Security Directory

E

EDUA Group s.r.o.

topvision.cz

68

Top Vision, a part of EDUA Group s.r.o., is a well-established Czech professional education provider specializing in managerial training, seminars, and corporate development programs. With over 24 years in the market and recognized by the Czech Business Superbrands, it serves managers and corporate clients with a broad portfolio of soft and hard skills courses, e-learning, and conferences. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site employs modern JavaScript libraries, Google Tag Manager, reCAPTCHA, and analytics tools like Hotjar, ensuring a robust infrastructure with good mobile optimization and user experience. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities, though HTTP security headers could be improved. Privacy compliance is well addressed with detailed policies and GDPR adherence. Overall, the site projects high business credibility and trustworthiness.

2

2K CONSULTING s.r.o.

bezpecnaorganizace.eu

43

2K CONSULTING s.r.o. operates the Bezpečná organizace project, providing certification and comprehensive services in organizational safety, GDPR compliance, cybersecurity, occupational safety, fire protection, and archival services. The company targets educational institutions, healthcare and social facilities, firms, and non-profit organizations primarily in the Czech Republic. Their market position is that of a specialized provider with a strong partnership network and recognized certifications. Technically, the website employs modern frameworks such as Bootstrap and jQuery, integrates Google Analytics and reCAPTCHA, and is hosted by a reputable provider. Security posture is solid with HTTPS and anti-bot measures, though security headers and incident response details could be improved. Privacy compliance is present but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-structured, supporting the company’s credibility and business goals.

N

Nakladatelství Fraus, s.r.o.

fraus.cz

64

Nakladatelství Fraus, s.r.o. is a well-established Czech educational publisher with over 34 years of experience, specializing in printed and digital educational materials for primary, secondary, and language schools. The company holds a strong market position supported by European awards and a comprehensive portfolio including textbooks, digital publications, online exercises, and professional development services for educators. Their target audience includes schools, teachers, parents, and students within the Czech Republic. Technically, the website employs modern JavaScript frameworks, Google Analytics, and Google Tag Manager, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and consent management implemented, though explicit security headers and incident response information are lacking. Overall, the site presents a professional, trustworthy, and user-friendly experience, though the absence of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms.

T

Terasa U Zlaté studně

terasauzlatestudne.cz

45

Terasa U Zlaté studně is a well-established fine dining restaurant located in Prague, Czech Republic, founded in 2004. The business offers a premium hospitality experience featuring a rooftop terrace with panoramic views, a variety of menus including à la carte and degustation, private dining options, and event hosting services. The website reflects a professional and consistent brand image targeting local and tourist diners seeking high-quality culinary experiences. The business model includes direct reservations and an e-shop for gift vouchers, indicating diversified revenue streams. The restaurant maintains partnerships with luxury hotels and other restaurants, enhancing its market position. Technically, the website employs a modern tech stack including jQuery, Fancybox, Google Fonts, and integrates Google Analytics and Sentry for monitoring. The site is hosted likely by WEDOS, consistent with the domain registrar data. The website is mobile-optimized with good SEO practices and moderate performance. Cookie consent is implemented with granular user controls, reflecting awareness of privacy compliance requirements, although no explicit privacy policy or terms of service pages were found. From a security perspective, the site enforces HTTPS and uses error monitoring tools but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The site uses tracking and retargeting services with user consent mechanisms in place, indicating moderate user tracking levels. Overall, the security posture is good but could be improved with additional headers and formal policies. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include publishing a privacy policy and terms of service, implementing security headers, and establishing a vulnerability disclosure or incident response policy to enhance trust and compliance. The website quality and business credibility are high, supporting the restaurant's premium market positioning.

E

EDUA Group

eduagroup.cz

58

EDUA Group is the largest private educational group in the Czech Republic, operating multiple brands focused on lifelong learning and professional development. Their website presents a professional and modern digital presence built on WordPress with popular plugins and SEO optimizations. The company targets individuals and organizations seeking educational services and innovation in learning. Technically, the site is well-structured, mobile-optimized, and uses HTTPS securely. However, the absence of WHOIS data and lack of visible privacy and cookie policies reduce trust and compliance scores. Social media integration and structured data enhance credibility. Security posture is good but could be improved with additional HTTP security headers and formal vulnerability disclosure mechanisms.

K

Koscom

koscom.cz

52

Koscom is a well-established Czech retailer specializing in watches and related accessories, with over 30 years of market presence. The company operates a large physical store in Prague and a comprehensive e-commerce platform offering more than 9,000 products. Their business model focuses on authorized dealership, retail sales, and after-sales services such as battery replacement and watch servicing. The website reflects a professional and trustworthy brand with clear contact information and strong social media integration. Technically, the website leverages the nopCommerce platform with modern JavaScript libraries and tracking tools including Google Analytics 4 and Facebook Pixel. The site is mobile optimized and provides a good user experience with clear navigation and rich content. Privacy and cookie policies are implemented with consent mechanisms, indicating GDPR compliance. Security posture is solid with HTTPS enforced and secure form handling, though additional security headers could enhance protection. No critical vulnerabilities or blocking mechanisms were detected. However, the absence of WHOIS data limits domain trust verification, which slightly impacts overall credibility. Overall, Koscom presents a mature digital presence suitable for its retail business, with recommendations to improve security headers and publish explicit security policies to further enhance trust and compliance.

