenseth-Sparrieshoop, Germany. The company offers a broad range of services including bathroom installations, heating systems, ventilation and air conditioning, photovoltaic and solar thermal systems, as well as gas heating services through its Krauss GAS Center. The website reflects a professional and consistent brand image with clear contact information and service descriptions, targeting local residential and commercial customers. Technically, the website is built using Bootstrap and jQuery, providing a responsive and user-friendly experience. However, there is no evidence of advanced CMS or hosting details. The site lacks modern security headers and cookie consent mechanisms, and no analytics or tracking tools are detected, indicating minimal user tracking. Performance is moderate with good mobile optimization but basic accessibility and SEO features. From a security perspective, the site does not show critical vulnerabilities but lacks HTTPS confirmation and security headers, which are recommended for improved protection. The absence of a privacy policy with GDPR compliance details and cookie consent reduces privacy compliance. WHOIS data is missing, raising questions about domain registration legitimacy, although the website content and business information appear trustworthy and professional. Overall, the site is a solid representation of a small regional business with room for improvement in security, privacy compliance, and domain registration transparency.

W

Wolf-Technik GmbH

wolf-technik.com

42

Wolf-Technik GmbH is a medium-sized German company specializing in the planning, production, installation, and service of heating and cooling technology solutions, including Wärmepumpen and Kälteanlagen. The company has a strong regional presence in northern Germany with over 900 installed heat pump systems and a global distribution network for refrigeration units. Their website reflects a professional business model focused on B2B clients in the energy and industrial sectors. Technically, the website is built on the Weblication CMS platform using standard web technologies like jQuery and JavaScript. While the site has good content quality and navigation, it lacks modern security implementations such as HTTPS and DNSSEC, which impacts its security posture. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional but requires security and privacy improvements to meet modern standards.

H

Hans Andritter GmbH

andritter.de

49

Hans Andritter GmbH is a well-established regional company in Germany specializing in heating, sanitary, climate, and roofing services. With a history spanning approximately 160 years, the company offers comprehensive solutions from planning to implementation and maintenance, targeting regional customers seeking modern and reliable energy and sanitary services. The website reflects a professional and consistent brand image, emphasizing customer service and regional presence. Technically, the website is built on WordPress using the Elementor page builder, supported by plugins such as Borlabs Cookie for privacy compliance. The hosting is provided by agenturserver, indicated by the nameservers. The site is moderately performant, mobile-optimized, and SEO-friendly, with basic accessibility features. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is strong with a comprehensive privacy policy and cookie management. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security headers and incident response documentation could further enhance trust and security posture.

Dachdeckerei Thorsten Eggers is a small, local roofing service provider based in Barkenholm, Germany, with over 21 years of experience. The company offers a range of roofing-related services including flat roofs, solar installations, storm damage repair, chimney restoration, facade design, and more. The website is built on WordPress using the Twenty Twenty-One theme and includes standard plugins such as Contact Form 7 and an accordion slider gallery. The site is well-structured, mobile-optimized, and provides clear contact information, but lacks advanced privacy and security features such as cookie consent and security headers. No social media or analytics tracking is present, indicating a focus on privacy and simplicity. The domain registration data is consistent with the business claims and shows no signs of privacy protection or suspicious activity.

K

Kardell Sothmann Bedachungen GmbH & Co. KG

karriere-kardell-sothmann.de

59

Kardell Sothmann Bedachungen GmbH & Co. KG is a medium-sized roofing company based in Heide, Germany, offering apprenticeship and skilled worker positions in the roofing trade. The company emphasizes well-organized work sites, a supportive team environment, and tariff-based pay. Their website serves as a recruitment and informational platform targeting job seekers in the roofing industry. Technically, the site is built on the Chimpify CMS platform, utilizing Bootstrap and jQuery, and is hosted on German servers with good SSL configuration. The site includes a cookie consent mechanism and privacy policy compliant with GDPR. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response information are lacking. Overall, the website is professional, trustworthy, and safe for general audiences.

