Security Directory

K

Kardioakademie IKEM

kardioakademie.cz

64

Kardioakademie IKEM is a specialized educational platform focused on postgraduate training in cardiology, offering modular courses targeted at medical professionals and cardiology specialists primarily in the Czech Republic. The website presents a professional and consistent brand image with good content quality and relevant educational information. Technically, the site is built on WordPress with WooCommerce integration, leveraging modern plugins such as Yoast SEO and Cookiebot for SEO and privacy compliance respectively. The infrastructure is hosted via a Czech registrar and hosting provider, ensuring regional consistency and domain legitimacy. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, although there is room for improvement in security headers and explicit privacy policy documentation. Overall, the site is safe, trustworthy, and well-positioned within its niche educational market.

N

NBtech

nbtech.fr

46

NBtech is a French industrial engineering and technical consulting company founded in 2014, specializing in automotive, aeronautics, railway, and industrial maintenance sectors. The company provides pragmatic and comprehensive solutions including mechanical and electronic testing, incident analysis, and industrial methods consulting. Their client portfolio includes major industry players such as Bosch, Thales, Airbus, Renault, Stellantis, and SNCF, indicating a strong market position. The website is professionally designed, well-structured, and includes detailed information about services, partners, and company values. Technically, the site is built on WordPress with Elementor, uses modern libraries and frameworks, and is hosted by PLANETHOSTER. It implements GDPR-compliant cookie consent and privacy policies, and integrates Google Analytics and Tag Manager for analytics. Security posture is strong with HTTPS enforced and security headers present, though no explicit security policy or incident response contacts are published. Overall, the website reflects a mature digital presence with good privacy compliance and trustworthy business information.

W

Wirtschaftsinitiative Smart Living e.V.

smart-living-germany.de

43

Wirtschaftsinitiative Smart Living e.V. is a German non-profit association comprising approximately 40 companies, associations, and alliances focused on advancing the digitalization of home and living environments. The organization aims to establish Germany as a leading international market for Smart Living applications, offering services such as a showroom map, information on funding, and organizing working groups and events. The website is professionally designed using WordPress with Yootheme and UIkit frameworks, providing good mobile optimization and clear navigation. However, it lacks visible cookie consent mechanisms and security headers, which are important for GDPR compliance and security best practices. The security posture is moderate with HTTPS enabled but could be improved with additional headers and policies. The domain WHOIS data is limited but consistent with a small non-profit entity. Overall, the website is trustworthy and serves its target audience effectively, though improvements in privacy compliance and security practices are recommended.

O

ORG. TEND d.o.o.

tend.si

10

ORG. TEND d.o.o. is a Slovenian IT company specializing in security, information infrastructure, cloud, and web solutions primarily targeting small and medium-sized enterprises. With over 20 years of experience and strong partnerships with global IT vendors such as Microsoft, NetApp, and Cisco, the company offers a comprehensive portfolio of IT services including advanced security solutions, infrastructure hardware and software, cloud migration and optimization, software asset management, and web development. The website reflects a mature business with a clear focus on professional IT services and customer support. Technically, the site uses modern frameworks like Bootstrap and jQuery and is built on user-friendly CMS platforms Modx and Typo3, ensuring good mobile optimization and accessibility. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks published security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

M

Ministrstvo za kohezijo in regionalni razvoj

evropskasredstva.si

53

The website evropskasredstva.si serves as the official Slovenian government portal dedicated to European structural and investment funds. It provides comprehensive information on EU programs, projects, calls for proposals, and advisory support to stakeholders and the general public. The portal is managed by the Ministry of Cohesion and Regional Development of Slovenia, reflecting its authoritative position in the government sector. The site targets Slovenian citizens, government entities, and project participants interested in EU funding opportunities and related news. Technically, the website is built on WordPress CMS, leveraging a modern technology stack including jQuery, Google Maps API, and various plugins for SEO, analytics, social media integration, and GDPR compliance. Hosting is facilitated through Cloudflare, ensuring reliable DNS and security services. The site demonstrates good performance and mobile optimization, with structured data enhancing SEO and discoverability. From a security perspective, the site employs HTTPS with good SSL configuration and some security headers. It uses content security policy monitoring and security-focused plugins, though it lacks a publicly available security policy or incident response information. No vulnerabilities or security issues were detected in the analyzed content. Privacy compliance is partially addressed with a cookie consent mechanism, but no explicit privacy policy or terms of service pages were found. Overall, the website presents a professional, trustworthy, and well-maintained government portal with strong business credibility. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing incident response transparency, and improving accessibility compliance to further strengthen trust and security posture.