A

Azara, s.r.o.

azara.sk

54

Azara, s.r.o. is a Slovakian software company specializing in custom software solutions, including information systems, integration, and automation. The company emphasizes agile development methodologies and uses modern frameworks to deliver high-value products. Their target audience includes businesses seeking tailored IT solutions. The website is built on WordPress with a professional design and good SEO practices, featuring client logos and detailed contact information. Technical infrastructure includes popular plugins such as Yoast SEO, Contact Form 7, and Leaflet Maps Marker, with Google Analytics for user tracking. Security posture is solid with HTTPS enforced and cookie consent implemented, though some improvements are needed such as adding security headers and a privacy policy. Overall, the website reflects a credible and professional small technology company with a clear market focus.

Novesta is a European footwear brand specializing in handmade shoes, offering a variety of products including sneakers, sandals, and vegan shoes. The company targets consumers who value quality craftsmanship and European manufacturing. The website is built on the nopCommerce platform, utilizing modern web technologies such as jQuery, Swiper.js, and Font Awesome, and integrates marketing and analytics tools like Google Tag Manager and Facebook Pixel. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in implementing security headers and explicit incident response policies. The absence of WHOIS data for the domain is a notable concern, suggesting either privacy protection or an unregistered domain, which impacts the trustworthiness assessment. Overall, the website presents a professional e-commerce presence with good privacy compliance but would benefit from enhanced transparency and security practices.

E

EZARRI, S.A.

ezarri.com

54

Ezarri, S.A. is a specialized manufacturer of glass mosaic tiles serving markets including swimming pools, large projects, interior design, wellness, and spas. The company positions itself as a leader with over 30 years of international experience and offers a broad range of mosaic collections, custom designs, and technical resources for architects and designers. Their business model focuses on manufacturing with direct engagement through digital tools such as a mosaic configurator and calculator, supported by certifications like ISO 9001 and ISO 14021, underscoring quality and environmental responsibility. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Matomo, and Google reCAPTCHA for security and analytics. The site is mobile-optimized with a professional design and good SEO practices. However, some security headers are not explicitly detected, and no CMS or hosting provider information is evident from the source. From a security perspective, the site uses HTTPS and implements reCAPTCHA on forms, which is positive. There is no exposed sensitive data or vulnerable libraries detected. The absence of explicit security policies or incident response contacts is noted. The missing WHOIS data for the domain is a concern for domain legitimacy verification, although the website content and certifications suggest a legitimate business. Overall, the website presents a professional and trustworthy front with good privacy compliance and user experience. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and verifying domain registration details to improve trust and compliance.

G

Grafoman

grafoman.be

55

Grafoman is a Belgian creative communication agency specializing in branding, web design, and online marketing services tailored to client needs. The company positions itself as a trusted partner for businesses seeking impactful branding and digital growth. The website reflects a professional and consistent brand image with clear service offerings and a strong regional presence. Technically, the site is built on WordPress with modern marketing and analytics integrations, demonstrating a good level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. The domain WHOIS data is privacy protected, which is typical for small agencies and does not detract from the site's legitimacy. Overall, Grafoman presents a credible and trustworthy online presence with room for technical security improvements.

C

Concrete Sustainability Council

csc.eco

52

The Concrete Sustainability Council (CSC) operates a global certification system focused on responsibly sourced ready-mixed and precast concrete, promoting sustainability in the construction materials sector. The organization targets concrete producers, suppliers, and construction professionals, positioning itself as a key authority in sustainable concrete certification. The website is built on WordPress with modern technologies including Bootstrap and Google Maps integration, providing a professional and user-friendly experience. Security posture is adequate with HTTPS enabled and domain registration consistent with the business entity, though there are gaps in privacy compliance and vulnerability disclosure. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security transparency.

B

BeCommerce

safeshops.be

59

Becom is a Belgian e-commerce federation established in 2023, dedicated to supporting and certifying webshops and online businesses in Belgium. The organization offers a range of services including the Becom Trustmark certification, security scans, educational events, research labs, and advocacy to help members grow and comply with regulations. The website is professionally designed, multilingual, and integrates modern web technologies such as WordPress, WPBakery, and Google Tag Manager. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements like DNSSEC and security headers are recommended. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, Becom presents a trustworthy and authoritative presence in the Belgian e-commerce sector.