L

LANCIER Monitoring GmbH

gast-germany.de

43

LANCIER Monitoring GmbH operates as the official German representative and certified service center for GAST and Jun-Air compressed air components. The company offers a range of industrial products including compressors, air motors, membrane pumps, and rotary vane pumps, targeting sectors such as dental clinics, laboratories, food industry, machinery, vehicle construction, and medical technology. Their market position is strengthened by ISO 9001 certification and longstanding experience in compressed air systems. Technically, the website is built on TYPO3 CMS with Bootstrap and jQuery, providing a modern and responsive user experience. Security posture is moderate with HTTPS usage and secure form handling, but lacks explicit security headers and incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website reflects a professional small manufacturing business with good trust indicators and clear contact information.

P

PARROT MEDIA GmbH

parrot-it.de

57

PARROT MEDIA GmbH is a small-sized IT system house based in Lübeck, Germany, specializing in premium webhosting, cloud services, IT support, and data protection solutions primarily targeting businesses in Northern Germany. The company offers a broad portfolio of IT services including desktop management, remote support, cloud infrastructure, and Microsoft 365 integration, positioning itself as a reliable regional IT partner with long-term client relationships. Technically, the website is built on TYPO3 CMS with modern web technologies, responsive design, and a moderate performance profile. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the website demonstrates good privacy compliance and business credibility with clear contact information and partner affiliations. The risk profile is low with no suspicious indicators detected.

V

Vleeko

vleeko.com

49

Vleeko is a well-established digital marketing agency based in Mexico, with a strong presence in major cities such as CDMX, Puebla, Hermosillo, and Guadalajara. The company offers a comprehensive suite of digital marketing services including brand design, web design, Google Ads, Facebook Ads campaigns, social media management, and digital strategies. With over 20 years of experience and multiple certifications from Google, AMIPCI, HubSpot, and others, Vleeko positions itself as a trusted partner for businesses seeking to enhance their digital footprint. The website reflects a professional and consistent brand image, supported by good content quality and clear navigation.

G

GLAJ-Vaud

glaj-vaud.ch

48

GLAJ-Vaud is a Swiss non-profit umbrella organization coordinating youth activities in the canton of Vaud. It provides services such as training (FORJE), platforms for youth engagement, and project management for youth-related initiatives. The website is built on WordPress with WooCommerce and uses modern SEO and performance tools. The technical infrastructure is solid with HTTPS and security best practices, though some security headers could be improved. Privacy compliance is basic, lacking explicit privacy and cookie policies. Contact is available via a member login and a contact page. Overall, the site is professional and trustworthy but could enhance privacy and security transparency.

S

SPPMS

sppms.cz

41

SPPMS is a Czech regional consortium of manufacturing and technology companies specializing in complex investment units, including projection, construction, machine parts manufacturing, and technology modernization. The organization has a strong regional presence with partnerships and sponsorships in cultural and social initiatives. The website is built on WordPress with a moderate technical infrastructure including jQuery, Foundation CSS, and Google Analytics for tracking. SEO is well implemented with Yoast SEO and structured data. Security posture is adequate with HTTPS enforced but lacks security headers and explicit privacy and cookie policies, which are compliance gaps. No incident response or vulnerability disclosure information is present. Overall, the website is professional and trustworthy but could improve privacy compliance and security best practices.

H

HSH Soft- und Hardware Vertriebs GmbH, Niederlassung: GS-Computerservice

xn--fundbrodeutschland-q6b.de

64

Fundbürodeutschland is a German centralized online lost and found platform operated by HSH Soft- und Hardware Vertriebs GmbH, integrating with official authorities across Germany. It offers services including lost item search, online auctions, and administrative tools such as data deletion and fund office software. The platform targets residents and governmental bodies, positioning itself as a key national service with over 766 fund offices and 75,000 items listed. Technically, the website employs modern web technologies such as jQuery, Bootstrap, and Leaflet.js for interactive maps, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent implemented, though lacking advanced security headers and explicit incident response policies. Privacy compliance is good, with a clear privacy policy and cookie banner aligned with GDPR. WHOIS data is consistent with the business identity, supporting legitimacy. Overall, the website is professional, trustworthy, and functional, serving an important public service niche.

W

WFG Wirtschaftsförderungsgesellschaft Ahlen mbH

wfg-ahlen.de

59

WFG Wirtschaftsförderungsgesellschaft Ahlen mbH operates as the official economic development and city marketing agency for the city of Ahlen, Germany. The organization supports local businesses, promotes tourism, and manages events to strengthen the economic position of Ahlen. The website reflects a professional municipal service with clear focus on local economic growth and community engagement. The target audience includes local businesses, investors, residents, and tourists. The business model is public service oriented, emphasizing cooperation with regional partners and providing consulting and event services.