M

MDS Display

mdsdisplays.com

47

MDSdisplays.com is a professional website representing MDS Display, a Swiss-based company specializing in LED display solutions for various applications. The company offers a wide range of products including LED wall displays, hologram displays, LED posters, shelf displays, and innovative transparent LED films. With over 16 years of experience, MDS Display positions itself as a reliable supplier focused on quality, energy efficiency, and environmental protection. The website targets businesses and organizations seeking customized LED display solutions, providing multimedia content and downloadable catalogs to support customer engagement. Technically, the website is built on WordPress 6.8.3, utilizing common web technologies such as jQuery, Font Awesome, and Google Fonts. Hosting is provided by Hostpoint AG, as inferred from the DNS nameservers. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. Google Analytics is integrated for visitor tracking, but no cookie consent mechanism is present. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers like Content-Security-Policy and X-Frame-Options. DNSSEC is not enabled, and no explicit security or incident response policies are published. The site does not expose sensitive data and uses a honeypot plugin to protect forms. Overall, the security posture is moderate but could be improved with additional headers and compliance measures. The domain registration is transparent and consistent with the business location and claims, though the domain age (registered in 2020) is younger than the company's stated experience, suggesting a possible rebranding or domain migration. No WAF or blocking mechanisms are detected, and the content is fully accessible. Privacy compliance is partial, with a privacy policy present but lacking cookie consent and terms of service. Overall, the website is professional and trustworthy with good business credibility but would benefit from enhanced security practices and privacy compliance to improve user trust and regulatory adherence.

N

NTR

ntr.nl

56

NTR is a Dutch public broadcasting organization operating under the NPO umbrella, providing a wide range of programming focused on information, education, culture, youth, and diversity. The website serves as a portal to their content offerings, including television and radio programs, with a clear focus on accessibility and relevance for all audience segments. The site is well-branded, consistent, and professionally maintained, reflecting its status as a major public media entity in the Netherlands. Technically, the website employs modern web technologies including jQuery, Bitmovin video player, and a cookie consent management system. It is mobile-optimized with responsive design elements and integrates tracking and analytics tools compliant with privacy regulations. The site uses HTTPS with DNSSEC enabled, indicating strong foundational security practices, although some advanced security headers are not explicitly detected. From a security perspective, the site demonstrates good practices such as encrypted connections and cookie consent mechanisms. However, it lacks publicly visible security policies or incident response contacts, which could be improved to enhance transparency and trust. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the organization's identity and history. Overall, the website is a trustworthy, professional platform for a public broadcaster with a strong compliance posture and good user experience. Strategic improvements in security policy disclosure and header implementation could further strengthen its security posture.

S

SzeneSchweiz – Berufsverband Darstellende Künste

szeneschweiz.ch

38

SzeneSchweiz is the largest and most important Swiss professional association for performing artists in theater, film, and TV. It provides a range of services including legal advice, protection against abuse, pension schemes for freelancers, continuing education, and a casting platform. The organization targets professional artists in Switzerland and operates as a non-profit entity with a strong market position in the Swiss performing arts sector. The website is multilingual and professionally designed, reflecting a medium-sized organization founded around 2017. Technically, the website is built on WordPress 6.8.3 with modern plugins for social sharing and forms. It uses Google Analytics for tracking and is mobile-optimized with good SEO practices. Performance is moderate, and accessibility is basic. The site uses HTTPS with excellent SSL configuration but lacks some security headers and a cookie consent mechanism. From a security perspective, the site enforces HTTPS and does not expose sensitive data. However, it lacks explicit security policies, incident response information, and cookie consent banners, which are important for GDPR compliance. No vulnerabilities or suspicious content were detected. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's Swiss identity. Overall, the website is professional, trustworthy, and well-positioned in its niche but could improve privacy compliance and security posture by adding cookie consent, security headers, and incident response details.

V

VCS Productions GmbH

vcs.ch

40

VCS Productions GmbH is a Swiss-based company specializing in visual computing services with over 30 years of experience. Their offerings include tailored content creation for product videos, LED display solutions, high lumen projectors, 3D animations, laser shows, video mapping, and streaming products. The company targets businesses and organizations seeking advanced visual content and display technologies. The website reflects a professional and consistent brand image with clear contact information and a focus on technology services. Technically, the site is built on WordPress with a modern theme and plugins, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and anti-spam measures, though lacking advanced security headers and explicit policies. Privacy compliance is partial, with a privacy policy present but no cookie consent or terms of service. Overall, the site is trustworthy and well-maintained, with room for improvement in security and compliance documentation.

T

Touraine Val de Loire

tourainevaldeloire.com

63

Touraine Val de Loire is a regional tourism organization promoting cultural, natural, and gastronomic experiences in the Touraine region of France. The website is professionally designed with multi-language support and rich content targeting tourists and visitors. The technical infrastructure leverages modern JavaScript modules, WordPress CMS, and integrates analytics and consent frameworks, indicating a mature digital presence. Security posture is good with HTTPS and consent mechanisms, though explicit privacy policies and contact information are missing. The absence of WHOIS registration data is a notable concern but may be due to privacy or data source limitations. Overall, the site is trustworthy and well-positioned for tourism promotion but should improve transparency and compliance documentation.

M

MENTOR - Die Leselernhelfer Nordhessen e.V.

mentor-nordhessen.de

45

MENTOR - Die Leselernhelfer Nordhessen e.V. is a regional non-profit organization dedicated to improving children's literacy and language skills through individual mentoring programs. Affiliated with the national MENTOR federation, it connects volunteer mentors with schools to provide weekly reading support for children aged 6 to 16. The website reflects a clear mission and target audience focused on education and community support. Technically, the website is built on Joomla CMS with modern frontend technologies including Bootstrap 5 and jQuery. It is hosted on servers indicated by the nameservers from agenturserver, suggesting a professional hosting environment. The site is mobile optimized and provides a good user experience with clear navigation and consistent branding. From a security perspective, the site uses HTTPS and includes CSRF tokens and a GDPR-compliant cookie consent mechanism. However, it lacks visible security headers and does not provide explicit security policies or incident response contacts. No vulnerability disclosure or security.txt files are present, which could be improved to enhance trust and security posture. Overall, the website is safe, professional, and trustworthy with a strong focus on privacy compliance and user protection. The main risks relate to missing security headers and lack of formal security documentation. Strategic improvements in these areas would strengthen the organization's digital security and compliance standing.

