Security Directory

F

Falck Deutschland

falck.de

10

Falck Deutschland is a prominent healthcare and emergency services provider operating in Germany, offering ambulance and rescue services. The website demonstrates a solid digital presence with compliance to GDPR through a comprehensive cookie consent mechanism and integration of advanced analytics tools such as Microsoft Application Insights and Google Tag Manager. The technical infrastructure is modern, leveraging reputable third-party services and hosted on EuroDNS-managed domains. Security posture is generally good with HTTPS enforced and telemetry in place, though there is room for improvement in security headers and explicit security policies. Contact and legal information such as terms of service and incident response contacts are not readily visible, which could be enhanced to improve trust and compliance. Overall, the website is professional, well-branded, and targets a general audience seeking healthcare and emergency services in Germany.

Brücken-Center Ansbach GmbH operates a regional shopping center located in Ansbach, Germany, offering a wide range of retail shops, gastronomy options, and services including parking and voucher sales. The website is built on the Contao CMS platform and integrates modern frontend technologies such as jQuery, Bootstrap 5, and Slick Carousel. It employs Google Tag Manager for analytics and Cookiefirst for cookie consent management, demonstrating a commitment to privacy compliance. The site is well-structured, mobile-optimized, and provides clear contact information and social media links, enhancing user trust and engagement. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. Overall, the website reflects a professional and trustworthy digital presence for a medium-sized retail business.

J

JTRE a.s.

euroveatower.sk

10

Eurovea Tower is a premium real estate project by JTRE a.s., offering luxury residential apartments in Bratislava. The website presents a professional and well-branded digital presence with clear business information and contact details. The technical infrastructure is modern, leveraging Drupal 10 CMS, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile optimized and SEO friendly. Security posture is good with HTTPS and DNSSEC enabled, though some security headers could be improved. Privacy compliance is addressed with a cookie consent mechanism and a basic privacy policy. No critical vulnerabilities or suspicious content were detected, indicating a trustworthy and legitimate business website.

S

Slovan Bratislava

smebelasi.sk

9

The website smebelasi.sk represents the rebranding initiative of Slovan Bratislava sports clubs under the ownership of JTRE sports & entertainment. It focuses on showcasing a unified visual identity for multiple sports disciplines including hockey, basketball, and volleyball. The site targets sports fans and stakeholders interested in the club's new branding and identity. Technically, the site is built using modern web technologies such as React and Next.js, hosted on Webglobe infrastructure, and includes Google Tag Manager for analytics and a cookie consent mechanism for privacy compliance. Security posture is moderate with HTTPS enabled but lacks visible security headers and formal privacy or terms of service documentation. The domain WHOIS data is mostly consistent but contains an anomalous future creation date that should be verified. Overall, the site is professional and safe, but improvements in privacy transparency and security hardening are recommended.

K

KLIMAK, s.r.o.

klimak.sk

40

KLIMAK, s.r.o. is a well-established Slovak company specializing in technical building services including HVAC, air conditioning, and energy management solutions. With a history dating back to 1993 and a domain registered since 2003, the company holds a strong market position supported by ISO certifications and a broad portfolio of services targeting both commercial and residential clients. Their website reflects a mature digital presence with multilingual support, comprehensive service descriptions, and active engagement through social media and news updates. Technically, the site is built on WordPress with modern performance optimizations and GDPR-compliant cookie management. Security posture is solid with HTTPS enforcement and security plugins, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site demonstrates high professionalism and trustworthiness suitable for its industry and audience.

B

BAVARIA Bratislava s.r.o.

bavariabratislava.sk

10

BAVARIA Bratislava s.r.o. operates as an authorized BMW dealership and service center located in Bratislava, Slovakia. The company offers a comprehensive range of BMW vehicles including new and used cars, alongside financial services, servicing, and original accessories. Positioned as the largest and most modern BMW showroom in Slovakia, it targets BMW customers seeking premium automotive products and services. The website reflects a professional and consistent brand image aligned with BMW standards. Technically, the website is built on the siteLAB CMS platform and incorporates modern JavaScript libraries such as Swiper.js and Owl Carousel for UI components, along with Google reCAPTCHA for form security and Facebook SDK for customer chat integration. The site is mobile-optimized and includes SEO best practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and integrates anti-bot measures via reCAPTCHA. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced trust and compliance. Privacy and cookie policies are well implemented with clear consent mechanisms, supporting GDPR compliance. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security headers and incident response transparency would further strengthen its posture.