S

SEO-proffs.se | Index över svenska SEO-proffs

seo-proffs.se

54

SEO-proffs.se is a Swedish website serving as an index and informational resource for Swedish SEO professionals. It aims to assist consumers and businesses in selecting SEO service providers by listing various consultants and companies. The site is a sister site to SEO-forum.se and is operated by TodaysWeb. The business model is primarily informational and directory-based, targeting Swedish users interested in SEO services. Technically, the site uses basic web technologies including jQuery and multiple third-party analytics tools such as Google Analytics, StatCounter, and Redistats. The site is mobile responsive with moderate performance but lacks advanced CMS or modern frameworks. Security posture is basic with HTTPS enabled but missing important security headers and no visible privacy or cookie policies, which impacts compliance and trust. WHOIS data for the domain is unavailable, likely due to the domain being a subdomain or query issues, which reduces trustworthiness slightly. Overall, the site is functional and provides relevant content but would benefit from improved security and privacy practices.

N

NordNews

nordnews.de

43

NordNews.de is a regional news media website focused on delivering the latest news and updates from northern Germany. The site provides news articles, police reports, local event coverage, and job listings, targeting the general public interested in regional information. The website uses WordPress CMS with popular plugins such as Yoast SEO and Perfecty Push Notifications, indicating a moderate level of digital maturity. The technical infrastructure supports mobile optimization and SEO best practices, although some accessibility features are basic. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and explicit privacy or cookie policies. Overall, the site is functional and professional but could improve in privacy compliance and security transparency.

T

TeamUpdraft

teamupdraft.com

66

TeamUpdraft is a small technology company specializing in WordPress plugins that provide backup, migration, optimization, and security solutions for WordPress site owners and developers. The website is built on WordPress with WooCommerce integration and uses modern technologies such as Google Tag Manager and Nelio A/B Testing for marketing and analytics. The domain is registered with NameCheap and uses Cloudflare DNS, indicating a stable and legitimate technical infrastructure. Security posture is good with HTTPS enabled, but lacks some security headers and explicit privacy and cookie policies. The website content is professional and relevant to its target audience, but lacks explicit contact information and detailed compliance documentation. Overall, the site is trustworthy and technically sound but would benefit from enhanced privacy compliance and security best practices.

B

Bodenseezentrum Innovation 4.0

bodensee-summit.com

23

Bodenseezentrum Innovation 4.0 operates a professional digital platform focused on the Bodensee Summit Digital 2025, a conference for digital innovation and resilience in the Bodensee region. The website targets entrepreneurs, leaders, innovators, and digital experts, providing detailed event information, speaker profiles, and interactive session descriptions. The business model centers on event organization and fostering digital transformation within a regional ecosystem. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and SEO best practices, including structured data and a cookie consent mechanism. Security posture is solid with HTTPS and no exposed sensitive data, though some security headers are missing and DNSSEC is not enabled. Privacy compliance is strong with GDPR-aligned policies and consent management. Overall, the site is professional, trustworthy, and well-optimized for its audience and purpose.

F

Fachstelle für Statistik Kanton St. Gallen

statistik-bodensee.org

10

The website statistik-bodensee.org serves as an official regional statistics platform for the Lake Constance Region, providing comprehensive data on land use, population, employment, economy, and tourism. It is supported by governmental institutions, notably the Fachstelle für Statistik Kanton St. Gallen, and targets researchers, policymakers, and the public interested in regional statistics. The platform is multilingual and uses a professional CMS (Contao) with modern frontend technologies to deliver a good user experience. Technically, the site employs a range of JavaScript libraries and frameworks including jQuery, Bootstrap, and others, ensuring moderate performance and good mobile optimization. However, some technical improvements are possible, such as enabling DNSSEC and adding security headers to enhance security posture. The site uses HTTPS but lacks advanced security policies and incident response information. From a security perspective, the website shows a moderate security maturity level with HTTPS enabled and domain transfer protection in place. However, the absence of DNSSEC, security headers, and comprehensive privacy and cookie policies indicates room for improvement. The newsletter form collects user emails but has minimal anti-spam protection. Overall, the site is trustworthy and professional but could benefit from enhanced security and privacy compliance measures. Strategically, the website is well-positioned as a niche governmental statistics resource with consistent branding and clear contact information. To improve, it should implement stronger privacy and security controls, publish security policies, and consider cookie consent mechanisms to align with GDPR requirements and enhance user trust.