S

Stadtmuseum Aarau

stadtmuseum.ch

68

Stadtmuseum Aarau is a Swiss cultural institution dedicated to collecting, conserving, and presenting the history and stories of the city of Aarau and its population. It serves a broad audience including families, schools, and local visitors by offering exhibitions, events, educational programs, and digital content. The museum operates under the auspices of the city of Aarau, positioning itself as a trusted local government-affiliated entity with a clear cultural mission. Technically, the website is built on the GOViS CMS platform, a Swiss eGovernment content management system, and employs modern web technologies such as jQuery, Font Awesome, and Matomo analytics. The site is well-optimized for mobile devices and accessibility, with good SEO practices and a clear navigation structure. Security-wise, the website enforces HTTPS and uses a comprehensive cookie consent mechanism, though it lacks explicit security headers and a published security policy or incident response contact. Overall, the site demonstrates a solid security posture with no visible vulnerabilities or suspicious content. The domain registration data aligns well with the website's claims, reinforcing its legitimacy. Strategic recommendations include enhancing HTTP security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen trust and security posture.

K

kultur & kongresshaus aarau

kuk-aarau.ch

67

The Kultur & Kongresshaus Aarau is a cultural and congress venue located in Aarau, Switzerland, operating as an institution of the city of Aarau. The website presents a professional and well-structured platform showcasing their event spaces, services, and cultural events. The organization emphasizes accessibility and sustainability, holding certifications such as Swisstainable Level II and membership in OK:GO for barrier-free travel planning. Their target audience includes event organizers, cultural attendees, and local businesses. Technically, the website employs modern JavaScript libraries including jQuery, Font Awesome, and responsive slideshow plugins, ensuring a mobile-optimized and accessible user experience. The site uses a cookie consent mechanism compliant with GDPR principles, and analytics are handled via Matomo, indicating a moderate level of user tracking with privacy considerations. From a security perspective, the site uses HTTPS and implements cookie consent but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns well with the website's claims, reinforcing the domain's legitimacy. Overall, the website is professional, trustworthy, and compliant with basic privacy standards, though improvements in security policy transparency and header implementation are recommended to enhance security posture and user trust.

S

Stadt Aarau

aarau.ch

70

Stadt Aarau operates as the official municipal government website for the city of Aarau, Switzerland, providing comprehensive public services, cultural information, and administrative resources to residents, businesses, and visitors. The site positions itself as a regional hub with a strong focus on urban development, social services, and citizen engagement, including innovative features like a live video chat for direct communication with city officials. The website's content is well-structured, professionally designed, and accessible, reflecting a mature digital presence appropriate for a government entity. Technically, the website employs modern JavaScript libraries such as jQuery and Font Awesome, alongside a cookie consent framework that ensures GDPR compliance and user privacy. The CMS appears to be custom or proprietary, supporting extensive navigation and content management. Performance and mobile optimization are good, with accessibility features implemented to support diverse user needs. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms that block third-party scripts until user approval. While explicit security headers are not fully visible in the provided data, the overall posture is strong with no evident vulnerabilities or exposed sensitive information. However, the absence of a security.txt file and explicit incident response policies suggests room for improvement in transparency and vulnerability management. Overall, Stadt Aarau's website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively serves its target audience with relevant content and digital services, though it could enhance its security posture by publishing formal security policies and expanding security header usage.

P

PRIMO GmbH

primo-gmbh.com

73

PRIMO GmbH is a German company specializing in innovative electrical installation solutions, targeting professional installers and construction sectors. The website presents a comprehensive catalog of products and services including underputzinstallation, hohlwandinstallation, betoninstallation, and factory production services. The company positions itself as a professional and innovative market player with a medium-sized business footprint in the energy sector. Technically, the website is built on a modern WordPress CMS platform using Elementor and WooCommerce, with performance optimizations via WP Rocket and analytics through Google Tag Manager. The site is well-structured, mobile-optimized, and compliant with GDPR regulations, featuring a detailed cookie consent mechanism. Security posture is good with HTTPS enforced, but lacks explicit security policies or incident response contacts. The absence of WHOIS domain registration data is a concern for domain legitimacy, though the website content and structure indicate a professional business presence. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with recommendations to improve security headers and transparency.

G

Graphisoft

dds-cad.de

65

Graphisoft is a technology company specializing in BIM and CAD software solutions, with this website page focused on the DDScad product for the German market. The site is professionally designed, built on WordPress, and uses modern web technologies including Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS and reCAPTCHA integration, though explicit security headers and policies are not evident. The absence of WHOIS data limits domain transparency but the website content and branding align with a reputable software provider. Overall, the site presents a trustworthy and professional digital presence with room for improvement in privacy and security disclosures.

