Security Directory

M

myAbility Social Enterprise GmbH

myability.jobs

66

myAbility.jobs is a specialized job platform dedicated to providing inclusive employment opportunities for people with disabilities and chronic illnesses in Austria. Operated by myAbility Social Enterprise GmbH, it holds a leading market position as the largest inclusive job board in the country. The platform offers a variety of services including job listings, job alerts, career advice, and a talent program aimed at students and academics with disabilities. The website is professionally designed with a strong emphasis on accessibility and user experience, ensuring barrier-free navigation and content presentation. Technically, the site is built on Drupal CMS and integrates modern tracking and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, although some security headers could be improved. Overall, the domain registration and business information are consistent and trustworthy, supporting the legitimacy of the platform.

O

OMAX Corporation

omax.com

73

OMAX Corporation, a subsidiary of Hypertherm, is a well-established manufacturer specializing in abrasive waterjet cutting machines and related precision cutting technologies. The company targets industrial and manufacturing sectors requiring high-precision machining solutions. Their website reflects a mature digital presence with professional design, structured data, and multi-language support, indicating a global market reach. Technically, the site leverages Drupal CMS and integrates multiple analytics and advertising platforms, including Google Tag Manager, Bing UET, and New Relic, demonstrating a modern and data-driven infrastructure. Security posture is generally good with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent, representing an area for improvement. The WHOIS data is notably missing or inaccessible, which raises some concerns about domain registration transparency, but the overall business credibility remains high due to the association with Hypertherm and consistent branding. Strategic recommendations include enhancing security transparency, publishing privacy and incident response policies, and verifying domain registration details to strengthen trust.

S

Sandoz

sandoz.fr

59

Sandoz France operates as a pharmaceutical company dedicated to pioneering access to medicines, including prescription, non-prescription, and biopharmaceutical products. The company recently expanded its production capabilities with a new antibiotic manufacturing unit in Austria and has transitioned into an independent entity. The website targets patients, healthcare professionals, and potential employees, offering corporate information, news, and career opportunities. Technically, the site leverages modern frameworks such as Next.js and Drupal CMS, hosted on Amazee.io infrastructure, with moderate performance and good mobile optimization. Security measures include HTTPS enforcement and standard security headers, though explicit privacy and cookie policies are absent, indicating a compliance gap. Overall, the website is professional, trustworthy, and secure, but could improve privacy transparency and direct contact information availability.

D

Defense Advanced Research Projects Agency

darpa.mil

72

DARPA (Defense Advanced Research Projects Agency) is a U.S. Department of Defense agency focused on pioneering advanced research and technology development to create technological surprise for national security. The website reflects a mature, well-established government entity with a clear mission, extensive collaboration with academia, industry, and government partners, and a portfolio of cutting-edge research programs and challenges. The site targets a broad audience including researchers, contractors, small businesses, and investors interested in defense technology innovation. Technically, the website is built on Drupal CMS with ReactJS components, uses Google Tag Manager and reCAPTCHA for security and analytics, and follows modern web design and accessibility standards. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be explicitly added. Privacy compliance is moderate with a clear privacy policy but no visible cookie consent mechanism. Overall, the site is professional, trustworthy, and well-maintained.

L

Leica Camera

leica-camera.com

64

Leica Camera is a globally recognized manufacturer specializing in high-end cameras, lenses, and precision mechanical instruments. The company targets professional photographers, photography enthusiasts, and hunters with a premium product portfolio including cameras, sport optics, and related accessories. The website reflects a mature digital presence with a professional design, consistent branding, and integration of modern web technologies such as Drupal CMS, Google Tag Manager, and OneTrust for cookie consent management. Hosting is provided via Amazon AWS infrastructure, ensuring reliable performance and scalability. Security posture is strong with HTTPS enforced and domain transfer restrictions in place, although DNSSEC is not enabled and no explicit security or incident response policies are published on the site. Privacy compliance is partially addressed through cookie consent mechanisms denying ad and analytics storage by default, but no explicit privacy policy or terms of service were detected in the analyzed content. Overall, the website is trustworthy, professional, and safe for general audiences, with room for improvement in transparency around privacy, security policies, and contact information.

H

Humanities Texas

humanitiestexas.org

60

Humanities Texas is a non-profit organization dedicated to promoting the humanities within the state of Texas through educational programs, exhibitions, grants, and public outreach. The organization targets educators, students, and the general public interested in Texas history and culture. Their website reflects a professional and consistent brand presence with a focus on accessibility and educational content. Technically, the site is built on Drupal CMS, leveraging modern JavaScript libraries and Google Analytics for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses asynchronous loading for analytics scripts, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profits but limits domain trust verification. Overall, the website is trustworthy, safe, and well-maintained, though it would benefit from enhanced privacy disclosures and security headers.

U

uOttawa Gee-Gees

geegees.ca

55

The uOttawa Gee-Gees website serves as the official portal for the University of Ottawa's sports teams and recreational activities. It targets university students and the campus community, providing bilingual access to varsity and recreational sports information. The site is built on Drupal CMS with several JavaScript libraries including jQuery, Bootstrap, and Modernizr, indicating a moderately modern technical infrastructure. However, some libraries are outdated, which may pose security risks. The website uses Google Analytics with IP anonymization, but lacks visible privacy or cookie policies, indicating gaps in privacy compliance. Security posture is moderate with domain transfer protections but lacks DNSSEC and security headers. The domain registration shows some inconsistency with the registrant country being Barbados, which does not align with the Canadian university branding, slightly reducing trust. Overall, the site is functional but would benefit from improved security, privacy policies, and technical updates.