B

Bethere

bethere.be

45

Bethere is a small communication and digital services company based in Waregem, Belgium, founded in 2006. The company specializes in branding, website and webshop design, and marketing services targeted primarily at local businesses and organizations. Their website reflects a professional and consistent brand image with a focus on clear communication and client references. Technically, the site is built on WordPress using modern frameworks like Bootstrap and integrates Google Analytics and reCAPTCHA for analytics and security. The site is mobile optimized and provides a user-friendly experience with clear navigation. Security posture is good with HTTPS enforced and spam protection on forms, though there is room for improvement in security headers and published policies. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms. Overall, the domain registration data supports the legitimacy and trustworthiness of the business. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility.

H

Huppa

upfra.be

58

Huppa is a Belgian wholesale fresh food partner offering a comprehensive online webshop with over 13,000 products. The company targets wholesale buyers and partners in the fresh food sector, positioning itself as a go-to supplier for fresh food products. The website is built on a modern WordPress platform using Elementor and Yoast SEO, supporting multilingual content primarily in Dutch with French alternatives. The technical infrastructure is solid with good mobile optimization and SEO practices, though some security headers and explicit policies are missing. The security posture is moderate with HTTPS implied and GDPR cookie consent implemented, but lacks explicit privacy and security policies. Overall, the business appears legitimate and professionally presented, with room for improvement in privacy compliance and security transparency.

Neustar Localeze is an enterprise-level technology company specializing in local search and business listing management services. As a subsidiary of Neustar, it holds a strong market position as a leader in providing accurate and relevant local business data to consumers and partners. Their key services target small businesses, large chains, resellers, and data licensors, emphasizing data accuracy and real-time updates. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their B2B audience. Technically, the website employs modern front-end technologies including Bootstrap, Font Awesome, and jQuery, supplemented by analytics and tracking tools such as Google Analytics and Crazy Egg. The site is mobile optimized and SEO friendly, though some accessibility features are basic. Hosting and domain registration are stable and reputable, with no signs of blocking or WAF interference. From a security perspective, the site uses HTTPS and has domain transfer protections in place but lacks visible security headers and explicit security or incident response policies. Privacy compliance is partial, with a privacy policy linked on the parent company domain but no cookie consent mechanism present. No vulnerabilities or exposed sensitive data were detected. Overall, Neustar Localeze presents a trustworthy and professional online presence with room for improvement in security headers, privacy compliance, and incident response transparency. Strategic enhancements in these areas would strengthen their security posture and regulatory compliance.

S

San Francisco Public Press

sfpublicpress.org

61

San Francisco Public Press is an independent nonprofit media organization focused on providing in-depth local news coverage for the San Francisco Bay Area. Their offerings include investigative journalism, special reports, podcasts, and radio broadcasts. The organization targets local residents interested in civic and community issues and operates primarily through donations and grants. The website is built on WordPress with a modern tech stack including Yoast SEO and Google Analytics, reflecting a moderate to good level of digital maturity. The site is mobile-optimized and provides a professional user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit policies are missing. Privacy compliance is basic, lacking a cookie consent mechanism and detailed GDPR indicators. WHOIS data is incomplete, which slightly reduces domain trustworthiness, but the website content and branding are consistent and professional. Overall, the site presents a trustworthy and credible nonprofit media presence with room for improvement in privacy and security transparency.

H

Huppa

franky-quality.be

63

Huppa is a Belgian wholesale fresh food partner offering an extensive online webshop with over 13,000 products. The company targets wholesale buyers and partners in the food retail sector, providing a convenient and fast ordering platform. The website is professionally designed using WordPress with Elementor and supports multilingual content in Dutch and French. Compliance with GDPR and cookie regulations is well implemented, including a consent banner and detailed privacy policy. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers and incident response information could improve trust. WHOIS data is restricted, limiting transparency but the website content and social media presence support legitimacy. Overall, Huppa demonstrates a mature digital presence suitable for its business model.

A

Atelier Souffriau

atelier-souffriau.be

38

Atelier Souffriau is a small Belgian retail business specializing in traditional butchery and catering services, emphasizing artisanal quality and customer experience. The website reflects a well-structured digital presence with clear branding and content focused on their mission and product quality. The company targets local customers interested in authentic, high-quality meat products and catering. Technically, the site is built on WordPress with common frameworks and libraries such as Bootstrap, jQuery, and Font Awesome, and integrates marketing tools like Google Analytics and Facebook Pixel. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and explicit security policies. Privacy compliance is addressed with visible privacy and cookie policies, indicating GDPR awareness. WHOIS data is restricted by the .be registry, limiting domain ownership transparency but the website content and professional presentation support legitimacy. Overall, the site scores well in content quality and technical implementation but could improve in security best practices and business credibility transparency.

F

Franky Fresh Food nv

bourgon.be

50

Bourgon, operated by Franky Fresh Food nv, is a Belgian company specializing in quality meat products and related food services such as food trucks and recipe sharing. The company targets both consumers and B2B clients, positioning itself as a regional player in the retail meat sector with a focus on premium products and event catering. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive contact information. It leverages WordPress CMS with modern technologies including Bootstrap, jQuery, and integrates analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. WHOIS data is restricted due to DNS Belgium policies, but the website's professionalism and consistent business information support its legitimacy. Overall, the site presents a trustworthy and well-maintained digital presence.