Z

Zavod za kulturo, turizem in šport Murska Sobota

zkts-ms.si

40

Zavod za kulturo, turizem in šport Murska Sobota is a Slovenian public institution dedicated to promoting culture, tourism, and sports within the Murska Sobota municipality. Established in 2011, it operates as a local government entity providing cultural events, tourism information, and sports facility management. The website serves as an information portal targeting the general public interested in these sectors. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and hosting services consistent with its regional presence. The site is mobile-optimized, accessible, and includes a cookie consent mechanism aligned with GDPR requirements, although explicit privacy and terms of service pages were not found in the provided content. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities detected, but could benefit from enhanced security headers and incident response disclosures. Overall, the website reflects a professional and trustworthy digital presence for a local government institution.

C

CC Real

cc-real.com

65

CC Real is a small Austrian real estate investment and asset management company with a well-established online presence since 2007. The website presents a professional image with clear business descriptions and contact information, targeting investors and clients interested in real estate assets. The technical infrastructure is based on WordPress with modern plugins such as Yoast SEO and Real Cookie Banner Pro, indicating a mature digital setup. Analytics and marketing tools are implemented with GDPR compliance in mind, including cookie consent mechanisms and privacy policies. Security posture is good with HTTPS enabled and domain registration protections, though some security headers could be improved. Overall, the site is trustworthy and professionally maintained, with no critical vulnerabilities or suspicious indicators detected.

P

Privacy service provided by Withheld for Privacy ehf

zakon.ai

46

Zakon.ai is a technology company offering an AI-powered legal search platform focused on Croatian and European law. The platform provides instant access to laws, regulations, court decisions, and EU directives, targeting legal professionals, entrepreneurs, and citizens. The business model is subscription-based with free trials and multiple pricing tiers. The website is professionally designed using WordPress and Elementor, integrating modern tools such as Google Analytics and cookie consent management. The technical infrastructure is solid, with HTTPS enabled and a secure domain status, although DNSSEC is not enabled. Security posture is good but could be improved by adding security headers and publishing security policies. Privacy compliance is basic, with a cookie consent mechanism but no explicit privacy policy found. Overall, the site is trustworthy and safe for general audiences.

S

Statistics Iceland

statice.is

65

Statistics Iceland is the official national statistical institute of Iceland, providing comprehensive and authoritative data on population, society, business sectors, economy, and environment. The website serves a broad audience including researchers, policymakers, businesses, and the general public, offering access to statistical databases, tailored statistics, microdata services, and a variety of publications. The organization is well-established, with a domain registered since 1998, and holds recognized certifications such as ISO 9001 and ISO 27001, reinforcing its credibility and commitment to quality and security. Technically, the website employs modern web technologies including jQuery, Matomo analytics, Google Fonts, and Datawrapper for interactive charts. It is hosted by a local Icelandic hosting provider, 1984 Hosting, and demonstrates good performance, mobile optimization, and accessibility. The site uses HTTPS with a good SSL configuration, although some security headers are missing. No WAF or blocking mechanisms are detected, allowing full content accessibility. From a security perspective, the site follows best practices such as HTTPS enforcement and absence of exposed sensitive data. However, it lacks explicit cookie consent mechanisms and a published vulnerability disclosure policy. The WHOIS data aligns well with the website's official status, showing consistent registration details and domain age appropriate for a government entity. Overall, the website is professional, trustworthy, and secure with minor areas for improvement in privacy compliance and security header implementation. It effectively supports its mission as Iceland's official statistical authority.

D

Deutsches Kompetenzzentrum für internationale Fachkräfte in den Gesundheits- und Pflegeberufen (DKF) unter Trägerschaft des Kuratorium Deutsche Altershilfe (KDA)

dkf-kda.de

55

The Deutsches Kompetenzzentrum für internationale Fachkräfte in den Gesundheits- und Pflegeberufen (DKF) under the Kuratorium Deutsche Altershilfe (KDA) is a German non-profit competence center focused on the recruitment and integration of international healthcare professionals. It collaborates closely with the Federal Ministry of Health to implement policies related to international recruitment and provides resources such as integration toolkits and certification development for recruitment practices. The website positions itself as an important national entity in the healthcare sector, targeting healthcare organizations, government bodies, and private recruiters. Technically, the website is built on WordPress using the Avada theme and several modern plugins including Yoast SEO and Cookiebot for cookie consent management. The site demonstrates good SEO practices, mobile optimization, and basic accessibility features. Cookie consent is actively managed with denied ad personalization and analytics, reflecting a privacy-conscious approach. From a security perspective, the site uses HTTPS with good SSL configuration and employs security best practices such as captcha protection on forms. However, it lacks explicit security headers and published security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the website is professional, trustworthy, and well-positioned within its sector. Strategic improvements include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact information to strengthen compliance and user trust.

S

Stiftung ProAlter

stiftung-pro-alter.de

45

Stiftung ProAlter is a German non-profit foundation dedicated to promoting the civic engagement of elderly people to maintain self-determination and quality of life. The website presents a clear mission focused on supporting volunteerism among seniors and fostering intergenerational networking. The organization positions itself as a niche player in the non-profit sector with a focus on social and community services. Technically, the website is built on WordPress 6.8.3 with Elementor and uses modern plugins such as Borlabs Cookie for privacy compliance. The site is well-structured, mobile-optimized, and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site reflects a professional and trustworthy non-profit entity with good digital maturity.