H

HCL Software

hclindustrysaas.com

71

HCL Software's Industry Software Division operates as a key segment of HCL Technologies, delivering advanced AI-based software and digital platform engineering services primarily targeting telecommunications and manufacturing sectors. The company leverages a strong patent portfolio and strategic partnerships with industry leaders such as Microsoft, IBM, Cisco, and Rakuten Mobile to maintain a competitive market position. The website reflects a mature digital presence with comprehensive product portfolios and clear business messaging. Technically, the website is built on Drupal CMS with modern tracking and consent management tools like Google Tag Manager, Microsoft Clarity, and OneTrust. The site is mobile optimized, accessible, and SEO friendly, though some improvements in security headers and explicit contact information could enhance trust and compliance. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks published security policies or incident response details. The absence of WHOIS registration data is a notable gap, though the overall branding and partner ecosystem strongly support legitimacy. The site does not exhibit any adult or questionable content, targeting a professional enterprise audience. Overall, the website demonstrates a good balance of business credibility, technical implementation, and privacy compliance, with room for improvement in transparency and security best practices.

I

IEEE

ieee.org

77

IEEE is a globally recognized professional organization dedicated to advancing technology for humanity's benefit. It serves a large audience of engineering and technology professionals by providing extensive resources including publications, conferences, standards, and career development tools. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its target audience. Technically, the site leverages Drupal CMS, integrates multiple analytics and marketing tools, and implements modern web standards ensuring good performance and accessibility. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not prominently found. The absence of WHOIS data limits domain registration trust verification, but the overall site quality and branding strongly support legitimacy. Strategic recommendations include enhancing transparency on security and data retention policies and publishing vulnerability disclosure information.

C

Charles Schwab

schwabplan.com

76

Charles Schwab's workplace.schwab.com subdomain serves as a comprehensive portal for Retirement Plan Services, targeting participants, sponsors, and consultants. The site offers educational resources, account management tools, and secure login portals, reflecting the company's strong market position in financial services. The technical infrastructure is modern, leveraging Drupal CMS, advanced JavaScript libraries, and performance monitoring tools, ensuring a responsive and accessible user experience. Security posture is robust with HTTPS enforcement and multiple security headers, though explicit security policies and incident response information are not prominently published. Overall, the site demonstrates high professionalism and trustworthiness consistent with a large financial enterprise.

Charles Schwab Corporation operates a comprehensive corporate website providing detailed information about its business, leadership, history, citizenship initiatives, investor relations, and media presence. The company is a major player in the financial services sector, offering brokerage, banking, and investment advisory services to a broad audience including investors, clients, and employees. The website reflects a mature digital presence with a focus on transparency and corporate responsibility. Technically, the site is built on Drupal CMS with modern JavaScript libraries and integrates advanced marketing and analytics tools such as Tealium and Optimizely, indicating a high level of digital maturity. Security is robust with HTTPS enforcement, multiple security headers, and no visible vulnerabilities, complemented by comprehensive privacy and cookie policies that align with GDPR requirements. Overall, the site demonstrates a strong security posture and business credibility, though the absence of WHOIS data for the domain suggests a need for further verification of domain registration status. Strategic recommendations include maintaining up-to-date third-party libraries, enhancing incident response communications, and continuous security monitoring to sustain trust and compliance.

C

CUF

saudecuf.pt

69

CUF is a leading healthcare provider in Portugal, operating multiple hospitals, clinics, and health centers nationwide. The website offers comprehensive information about their services, including online appointment booking and teleconsultations, targeting the general public and patients seeking quality healthcare. CUF positions itself as a market leader with a strong brand presence and consistent messaging. The digital infrastructure is built on Drupal CMS with modern technologies and includes accessibility features, reflecting a mature digital presence. Security posture is strong with HTTPS, security headers, and consent mechanisms, although explicit security policies and incident response details are not publicly available. Overall, the website demonstrates professionalism, compliance with GDPR, and a trustworthy user experience.

U

U.S. Securities and Exchange Commission

investor.gov

69

Investor.gov is the official website of the U.S. Securities and Exchange Commission (SEC), providing comprehensive investor education, protection resources, and financial planning tools. The site targets individual investors, older investors, military personnel, teachers, veterans, youth, and entrepreneurs, offering a wide range of services including fraud alerts, investment professional background checks, and complaint submission channels. It serves as a trusted government resource to promote informed investment decisions and protect investors from fraud and scams. Technically, the website is built on the Drupal CMS platform, leveraging modern web technologies such as Google Analytics, Google Tag Manager, and the U.S. Web Design System (USWDS) for consistent government branding and accessibility. The site is mobile-optimized, accessible, and performs moderately well. Security is robust with enforced HTTPS, secure forms, and no exposed sensitive data, although some security headers could be enhanced. The security posture is strong, with no detected vulnerabilities or phishing indicators. Privacy compliance is good, with a comprehensive privacy policy and vulnerability disclosure policy publicly available. The site does not use intrusive advertising or affiliate marketing, maintaining transparency and user trust. Overall, Investor.gov demonstrates a high level of professionalism, trustworthiness, and commitment to user security and privacy.

