Security Directory

D

D'aucy

daucy.fr

51

D'aucy is a well-established French cooperative brand specializing in vegetable products including canned, frozen, and prepared foods. The website reflects a mature digital presence with a focus on sustainability, cooperative values, and consumer engagement through recipes and educational content. Technically, the site uses WordPress with modern JavaScript libraries and analytics tools such as Matomo and Microsoft Clarity, ensuring a good user experience and data-driven insights. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data for the domain is a notable anomaly but does not detract significantly from the overall legitimacy given the professional presentation and parent company association. Overall, the site is trustworthy, user-friendly, and compliant with privacy regulations.

E

EDF Renewables North America

edf-renewables.com

53

EDF Renewables North America operates as a market-leading independent power producer and service provider specializing in renewable energy solutions including wind (onshore and offshore), solar photovoltaic, energy storage, and electric vehicle charging across North America. The company positions itself as a sustainable energy partner, targeting businesses and communities seeking clean energy solutions. Their website reflects a mature digital presence with comprehensive content, multi-language support, and active engagement through social media channels. The business is a subsidiary of the EDF Group, a major global energy player, reinforcing its market credibility. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and Yoast SEO, ensuring good SEO and user experience. The site is mobile-optimized and accessible, with a moderate performance profile. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place; however, explicit security headers and incident response information are absent, representing areas for improvement. The WHOIS data for the domain is unavailable, indicating possible privacy protection or proxy registration. While this reduces transparency, the website's branding, content quality, and external affiliations support its legitimacy. No direct company contact emails or phone numbers are published, with contact facilitated via web forms. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the website demonstrates a professional and trustworthy digital presence aligned with its business objectives in the renewable energy sector. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving direct contact information to strengthen trust and compliance.

HugeDomains operates as a specialized e-commerce platform focused on selling premium domain names such as Crebe.com. Established since 2005, it offers customers flexible payment plans, a 30-day money back guarantee, and secure purchasing options including PayPal and Escrow.com. The website is professionally designed with clear navigation, mobile responsiveness, and customer testimonials that enhance trust and credibility. Technically, the site employs modern technologies including jQuery, Google Analytics, and Cloudflare Bot Management, ensuring a stable and secure user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers could be improved. Privacy compliance is well addressed with comprehensive policies and GDPR-aligned consent banners. Overall, the platform presents a trustworthy and user-friendly domain marketplace with solid business and technical foundations.

Ö

Österreichischer Golf Verband

golf.at

64

The Österreichischer Golf Verband is the national governing body for golf in Austria, providing membership services, event organization, and golf-related information to players and clubs. The website is professionally designed using the Neos CMS and Flow PHP framework, with modern technologies such as jQuery and Google Tag Manager integrated. The site demonstrates good digital maturity with mobile optimization and clear navigation. Security posture is strong with HTTPS enforced, security headers present, and no exposed sensitive data. Cookie consent is managed via OneTrust, indicating GDPR compliance. Overall, the website is trustworthy and serves its target audience effectively.

3

321 MED GmbH

321med14.com

50

321 MED GmbH is a German healthcare technology company specializing in digital reception and practice management software for medical facilities such as clinics, medical practices, and pharmacies. Their flagship product, the Online-Rezeption, offers a comprehensive suite of features including patient management, appointment scheduling, AI-powered telephone assistance, and workflow automation. The company has established a strong market presence with over 3,500 healthcare providers and 5 million patients served, emphasizing significant time savings and improved patient communication. The website reflects a mature, professional business with consistent branding and extensive media coverage. Technically, the website employs modern web technologies including jQuery, Usercentrics for GDPR-compliant consent management, Google Tag Manager, and Facebook Pixel for analytics and marketing. Hosting and DNS services leverage Cloudflare, although DNSSEC is not enabled. The site is mobile-optimized, accessible, and SEO-friendly, with fast loading times and rich multimedia content enhancing user engagement. From a security perspective, the site enforces HTTPS with a strong SSL configuration and integrates GDPR-compliant cookie consent. However, it lacks visible HTTP security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's history and no privacy protection, which supports transparency. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for a healthcare software provider. Strategic improvements include enabling DNSSEC, publishing security policies, and adding incident response contacts to further enhance trust and security posture.

S

StaWEBnice - tvorba webových stránek a eshopů

stawebnice.com

60

StaWEBnice is a small Czech technology service provider specializing in web development, e-commerce solutions, SEO, copywriting, and digital marketing. The company targets small business owners, entrepreneurs, and bloggers primarily in the Czech Republic, offering affordable and professional web and e-shop creation services. The website is well-structured, professionally designed, and provides comprehensive information about services, team, and client references. Technically, the site is built on Joomla CMS with modern frameworks and libraries, including Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data for the domain is a concern and should be investigated further to confirm domain legitimacy. Overall, the site demonstrates a mature digital presence with good privacy compliance and user experience.