M

Marblo Culinair

marblo.be

57

Marblo Culinair is a Belgian company specializing in the production and distribution of high-quality, ready-made culinary dishes. Founded in 2012 and operating under the umbrella of the Willy Naessens Group, the company emphasizes artisanal craftsmanship, strict food safety standards (HACCP), and a broad product range targeting consumers and retail traiteur departments. The website reflects a professional and consistent brand image with clear business information and a user-friendly interface. Technically, the site is built on WordPress with modern frameworks and includes SEO and analytics tools, though some security headers and privacy mechanisms could be improved. Security posture is solid with HTTPS and reCAPTCHA, but lacks published security policies and cookie consent mechanisms. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business presence.

H

Huppa

huppa.be

63

Huppa is a Belgian wholesale fresh food partner offering a broad assortment of over 13,000 products via a professional online webshop. The company targets wholesale buyers and partners in the fresh food sector, positioning itself as a go-to supplier in Belgium. The website is built on WordPress with Elementor and includes multilingual support via WPML. It features a modern design, good navigation, and mobile optimization, supporting a positive user experience. Security posture is solid with HTTPS and privacy plugins, though explicit privacy and terms policies are not found, and WHOIS data is blocked, limiting transparency. Overall, the site demonstrates a mature digital presence suitable for its business model but could improve compliance and security disclosures.

L

Life Is Better At The Pool

lifeisbetteratthepool.be

66

Life Is Better At The Pool is a niche Belgian e-commerce retailer specializing in pool and garden lifestyle products, including pool robots, lighting, heating, and barbecue equipment. The website demonstrates a mature digital presence with a well-structured product catalog and multilingual support. The technical infrastructure is based on WordPress and WooCommerce, leveraging modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The domain WHOIS data is restricted, which slightly impacts trust but is common for small retail businesses. Overall, the site is professional, user-friendly, and compliant with GDPR requirements.

G

Gosseye n.v.

gosseye.be

66

Gosseye n.v. is a Belgian company specializing in climate technologies including heating, ventilation, air conditioning, and sanitary solutions primarily targeting commercial buildings. Established in 2000, the company leverages generational experience to deliver energy-efficient and innovative climate management solutions. Their market position is that of a trusted local service provider with a focus on quality and sustainability. The website reflects a professional digital presence with clear service offerings and accessible contact channels. Technically, the site is built on WordPress with modern frontend libraries and frameworks, ensuring good mobile responsiveness and SEO optimization. Security posture is adequate with HTTPS and Google reCAPTCHA implemented, though it lacks some advanced HTTP security headers. Privacy compliance is addressed with visible cookie and privacy policies and consent mechanisms. Overall, the website and domain data indicate a legitimate and credible business with moderate digital maturity.

Mutec is a specialized company focused on industrial flat roofing solutions, including installation, insulation, and sealing using materials such as EPDM, TPO, Bitumen, and PVC. Operating primarily in Belgium, Mutec is part of the larger Willy Naessens Group, which enhances its market credibility and resource base. The company targets industrial and commercial building owners, offering services for both renovation and new construction projects. Their website reflects a professional and consistent brand image with detailed project showcases and active recruitment efforts. From a technical perspective, the website employs a modern technology stack including Bootstrap 4, jQuery, Google Tag Manager, Google Analytics, and Hotjar for analytics and user experience enhancement. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Hosting is provided by One.com A/S, consistent with the domain registrar information. Security-wise, the site uses HTTPS with excellent SSL configuration and incorporates a comprehensive cookie consent mechanism aligned with GDPR requirements. However, explicit security headers are not detected, and there is no visible security policy or incident response contact information. No vulnerabilities or exposed sensitive data were found in the HTML content. The website maintains a moderate to high security posture but could benefit from additional security headers and a vulnerability disclosure policy. Overall, Mutec's website is trustworthy, professionally maintained, and compliant with privacy regulations. The domain age and WHOIS data support the legitimacy of the business. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a security.txt file to improve transparency and incident response readiness.

Willy Naessens Group is a large Belgian industrial conglomerate specializing in construction, swimming pools, food production, transport, concrete production, and supporting services. The website 'Willy Naessens Loves You' serves primarily as a recruitment and corporate news platform targeting job seekers in Belgium and surrounding regions. The company maintains a strong market position with multiple subsidiaries and a diversified business model. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap 4, GSAP, and Google Tag Manager, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and implements a detailed cookie consent mechanism with granular user controls, reflecting good privacy compliance. However, explicit security policies and incident response contacts are absent, representing areas for improvement. Overall, the domain registration data aligns well with the website content, supporting the legitimacy of the business. The site scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility, resulting in an overall AI score of 82.