J

JTRE a.s.

jtre.sk

53

JTRE a.s. is a leading real estate development company based in Slovakia with a strong presence in the Central and Eastern European market. The company specializes in a wide range of real estate projects including residential, office, multifunctional, hotel, retail, and industrial developments. Their website reflects a mature and professional business with a clear market position and extensive project portfolio. The content is well-structured, professionally designed, and targets investors, tenants, and clients interested in real estate development in the region. Technically, the website is built on Drupal 10 with modern JavaScript libraries and tracking tools, ensuring good mobile optimization and user experience. Security posture is solid with HTTPS and DNSSEC enabled, though some security headers could be improved. Privacy compliance is strong with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, the website and business demonstrate high credibility and trustworthiness.

L

Liftago

liftago.sk

69

Liftago is a Czech Republic-based transportation company specializing in taxi rides and courier deliveries, operating across 15 cities. The company offers services via a mobile app and website, targeting both consumers and businesses seeking reliable on-demand transportation solutions. The website is professionally designed, mobile-optimized, and provides clear information about services, privacy, and terms. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, and Cookiebot for consent management, hosted likely on Cloudflare infrastructure ensuring good performance and security. Security posture is strong with HTTPS enforcement, comprehensive cookie consent, and security headers, though no explicit security policy or incident response contacts are published. Overall, Liftago presents a trustworthy and professional digital presence with moderate to high maturity in technical and privacy compliance aspects.

Ably is a mature and established realtime platform company founded in 2002, specializing in scalable, reliable, and low-latency realtime data streaming and messaging services. Their platform supports a broad range of realtime applications including live messaging, chat, dashboards, notifications, and collaborative apps. The company positions itself as a leader in the realtime pub/sub market, serving over 2 billion connected devices monthly with a strong uptime record. Their business model is SaaS-based with usage-based pricing tiers including Free, Standard, Pro, and Enterprise plans, targeting developers and businesses requiring realtime infrastructure. Technically, the website is built on modern frameworks such as Gatsby and React, hosted with Cloudflare DNS and Amazon Registrar, and integrates marketing and analytics tools like HubSpot, Intercom, and Google Tag Manager. The site is fast, mobile-optimized, and accessible with good SEO practices. Security posture is strong with HTTPS, security headers, and enterprise-grade compliance such as SOC 2 and HIPAA BAA, although DNSSEC is not enabled and explicit security policies or incident response contacts are not published. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a clearly linked privacy policy or terms of service on the homepage. Overall, Ably demonstrates a high level of professionalism, technical maturity, and business credibility with minor gaps in explicit privacy and security disclosures.

Ably is a well-established realtime platform specializing in streaming data instantly between services and end-user devices. It offers a suite of products including Pub/Sub messaging, chat APIs, live synchronization, and asset tracking, targeting developers and businesses requiring scalable, reliable realtime infrastructure. The company positions itself as a market leader with over 2 billion connected devices monthly and a strong uptime record. Technically, the website leverages modern frameworks like Gatsby and React, with robust hosting and DNS via Amazon and Cloudflare. The site is fast, mobile-optimized, and accessible, reflecting a mature digital presence. Security posture is strong with HTTPS, security headers, and compliance certifications such as SOC 2, though DNSSEC is not enabled and incident response contacts are not explicitly published. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity, supporting Ably's credibility as a leading realtime platform.

B

Boxicons

boxicons.com

55

Boxicons is a technology-focused company providing a comprehensive icon library tailored for designers and developers. The website offers over 30,000 icons with customization options and a freemium business model including a Pro subscription for enhanced features. The company has a strong market presence evidenced by high weekly downloads and positive user ratings. Technically, the site is built on modern frameworks such as Next.js and uses Cloudflare for DNS and CDN services, ensuring fast performance and good mobile optimization. Security posture is solid with HTTPS enforced and domain status protections, though DNSSEC is not enabled and explicit security headers are not fully confirmed. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is professional, trustworthy, and well-positioned in its niche, but could improve transparency and compliance aspects.

H

HR-ON

hr-on.com

61

HR-ON is a Denmark-based technology company specializing in providing a modern recruitment and HR system tailored for contemporary HR teams. Their platform offers services including recruitment, staffing, onboarding, core HR functions, and employee engagement, positioning them as a competitive SaaS provider in the HR technology market. The website demonstrates a professional design with consistent branding and good SEO practices, targeting modern HR professionals and organizations seeking efficient HR solutions. Technically, the site is built on WordPress with a robust tech stack including multiple analytics and marketing tools, indicating a mature digital infrastructure. Security-wise, the site employs HTTPS and reCAPTCHA but lacks some advanced security headers and formal security policies, suggesting room for improvement in compliance and incident response readiness. Overall, the website is trustworthy and functional, with recommendations to enhance privacy transparency and security posture.