P

Provident Promotions

providentpro.com

53

Provident Promotions is a small, regionally focused creative agency based in Hastings, Nebraska, specializing in digital media marketing services including website design, logo creation, photography, video production, and SEO. The company targets local businesses and non-profits seeking professional marketing tools to build and grow their brands. Their website demonstrates a good level of technical maturity, leveraging WordPress CMS with modern plugins and libraries to deliver a responsive and SEO-optimized user experience. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and privacy policies indicates room for improvement. The lack of WHOIS data for the domain raises concerns about domain registration transparency, which could impact trustworthiness despite the professional presentation and client testimonials. Overall, the website is well-designed and functional but would benefit from enhanced privacy compliance and clearer domain legitimacy.

I

isla

traceyour.events

62

TRACE by isla is a specialized SaaS platform focused on providing credible, real-time carbon measurement and reduction insights for the event industry. The platform targets event planners, business owners, and sustainability officers, offering tools to measure carbon footprints across live, hybrid, and digital events. TRACE positions itself as a niche leader in event sustainability, supported by strong branding, client testimonials, and case studies. Technically, the website is built on WordPress with modern JavaScript libraries and integrates analytics and marketing tools such as Google Analytics, HubSpot, and Hotjar. The site is mobile-optimized and SEO-friendly, providing a professional user experience. Security-wise, the site enforces HTTPS and uses reCAPTCHA Enterprise for form protection but lacks some recommended security headers and a formal security policy. Privacy compliance is adequate with a comprehensive privacy policy, though cookie consent mechanisms could be improved. Overall, the domain WHOIS data is privacy-protected but consistent with the business's UK-based identity. The website demonstrates a high level of professionalism and trustworthiness with no critical security issues detected.

T

Two Stories - Brand Consultancy & Design Studio

twostories.studio

62

Two Stories is an independent brand consultancy and design studio based in the North West of England. They provide a range of services including brand consultancy, design, digital web development, and brand communications. The company positions itself as a purpose-led, award-winning agency focused on creating meaningful and memorable brands that connect with audiences. Their website is professionally designed, mobile-optimized, and includes comprehensive content about their services, portfolio, team, and client testimonials. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Google Analytics integration, ensuring good SEO and analytics capabilities. Security posture is strong with HTTPS enforced and a cookie consent mechanism in place, although some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the website reflects a credible and professional business with a strong digital presence.

L

Leonardo Demartino

demartino.ar

52

Leonardo Demartino's website serves as a professional portfolio highlighting his expertise as a lead developer in software, game development, and multimedia applications. The site showcases a variety of projects across multiple platforms including iOS, Android, Steam, and consoles, positioning him as a niche player in the indie game and multimedia software market. The business model is primarily personal branding and project promotion, targeting developers, gamers, and potential collaborators. Technically, the website employs a modern and responsive design using Bootstrap, jQuery, and Google Fonts, ensuring good mobile optimization and user experience. The site is well-structured with clear navigation and professional content presentation. However, no CMS or hosting provider details are evident, and performance is moderate. From a security perspective, the site lacks visible security headers and privacy or cookie policies, which are important for compliance and user trust. No forms or analytics scripts reduce the attack surface and tracking footprint, but the absence of incident response or vulnerability disclosure information indicates room for improvement in security maturity. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to improve its risk posture and user confidence.

R

Rugby Club Vannes

rugbyclubvannes.bzh

45

Rugby Club Vannes operates a professional and well-structured website serving as the primary digital presence for the rugby club. The site provides comprehensive information about the club's teams, news, match schedules, ticketing, and merchandise. The club targets rugby fans and the local community in France, positioning itself as a regional sports entity with a solid online footprint. Technically, the website is built on WordPress, leveraging popular plugins such as Yoast SEO and WP Rocket for SEO and performance optimization. The site employs modern web technologies including jQuery and Font Awesome, and implements cookie consent via tarteaucitron.io, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, though explicit security policies and incident response contacts are absent. Privacy compliance is partial, with cookie consent present but no clear privacy policy or terms of service pages. Overall, the website is professional, trustworthy, and functional, with room for improvement in privacy and security transparency.

I

INTRASY s.r.o.

intrasy.com

60

INTRASY s.r.o. is a Slovak-based company specializing in telematics solutions, including GPS vehicle monitoring, telematics hardware distribution, and API integrations for fleet management. The company targets businesses with vehicle fleets, logistics providers, and transport services, offering both hardware and software solutions to optimize fleet operations. Established in 2020, INTRASY positions itself as a trusted regional provider with a consistent brand and a clear focus on transportation technology. The website reflects a professional and user-friendly design with comprehensive service descriptions and active customer engagement channels.

I

INTRASY s.r.o.

intrasy.sk

60

INTRASY s.r.o. operates a professional website focused on vehicle telematics and fleet management solutions, primarily serving businesses in Slovakia. The company offers GPS monitoring, API integrations, and telematics hardware sales, positioning itself as a trusted regional provider with partnerships including Bolt, UPS, and SPS. The website is built on WordPress with WooCommerce, providing e-commerce capabilities and a content-rich blog to engage its target audience. Technically, the site employs modern web technologies, is mobile-optimized, and uses Cloudflare DNS with DNSSEC for enhanced security. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates good business credibility and technical maturity with room for improvement in formal security documentation and accessibility. The domain registration is consistent and legitimate, supporting the company's trustworthiness.