E

Environmental Defense Fund

edf.org

72

Environmental Defense Fund (EDF) is a globally recognized nonprofit organization dedicated to addressing critical environmental challenges such as climate change, air pollution, and sustainable development. The organization leverages science, economics, and policy advocacy to deliver impactful solutions. Their website reflects a mature digital presence with a strong focus on user engagement, donations, and educational content. The site is well-branded, professionally designed, and optimized for accessibility and mobile use. Technically, EDF employs a modern Drupal CMS infrastructure, integrates reputable analytics and marketing tools, and maintains strong security practices including HTTPS and security headers. However, explicit security policies and incident response information are not publicly detailed, representing an area for improvement. Overall, EDF's website demonstrates high trustworthiness and professionalism consistent with its long-standing reputation in the environmental nonprofit sector.

N

National Credit Union Administration

mycreditunion.gov

72

MyCreditUnion.gov is an official U.S. government website operated by the National Credit Union Administration (NCUA) providing comprehensive financial education resources focused on the non-profit credit union industry. The site targets consumers and credit union members seeking to improve their financial knowledge and manage their money effectively. It offers key services such as educational content, consumer assistance, share insurance information, complaint submission, and credit union location tools. The website is well-positioned as a trusted government resource with consistent branding and strong trust indicators including the .gov domain and official seals. Technically, the site is built on Drupal CMS and leverages modern web technologies including Google Tag Manager and Microsoft Clarity for analytics. It is optimized for mobile devices, accessibility, and SEO, delivering a fast and professional user experience. The technical infrastructure appears robust with no major performance or usability issues detected. From a security perspective, the website enforces HTTPS and maintains domain transfer protections. However, DNSSEC is not enabled and explicit security headers are not detected, representing areas for improvement. The site has a published vulnerability disclosure policy but lacks visible incident response contacts and cookie consent mechanisms, which may impact compliance with privacy regulations. Overall, the website demonstrates a high level of professionalism, trustworthiness, and content quality with minor gaps in privacy compliance and security hardening. Strategic recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, and publishing incident response contacts to enhance security posture and regulatory compliance.

The New Arab is a UK-based English-language news media organization specializing in comprehensive coverage of the Middle East and North Africa. The website offers news, analysis, opinion, features, video, and podcasts targeting English-speaking audiences interested in MENA affairs. The site is professionally designed with consistent branding and good content quality, positioning itself as a leading source in its niche. Technically, the website is built on Drupal CMS and employs modern web technologies including Google Tag Manager, Google Analytics, Chartbeat, Microsoft Clarity, and lazy loading for images. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured data. Performance is moderate with room for improvement. Security posture is adequate with HTTPS enforced and no exposed sensitive data detected. However, the absence of security headers and explicit cookie consent mechanisms indicates areas for enhancement. The lack of WHOIS registration data raises concerns about domain legitimacy, though the website content and social media presence support its credibility. Overall, the site presents a professional media outlet with solid technical infrastructure but would benefit from improved transparency in domain registration, enhanced security headers, and stronger privacy compliance measures.

T

The Daily Star

thedailystar.net

68

The Daily Star is a leading English-language daily newspaper in Bangladesh, providing 24/7 national and international news coverage. The website serves a broad audience interested in news, business, sports, entertainment, and multimedia content. It operates a professional online news platform with advertising and e-paper subscription models. Technically, the site uses Drupal CMS and integrates multiple analytics and advertising technologies such as Google Analytics, Microsoft Clarity, Chartbeat, and Google Ad Manager. The website is well-optimized for mobile and accessibility and employs modern security headers and HTTPS encryption. However, it lacks explicit cookie consent mechanisms and a published security or incident response policy. WHOIS data is unavailable, which slightly reduces trust but does not detract from the site's legitimacy given its established brand and consistent online presence.

M

MyRatePlan.com

myrateplan.com

61

MyRatePlan.com is an online platform specializing in providing consumers with resources to compare cell phone plans and devices. The website offers tools such as rate plan finders, cell phone comparisons, coverage maps, and buying guides to assist users in making informed decisions about wireless phone services. Positioned as a niche player in the telecommunications comparison market, it targets consumers seeking cost-effective and suitable mobile plans. Technically, the site is built on the Drupal CMS platform, utilizing modern web technologies including JavaScript, CSS, Google Fonts, and Material Icons. The site demonstrates good content quality, clear navigation, and mobile optimization, although accessibility features are basic. Security posture is moderate with no HTTPS or security headers information available from the provided data, and no visible privacy or cookie policies, which indicates compliance gaps. The WHOIS data is unavailable, raising concerns about domain registration legitimacy and trustworthiness. Overall, the website is functional and professional but would benefit from enhanced security measures and compliance documentation.

Wirefly.com operates as a comprehensive online comparison platform specializing in cell phone deals, plans, and related telecommunications services including internet, TV, business, and home phone services. The website targets consumers seeking to save money by comparing various providers and plans, positioning itself as a trusted source in the US market. The business model relies on providing detailed comparison tools and likely monetizes through affiliate partnerships and advertising. The site demonstrates a consistent brand presence with professional design and clear navigation, supporting a good user experience.