O

OÜ Piksel

piksel.ee

44

OÜ Piksel is an established Estonian software company founded in 1994, specializing in custom software development focused on information systems, databases, registries, and dynamic websites. The company serves businesses and organizations, including local governments and educational institutions, providing services such as software development, implementation, optimization, and hosting. Their market position is that of a trusted, experienced small enterprise with a clear focus on tailored software solutions. Technically, the website is built on WordPress with modern plugins and frameworks, offering good mobile optimization and moderate performance. Security measures include HTTPS and Google reCAPTCHA on forms, but the absence of security headers and formal privacy and cookie policies indicates room for improvement. Overall, the security posture is solid but could be enhanced with additional policies and headers. The website is professional, trustworthy, and free from suspicious content, with clear contact information and partner relationships. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and publishing a vulnerability disclosure policy to improve compliance and trust.

K

Kinomreža

kinomreza.hr

45

Kinomreža is a Croatian network of independent cinemas established in 2014, aiming to strengthen the position of independent cinemas and promote film culture across Croatia. The website serves as an informational and promotional platform for the network, providing news, member information, and activities related to film exhibition and education. Technically, the site is built on WordPress using the Astra theme and Elementor page builder, reflecting a modern and maintainable infrastructure. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security documentation.

Vodovod hrvatsko primorje d.o.o. is a Croatian public utility company specializing in water supply and sewage services across multiple regional branches. The company serves residents and businesses in the Croatian coastal region, providing essential water infrastructure and public service notices. The website is built on WordPress with Elementor, indicating a modern CMS platform with moderate technical sophistication. The site is accessible, mobile-optimized, and contains relevant business content including public notices and procurement information. However, it lacks explicit privacy, cookie, and terms of service policies, which are important for compliance and user trust. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Overall, the domain registration is consistent with the business focus, though the future domain creation date is unusual and should be verified. The website presents a professional and trustworthy image but can improve in privacy compliance and security best practices.

J

J. Soares Correia - Armazéns de Ferro, S.A.

jsoarescorreia.pt

45

J. Soares Correia - Armazéns de Ferro, S.A. is a well-established Portuguese company specializing in the wholesale and retail distribution of steel and iron products, including bars, profiles, sheets, tubes, and meshes. Founded in 1907, the company has grown to become a market leader in Portugal with a significant presence including a subsidiary in Angola. Their services also include manufacturing pre-molded concrete reinforcement products and providing a client portal for business customers. The website reflects a mature digital presence built on WordPress with Elementor and Yoast SEO, offering good content quality and navigation. Security posture is solid with HTTPS and no exposed sensitive data, though improvements can be made by adding security headers and formal security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the website is professional, trustworthy, and well-aligned with the company's business claims.

S

Sdružení pěstounských rodin, z. s.

konferencepestouni.cz

42

The website www.konferencepestouni.cz represents a professional and well-structured platform for the 'Hranice péče' conference organized by Sdružení pěstounských rodin, a Czech non-profit focused on foster care and social-legal protection of vulnerable children. The site provides comprehensive information about the conference program, speakers, registration options, payment details, and contact information. It is supported by notable patronages including the wife of the Czech president and the government commissioner for human rights, enhancing its credibility. Technically, the site is built on WordPress 6.8.3 with modern plugins such as Yoast SEO and W3 Total Cache, and uses HTTPS with a good SSL configuration. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, some broken lazy loading images and the absence of explicit privacy and cookie policies indicate areas for improvement. From a security perspective, the site employs HTTPS and some security headers but lacks advanced headers like CSP or HSTS. No security.txt or incident response information is publicly available. The WHOIS data for the domain is missing or not publicly accessible, which reduces trust in domain legitimacy despite the professional appearance and official endorsements. Overall, the site is a credible and professional resource for its target audience but should address privacy compliance and domain registration transparency to strengthen trust and security posture.

P

Poradenské a krizové centrum, p. o.

pkcentrum.cz

43

Poradenské a krizové centrum, p. o. is a Czech non-profit organization founded in 2022, providing accessible help and support to individuals and families facing difficult life situations, including children at risk and victims of domestic violence. The organization operates primarily in the Zlín region and offers a range of social and psychological services such as crisis intervention, counseling, mediation, and substitute family care. The website reflects a professional and consistent brand image with strong regional partnerships and sponsors. Technically, the site is built on WordPress with modern web technologies, includes accessibility features, and enforces HTTPS with cookie consent mechanisms, indicating a good level of digital maturity. Security posture is adequate but could be improved by adding explicit security headers and incident response information. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements.

L

Loftmyndum ehf.

map.is

55

Loftmyndum ehf. operates the website map.is, which provides an interactive map and aerial imagery services focused on Iceland. The site offers various map layers including planning, protected areas, weather, and webcams, targeting general users and educational institutions. The business model allows free use for individuals for non-commercial purposes while restricting commercial usage without permission. Technically, the site uses modern JavaScript libraries such as jQuery, Bootstrap, OpenLayers, and Proj4js, with Google Analytics integrated for visitor tracking. The design is professional and mobile-optimized, providing a good user experience. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. No WHOIS data was found for the domain, which reduces trustworthiness but the website content and business information appear legitimate. Overall, the site is functional and trustworthy for its intended audience but could improve in security and privacy compliance.