H

HR-ON

hr-skyen.dk

62

HR-ON is a Denmark-based technology company specializing in providing a modern recruitment and HR system tailored for contemporary HR teams. Founded in 2015, the company offers a SaaS platform that integrates recruitment, staffing, onboarding, core HR functions, and employee wellbeing services. The website reflects a professional and consistent brand image, targeting HR professionals and organizations seeking efficient HR management solutions. The company maintains an active digital presence with multiple social media channels and employs various marketing and analytics tools to optimize user engagement and business growth. Technically, the website is built on WordPress and leverages a comprehensive tech stack including Yoast SEO, Google Tag Manager, Google Analytics, Facebook Pixel, Hotjar, and other marketing automation tools. Hosting is provided via one.com, with domain registration dating back to 2015, consistent with the company's founding year. The site demonstrates good SEO practices, mobile optimization, and moderate performance, although accessibility features are basic. From a security perspective, the site uses HTTPS and incorporates reCAPTCHA for form protection. However, DNSSEC is not enabled, and explicit security headers are not detected in the provided data. There is no visible privacy policy or terms of service in the analyzed content, which represents a compliance gap. No vulnerability disclosures or incident response contacts are published. The WHOIS data shows a stable and legitimate domain registration without privacy protection, enhancing trustworthiness. Overall, HR-ON presents a credible and professional online presence with a solid technical foundation and active marketing efforts. To enhance security and compliance posture, the company should consider publishing comprehensive privacy and terms policies, enabling DNSSEC, and adding security headers. These improvements will strengthen user trust and regulatory compliance.

V

VOCAST

vocast.com

65

VOCAST operates as a brand sharing platform targeting businesses passionate about their brand identity. The website presents a professional and consistent brand image, leveraging WordPress with the Divi theme and performance optimizations via WP Rocket. The technical infrastructure includes modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Leadfeeder, with DNS managed through Cloudflare, indicating a mature digital presence. Security posture is adequate with HTTPS enforced and cookie consent managed by Cookiebot, though some security headers are missing and no explicit security or incident response policies are visible. Overall, the site is trustworthy and well-structured but could improve transparency by adding contact details and terms of service.

P

Pixel-Shot Studio (Africa Studio)

pixel-shot.com

54

Pixel-Shot Studio operates as a stock photography agency providing a wide range of high-quality stock images and related services such as custom shooting and photo retouching. The website positions itself as one of the largest creators of stock content, targeting photographers, creative professionals, and buyers of stock photos. The business model is direct sales of digital content with user account management features including login, registration, and password recovery. Technically, the website uses a traditional web stack with jQuery and jQuery UI for UI components, and integrates Google Analytics and Google Tag Manager for user tracking and analytics. The site is hosted under a domain registered with Internet Invest, Ltd. dba Imena.ua, with a domain age consistent with the business history. The website shows moderate performance and basic mobile optimization. From a security perspective, the site uses HTTPS (implied by external Google Analytics scripts loaded over HTTPS), but lacks DNSSEC and explicit HTTP security headers. The domain is protected against unauthorized transfer. No privacy or cookie policies are present, which is a compliance gap. Forms have client-side validation but no visible advanced security measures. No incident response or vulnerability disclosure information is provided. Overall, the website is functional and professional with moderate trustworthiness. Key risks include lack of privacy and cookie policies, absence of security headers, and missing DNSSEC. Strategic improvements in these areas would enhance compliance and security posture.

T

timeacle GmbH & Co. KG

timeacle.com

68

timeacle GmbH & Co. KG operates a professional SaaS platform specializing in digital appointment booking and call-up systems, targeting sectors such as healthcare, banking, and public services. The company offers a modular system with a full version and enterprise modules, emphasizing customer convenience through mobile notifications and queue management. The website reflects a mature business with a domain age since 2012 and consistent branding. Technically, the site uses modern frontend technologies including Vue.js and Vuetify, ensuring a responsive and user-friendly experience. Security posture is good with HTTPS and GDPR compliance, though formal security policies and incident response information are not publicly available. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

V

Voith

voith.com

73

Voith is a family-owned enterprise specializing in industrial technology sectors such as drive technology, hydropower, and papermaking automation. The company positions itself as a responsible and sustainable technology provider with a global reach. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to industrial clients and partners. Technically, the site employs modern JavaScript libraries, Cookiebot for consent management, and Google Tag Manager for analytics, indicating a well-maintained infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of HTTP security headers and a public security policy suggests room for improvement. Privacy compliance is strong, with GDPR-aligned cookie consent and a detailed privacy policy. The lack of WHOIS data reduces transparency but does not significantly detract from the site's credibility given its professional presentation and business focus.