S

Slashdot Media

voipreview.org

65

VoipReview.org is a well-established online platform specializing in the comparison and review of VoIP service providers for both business and residential customers. Operated by Slashdot Media since 2004, the website offers comprehensive tools including detailed pricing tables, user reviews, a VoIP savings calculator, and industry news. It serves as a trusted authority in the telecommunications sector, helping users make informed decisions about VoIP solutions. The business model is primarily advertising-supported with affiliate marketing partnerships with VoIP providers. Technically, the website is built on Drupal CMS and employs modern web technologies such as jQuery, ConsentManager for GDPR compliance, and Piwik/Matomo for analytics. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Performance is moderate with a focus on user experience and navigation clarity. From a security perspective, the site enforces HTTPS, uses security headers, and integrates a consent management platform to comply with privacy regulations. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. Overall, VoipReview.org presents a low-risk profile with strong business credibility and privacy compliance. The lack of WHOIS data is likely due to privacy protection services, which is justified for this type of business. Strategic recommendations include enhancing transparency around security policies and incident response, and improving direct contact information availability for security and compliance inquiries.

S

Sharp Business Systems UK Plc

sharp.co.uk

69

Sharp Business Systems UK Plc operates as a leading technology manufacturer and IT services provider in the United Kingdom. The company offers a broad portfolio of services including IT support, cyber security, managed print, audio visual solutions, workplace design, and Microsoft Copilot AI consulting. The website reflects a mature digital presence with consistent branding and a focus on business customers. Technically, the site is built on Drupal CMS, uses modern web fonts and SVG icons, and integrates Google Tag Manager for analytics. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security headers and privacy policies are not clearly linked in the provided content. WHOIS data for the queried domain 'www.sharp.co.uk' is unavailable due to invalid domain format, but the website content and branding strongly indicate legitimacy. Overall, the site is professional, well-structured, and targets business clients seeking technology solutions.

S

Sharp

sharp.pl

65

Sharp is a globally recognized technology manufacturer offering a wide range of business and consumer electronics solutions. The website targets both business clients and individual consumers, providing detailed product categories including printing devices, audiovisual systems, IT products, and sustainability initiatives. The company positions itself as an innovative leader with a strong focus on improving workplace efficiency and user convenience. Technically, the site is built on Drupal CMS with modern web technologies, optimized for mobile and accessibility, and integrates Google Tag Manager for analytics and marketing. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and privacy policies are not fully evident. The absence of WHOIS data limits domain trust analysis but the professional presentation and extensive linked partner domains support legitimacy. Overall, the site demonstrates a mature digital presence aligned with enterprise standards.

V

VITO

fca.be

76

VITO is a well-established Belgian research and advisory center specializing in sustainability, energy, and climate-related challenges. With a large multidisciplinary team and extensive infrastructure, it supports companies, governments, and society through scientific research, technological innovation, AI solutions, and policy advice. The website reflects a mature digital presence built on Drupal CMS, integrating modern analytics and marketing tools such as Google Tag Manager and HubSpot forms. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response details could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR and other privacy standards.

A

Automation Anywhere, Inc.

automationanywhere.com

79

Automation Anywhere, Inc. is a leading enterprise software company specializing in agentic process automation systems that integrate AI, RPA, and intelligent automation to streamline mission-critical workflows. Founded in 2003 and headquartered in California, USA, the company holds a strong market position as a Gartner Magic Quadrant Leader and is trusted by top global enterprises across finance, healthcare, manufacturing, and banking sectors. Their cloud-native platform offers a comprehensive suite of automation tools including AI Agent Studio, Process Reasoning Engine, and Automation Co-Pilot, enabling organizations to enhance productivity and operational efficiency. Technically, the website is built on Drupal CMS with modern JavaScript libraries and integrates advanced tracking and consent management tools such as Google Tag Manager and OneTrust. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. Hosting is managed via Akamai, ensuring robust performance and security. From a security perspective, the site enforces HTTPS, implements key security headers, and utilizes cookie consent mechanisms, indicating a strong security posture. However, the absence of a dedicated security policy page and vulnerability disclosure mechanism suggests areas for improvement in transparency and incident response readiness. No vulnerabilities or exposed sensitive data were detected. Overall, Automation Anywhere's website reflects a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. The domain registration data aligns well with the company's identity and history, supporting legitimacy. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to further enhance trust and security posture.

Letiště Praha, a. s. operates the Václav Havel Airport Prague and is actively engaged in a modernization project to transform the airport into a sustainable, modern 21st-century facility. The website serves as an informational platform detailing development plans, sustainability efforts, and benefits to the Czech economy and travelers. The company holds a strong market position as the national airport operator and targets Czech travelers, tourists, and business partners. Technically, the website is built on Drupal CMS with modern JavaScript libraries and integrates Google Tag Manager and Cookiebot for analytics and consent management. The site is mobile-optimized and professionally designed, offering a good user experience and clear navigation. Security posture is moderate with HTTPS in use and consent management implemented, but lacks explicit security headers and published security policies. WHOIS data is consistent with the business and domain age aligns with the project timeline. Overall, the website is trustworthy and professional, though improvements in security transparency and contact information are recommended.