M

Mesto Prešov

presov.sk

58

Mesto Prešov operates an official municipal website serving as the primary digital portal for the city government of Prešov, Slovakia. The site provides comprehensive information on city governance, public services, social programs, urban development, and cultural events. It targets local residents, investors, and visitors, positioning itself as a trusted source for municipal information and services. The website is professionally designed with consistent branding and clear navigation, supporting a good user experience and accessibility.

Č

Český Institut Metabolického syndromu

cims-ops.cz

45

Český Institut Metabolického syndromu is a Czech healthcare-focused non-profit organization dedicated to educating patients and professionals about metabolic syndrome. The website serves as a platform for disseminating information, organizing seminars, and providing resources such as articles and publications. It maintains partnerships with reputable pharmaceutical companies, enhancing its credibility in the healthcare sector. Technically, the website is built on WordPress with modern libraries and plugins, offering a good user experience and mobile optimization. However, the absence of privacy and cookie policies indicates compliance gaps, and the lack of WHOIS data reduces domain trustworthiness. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

V

Východoslovenská distribučná, a.s.

vsdeshop.sk

65

Východoslovenská distribučná, a.s. operates an online eShop portal providing electricity distribution-related services and equipment rental primarily for Slovak residential and commercial customers. The website offers a range of professional services including installation, maintenance, measurement, and rental of electrical devices, positioning itself as a regional energy distribution service provider. The site is well-structured, with clear navigation and relevant content in Slovak, targeting local customers. Technically, the website uses modern JavaScript libraries such as jQuery and Nivo Slider, with a cookie consent mechanism in place, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS usage and cookie consent, but lacks explicit security headers and dedicated security policy pages. No critical vulnerabilities or blocking mechanisms were detected, and the WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the site is professional and trustworthy, though improvements in security policies and accessibility could enhance its posture.

V

VUMZ

vumz.sk

41

VUMZ is a Slovak-based company specializing in comprehensive technological solutions for industry and waste management, including custom manufacturing of specialized machinery, steel constructions, energy solutions, and logistics services. The company has a strong market presence with 20 years of experience and offers a wide range of services tailored to industrial clients. Their digital infrastructure is built on WordPress with modern plugins and frameworks, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and some best practices, but lacks explicit security policies and some security headers. Privacy compliance is partial with cookie consent implemented but missing a clear privacy policy. Overall, the website reflects a legitimate and professional business with room for improvement in security and compliance documentation.

K

KOSIT

kosit.sk

58

KOSIT is a well-established Slovak company specializing in comprehensive waste management and energy services. With over 24 years of market presence, it serves a broad audience including residents, businesses, municipalities, and industrial customers. The company offers a wide range of services such as municipal waste collection, energy solutions via its KOSIT THERM division, digital tools for waste management, and educational initiatives. It holds memberships in several industry associations, reinforcing its market credibility and commitment to sustainable practices. Technically, the website is built on WordPress with a modern technology stack including jQuery, Drawer.js, and Slick Carousel. SEO is enhanced by the Yoast plugin, and cookie consent is managed via CookieYes, ensuring compliance with privacy regulations. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and a public security policy or vulnerability disclosure program. No critical vulnerabilities or exposed sensitive data were detected. The domain registration details align well with the business claims, supporting legitimacy. Overall, KOSIT's digital presence reflects a mature and credible business with room for improvement in security best practices and privacy transparency. Strategic enhancements in these areas would further strengthen trust and compliance.

V

Vectra S.A.

vectra.pl

10

Vectra S.A. is a major Polish telecommunications provider offering a comprehensive portfolio of services including fiber-optic internet, digital and internet television, mobile telephony, and entertainment packages such as Netflix and HBO Max. The website www.vectra.pl targets individual consumers and businesses in Poland, providing detailed offers, customer support portals, and promotional campaigns. The company positions itself as a leading telecom operator with a strong market presence and a focus on customer experience. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, Adform tracking, and various third-party marketing and monitoring tools. The site is mobile-optimized and includes accessibility features compliant with WCAG standards. Performance is moderate with good SEO and structured content, although no CMS or hosting provider details are explicitly identified. From a security perspective, the site uses HTTPS and includes several security and monitoring scripts. However, explicit security headers and policies are not clearly published, and no vulnerability disclosure or incident response contacts are found. The domain WHOIS data is not publicly available, which is common for privacy-protected registrations but limits direct verification of domain legitimacy. Overall, the security posture is good but could be improved with clearer published policies and security headers. The overall risk assessment is low with no signs of malicious activity or suspicious content. Strategic recommendations include publishing comprehensive privacy and security policies, implementing security.txt files, and enhancing security header configurations to improve trust and compliance.