Novesta is a Czech-based footwear company specializing in high-quality shoes made from natural materials. The company positions itself as a leading global brand in the footwear retail sector, offering a wide range of products including various shoe lines, accessories, and gift vouchers. Their e-commerce platform is powered by nopCommerce, supporting multiple languages and regional stores, indicating a mature digital presence. The website is well-designed with good navigation and mobile optimization, providing a positive user experience. Security-wise, the site uses HTTPS and has cookie consent mechanisms in place, but lacks visible security headers and explicit security policies. The absence of WHOIS data limits domain trust assessment, but the professional presentation and social media presence support business credibility. Overall, Novesta demonstrates a solid business and technical foundation with room for improvement in security transparency and contact information availability.

J

Jipka

jipka.cz

56

Jipka is a Czech language education provider offering a wide range of language courses including group classes, individual lessons, exam preparation, post-secondary studies, and language camps. The company targets individuals and corporate clients across multiple cities in the Czech Republic. The website is built on WordPress with Elementor and integrates modern SEO and analytics tools, reflecting a mature digital presence. Security posture is good with HTTPS enforced and use of security-conscious scripts, though explicit security headers and privacy policies are lacking. The absence of WHOIS data for the domain is a concern for trust but the website content and structure indicate a legitimate and professional business. Strategic recommendations include improving transparency with clear privacy and terms policies and enhancing security headers.

C

Coda Restaurant

codarestaurant.cz

58

Coda Restaurant is a fine dining establishment located in the Aria Hotel in Prague, Czech Republic, with a strong emphasis on local ingredients, artistic ambiance, and a premium culinary experience led by Executive Chef Igor Chramec. The business targets discerning diners seeking luxury and exclusivity, offering services including rooftop terrace dining, private dining, and a curated wine selection. The website reflects a professional and consistent brand image with clear contact details and social media presence. Technically, the site uses modern web technologies such as jQuery, Fancybox, and Google Analytics, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and privacy policies are missing, representing compliance gaps. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and stability.

G

Global Payments Europe

globalpaymentsinc.com

68

Global Payments Europe operates as a leading provider of payment technology and commerce solutions, serving over 4 million customers across more than 100 countries. Their platform supports omnichannel payments, point of sale solutions, and industry-specific software, positioning them as a major player in the global finance and technology sectors. The website reflects a mature digital presence with professional design, structured data, and multimedia content that supports their market leadership claims. Technically, the site leverages modern tools including Sitecore CMS, Google Tag Manager, Microsoft Clarity, and Visual Website Optimizer, indicating a commitment to performance and user experience. Security posture is strong with HTTPS enforcement and layered infrastructure, though explicit security headers and policies are not fully published. Privacy compliance is partially addressed via cookie consent but lacks a clearly accessible privacy policy. WHOIS data is unavailable, which is a moderate concern but common for enterprises prioritizing privacy. Overall, the site is credible and professional but would benefit from enhanced transparency in privacy and security documentation.

S

SPN - Pedagogické nakladatelství, a.s.

spn.cz

58

SPN - Pedagogické nakladatelství, a.s. is a Czech educational publishing company specializing in textbooks and digital learning materials for preschool, primary, and secondary education. The company maintains a professional and content-rich website built on Joomla CMS, featuring modern frontend technologies such as Bootstrap and jQuery. The site is well-structured, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. Contact information and social media presence enhance its credibility. However, WHOIS data is unavailable, which slightly reduces transparency but is common for domains under the CZ NIC registry. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved.

德

德国贝希斯坦钢琴北京中心

bechsteinbeijing.com

44

The website represents the German Bechstein Piano Beijing Center, a medium-sized retail business specializing in high-end piano sales and musical services. The site is professionally designed, content-rich, and targets piano enthusiasts and professional musicians in China. Technically, the site uses TYPO3 CMS with modern JavaScript libraries and is mobile optimized, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. WHOIS data is missing, which raises some concerns about domain registration legitimacy but does not detract significantly from the professional presentation. Overall, the site is functional and credible but would benefit from enhanced security and privacy compliance measures.

S

Shanghai Meicheng Technology Information Development Co., Ltd.

bechstein-china.com

46

The website bechstein-china.com represents a Chinese regional presence for the German piano manufacturer Bechstein, operated under Shanghai Meicheng Technology Information Development Co., Ltd. The site targets Chinese-speaking piano enthusiasts and professionals, offering detailed product information, brand history, and service support. The business model focuses on manufacturing and retail of high-end pianos, supported by an international network and localized services. Technically, the site uses a custom CMS with standard web technologies including HTML5, CSS3, JavaScript, and jQuery, and integrates Swiper.js for interactive content. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though it lacks advanced DNS security and security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. Recommendations include enhancing privacy compliance, adding security headers, and publishing a security policy to improve trust and regulatory adherence.