P

Pam Building

pambuilding.com

67

Pam Building is a specialized manufacturer of cast iron drainage systems for buildings, offering a comprehensive range of products and services including pipes, fittings, couplings, and siphonic systems. The company positions itself as a leader in the cast iron pipe and fittings market, supported by its parent company Saint-Gobain. The website is professionally designed, mobile-optimized, and rich in relevant content targeting specifiers, installers, distributors, and customers in the construction sector. Technically, the site is built on Drupal CMS with modern frameworks like Bootstrap and uses Google Tag Manager for analytics. Security posture is good with HTTPS enabled and secure forms, but lacks some security headers and visible privacy or cookie policies. The WHOIS data is missing, which raises some concerns about domain registration transparency, but the overall trustworthiness is bolstered by the professional branding and certifications such as the Ecovadis Silver Medal. The site does not contain any adult or questionable content and is fully accessible without WAF or blocking mechanisms.

P

Professional Disc Golf Association

pdga.com

63

The Professional Disc Golf Association (PDGA) operates as the global governing body and membership association for disc golf enthusiasts. It provides comprehensive services including membership management, tournament sanctioning, official rules, player rankings, and course directories. The organization targets disc golf players, tournament directors, and the wider disc golf community worldwide, positioning itself as the authoritative source for the sport. The website reflects a mature digital presence with extensive content, clear navigation, and active social media engagement. Technically, the PDGA website is built on the Drupal CMS platform, leveraging modern JavaScript libraries and Google services for analytics and advertising. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and use of sanitization libraries, although explicit security headers and incident response information are not prominently published. The absence of WHOIS data limits domain trust analysis; however, the website's professional presentation, consistent branding, and external references strongly support its legitimacy. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR and related regulations. Overall, the PDGA website demonstrates a strong business and technical foundation with room for enhanced security transparency.

A

Aizkraukles novada pašvaldība

aizkraukle.lv

61

Aizkraukles novada pašvaldība is a Latvian municipal government entity established in 2021 through the merger of several local municipalities. The website serves as an official portal providing comprehensive information about local government structure, services, social programs, education, culture, development projects, and public procurement. It targets residents, businesses, and the general public within the Aizkraukles region. Technically, the site is built on Drupal CMS with modern web technologies and includes accessibility and privacy features such as cookie consent and GDPR-compliant privacy policies. Security posture is good with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. The absence of WHOIS data limits domain legitimacy verification, but the website content and domain name strongly indicate a legitimate government organization. Overall, the site is professional, trustworthy, and safe for general audiences.

Saint-Gobain Construction Products CZ a.s., operating the website www.cz.weber, is a leading manufacturer and supplier of building materials in the Czech Republic, specializing in facades, plasters, insulation, flooring, adhesives, and sealants. The website targets professionals such as architects, developers, investors, and end consumers, offering comprehensive product information, technical support, online tools, and educational resources. The company benefits from strong brand recognition as part of the Saint-Gobain group. Technically, the website is built on Drupal CMS with modern web technologies including Google Tag Manager, YouTube integration, and OneTrust for cookie consent, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and published security policies are absent. WHOIS data is incomplete and malformed, limiting domain registration trust verification, but the website's professional content and official company information support legitimacy. Overall, the site is well-maintained, secure, and compliant with privacy regulations, serving as a reliable digital presence for the company.

E

Erasmus Student Network (ESN) Latvia

esn.lv

54

ESN Latvia is a national section of the Erasmus Student Network, a non-profit international student organization dedicated to supporting international students and promoting cultural exchange. The website provides information about their projects, events, and ways to get involved, targeting Erasmus and other international students in Latvia. The organization operates under the principle of Students Helping Students and offers various programs such as ESNcard and SocialErasmus. Technically, the website is built on Drupal CMS with common web technologies including jQuery and Google Analytics, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and IP anonymization in analytics, but lacks advanced security headers and explicit cookie consent mechanisms. Privacy policy is present and GDPR compliant, though cookie policy and incident response information are missing. Overall, the site is professional, trustworthy, and safe for general audiences.

B

Balvu novada pašvaldība

balvi.lv

60

Balvu novada pašvaldība operates an official municipal government website serving the Balvi region in Latvia. The site provides extensive information on local governance, social services, education, culture, tourism, and public procurement, targeting residents and stakeholders within the municipality. The website is built on Drupal CMS with modern web technologies and demonstrates good digital maturity with mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement, security headers, and privacy-compliant cookie consent mechanisms. However, explicit security policies and incident response contacts are not found, representing an area for improvement. Overall, the site is trustworthy, professional, and compliant with GDPR, supporting the municipality's public service mission effectively.

S

Smiltenes novada pašvaldība

smiltene.lv

56

Smiltenes novada pašvaldība is the official municipal government website for the Smiltenes novads region in Latvia. It provides comprehensive information about local government structure, public services, community news, and administrative contacts. The website targets residents and stakeholders within the municipality, serving as a central hub for governance and civic engagement. The business model is typical for a government entity focused on public service and information dissemination. Technically, the website is built on the Drupal CMS platform, utilizing modern web technologies including Google reCAPTCHA for bot protection and Google Analytics for visitor tracking. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience. Performance is moderate, with standard use of external libraries and fonts. From a security perspective, the site enforces HTTPS and employs security best practices such as reCAPTCHA and cookie consent mechanisms. However, some security headers could be more comprehensively implemented, and there is no visible security.txt or incident response information published. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website is safe, professional, and trustworthy, with no adult or questionable content. The lack of WHOIS data limits full domain legitimacy verification, but the official nature and content quality support a high trust level. Strategic recommendations include enhancing security header implementation, publishing security policies, and adding vulnerability disclosure information to improve transparency and security posture.