O

OpenPandora GmbH

dragonbox.de

62

DragonBox Shop, operated by OpenPandora GmbH, is a specialized e-commerce retailer based in Germany focusing on retro gaming products, accessories, and mini-PCs. The company targets retro gaming enthusiasts and technology hobbyists, offering a curated selection of products including game controllers, adapters, and repair services. The website demonstrates a consistent brand presence with clear business information and trust signals such as Trusted Shops certification and GDPR-compliant privacy and cookie policies. Technically, the site is built on the PrestaShop 1.7 platform, leveraging modern web technologies including jQuery, Matomo Analytics, and layered sliders for enhanced user experience. The site is mobile-optimized and provides good SEO and accessibility features, although some accessibility aspects could be improved. Performance is moderate, with a well-structured navigation system supporting a positive user experience. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security policy documentation and incident response contact details. Security headers are not fully evident, suggesting room for improvement in hardening the site against common web threats. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, DragonBox Shop presents a trustworthy and professional online presence with a solid privacy compliance posture and a niche market focus. Strategic enhancements in security policies and technical security headers would further strengthen its security posture and customer trust.

T

The Video Game Fans

cotegamers.com

55

The Video Game Fans operates a specialized e-commerce platform focused on retro gaming books, magazines, and games. Founded in 2014 and based in France, the company targets video game enthusiasts and collectors with a curated catalog. The website is built on PrestaShop, integrating modern payment options such as Amazon Pay and PayPal, and shipping services like Mondial Relay and Boxtal Connect. Multi-language support enhances accessibility for international customers. Technically, the site is moderately performant and mobile-optimized, though there is room for improvement in security headers and SEO. Security posture is solid with HTTPS and bot protection via Google reCAPTCHA, but explicit security policies and vulnerability disclosures are absent. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and stable operation.

R

Rontar Group OÜ

rontar.com

56

Rontar Group OÜ operates a professional adtech platform focused on providing dynamic retargeting and native advertising solutions primarily for e-commerce businesses. The company integrates with major platforms such as Shopify and Magento and serves over 1,200 customers globally, positioning itself as a specialized player in the digital advertising market. The website content is well-structured, with clear service offerings and customer testimonials that reinforce its market credibility. Technically, the site employs modern JavaScript libraries and third-party analytics and advertising tools, ensuring a functional and moderately optimized user experience across devices. Security posture is solid with HTTPS enforced and GDPR-compliant consent mechanisms, though there is room for improvement in publishing explicit security policies and headers. The absence of WHOIS data is a notable anomaly but does not currently undermine the operational legitimacy of the business. Overall, Rontar presents as a trustworthy and competent adtech provider with a good balance of business and technical maturity.

V

VORTAL

vortal.biz

65

VORTAL is a leading global provider of eProcurement and eSourcing solutions, targeting both public and private sector organizations. Their platform offers a comprehensive suite of services including category management, dynamic purchasing systems, eAuctions, and supplier relationship management, positioning them strongly in the B2B technology and government sectors. The website reflects a mature digital presence with multilingual support and professional branding. Technically, the site is built on WordPress with modern plugins for SEO, multilingual content, and cookie consent, indicating a well-maintained infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, complemented by a comprehensive cookie consent mechanism ensuring GDPR compliance. However, the absence of publicly available WHOIS data due to privacy protection slightly reduces transparency but is justified given the business nature. Overall, the site demonstrates a solid balance of business credibility, technical maturity, and privacy compliance.

J

Jan VOSÁTKA

vosatkajan.cz

53

The website vosatkajan.cz is a personal website belonging to Jan Vosátka, primarily focused on personal genealogy and related content. It serves as a personal branding and informational site without evident commercial activities. The site is built on Joomla CMS with the Gantry 5 framework and uses common web technologies such as jQuery and Font Awesome. The technical infrastructure is modern and moderately optimized for performance and mobile devices. Security posture is adequate with HTTPS enforced and a cookie consent mechanism implemented, but lacks advanced security headers and formal privacy or terms of service documentation. Contact information is limited but includes a valid email and WhatsApp number. Overall, the site is trustworthy and safe for general audiences.

The website domecekhorovice.cz represents a municipal leisure center named Středisko volného času - DOMEČEK HOŘOVICE, established in 2005 and serving the local community of Hořovice, Czech Republic. It offers cultural and educational activities primarily targeting children, youth, and families. The site provides event announcements, contact information, and terms of service documentation, reflecting a public sector non-profit business model with municipal backing. Technically, the website employs common web technologies including jQuery, Google Analytics, Google Tag Manager, Google Maps API, and Lightbox2 for image galleries. The site appears to be custom-built or uses an unknown CMS, with moderate performance and good mobile optimization. SEO and accessibility features are basic but functional. From a security perspective, the site uses HTTPS and includes no visible sensitive data exposure. However, it lacks security headers and does not provide privacy or cookie policies, which are compliance gaps. The use of third-party analytics implies moderate user tracking without explicit consent mechanisms. No incident response or vulnerability disclosure information is present. Overall, the website is legitimate, consistent with its municipal purpose, and safe for general audiences. Strategic improvements include implementing privacy and cookie policies, enhancing security headers, and improving accessibility and compliance to strengthen trust and security posture.