B

Bechstein Hall

bechsteinhall.com

53

Bechstein Hall is a specialized hospitality business operating a classical music recital venue in London, offering world-class concerts, hall hire, and related services. The website positions the venue as a culturally rich and historically significant location, targeting classical music enthusiasts and event attendees. The digital infrastructure is built on WordPress with modern JavaScript libraries and analytics tools, indicating a mature and well-maintained technical environment. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though DNSSEC is not enabled and some security headers could be improved. The domain registration is consistent and trustworthy, supporting the business legitimacy. Overall, the website is professional, user-friendly, and compliant with GDPR requirements.

N

Nakladatelství Fortuna

fortuna.cz

62

Nakladatelství Fortuna is a Czech educational publishing house specializing in textbooks and educational materials for primary and secondary schools. It operates under the parent company SPN – pedagogické nakladatelství since 2021. The website serves as an informational portal and gateway to their e-shop, offering a variety of educational resources. Technically, the site is built on Joomla CMS with modern frontend technologies including Bootstrap and Font Awesome, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS and GDPR-compliant cookie consent, though lacks explicit security headers and incident response information. The absence of WHOIS data slightly reduces domain trust but the website content and contact details are consistent with a legitimate educational publisher. Overall, the site is professional, well-structured, and serves its target audience effectively.

L

LOCALiQ

michigan.com

74

Michigan.com operates as a regional digital marketing service provider under the brand LOCALiQ, affiliated with the USA TODAY NETWORK and Gannett. The company focuses on delivering local and national digital marketing solutions tailored for businesses in Michigan, including web design, lead generation, analytics, and social media marketing. Their market position is that of a trusted regional partner leveraging national media resources to enhance local business marketing efforts. Technically, the website is built on WordPress using the Divi theme, integrating modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Twitter's tracking pixels. Hosting appears to be managed via Pantheon, supporting moderate performance and good mobile optimization. SEO and accessibility are basic but functional, with room for improvement in security headers and consent mechanisms. From a security perspective, the site enforces HTTPS and uses domain transfer protection but lacks DNSSEC and security headers, which are recommended to enhance protection. Privacy policies exist but do not include explicit cookie consent mechanisms, and there is no public incident response or vulnerability disclosure information, indicating gaps in compliance and security transparency. Overall, Michigan.com presents a professional and credible business front with stable domain registration and consistent branding. However, improvements in security practices, privacy compliance, and incident response transparency are advised to strengthen trust and reduce risk.

I

International Car Lease Holding NL

internationalcarlease.com

59

International Car Lease Holding NL operates as a major car leasing provider in the Netherlands, offering a portfolio of leasing brands under the Van Mossel Automotive Group umbrella. The company targets both business and private customers with a broad range of leasing solutions, positioning itself as a market leader with multiple industry awards. The website reflects a professional and consistent brand image, with clear navigation and multilingual support. Technically, the site is built on Silverstripe CMS and integrates modern analytics and marketing tools, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers and explicit security policies are recommended. The absence of WHOIS data for the domain is a notable anomaly that slightly impacts trust but does not detract from the overall legitimacy of the business. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility compliance to strengthen trust and compliance.

I

Investigative Reporting Workshop

investigativereportingworkshop.org

54

Investigative Reporting Workshop is a non-profit organization dedicated to training student and early-career journalists through hands-on investigative journalism projects. It collaborates with major national newsrooms and nonprofits to produce impactful journalism on topics such as environment, health, and politics. The website is built on WordPress with a modern tech stack including jQuery and Genesis Blocks, hosted on AWS infrastructure. The site is professionally designed with good navigation and mobile optimization, though it lacks explicit privacy and cookie policies. Security posture is solid with HTTPS and domain transfer protections, but DNSSEC is not enabled and security headers are missing. No contact emails or phone numbers are provided, which limits direct communication channels. Social media presence is strong, enhancing trust and outreach.

T

The Reva and David Logan Foundation

loganfdn.org

58

The Reva and David Logan Foundation is a well-established non-profit organization founded in 2003, focused on supporting community initiatives in arts, journalism, education, and social services through grant funding. The website reflects a professional and consistent brand presence with a clear mission to support diverse community projects. Technically, the site is built on WordPress with common plugins and libraries, hosted on a provider associated with the Loopia Group. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to absence of privacy and cookie policies and no visible consent mechanisms. Social media integration is strong, enhancing trust and outreach. Overall, the site is credible and functional but would benefit from enhanced privacy and security practices.

T

The Reader

thereader.com

46

The Reader is a well-established local media outlet serving Omaha, Nebraska, and Council Bluffs, Iowa, providing comprehensive coverage of news, arts, entertainment, dining, and local politics. It operates under the parent organization Nebraska Public Media, reflecting a credible and stable market position within the regional media landscape. The website leverages a modern WordPress CMS infrastructure with SEO and social sharing plugins, ensuring good content delivery and user engagement. Technical infrastructure is solid with HTTPS and reputable hosting, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is partial, with a clear privacy policy but lacking cookie consent mechanisms and terms of service. Overall, the site demonstrates a good security posture with room for improvement in privacy and security best practices.