E

ESCO Slovensko a.s.

escoslovensko.sk

45

ESCO Slovensko a.s. is a Slovak energy services company combining the expertise of ČEZ Group and SPP, two major energy providers in Central Europe. The company offers a broad portfolio of energy-related services including industrial decarbonization, energy audits, photovoltaic solutions, guaranteed energy services, and facility management. It targets businesses, public administration, and municipalities, providing end-to-end solutions from analysis and design to implementation and maintenance. The company holds recognized certifications such as ISO 9001, ISO 14001, and EMAS, reinforcing its commitment to quality and environmental management. Technically, the website is built on a modern WordPress platform with performance optimizations including WP Rocket caching, lazy loading, and responsive design. It uses contemporary libraries like Bootstrap and Swiper.js, ensuring a fast and mobile-optimized user experience. SEO is well implemented with comprehensive metadata and structured data. Security posture is strong with HTTPS enforced, content security policy monitoring, and cookie consent managed by a GDPR-compliant plugin. No critical vulnerabilities or exposed sensitive data were detected. However, the site could improve by publishing explicit incident response contacts and a security.txt file. Overall, the website and business demonstrate a mature digital presence with strong compliance and security practices. The domain registration aligns with the business identity, and the company maintains a professional and trustworthy online brand.

U

UAB "Interneto vizija"

expertmedia.lt

44

Expertmedia.lt is a Lithuanian-based integrated marketing and advertising agency offering a wide range of digital marketing services including social media marketing, SEO, Google Ads, Facebook and TikTok advertising, content creation, and website development. The company positions itself as a full-service marketing department rental for businesses, emphasizing strategic partnership and measurable results. The website is professionally designed, multilingual (Lithuanian and English), and showcases certifications from major platforms such as Meta, TikTok, Google, and Omnisend, reinforcing its credibility in the digital marketing space. Technically, the site is built on WordPress with modern plugins and tracking tools like Google Tag Manager and Klaro for cookie consent, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced, though security headers are not explicitly detected. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, but no explicit terms of service or incident response policies are found. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the site reflects a trustworthy, professional marketing agency with a strong local presence and comprehensive service offerings.

T

Touraine Val de Loire

touraineloirevalley.com

10

Touraine Val de Loire is a regional tourism organization promoting cultural, natural, and gastronomic experiences in the Touraine region of France. The website offers rich content including activities, destinations, events, and accommodations, targeting tourists and travelers interested in exploring the Loire Valley. The technical infrastructure is modern, leveraging a WordPress CMS with advanced JavaScript modules and libraries, ensuring a good user experience and mobile optimization. Security posture is generally good with HTTPS and cookie consent mechanisms, but lacks explicit security headers and detailed privacy policies. The absence of WHOIS data reduces trustworthiness somewhat, though the professional presentation and multi-language support indicate a legitimate and established tourism entity. Strategic improvements in transparency, privacy compliance, and security headers would enhance overall trust and compliance.

N

Nancy Jazz Pulsations

nancyjazzpulsations.com

42

Nancy Jazz Pulsations is a well-established cultural festival based in France, focusing on jazz music and related events. The website serves as the primary digital platform for festival programming, ticketing, and information dissemination. It targets jazz enthusiasts and cultural event attendees, positioning itself as a key regional festival with a history dating back to 2000. The business model revolves around event organization, promotion, and ticket sales, supported by a medium-sized operational scale.

V

Val de Loire TV

valdeloire.tv

65

Val de Loire TV is a regional French television channel focused on providing local news, entertainment, and event coverage for the Indre-et-Loire and Loir-et-Cher regions. The website offers live streaming and replay services, targeting a regional French-speaking audience interested in local content. The business model appears to be ad-supported media broadcasting with a digital presence. Technically, the site is built on WordPress with modern plugins for video delivery, consent management, and analytics integration. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is basic, with no explicit privacy policy page found in the scanned content but a robust cookie consent mechanism is present. WHOIS data is privacy protected, which is common for media websites, and no suspicious patterns were detected. Overall, the website is professional, trustworthy, and serves its regional audience effectively.

Tours Métropole Val de Loire is the official metropolitan government entity serving the Tours metropolitan area in France. The website provides comprehensive information about local government services, urban projects, ecological initiatives, and citizen services. It targets residents and stakeholders within the metropolitan region, offering online access to administrative procedures and event information. The site is well-positioned as a regional authority with a clear public service mission. Technically, the website is built on Drupal 7 CMS with a modern JavaScript stack including jQuery, Slick carousel, and Matomo analytics. It demonstrates good mobile optimization, accessibility, and SEO practices. The presence of a cookie consent banner and privacy policy indicates compliance with EU data protection regulations. However, the site lacks some advanced security headers and explicit security or incident response policies. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The use of Matomo analytics with DoNotTrack enabled shows privacy-conscious tracking. The absence of WHOIS data is a concern but likely due to AFNIC or privacy settings rather than malicious intent. Overall, the site appears trustworthy and professionally maintained. Recommendations include adding security headers, publishing a security policy and incident response contact, and ensuring regular CMS and module updates to maintain security. Enhancing transparency with a vulnerability disclosure policy would further improve trust. The domain WHOIS gap should be investigated to confirm registration legitimacy.