P

Proplavani.cz

proplavani.cz

48

Proplavani.cz is a Czech Republic-based e-commerce retailer specializing in swimming accessories and sports swimwear, endorsed by Czech Olympian Martina Moravčíková. The business operates primarily online via a Shopify platform with two physical stores in Prague. The website is professionally designed, mobile-optimized, and provides comprehensive privacy and cookie policies compliant with GDPR. The technical infrastructure leverages Shopify's hosting and CDN services, integrating marketing and analytics tools such as Facebook Pixel and AVADA Cookies Bar. Security posture is strong with HTTPS enforced, though some security headers are missing and no explicit security policies or incident response contacts are publicly available. The domain WHOIS data is not publicly accessible, indicating privacy protection, which slightly reduces transparency but is common for e-commerce sites. Overall, the site is trustworthy, well-maintained, and targets general audiences interested in swimming products.

B

Blossom Themes

blossomthemes.com

74

Blossom Themes is a small technology company specializing in the development and sale of feminine WordPress themes and templates. Founded in 2017, the company targets women, bloggers, and small business owners seeking easy-to-use, aesthetically pleasing website themes without coding. Their market position is niche-focused, offering specialized products in the WordPress theme ecosystem. The website demonstrates a professional design with good content quality and consistent branding, supported by structured data and SEO optimizations.

E

EDF Renewables North America

edf-re.com

52

EDF Renewables North America operates as a market-leading independent power producer and service provider specializing in renewable energy solutions including onshore and offshore wind, solar photovoltaic, energy storage, and electric vehicle charging across North America. The company positions itself as a sustainable energy leader with a history dating back to 1987 and is affiliated with the global EDF Group. Their website reflects a professional and comprehensive digital presence, targeting businesses and stakeholders interested in clean energy solutions. The business model focuses on development, operation, and optimization of renewable energy assets, supported by a strong corporate social responsibility ethos and active communication channels including press releases and social media. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, Google Analytics, and several plugins for SEO, multilingual support, and GDPR compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and published security policies. No critical vulnerabilities were detected in the visible content. The absence of WHOIS registration data for the domain www.edf-re.com is a notable concern, as it raises questions about domain legitimacy and ownership transparency. Despite this, the website content, branding consistency, and external links to known EDF Group domains support the authenticity of the business. The site does not expose sensitive data and complies with privacy regulations, including GDPR. However, the lack of direct contact emails or phone numbers and missing security.txt or incident response information suggests areas for improvement in transparency and security readiness. Overall, EDF Renewables North America presents a credible and professional online presence aligned with its business objectives in the renewable energy sector. Strategic recommendations include verifying domain registration details, enhancing security headers, publishing security and incident response policies, and improving direct contact information availability to strengthen trust and compliance.

E

EDF Renewables North America

edf-re.mx

53

EDF Renewables North America operates a dedicated Mexico division focused on renewable energy projects including solar and wind power generation. The company has been active in Mexico since 2000, with a large employee base and offices in Mexico City and Oaxaca. Their market position is strong as a leading independent power producer and service provider in the renewable energy sector, offering a broad portfolio of clean energy technologies and services. The website reflects a mature digital presence with modern technologies, SEO optimization, and multi-language support. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are absent. WHOIS data is missing, which slightly impacts trust but the overall professional presentation and corporate affiliations support legitimacy.

E

Eden Renewables

eden-re.com

67

Eden Renewables is a small Indian company specializing in renewable energy solutions, likely offering consulting and sustainable energy services. The website is built on WordPress using Elementor and includes essential privacy compliance features such as a privacy policy and cookie consent banner. The technical infrastructure is moderate with standard hosting by GoDaddy and no advanced security headers detected. The security posture is adequate with HTTPS enabled but could be improved by adding DNSSEC and additional HTTP security headers. No incident response or vulnerability disclosure policies are published, which could be a gap in security transparency. Overall, the website is professional and trustworthy with room for technical and security enhancements.