B

Bangor Daily News

bangordailynews.com

60

Bangor Daily News is a prominent local news media organization serving the state of Maine, providing comprehensive coverage of news, sports, politics, and obituaries. The website operates a subscription-based business model, leveraging a paywall to monetize its content. It targets residents of Maine and those interested in regional news, positioning itself as a leading news source within its market. The company appears to have been founded in 2011 and maintains a consistent brand presence across its digital platforms. Technically, the website is built on WordPress and integrates a variety of modern technologies including Google Analytics, Google Tag Manager, Pelcro SDK for subscription management, and multiple advertising networks such as PubMatic and Amazon APS. The site is mobile-optimized and employs HTTPS for secure communications. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS and uses several tracking and advertising scripts, but lacks explicit security headers and published security policies. No critical vulnerabilities were detected in the analyzed content. However, the absence of privacy and cookie policies and the lack of WHOIS registration data for the domain raise concerns about compliance and domain legitimacy. Overall, while the website demonstrates a mature digital presence and business model, it should improve its privacy compliance and clarify domain registration details to enhance trustworthiness and regulatory adherence.

I

Intellihealth

intellihealth.co

68

FlyteHealth, operating under the legal name Intellihealth, is a healthcare company specializing in obesity care and chronic condition management. Their services combine medical care, coaching, and pharmacotherapy to empower individuals and businesses to achieve better health outcomes. The company targets employers, payers, PBMs, and individual patients, positioning itself as a clinically proven and cost-effective solution in the healthcare market. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the website is built on WordPress using Elementor and integrates several modern tools including Yoast SEO, CleanTalk anti-spam, Pardot marketing automation, Hotjar analytics, and Google Analytics. The site demonstrates good SEO and accessibility practices, with a cookie consent mechanism compliant with GDPR and CCPA. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses anti-spam measures and cookie consent banners. However, explicit security headers are missing, and no dedicated security or incident response policies are published. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and transparency, which impacts trustworthiness despite the professional appearance. Overall, FlyteHealth presents a credible healthcare service with strong business and technical foundations but should improve transparency around domain registration and enhance security policies to strengthen trust and compliance.

E

Excelsior Rotterdam

sbvexcelsior.nl

68

Excelsior Rotterdam is a professional football club based in the Netherlands with a well-established online presence. The website serves as a comprehensive platform for fans, business partners, and the community, offering news, team details, match schedules, and merchandising through an integrated WooCommerce store. The club maintains active engagement with supporters via multiple social media channels and provides clear contact information and policies, reflecting a mature digital footprint. Technically, the website is built on WordPress with WooCommerce, enhanced by modern analytics and marketing tools such as Google Tag Manager, Google Analytics, and Quantcast. The presence of DNSSEC and HTTPS with strong SSL configuration indicates a secure hosting environment managed by team.blue nl B.V. The site is mobile-optimized and SEO-friendly, leveraging Yoast SEO for metadata and structured data. From a security perspective, the site demonstrates good practices including cookie consent mechanisms and no visible vulnerabilities or exposed sensitive data. However, there is room for improvement in implementing additional HTTP security headers and publishing explicit security policies or incident response contacts. Privacy compliance is strong with comprehensive privacy and cookie policies in Dutch, aligned with GDPR requirements. Overall, the website presents a low-risk profile with a solid business credibility and technical foundation. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen trust and resilience.

Architekturgalerie München operates as a cultural platform dedicated to architecture and related spatial disciplines, offering exhibitions, lectures, and discussions to a diverse audience including professionals and the public. The website is built on TYPO3 CMS and employs modern web technologies such as jQuery and Google Analytics with privacy-conscious configurations. The site demonstrates good design quality, clear navigation, and GDPR-compliant privacy and cookie policies. Security posture is solid with HTTPS and anonymized analytics, though it lacks advanced security headers and explicit incident response information. Overall, the website is professional and trustworthy, supporting the gallery's mission effectively.

D

DETAIL

detail.de

70

DETAIL is an established international media platform focused on architecture, construction, and design. It offers rich editorial content, a magazine, an online shop, and organizes events and awards targeting professionals in architecture and design sectors. The website is built on Magento 2, leveraging modern JavaScript frameworks and third-party services for analytics, advertising, and user consent management. The platform demonstrates a mature digital infrastructure with good mobile optimization and SEO practices. Security posture is strong with HTTPS, CAPTCHA protections, and error tracking, although explicit security policies and incident response contacts are not publicly visible. Privacy compliance is well addressed with GDPR-aligned cookie consent and privacy policies. Overall, the site is professional, trustworthy, and well-positioned in its niche media market.