B

Balvu novada pašvaldība

muzejs.balvi.lv

59

Balvu novada pašvaldība operates as the official municipal government website for the Balvi region in Latvia, providing a wide range of public services and information including local government structure, social support, education, culture, tourism, and public procurement. The website is well-structured, localized primarily in Latvian, and targets residents and stakeholders of the Balvi municipality. Technically, the site is built on Drupal CMS with modern frameworks like Bootstrap and integrates Google Analytics for visitor tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, HTTPS is enforced, and several security headers are present, although explicit security policies and incident response contacts are not found. Privacy compliance is strong with comprehensive cookie and privacy policies and consent mechanisms. Overall, the site is legitimate, professional, and safe for general audiences, although WHOIS data is unavailable due to query limits, which slightly limits domain trust verification.

B

Balvu novada pašvaldība

visit.balvi.lv

59

Balvu novada pašvaldība operates as the official local government website for the Balvi Municipality in Latvia, providing comprehensive information about municipal governance, public services, social programs, education, culture, and community events. The website serves residents and stakeholders by offering access to forms, news, contact information, and resources relevant to the municipality's operations. Technically, the site is built on Drupal CMS, employs modern web technologies including Bootstrap and jQuery, and integrates Google Analytics for visitor insights while respecting privacy through cookie consent mechanisms. Security posture is solid with HTTPS enforced and standard security headers present, though there is room for improvement in publishing incident response contacts and vulnerability disclosure policies. Overall, the site is professional, well-structured, and trustworthy, supporting the municipality's mission to serve its community effectively.

C

ChargePoint, Inc.

chargepoint.com

61

ChargePoint, Inc. operates one of the world's largest electric vehicle (EV) charging networks, providing hardware, software, and services to businesses, fleets, partners, and individual drivers. The company has a strong market position as a pioneer in EV charging solutions since 2007, targeting multiple sectors including energy and transportation. Their website reflects a mature digital presence with comprehensive content, regional localization, and a professional design that supports their business objectives. Technically, the website is built on Drupal CMS and integrates modern technologies such as Google Maps API, Google Tag Manager, and OneTrust for cookie consent. The site is mobile-optimized, accessible, and SEO-friendly, indicating a high level of digital maturity. Security practices include HTTPS enforcement and cookie consent mechanisms, though some security headers and explicit incident response contacts are not evident. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR compliance indicators. However, the WHOIS data is unavailable or protected, which slightly reduces transparency but is not uncommon for large enterprises. Overall, ChargePoint's website and digital infrastructure demonstrate a high level of professionalism, security, and compliance suitable for an enterprise in the energy and transportation sectors. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and providing explicit incident response contacts to further strengthen trust and security posture.

S

SED

sed.lv

38

SED is a Latvian retail company specializing in home and garden products, including polycarbonate greenhouses, garden furniture, tools, and sports and tourism goods. The website is well-structured, built on Drupal CMS, and targets Latvian consumers with a comprehensive product catalog and e-commerce capabilities. The company maintains a moderate digital maturity with integration of analytics tools such as Google Analytics and Microsoft Clarity, and a cookie consent mechanism indicating GDPR awareness. However, the absence of a privacy policy and terms of service pages limits full compliance transparency. Security posture is adequate with HTTPS enforced but lacks advanced security headers and vulnerability disclosure mechanisms. WHOIS data could not be retrieved due to query limits, leaving domain registration details unverified. Overall, the website presents a professional retail presence with room for improvement in privacy and security disclosures.

I

IT service | informācijas sistēmu atbalsts

itservice.lv

47

IT service is a Latvian IT support company operating since 2006, providing a range of services including computer repair, network installation, remote IT administration, and website development. The company targets local businesses and individuals seeking reliable IT solutions. Their website demonstrates a professional digital presence with clear service offerings and client references from recognized brands, indicating a stable market position. Technically, the site is built on Drupal CMS with modern frontend technologies, offering good mobile optimization and accessibility. Security posture is moderate with HTTPS usage and secure forms, but lacks explicit security headers and published security policies. Privacy compliance is addressed with visible cookie and privacy policies including consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced security transparency and WHOIS data availability.

E

Elmex SIA

elmex.lv

36

Elmex SIA is a Latvian company specializing in industrial automation, electrical systems, and process control. Their website presents a professional image focused on B2B services including control system design, PLC/HMI/SCADA programming, electrical installation, and automation services. The company targets industrial and utility sectors requiring automation solutions. The website is built on Drupal CMS and uses common JavaScript libraries and analytics tools such as Google Analytics and StatCounter. The site is accessible without any WAF or security challenge blocking content. However, no privacy, cookie, or terms of service policies are present, and no direct contact information is visible on the homepage, which limits user trust and compliance transparency. WHOIS data could not be retrieved due to query limits, but the website content and business information appear consistent and professional, indicating legitimacy.