D

Dalkia

dalkiasolutions.com

55

Dalkia Solutions is a large energy efficiency solutions provider offering a comprehensive range of services including chiller services, combined heat and power, digital services, intelligent load management, LED lighting and controls, operations and maintenance, refrigeration, retail energy, smart infrastructure solutions, solar plus storage, and strategic energy management. The company targets commercial and industrial clients nationwide and is part of the EDF Group, a well-known energy conglomerate. The website demonstrates a professional and consistent brand presence with detailed service descriptions and active social media engagement. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and OwlCarousel, and integrates Google Tag Manager for analytics. The site is mobile optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with no critical errors detected. From a security perspective, the site uses HTTPS with CSRF tokens in forms, but lacks important security headers and a cookie consent mechanism. No explicit incident response or vulnerability disclosure policies are published, which could be improved to enhance trust and compliance. The absence of WHOIS data is a concern but the website content and branding align with a legitimate business. Overall, the site is professional and trustworthy but would benefit from enhanced security headers, explicit contact information, and improved privacy compliance mechanisms to strengthen its security posture and user trust.

R

RE/MAX Alfa

realitnikariera.cz

68

The website www.realitnikariera.cz serves as a professional career portal for RE/MAX Alfa, a leading real estate brokerage office in the Czech Republic. It offers comprehensive information about becoming a real estate agent, company mission, vision, strategy, and testimonials from current agents. The site is well-structured, content-rich, and targets individuals interested in real estate careers within the Czech market. Technically, it is built on WordPress with modern SEO and analytics tools, ensuring good performance and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers are not confirmed. WHOIS data is unavailable due to privacy protection, which is common and justified for business domains. Overall, the site is trustworthy, professional, and compliant with GDPR regulations.

RE/MAX Alfa is a professional real estate agency operating primarily in the Czech Republic, offering a wide range of services including property sales, rentals, appraisals, auctions, and legal support. The company is part of the international RE/MAX network and positions itself as a market leader with a strong focus on customer satisfaction and high-quality service delivery. The website is well designed, multilingual, and provides comprehensive information about services, agents, and legal policies. Technically, the site is built on WordPress with modern plugins and SEO optimizations, ensuring good performance and user experience. Security measures include HTTPS and Google reCAPTCHA, although additional security headers could enhance protection. The absence of WHOIS data is a notable gap, but the overall digital presence and business information suggest a legitimate and trustworthy operation.

U

Udruženje građana EmPower

empower.rs

42

Udruženje građana EmPower is a Serbian non-profit organization focused on empowering youth through educational projects and workshops. Their offerings include digital learning tools like eBukvar, internet safety workshops, Erasmus Plus international youth exchanges, and programming workshops. The organization targets young people and children, aiming to improve community life through education and digital literacy. The website is professionally designed using WordPress and common web technologies, providing a good user experience and mobile optimization. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. Contact information and social media presence support business credibility. Overall, the site is safe and trustworthy with room for improvement in privacy and security practices.

F

Freiraumfest

freiraumfest.at

56

Freiraumfest is a non-commercial, self-organized cultural festival based in Graz, Austria, focusing on community-driven events and free spaces for cultural, artistic, and political engagement. The festival is scheduled for November 16-23, 2025, and aims to provide a platform for diverse community participation beyond commercial interests. The website is built on WordPress using modern plugins and themes, offering a good user experience with mobile optimization and SEO features. Security posture is adequate with HTTPS but lacks advanced security headers and formal policies. No privacy or cookie policies are present, which is a compliance gap. Overall, the site is legitimate and trustworthy for its purpose but could improve in privacy and security transparency.

C

CryptoParty Austria

cryptoparty.at

60

CryptoParty Austria is a community-driven non-profit initiative focused on educating individuals about internet security, privacy, and anonymity through meetups and workshops. The website serves as an information hub for upcoming events primarily in Austrian cities such as Vienna and Graz, and provides resources for learning about encryption and secure communication. The organization leverages open-source technologies and is hosted by the reputable Chaos Computer Club Wien, reinforcing its community and privacy-oriented ethos. Technically, the site uses DokuWiki CMS with PHP and jQuery, offering a functional but basic user experience with moderate performance and limited mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and serves its niche audience well but could improve in compliance and security transparency.

R

Repair Café Graz

repaircafe-graz.at

45

Repair Café Graz is a small, community-driven non-profit initiative based in Austria focused on sustainability by promoting repair culture to reduce waste. The website serves as an informational platform for local community members interested in repair events and workshops. Technically, the site is built on WordPress using the Divi theme, incorporating standard web technologies and Google reCAPTCHA for form security. The website is accessible, mobile-optimized, and moderately performant but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS and reCAPTCHA, but missing security headers and formal policies reduce overall security maturity. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, matching the local community focus. Strategic improvements in privacy compliance, security headers, and transparency would enhance trust and security.

F

Forum Urbanes Gärtnern

urbanes-gaertnern.at

54

Forum Urbanes Gärtnern operates the Zentralgartenbüro website as a non-profit organization dedicated to promoting urban gardening, community gardens, and educational gardening initiatives in Graz, Austria. The organization provides workshops, consulting, garden construction, and networking opportunities to foster social-ecological transformation through gardening. Their market position is that of a local leader in community gardening support with a clear focus on education and social impact. The website is professionally designed, mobile-optimized, and provides comprehensive content relevant to their audience.