V

Ville de Nancy

nancy.fr

69

The website www.nancy.fr is the official digital portal for the Ville de Nancy, France, providing comprehensive information and services related to municipal administration, cultural events, public services, and citizen engagement. It serves a broad audience including residents, visitors, families, students, and local businesses. The site is well-positioned as the authoritative source for city-related information and services, leveraging a public service business model focused on transparency and accessibility. Technically, the site is built on TYPO3 CMS with modern front-end technologies such as Bootstrap, jQuery, Vue.js, and Swiper for interactive components. It employs Matomo for analytics and uses a robust cookie consent management system (tarteaucitron) to comply with GDPR. The site is mobile-optimized, accessible, and demonstrates good SEO practices. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but could improve by adding additional security headers and publishing explicit security policies or incident response contacts. No vulnerabilities or WAF blocking were detected, indicating a mature security posture suitable for a government website. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for its users. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party scripts to sustain security and compliance.

M

Métropole du Grand Nancy

grandnancy.eu

69

The Métropole du Grand Nancy website serves as the official digital presence for the metropolitan government of the Grand Nancy region in France. It provides comprehensive information about metropolitan governance, urban planning, public transportation, cultural events, and citizen services. The site targets residents, visitors, and local businesses, offering a broad range of public sector services and information. The website is well-positioned as a trusted government resource with a consistent brand and professional content. Technically, the site is built on TYPO3 CMS with modern front-end frameworks including Bootstrap and Vue.js, ensuring a responsive and user-friendly experience. It integrates analytics via Matomo and manages cookie consent effectively with the Tarteaucitron tool. The site demonstrates good mobile optimization and SEO practices, although some accessibility improvements could be made. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms, but lacks some advanced security headers and a published security policy or vulnerability disclosure program. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy-protected, which is typical for government-related domains, and no suspicious patterns were found. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility compliance to further strengthen trust and security posture.

D

Deutschland tankt Strom

deutschland-tankt-strom.de

49

Deutschland-tankt-Strom.de is a specialized German platform dedicated to advancing electric mobility by providing comprehensive information, tools, and resources such as charging station locators, qualified service providers, and funding guidance. The website is positioned as a niche information hub targeting consumers and businesses interested in electric vehicles and infrastructure within Germany. Technically, the site is built on WordPress with Elementor and several plugins enhancing functionality and user experience. The hosting is provided by Hostingwerft, a German hosting provider, consistent with the website's regional focus. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though explicit security headers and policies are lacking. No blocking or WAF interference was detected, allowing full content access. Overall, the site demonstrates good content quality and technical implementation but would benefit from enhanced privacy and security disclosures to improve compliance and trust.

M

MENTOR im LitWIT e.V.

mentor-litwit.de

45

MENTOR im LitWIT e.V. is a small non-profit organization based in Witten, Germany, dedicated to improving children's reading and language skills through volunteer mentoring. The website is built on Joomla CMS with modern frontend technologies like Bootstrap and jQuery, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and CSRF protections, though security headers are not explicitly detected. Privacy compliance is well addressed with a cookie consent mechanism and a privacy policy. The organization is transparent with contact details and affiliations, enhancing trustworthiness. No critical security or content safety issues were found.

K

kimverlag GmbH

kim-verlag.de

10

kimverlag GmbH is an independent, artist-led publishing company specializing in children's media, hobby art, and creativity. The company develops and publishes magazines, audio, and digital media, and licenses content for German and international book publishers. The website reflects a small but professional media publisher with a clear focus on creative and child-friendly content. The business is positioned as a niche publisher with a strong artistic orientation and a target audience including children and hobby artists. Technically, the website is built on WordPress using Elementor and related plugins, with modern SEO and consent management tools implemented. The site is mobile optimized and performs moderately well. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is good with GDPR-aligned privacy and cookie policies and a consent mechanism in place. Overall, the website is trustworthy, professional, and safe for general audiences.

The website represents the Zväz cestovného ruchu Slovenskej republiky, a Slovak voluntary organization of employers in the tourism sector. It focuses on protecting and promoting the interests of its members, advocating for sustainable tourism development, regulatory frameworks, and workforce innovation. The organization targets tourism businesses, government bodies, and stakeholders in Slovakia. Technically, the site is built on WordPress with Elementor, using common plugins and libraries, hosted by Websupport. The site is moderately performant, mobile-optimized, and SEO-friendly but lacks advanced accessibility features. Security posture is adequate with HTTPS enabled but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, reflecting a legitimate organization with a stable online presence.

P

PACE-VET

pace-vet.eu

39

PACE-VET is an educational project focused on developing a digital platform for the recognition and validation of vocational competencies in the event technology sector. The website presents detailed project information, objectives, and schedules, targeting vocational learners, employers, and education providers. The platform aims to facilitate micro-credential certification to improve labor market adaptability. Technically, the website is built on WordPress with modern plugins and libraries, offering a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

E

Eurosystem Procurement Coordination Office (EPCO)

epco.lu

54

The Eurosystem Procurement Coordination Office (EPCO) is an institutional entity established by the European Central Bank to coordinate joint procurement activities among the central banks of the Eurosystem and the European System of Central Banks (ESCB). Hosted by the Banque centrale du Luxembourg since 2008, EPCO facilitates cost-efficient procurement, contract management, and promotes best practices across its member institutions. The website reflects a professional and consistent brand image, targeting central banks and related governmental entities involved in procurement activities. Technically, the site is built on WordPress with modern frontend technologies and includes GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The absence of explicit privacy and terms of service policies is a notable gap. Overall, the site is trustworthy and well-positioned as an official coordination office for Eurosystem procurement.