B

Bodenseezentrum Innovation 4.0

bzi-netzwerk.com

10

Bodenseezentrum Innovation 4.0 operates a professional digital platform focused on digital transformation events and services in the Bodensee region. The website serves as a hub for event listings, expert connections, and regional innovation networking, targeting professionals and organizations interested in digital innovation. The business is newly founded in 2024, consistent with the domain registration date, and positions itself as a regional innovation facilitator. Technically, the website is built on WordPress with Elementor and uses modern plugins for SEO, GDPR compliance, and user experience enhancements. The site is mobile optimized and includes structured data for improved search visibility. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though DNSSEC is not enabled and some security headers are missing. No critical vulnerabilities or suspicious activities were detected. Privacy compliance is strong with a comprehensive privacy policy and cookie consent banner. Overall, the website is trustworthy, professional, and well-maintained, with room for improvement in security headers and incident response transparency.

K

Kanton Appenzell Innerrhoden

ai.ch

58

The website ai.ch serves as the official digital presence for the canton of Appenzell Innerrhoden, Switzerland. It provides comprehensive information about the cantonal government, including politics, administration, courts, public services, events, and news. The site targets residents, government officials, visitors, and local businesses, positioning itself as a trusted source of official information and services. The business model is that of a government public service portal, focusing on transparency and accessibility. Technically, the website is built on the Plone CMS platform, utilizing modern JavaScript libraries such as jQuery, Handlebars, and OpenLayers for interactive maps. The site is mobile-optimized and demonstrates good performance and SEO practices. Analytics are handled via Matomo, indicating a preference for privacy-conscious tracking. However, some accessibility features could be improved. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. While no critical vulnerabilities were detected, the absence of explicit security headers and a published privacy or cookie policy are areas for improvement. The WHOIS data confirms the domain's legitimacy as a government entity with consistent registration details. Overall, the website is professional, trustworthy, and well-maintained, though it would benefit from enhanced privacy compliance and security policy disclosures to align with best practices and regulatory requirements.

K

Kantonale Verwaltung Appenzell Ausserrhoden

ar.ch

41

The website ar.ch is the official online portal for the canton of Appenzell Ausserrhoden in Switzerland, providing comprehensive information and services related to the cantonal government. It serves citizens, businesses, and other stakeholders with access to government departments, news, legal resources, and public services. The site is well-structured, professionally designed, and consistent with government branding, reflecting a medium-sized government entity's digital presence. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies including Matomo for analytics and Google reCAPTCHA for form security. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security is robust with HTTPS enforced and appropriate security headers, but lacks some advanced security disclosures and cookie consent mechanisms. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. However, it could improve privacy compliance by implementing explicit cookie consent and publishing detailed security policies and incident response contacts. The WHOIS data aligns well with the official government identity, supporting the site's legitimacy. Overall, the site is a trustworthy, professional government portal with solid technical and security foundations but would benefit from enhanced privacy and security transparency to fully comply with modern regulations and best practices.

A

Alpgenossenschaft Vaduz

pradamee.li

56

Alpgenossenschaft Vaduz operates as a local alpine cooperative in Liechtenstein, focusing on the preservation and maintenance of alpine properties and processing milk into various products. The website provides information about events, products, and cooperative activities, targeting local community members and cooperative participants. The business model is cooperative-based, relying on member engagement and product processing. Technically, the website is built on WordPress with Elementor, featuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

J

Jugendcafé Camäleon

camaleon.li

50

Jugendcafé Camäleon is a small non-profit youth center based in Vaduz, Liechtenstein, providing a community space for youth engagement, projects, and events. The website serves as an informational and promotional platform targeting local youth and community members, offering details about their services, events, and gallery. The organization appears well-established since 2018 with a clear local focus and active social media presence. Technically, the website is built on WordPress with standard plugins such as Yoast SEO and Contact Form 7, ensuring basic SEO and contact functionalities. The site is mobile-optimized and uses modern libraries like Swiper.js and FontAwesome for UI enhancements. Security posture is adequate with HTTPS enforced and Google reCAPTCHA protecting forms, though it lacks advanced security headers and explicit incident response policies. Privacy and cookie policies are present but lack an explicit consent mechanism. Overall, the site is trustworthy, professional, and safe for general audiences.