N

Nachhaltig in Graz

nachhaltig-in-graz.at

46

Nachhaltig in Graz is a well-established local sustainability information portal based in Graz, Austria, founded in 2017. It provides residents with comprehensive resources on sustainable living, including news, event calendars, guides, and a dedicated mobile app. The website positions itself as a trusted community hub for environmentally conscious individuals, supported by active social media channels and regular content updates. Technically, the site is built on WordPress with a modern plugin ecosystem, including Yoast SEO and event management tools, hosted on a green energy-powered provider. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be enhanced. Security posture is solid with HTTPS and reCAPTCHA integration, but lacks some recommended security headers and explicit incident response policies. Privacy compliance is basic, with a GDPR privacy notice but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and serves its niche audience effectively.

C

cba – cultural broadcasting archive

cba.media

57

cba.media is a non-profit cultural broadcasting archive offering a large collection of podcasts, audio, video, images, and documents primarily targeting German-speaking audiences interested in culture, society, and politics. The platform is built on WordPress with a modern theme and provides a professional user experience with good navigation and mobile optimization. The website is secured with HTTPS and includes a comprehensive privacy policy compliant with GDPR. However, it lacks a cookie consent mechanism and visible security headers, which are areas for improvement. The WHOIS data is privacy protected, which is common for this type of organization and does not detract from its legitimacy. Overall, cba.media presents a trustworthy and well-maintained digital presence in the cultural media sector.

R

Radio Helsinki

helsinki.at

46

Radio Helsinki is a well-established community radio station based in Graz, Austria, with a strong focus on alternative and cultural programming. The website serves as a hub for live radio streaming, program schedules, podcasts, workshops, and community engagement. The station has a solid market position as a local non-profit media outlet with a loyal audience and active social media presence. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and Borlabs Cookie for SEO and privacy compliance. The site is mobile-optimized, accessible, and performs moderately well. Security best practices are observed with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. The security posture is good with no detected vulnerabilities or exposed sensitive data. GDPR compliance is evident through comprehensive privacy and cookie policies. The domain registration data aligns well with the business identity, indicating legitimacy and trustworthiness. Overall, the website presents a professional, trustworthy, and user-friendly platform for community radio listeners and contributors. Strategic improvements could focus on publishing formal security policies and incident response information to enhance transparency and trust.

S

SchloR

schlor.org

42

SchloR is a self-managed non-profit community project based in Vienna-Simmering, Austria, focused on providing solidarity-based housing and creative workspaces. The organization operates under the umbrella of recognized entities such as habiTAT and Mietshäuser-Syndikat, emphasizing collective living and cultural engagement. Their business model includes direct loans from supporters to finance their projects, reflecting a strong community trust and engagement. The website is well-structured, content-rich, and targets local community members interested in alternative housing and cultural activities. Technically, the website is built on WordPress using modern plugins like Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. The presence of Google reCAPTCHA on forms enhances security against automated abuse. However, some security best practices such as DNSSEC and security headers are not implemented, which could be improved to strengthen the security posture. From a security perspective, the site uses HTTPS and has domain transfer protections in place, indicating a legitimate and controlled domain. No WAF or blocking mechanisms are detected, and the site content is fully accessible. Privacy compliance is adequate with a privacy policy present, though cookie consent mechanisms are lacking. No incident response or vulnerability disclosure information is found, which could be areas for future enhancement. Overall, SchloR presents a trustworthy, community-oriented project with a solid web presence and moderate technical maturity. Strategic improvements in security headers, cookie consent, and vulnerability disclosure would enhance their security and compliance posture further.

S

servus.at

servus.at

49

servus.at is a small non-profit cultural and technological initiative based in Linz, Austria, focused on demystifying technology through artistic and cultural projects. It supports research projects, organizes the biennial 'Art Meets Radical Openness' festival, and operates an independent open source data center for its members, which include artists, educational institutions, and NGOs. The website is built on Drupal 7 with a moderate technical infrastructure including jQuery, Bootstrap, and Matomo analytics. It is mobile optimized and provides clear navigation and relevant content for its target audience. Security posture is good with HTTPS and privacy-aware analytics, but lacks explicit privacy and cookie policies and security headers. The domain uses privacy protection in WHOIS, which is justified for this type of organization. Overall, the site is trustworthy and professional but could improve compliance and security best practices.

M

Miele Center Faulmann

mielecenter-faulmann.at

63

Miele Center Faulmann is a specialized retailer and service provider for Miele household appliances located in Vienna, Austria. The company offers a comprehensive range of products including kitchen appliances, laundry care, vacuum cleaners, and accessories, supported by an online shop and repair services. The website reflects a professional e-commerce platform with clear navigation and a focus on customer service. Technically, the site is built on Magento 2, leveraging modern JavaScript libraries and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Security measures include HTTPS enforcement, reCAPTCHA for form protection, and a GDPR-compliant cookie consent mechanism. However, explicit security policies and incident response contacts are not publicly available, which could be improved to enhance trust and compliance. Overall, the website is well-structured, secure, and compliant with privacy regulations, representing a trustworthy local business.