D

Deutsche Gesellschaft für christliche Kunst e.V.

dg-kunstraum.de

57

The Deutsche Gesellschaft für christliche Kunst e.V. operates the DG Kunstraum Diskurs Gegenwart website, serving as a cultural and artistic forum with a Christian perspective focused on contemporary art and discourse. The organization is a small non-profit entity based in Germany, offering exhibitions, events, publications, and membership opportunities to art enthusiasts and the Christian art community. The website reflects this mission with rich content, event previews, and partner collaborations, targeting a niche audience interested in art and culture within a religious context. Technically, the website is built on WordPress and employs common JavaScript libraries such as jQuery and Masonry for layout and image handling. The site is moderately optimized for performance and mobile devices, with good design quality and clear navigation. However, accessibility features and SEO optimizations are basic, and no advanced frameworks or hosting details are evident from the content. From a security standpoint, the site uses HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks important security headers and does not provide explicit incident response or vulnerability disclosure information. Privacy compliance is partially addressed with a privacy policy and cookie policy, but no active cookie consent mechanism is implemented. Contact information is limited to social media links, with no direct email or phone contacts visible. Overall, the website is trustworthy and professionally presented, suitable for its cultural non-profit purpose. Strategic improvements in security headers, privacy consent, and incident response transparency would enhance its security posture and compliance. The domain registration aligns well with the organization's profile, supporting legitimacy and trustworthiness.

HelloMe is a creative studio based in Germany, established in 2015, specializing in various design disciplines including art direction, digital, exhibition, identity, publication, product, spatial, and typeface design. The website serves primarily as a portfolio showcasing selected works, targeting creative professionals and potential clients seeking high-quality design services. The business model is service-oriented, focusing on creative project delivery and brand presentation. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery, Flickity, and Tippy.js for enhanced user interface and experience. The site demonstrates good mobile optimization and a consistent branding approach, although SEO and accessibility features are basic. Hosting and domain registration are stable and consistent with the business profile. From a security perspective, the site uses HTTPS with a valid SSL configuration and has domain transfer protections in place. However, it lacks DNSSEC and important security headers, which could be improved to enhance security posture. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is weak due to the absence of privacy and cookie policies, and no explicit contact information or incident response channels are provided. Overall, the website presents a professional and trustworthy image for a small creative studio but would benefit from improved privacy compliance, security headers, and clearer contact information to strengthen trust and regulatory adherence.

F

fidion GmbH

fidion.de

52

fidion GmbH operates a specialized web content management system (fCMS) tailored for media houses, newspapers, and magazines. Their platform offers modular licensing, multi-channel content delivery, integrated SSO and payment servers, and hosting services primarily focused on the German market. The company positions itself as a niche provider within the media technology sector, emphasizing ease of use, responsive design, and revenue generation through paywalls. The website reflects a professional and consistent brand image, targeting media professionals and publishers. Technically, the site uses a proprietary CMS with a modern JavaScript stack including jQuery and Google Maps API. Hosting is managed by fidion GmbH with data centers in Germany, ensuring compliance with local data protection laws. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate, with asynchronous script loading and responsive images. Security posture is solid with enforced HTTPS and user browser security notifications, but lacks explicit HTTP security headers and a cookie consent mechanism. No visible forms reduce attack surface, but the absence of published security policies or incident response contacts limits transparency. WHOIS data is minimal but consistent with the business, and no suspicious domains or vulnerabilities were detected. Overall, fidion.de presents a trustworthy and professional digital presence with room for improvement in security headers and privacy compliance mechanisms. The business is well-positioned in its niche with a clear value proposition and technical maturity.

A

A&L Goodbody LLP

algoodbody.com

70

A&L Goodbody LLP is a leading Irish corporate law firm specializing in providing expert legal advice to multinational corporations, financial institutions, and government bodies. The firm offers a broad range of legal services including corporate and M&A, finance, employment, litigation, environmental law, tax, and more. Their website reflects a mature and professional digital presence with comprehensive content and clear navigation targeting legal professionals and corporate clients. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and OneTrust for cookie consent, indicating a well-maintained infrastructure with moderate performance and good mobile optimization. Security posture is strong with HTTPS and Content Security Policy headers, though additional security headers and explicit security policies could enhance trust. Privacy compliance is well addressed with detailed policies and consent mechanisms. However, the absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, though the website content and branding strongly support authenticity. Overall, the site is professional, secure, and compliant, suitable for its target audience.

Stanno.com/uk is an official e-commerce website specializing in sportswear and sports equipment targeted primarily at UK customers. The site serves as a direct retail channel for the brand, offering a range of sports apparel and accessories. The business model is focused on online sales with a medium-sized market presence in the retail sector. The website demonstrates consistent branding and good content quality, supported by official social media channels and trust indicators such as Trustpilot integration. Technically, the website is built on the Magento 2 platform, leveraging modern JavaScript libraries including RequireJS and jQuery, and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized and includes GDPR-related cookie consent mechanisms. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and implements key security headers, indicating a good security posture. Captcha mechanisms are in place to mitigate automated abuse. However, the absence of a published privacy policy and terms of service pages reduces privacy compliance confidence. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional and trustworthy from a user perspective but lacks transparency in domain registration and privacy documentation. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing accessibility, and verifying domain registration details to improve trust and compliance.