V

Vadozner Huus

vadoznerhuus.li

57

Vadozner Huus is a community-oriented facility operated under the auspices of the Gemeinde Vaduz in Liechtenstein. It provides accessible communal spaces for residents and non-commercial groups to hold events, workshops, and meetings. The website reflects a local government service with a focus on inclusivity, creativity, and social engagement. The business model centers on offering shared spaces with flexible booking options, targeting local citizens and community organizations. Technically, the website is built on the concrete5 CMS platform, utilizing Bootstrap for responsive design and jQuery for interactivity. It integrates Matomo analytics for user tracking, emphasizing privacy. The site is mobile-optimized and presents a professional, consistent brand image aligned with the municipality. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses email obfuscation to protect contact information. However, it lacks visible security headers and does not provide explicit security or incident response policies. There is no cookie consent mechanism, which may impact GDPR compliance. No vulnerabilities or exposed sensitive data were found. Overall, the security posture is adequate but could be improved with additional best practices. The overall risk assessment is low given the nature of the site and its community focus. Strategic recommendations include implementing cookie consent, adding security headers, publishing security policies, and enhancing privacy compliance to strengthen trust and regulatory adherence.

O

Operettenbühne Vaduz

operette.li

51

Operettenbühne Vaduz is a cultural organization based in Liechtenstein specializing in operetta theatrical productions. The website serves as a digital presence to promote their events, notably celebrating their 85th anniversary in 2025 with the production of 'Der Vogelhändler'. The site targets a general audience interested in cultural and performing arts within the region. Technically, the website is built on WordPress using Elementor and Astra theme, incorporating modern web technologies and a cookie consent mechanism via Cookiebot. The site is mobile optimized and SEO friendly, though some accessibility features are basic. Security posture is solid with HTTPS enforced and ad personalization denied in consent settings, but lacks some security headers and formal security policies. Privacy compliance is partial due to missing privacy and terms of service pages. WHOIS data confirms the domain's legitimacy and consistency with the organization's history and location. Overall, the website is professional and trustworthy but could improve privacy transparency and contact availability.

The Liechtensteinisches Rotes Kreuz website represents the national Red Cross society of Liechtenstein, offering emergency medical services, first aid courses, and parental counseling. It serves residents of Liechtenstein and nearby areas, operating as a non-profit humanitarian organization funded by donations and memberships. The website is well-branded, professionally designed, and provides clear contact information and social media presence, reinforcing its trustworthiness and community engagement. Technically, the site is built on WordPress using the Astra theme and several plugins including Modern Events Calendar Lite and MonsterInsights for analytics. The infrastructure supports good mobile optimization, accessibility, and SEO practices. Performance is moderate, with modern technologies and standard web analytics integration. From a security perspective, the site enforces HTTPS, employs security headers, and includes privacy and cookie policies compliant with GDPR. However, it lacks a dedicated security policy or incident response page and does not publish a vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a strong security posture and business credibility appropriate for a national humanitarian organization. Strategic improvements could include publishing explicit security policies and incident response contacts to enhance transparency and trust further.

E

easyfind.ch

easyfind.ch

65

easyfind.ch operates as a Swiss-based lost and found service platform connecting individuals who have lost or found items with over 2,500 participating lost property offices across Europe. The platform supports multiple languages and integrates with services like Swisspass and easyfind.com codes, positioning itself as the largest network in this niche. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Social media presence and customer ratings indicate a trustworthy and established service. Technically, the site uses modern web technologies and maintains good security practices with HTTPS and no exposed sensitive data. However, it lacks explicit security policies, incident response information, and cookie consent mechanisms, which are areas for improvement. Overall, the site is reliable, accessible, and serves a clear public service function.