S

Spravia Sp. z o.o.

spravia.pl

52

Spravia Sp. z o.o. is a Polish real estate developer specializing in new apartment sales in Warsaw districts such as Mokotów, Bemowo, and Praga Południe. Founded in 2021, the company presents a professional online presence with a well-structured website optimized for SEO and user experience. The site targets general consumers interested in purchasing residential properties in Warsaw, offering detailed plans and pricing information. Technically, the website is built on WordPress with modern marketing and analytics integrations including Google Tag Manager, Hotjar, and Cookiebot for GDPR compliance. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though security headers and incident response policies are not explicitly published. Overall, the website reflects a medium-sized real estate business with a consistent brand and good digital maturity.

L

Swiss Gaming and Esports Hub: Festivals, Collaboration, and Competitive Insights

ludicious.ch

9

The website ludicious.ch serves as a niche media platform dedicated to the Swiss gaming and esports community. It provides news, festival coverage, and insights into the growth of esports and international collaboration within Switzerland's gaming industry. The target audience includes game developers, esports enthusiasts, and industry professionals interested in Swiss gaming culture. Technically, the site is built on WordPress with common plugins such as Yoast SEO and uses jQuery and Font Awesome for UI elements. The site is mobile optimized and has good SEO practices but lacks advanced accessibility features. Security-wise, the site uses HTTPS but lacks security headers and formal security policies, which could be improved. Privacy compliance is minimal, with no visible privacy or cookie policies or consent mechanisms. Contact is available only through a contact form, with no direct emails or phone numbers published. Overall, the site is professional and relevant but would benefit from enhanced security and privacy compliance measures.

S

Slovenia Games

sloveniagames.com

63

Slovenia Games Conference is a well-established annual event focused on the game development industry in Slovenia, attracting local and international professionals including programmers, artists, designers, and business leaders. The conference offers educational tracks, an indie expo, and networking opportunities, positioning itself as the largest games industry event in Slovenia. The website is built on WordPress with WooCommerce and uses common marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Hosting is via Amazon AWS nameservers, indicating a reliable infrastructure. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is limited to an official email address. Overall, the site is professional, content-rich, and trustworthy but could improve in security and privacy transparency.

G

Game Lab Graz

gamelabgraz.com

42

Game Lab Graz is an academic research group led by Johanna Pirker, focusing on exploring the full potential of video games through designing and researching virtual, engaging, and immersive experiences. The website serves as a platform to showcase projects, publications, courses, and team information related to game design and virtual reality. The target audience primarily includes students, researchers, and professionals interested in game development and immersive technologies. The business model is centered around education and research within the academic sector, positioning itself as a niche player in the field of game design and virtual reality research. Technically, the website is built on WordPress CMS with Elementor page builder and uses common web technologies such as jQuery, Bootstrap grid, and FontAwesome icons. Hosting appears to be provided by Alfahosting based on DNS nameservers. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO features. The design is professional and consistent with academic branding, providing a good user experience and clear navigation. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options. No exposed sensitive data or vulnerable libraries were detected. However, the absence of privacy and cookie policies indicates compliance gaps with GDPR and other data protection regulations. No incident response or security contact information is provided, which could be improved to enhance trust and readiness. Overall, the website is trustworthy and professionally maintained, with a strong academic focus. The main risks relate to privacy compliance and security best practices, which should be addressed to improve the security posture and regulatory adherence. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear contact information for security incidents.

S

SUBOTRON

subotron.com

10

SUBOTRON is a Vienna-based platform dedicated to digital game culture, focusing on organizing events such as talks, panels, and workshops, as well as providing news and networking opportunities for indie game developers and enthusiasts. The website positions itself as a niche community hub for Austrian and international digital game culture, with a history dating back to 2002. The business model appears to be community-oriented, possibly non-profit, emphasizing cultural and educational activities in the gaming sector. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies such as jQuery, Google reCAPTCHA v3 for spam protection, and FontAwesome for icons. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks DNSSEC, security headers, and published security policies or incident response contacts. No privacy or cookie policies were found, indicating gaps in compliance with GDPR and related regulations. The domain is well-established with consistent WHOIS data, enhancing trustworthiness. Overall, SUBOTRON presents a professional and trustworthy online presence with solid business credibility and technical implementation. The main areas for improvement include enhancing privacy compliance, implementing security best practices such as DNSSEC and security headers, and publishing clear policies to improve user trust and regulatory adherence.

S

Spektral

spektral.at

10

Spektral is a small non-profit community and cultural space based in Graz, Austria, providing an open space for social and cultural activities. The organization is currently engaged in a crowdfunding and crowdlending campaign to purchase their premises to secure long-term operation and independence. The website reflects a community-driven approach with active engagement through events, media, and social channels. Technically, the site is built on WordPress using a responsive theme and common plugins for media playback and event calendars, offering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and basic protections like Akismet for spam, but lacks advanced security headers and explicit incident response information. Privacy compliance is partially met with a comprehensive privacy policy but missing cookie consent mechanisms. Overall, the site is trustworthy and professional, with clear contact information and partner affiliations, but could improve in security and privacy transparency.