S

SIA "Arise"

arise.lv

60

SIA "Arise" operates a Latvian website focused on providing accounting software solutions (Horizon) and internet services such as website development and online stores. The company targets small and medium enterprises in Latvia, positioning itself as a local technology provider with a focus on practical business software and web solutions. The website is built on Drupal CMS and integrates common web technologies including jQuery and Google Analytics for traffic analysis. A cookie consent mechanism is implemented, reflecting some privacy compliance awareness. However, explicit privacy policies and terms of service are not found, which may impact regulatory compliance. Security posture is moderate with no visible security headers or incident response information, and WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the website is professional and functional but could improve in security and compliance transparency.

N

Nacionālā elektronisko plašsaziņas līdzekļu padome

neplpadome.lv

63

The Nacionālā elektronisko plašsaziņas līdzekļu padome (NEPLP) is an independent autonomous government institution in Latvia responsible for representing public interests in the electronic media sector. The website serves as an official portal providing regulatory information, media registries, reports, and public communications. It targets Latvian citizens, media professionals, and government stakeholders. The site is built on Drupal CMS and employs modern web technologies with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly documented. WHOIS data is unavailable due to query limits, but the domain and content strongly indicate legitimacy as a government entity. Overall, the site is professional, trustworthy, and safe for general audiences.

L

Latvijas Apdrošināšanas brokeru asociācija

brokers.lv

47

The website brokers.lv represents the Latvijas Apdrošināšanas brokeru asociācija, a Latvian insurance brokers association. It provides educational content, broker search services, and industry regulatory information targeted at Latvian insurance customers and brokers. The site is professionally branded and offers clear contact information including email, phone, and physical address. The business model centers on facilitating connections between clients and insurance brokers and supporting broker qualifications and ethics. Technically, the website is built on Drupal CMS with common libraries such as jQuery UI and Owl Carousel, and uses Google Fonts for typography. The site is mobile-optimized and accessible with a moderate performance profile. SEO is basic but present through meta tags and Open Graph data. No advanced hosting or infrastructure details are available. From a security perspective, the site uses HTTPS and includes a human verification question in its contact form, but lacks visible security headers such as CSP or HSTS. There is no cookie consent mechanism detected, and no published security or incident response policies. WHOIS data is unavailable due to query limits, limiting domain trust verification. No suspicious or malicious content is detected, and the site is safe for general audiences. Overall, brokers.lv is a credible and professional association website with good business credibility and content quality. Security posture and privacy compliance could be improved by implementing security headers, cookie consent, and publishing security policies. WHOIS transparency should be enhanced to increase trust. The site is recommended for users seeking insurance brokerage information in Latvia.

S

SIA HETA

heta.lv

44

SIA HETA is a Latvian company established in 2002 specializing in the distribution and servicing of forestry and agricultural machinery. The company represents well-known brands such as VALTRA, FARMI FOREST, PALMS, JENZ, PALAX, and PALMSE TRAILER, targeting professional customers in forestry, agriculture, and municipal sectors. Their business model focuses on equipment sales, after-sales service, and spare parts supply, positioning them as a trusted local partner with a solid market presence in Latvia. Technically, the website is built on Drupal CMS with standard web technologies including jQuery and Google Analytics for visitor tracking. The site is accessible, uses HTTPS, and implements a cookie consent mechanism compliant with GDPR. However, some technologies like jQuery are outdated, and security headers are not explicitly present, indicating room for improvement in technical security and performance optimization. From a security perspective, the website shows a moderate security posture with HTTPS enabled and IP anonymization in analytics. There is no visible security policy or incident response contact information, and no WHOIS data is available due to query limits, which slightly reduces trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is adequate with clear cookie policies and consent mechanisms. Overall, the website is professional and trustworthy for its business domain, but improvements in security headers, updated libraries, and transparency in security policies would enhance its security posture and compliance. The lack of WHOIS data limits full domain legitimacy assessment but the business information and content quality support a positive trust evaluation.

G

Gulbenes novada pašvaldība

gulbene.lv

63

Gulbenes novada pašvaldība operates as the official local government website for the Gulbene Municipality in Latvia, providing comprehensive information about municipal governance, public services, community news, projects, and administrative contacts. The website targets residents and stakeholders within the region, serving as a central hub for local government communication and transparency. The business model is typical for a government entity, focusing on public service and information dissemination rather than commercial activities. Technically, the website is built on the Drupal CMS platform, utilizing modern web technologies such as Bootstrap and jQuery. It incorporates Google Analytics for visitor tracking and demonstrates good mobile optimization and accessibility features. The site employs HTTPS with appropriate security headers, indicating a solid security posture. Cookie consent mechanisms and a detailed privacy policy reflect compliance with GDPR and related privacy regulations. Security-wise, the site shows good practices including HTTPS enforcement, security headers, and no visible vulnerabilities or exposed sensitive data. However, there is no explicit security policy, incident response information, or vulnerability disclosure page, which could be areas for improvement. The absence of direct contact emails or phone numbers on the homepage suggests reliance on contact forms for communication. Overall, the website is professional, trustworthy, and well-maintained, suitable for its role as a government portal. The lack of WHOIS data limits domain registration trust analysis, but the .lv domain and content consistency support legitimacy. Strategic recommendations include publishing security and incident response policies, adding vulnerability disclosure information, and enhancing direct contact details to improve transparency and user trust.