GMG GmbH is a medium-sized IT and media service provider operating primarily in Switzerland and Liechtenstein. Founded in 1991, the company offers a broad range of services including IT systems engineering, web development, media project management, and hardware sales and repair. They maintain data centers in Balzers and Zurich, supporting a regional customer base with SaaS contracts and 24/7 support. The website reflects a professional and established business with detailed team and contact information, targeting business clients in the region. Technically, the website is built on ASP.NET Web Forms, uses jQuery and fullPage.js for UI, and integrates Matomo for analytics, indicating a moderate level of digital maturity. The site is served over HTTPS with a custom CMS and hosted likely on Windows IIS servers. Mobile optimization and accessibility are basic but functional. No major performance issues were detected. From a security perspective, the site enforces HTTPS and uses secure form validation but lacks important security headers such as Content-Security-Policy and X-Frame-Options. No exposed sensitive data or vulnerable libraries were found. Privacy compliance is partial; a privacy policy is present but no cookie consent mechanism is implemented. WHOIS data is unavailable, which slightly reduces trust but the website content and contact details support legitimacy. Overall, GMG GmbH presents a trustworthy and professional online presence with room for improvement in security headers and privacy compliance. Strategic enhancements in these areas would strengthen their security posture and regulatory adherence.

J

JTRE

spojenaba.sk

48

Spojená Bratislava is a Slovak language online magazine operated by JTRE, focusing on urbanism, architecture, and city development projects primarily in Bratislava. The website serves as a content platform to promote JTRE's real estate developments and engage a professional and general audience interested in urban planning and architecture. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Google Tag Manager integration, indicating a moderate to good level of digital maturity. The site is mobile optimized and uses HTTPS with DNSSEC enabled, reflecting a good security baseline. However, explicit privacy policies and security incident response information are not present, which could be improved for better compliance and trust. Overall, the website is professional, content-rich, and trustworthy with room for enhanced security and privacy transparency.

M

Městys Vysoký Chlumec

vysoky-chlumec.cz

44

Městys Vysoký Chlumec operates as a local municipal government entity in the Czech Republic, providing residents and visitors with administrative services, community news, cultural and historical information, and tourism resources. The website serves as an official portal for local governance, public notices, and citizen engagement. The digital infrastructure is built on a modern tech stack including jQuery, Bootstrap, and Swiper.js, with a CMS platform likely tailored for municipal use. The site is mobile-friendly and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. GDPR compliance is evident with a dedicated Data Protection Officer contact and privacy policy. Overall, the site is trustworthy, professional, and well-suited for its public sector role.

M

Město Sedlčany

mesto-sedlcany.cz

59

Město Sedlčany operates as the official municipal government website for the city of Sedlčany in the Czech Republic, providing residents and visitors with news, event information, public notices, and contact resources. The site targets local citizens and tourists, offering multilingual support and a range of municipal services. The business model is centered on public service and community engagement, positioning itself as a trusted local government authority. Technically, the website is built on the Public4u CMS platform, utilizing common web technologies such as jQuery and JavaScript. The site is moderately optimized for performance and mobile use, with basic accessibility features and good SEO practices. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. The absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy, though the official nature of the content and domain suggests authenticity. Overall, the website is professional, trustworthy, and serves its intended audience effectively, with room for security and technical enhancements.

T

ThemeFreesia

themefreesia.com

58

ThemeFreesia is a small technology company specializing in the development and distribution of free and premium responsive WordPress themes and plugins. Their market position is focused on providing accessible, stylish, and functional WordPress solutions primarily targeting business owners, designers, and bloggers. The company offers a business model combining free themes with paid 'Plus' plugins to enhance functionality and support. The website demonstrates a good level of digital maturity with a WordPress CMS infrastructure, integration of modern technologies such as Google Analytics, reCAPTCHA, WooCommerce, and SEO optimization via Yoast. Hosting is provided by Bluehost with Cloudflare DNS services, ensuring reliable uptime and performance. Security posture is moderate with HTTPS enforced and use of reCAPTCHA, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a privacy policy and cookie consent banner present, though GDPR compliance is not explicitly indicated. Overall, the website is professional, trustworthy, and safe for general audiences, with room for improvement in security policies and technical hardening.

P

Petr Sycha

petrsycha.cz

46

Petr Sycha operates a professional website focused on WordPress web development and template creation, targeting clients seeking modern, responsive web solutions. The business is positioned as a small, experienced service provider with over two decades of experience, primarily serving the Czech market. The website uses WordPress with the Divi theme and several performance and UI enhancement plugins, hosted by Wedos, a Czech hosting provider. The technical infrastructure is modern and moderately optimized for performance and mobile use. Security posture is good with HTTPS enabled and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is partial with a cookie policy and consent mechanism but no privacy or terms of service pages. Contact information is clearly presented in structured data, enhancing business credibility. Overall, the site is professional, trustworthy, and safe for general audiences.