R

Rarebyte GmbH

rarebyte.com

50

Rarebyte GmbH is a small, established game development studio based in Austria with over 19 years of experience and more than 25 released titles. The company focuses on multiplatform game development, including PC, consoles, and mobile platforms, and collaborates with known publishers such as Headup Games and Greenheart Games. Their website reflects a professional and consistent brand image targeting gamers and industry partners. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics and cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is moderate with some best practices like domain transfer protection and cookie consent but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a privacy policy and cookie banner but no explicit GDPR statements or terms of service. Overall, the website is trustworthy and well-maintained, supporting the company's credibility in the gaming industry.

T

TJ Spartak Hořovice, z.s.

plavanihorovice.cz

47

TJ Spartak Hořovice is a local Czech sports club specializing in swimming and modern pentathlon. The website serves as an information hub for club members and the local community, providing event calendars, news updates, photo galleries, and training schedules. The club operates as a non-profit entity, focusing on youth and amateur sports activities in the Hořovice region. The site is well maintained with consistent branding and relevant content for its target audience. Technically, the website is built on Joomla CMS with supporting frameworks such as Bootstrap and UIkit, leveraging jQuery and Google Fonts for enhanced user experience. The site is mobile optimized and includes a cookie consent mechanism, reflecting a moderate level of digital maturity. Performance is moderate with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS but lacks several important security headers like Content-Security-Policy and HSTS, which could enhance protection against common web threats. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a cookie consent banner present but no explicit privacy policy or terms of service pages found. Overall, the website presents a moderate risk profile with good business credibility but could benefit from improved security practices and enhanced privacy documentation. Strategic recommendations include implementing security headers, publishing a comprehensive privacy policy, and maintaining up-to-date software to mitigate potential risks.

M

Masáže Hořovice Martin Crk

masaze-martincrk.cz

37

Masáže Hořovice Martin Crk is a small local business providing massage and wellness services in the Czech Republic. The website presents a professional and clean design with clear contact information and a focus on natural massage oils and stress relief. The business is relatively new, founded in 2022, and targets general consumers seeking relaxation and physical well-being. The site uses WordPress CMS with common plugins such as Yoast SEO and jQuery, indicating a standard modern web infrastructure. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy for its business purpose but would benefit from enhanced privacy and security practices.

H

HMS Stavby

hms-stavby.cz

37

HMS Stavby is a small construction company based in the Czech Republic, operating since 2012. The website presents basic information about the business and its services, targeting a general audience interested in building and construction. The site is built on WordPress using the Divi theme, with standard web technologies such as jQuery and Google Fonts. The hosting provider is WEDOS, consistent with the Czech location. The website has basic mobile optimization and moderate performance but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but no security headers detected and an expired domain status which poses a risk. Privacy compliance is minimal with no privacy policy or terms of service found, though a cookie consent mechanism is implemented. Overall, the site is functional but lacks comprehensive security and compliance measures.

A

AutoTužil

autotuzil.cz

54

AutoTužil is a small automotive service provider based in the Czech Republic offering a wide range of vehicle repair and maintenance services including nonstop auto repair, air conditioning servicing, diagnostics, and sale of auto accessories. The website is professionally designed with clear navigation and good mobile optimization, targeting vehicle owners in the local region. The business appears well-established with a founding year of 2004 indicated in the footer, although domain registration details are unavailable, which introduces some uncertainty about domain legitimacy. Technically, the site uses modern frontend libraries such as Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for user tracking. Security posture is moderate with HTTPS enabled but lacking security headers and a privacy policy, which are recommended for compliance and trust. Overall, the website is functional and trustworthy for its business purpose but would benefit from improved transparency and security practices.

ČESKOMORAVSKÝ POHÁR RALLYE (ČMPR) operates as an organizer and promoter of rally competitions primarily targeting motorsport enthusiasts in the Czech Republic. The website serves as the official platform for event calendars, results, rules, and news related to the rally cup. The business is positioned as a niche regional motorsport event organizer with a small organizational size and a history dating back to 2010. The site content is primarily in Czech and focuses on rally event information and community engagement via social media channels such as Facebook and YouTube. Technically, the website is built on WordPress using the Blocksy theme and leverages common web technologies including jQuery, Yoast SEO for search optimization, Google reCAPTCHA v3 for form security, and Swiper.js for UI components. Hosting appears to be provided by a Czech hosting provider (cesky-hosting.eu). The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and good SEO practices. From a security perspective, the site enforces HTTPS and integrates Google reCAPTCHA to protect forms from abuse. However, it lacks visible security headers and does not publish security policies or incident response contacts. Privacy and cookie policies are absent, indicating gaps in compliance with GDPR and related regulations. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website presents a professional and trustworthy front for its business purpose but would benefit from enhanced privacy compliance, security policy transparency, and improved contact information availability to strengthen user trust and regulatory adherence.