S

SERDE

serde.lv

36

SERDE is a cultural residency and workshop center based in Aizpute, Latvia, specializing in artist residencies, restoration workshops, and cultural heritage projects. The organization targets artists, researchers, and cultural professionals interested in interdisciplinary and traditional crafts. The website provides detailed information about upcoming events, application forms, and cultural programs, positioning SERDE as a niche cultural institution supported by local cultural foundations. Technically, the website is built on Drupal CMS with basic design and moderate performance. Security posture is average with HTTPS assumed but lacking security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and informative but could improve in security and compliance aspects.

D

Dienvidkurzemes novada pašvaldība

dkn.lv

63

Dienvidkurzemes novada pašvaldība operates as the local government authority for the Dienvidkurzeme region in Latvia, providing a wide range of municipal services including governance, social assistance, property management, and public engagement. The website serves as an official portal for residents, businesses, and visitors, offering comprehensive information and access to services. The site is built on Drupal CMS, leveraging modern web technologies and includes accessibility and privacy compliance features such as cookie consent and GDPR-aligned privacy policies. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site reflects a professional government digital presence with good content quality and user experience.

L

Ludzas novada pašvaldība

ludzasnovads.lv

61

Ludzas novada pašvaldība is a Latvian municipal government entity providing a wide range of public services including administration, education, social services, culture, and local development. The website serves as an official portal for residents, businesses, and visitors to access information about the municipality's structure, services, projects, and contact points. The site is well-structured with comprehensive navigation and content tailored to its audience. Technically, the website is built on Drupal CMS, employs modern web technologies such as Bootstrap and jQuery, and integrates Google Analytics for visitor tracking. It demonstrates good mobile optimization and accessibility features. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks explicit incident response or vulnerability disclosure information. Privacy compliance is strong with clear cookie consent mechanisms and a detailed privacy policy. Overall, the website is professional, trustworthy, and safe for general audiences, though WHOIS data could not be retrieved to fully verify domain registration details.

D

Dobeles novada pašvaldība

dobele.lv

60

Dobeles novada pašvaldība operates as the local government authority for the Dobele municipality in Latvia, providing a wide range of public services including administration, education, culture, sports, social services, and infrastructure management. The website serves as an official portal for residents and businesses to access information and services, featuring comprehensive navigation and content relevant to municipal governance and community engagement. The site is well-branded and consistent with government standards, targeting local citizens and stakeholders.

R

Ropažu novada pašvaldība

ropazi.lv

51

Ropažu novada pašvaldība is the official local government authority for the Ropaži municipality in Latvia, established in 2021 following administrative reform. The website serves as a comprehensive portal for residents and businesses, providing access to municipal services, news, events, and contact information. The site is built on Drupal CMS and incorporates modern web technologies including Google reCAPTCHA and Google Analytics for security and analytics purposes. The content is well-structured, primarily in Latvian, with a focus on local government transparency and community engagement. Technically, the website demonstrates good digital maturity with mobile optimization, accessibility features, and a cookie consent mechanism that complies with EU regulations. However, the absence of a clearly published privacy policy and terms of service pages is a notable gap in privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers could enhance protection. Overall, the website reflects a trustworthy and professional government entity with a strong focus on service delivery and community information. The lack of WHOIS data limits domain legitimacy verification, but the site content and structure strongly support its authenticity. Strategic improvements in privacy documentation and security headers are recommended to further strengthen compliance and security.

J

Jūrmalas valstspilsētas pašvaldība

jaundubulti.lv

61

Jūrmalas valstspilsētas pašvaldība is the official municipal government entity responsible for local governance and public services within the Jūrmala city administrative territory in Latvia. The website serves as a comprehensive portal providing information about the city administration, public services, cultural events, education, health, social support, urban planning, and other municipal functions. It targets residents, businesses, and visitors seeking official information and services. The site is well-structured with extensive navigation and content reflecting the broad scope of municipal responsibilities. Technically, the website is built on Drupal CMS, employs modern web technologies including Google reCAPTCHA and Google Analytics, and demonstrates good mobile optimization and accessibility features. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust with a detailed cookie consent mechanism and a comprehensive privacy policy aligned with GDPR requirements. However, WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the website is professional, trustworthy, and serves its public sector role effectively.

B

Balvu novada pašvaldība

sportaskola.balvi.lv

59

Balvu novada pašvaldība operates as the official municipal government website for the Balvi region in Latvia, providing residents and stakeholders with comprehensive information about local governance, public services, cultural events, social programs, and administrative resources. The website serves as a key communication channel for the municipality, offering access to forms, news, budget reports, and contact information. The target audience primarily includes local citizens, government employees, and businesses within the municipality. The business model is focused on public service and information dissemination, positioning the site as an essential government resource in the region. Technically, the website is built on the Drupal CMS platform, utilizing modern web technologies such as Bootstrap and jQuery for responsive design and user interaction. Google Analytics is integrated for visitor tracking, and the site implements a cookie consent mechanism compliant with GDPR requirements. The website demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with a good SSL configuration and includes standard security headers like Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of a security.txt file and incident response contact information suggests room for improvement in vulnerability disclosure and incident management readiness. Overall, the website presents a trustworthy and professional digital presence for the Balvi municipality, with strong content quality and technical implementation. The lack of WHOIS data limits full domain legitimacy verification, but the official nature of the content and domain usage supports its credibility. Strategic recommendations include implementing a security.txt file, enhancing incident response transparency, and continuous monitoring of third-party scripts to maintain security posture.