G

Gemeinde Vaduz

vaduz.li

10

The website www.vaduz.li serves as the official online presence of the municipality of Vaduz, Liechtenstein. It provides comprehensive information about local government, administration, social services, environment, tourism, and community events. The site targets residents, visitors, and local businesses, offering a broad range of public services and community resources. The business model is that of a public sector municipal service provider, with a clear focus on transparency and community engagement. Technically, the site is built on the concrete5 CMS platform and leverages modern JavaScript libraries such as jQuery, Slick Carousel, Moment.js, and CLNDR.js for dynamic content and calendar functionalities. It uses Usercentrics for GDPR-compliant cookie consent management and Matomo for privacy-respecting analytics. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers such as Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted as an area for improvement. Overall, the website is trustworthy, professional, and well-maintained, with strong alignment between domain registration data and website content. It is safe for general audiences and free from adult or questionable content. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen security posture.

G

GEF Ingenieur AG

siskmr.com

42

The website sisKMR.com represents GEF Ingenieur AG, a specialized engineering company providing software solutions for static calculations and optimization of district heating pipelines. The company holds a strong market position in Europe with over 30 years of experience and offers software, engineering services, training, and support primarily targeting planners, engineers, and manufacturers in the energy sector. The website is professionally designed, multilingual, and provides clear contact channels including forms, email, phone, and physical address. Technically, the site is built on WordPress with modern plugins and frameworks, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is good with a comprehensive GDPR-aligned privacy policy, though no cookie consent mechanism or terms of service are present. Overall, the site is trustworthy and business credible, with minor improvements recommended in security and privacy transparency.

R

R-S Matco LLC

rsmatco.com

47

R-S Matco LLC is a well-established supplier specializing in boiler tubing products and related services, serving industries such as power generation, industrial boilers, pulp & paper, and petrochemical sectors. The company positions itself as a leader with one of the largest inventories in the industry, offering value-added services including project management, rapid shipping, and custom tube preparation. The website reflects a professional B2B business model targeting industrial procurement professionals and plant managers. Technically, the website is built on WordPress with WPBakery Page Builder and integrates Google Tag Manager for analytics. The site demonstrates good design quality, mobile optimization, and clear navigation, though performance is moderate. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements are needed in privacy compliance and security best practices. Contact information is clearly presented, enhancing business credibility. No adult or questionable content is present, making the site safe for general audiences. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies with consent mechanisms, and establishing a formal security policy and incident response contacts to strengthen trust and compliance.

S

Sonntag & Partner Partnerschaftsgesellschaft mbB

sonntag-karriere.de

57

Sonntag & Partner Partnerschaftsgesellschaft mbB is a well-established professional services firm in Germany specializing in auditing, tax consulting, legal advice, and economic consulting. The website focuses on career opportunities, emphasizing personal development, team collaboration, and flexible working conditions. The company has a strong regional presence with over 45 years of experience and maintains a consistent brand image across its digital assets. Technically, the website is built on WordPress with modern JavaScript libraries and includes a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site is professional, user-friendly, and trustworthy, targeting job seekers in finance and legal sectors.

Sonntag & Partner Partnerschaftsgesellschaft mbB operates as a specialized IT consulting and software development firm based in Augsburg, Germany. The company focuses on delivering tailored solutions in digital transformation, IT compliance, process management, and project management. Their market position is that of a boutique consultancy with a strong emphasis on compliance and innovative technologies such as AI and low-code development. The website reflects a professional and consistent brand image targeting business clients seeking expert IT services. Technically, the website is built on WordPress with modern plugins and libraries, including jQuery and Borlabs Cookie for consent management. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Performance is moderate, with no critical errors or broken elements detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers are not detected in the HTML content, and no dedicated security policy or incident response contacts are provided. No vulnerabilities or exposed sensitive data were found, indicating a solid baseline security posture. Overall, Sonntag IT Solutions presents a trustworthy and professional online presence with strong compliance and business credibility. Strategic improvements in security headers and incident response transparency would further enhance their security posture and client trust.