S

Soulmade Hotel Garching GmbH + Co. KG

soulmade.me

59

Soulmade Hotel Garching GmbH + Co. KG operates a sustainable hospitality business in Garching near Munich, Germany, offering serviced apartments and hotel accommodations with a strong focus on eco-friendly practices and guest comfort. The website reflects a niche market position targeting business travelers and environmentally conscious guests, emphasizing long-term stays and local experiences. The company is well-established, with domain registration dating back to 2001, and maintains a consistent brand presence across digital channels. Technically, the website is built on WordPress, leveraging modern libraries such as Flickity for UI components and Dialogshift for chat functionality, with Google Tag Manager managing analytics and tracking under user consent. Security posture is solid with HTTPS enforced and cookie consent implemented, though improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is strong, with comprehensive policies and a named data protection officer. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

D

DN Wohnbau GmbH

dn-wohnbau.de

56

DN Wohnbau GmbH is a well-established real estate developer based in Munich, Germany, specializing in the development and construction of multi-family residential buildings and housing complexes. Founded in 1994, the company emphasizes quality craftsmanship and sophisticated architectural design through a long-term partnership with a dedicated architecture firm. Their market position is that of a trusted regional developer with a portfolio of completed, ongoing, and planned projects, targeting property buyers and investors seeking premium residential properties in Munich and surrounding areas. Technically, the website is built on the Webflow platform, leveraging modern web technologies including Google Tag Manager, Microsoft Clarity, Facebook Pixel, and Brevo for marketing automation. The site is well-optimized for performance, mobile responsiveness, and accessibility, with a professional design and clear navigation structure. Cookie consent and privacy compliance mechanisms are implemented effectively. From a security perspective, the site enforces HTTPS and uses Cloudflare Turnstile captcha for form protection, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing no privacy protection or suspicious registration patterns. Overall, DN Wohnbau GmbH presents a credible and professional online presence with good security and privacy practices. Strategic improvements could include publishing formal security and incident response policies and enhancing security headers to further strengthen their security posture.

E

easybell GmbH

easybell.de

72

easybell GmbH is a German telecommunications provider specializing in internet and telephony services for private and business customers. The company offers a range of products including SIP Trunks, Cloud Telefonanlage, Microsoft Teams integration, and Home Office Connect solutions. With over 50,000 business customers and a parent company Dstny, easybell holds a solid market position in the telecommunications sector in Germany. The website reflects a professional and customer-focused business model emphasizing flexible contracts without minimum terms. Technically, the website is built on TYPO3 CMS and leverages modern web technologies such as jQuery and Bootstrap. It integrates multiple analytics and marketing tools including Matomo, Google Analytics, Microsoft Clarity, and Trustami for reputation management. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers are not detected, and there is no published security.txt or clear incident response contact, which are areas for improvement. The WHOIS data is limited due to DENIC privacy policies but consistent with the domain's German origin and business claims. Overall, easybell.de is a trustworthy and professionally managed website with strong business credibility and compliance posture. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving transparency on incident response contacts to further strengthen security and trust.

E

Emarsys

emarsys.com

68

Emarsys is a well-established enterprise marketing software provider specializing in AI-powered personalized omnichannel customer engagement solutions. The company operates under the SAP umbrella, reflecting a strong market position and extensive industry experience since 2000. Their website demonstrates a mature digital infrastructure with comprehensive content, professional design, and clear navigation aimed at marketers and businesses seeking advanced marketing automation and personalization services. The technical stack leverages WordPress CMS with modern marketing and analytics tools such as Marketo, Google Tag Manager, and Facebook Pixel, ensuring robust data collection and user engagement tracking. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though some security headers could be improved. Privacy compliance is evident with accessible privacy and cookie policies and GDPR considerations. Overall, the website and domain registration data indicate a trustworthy and credible business presence.

The website www.rostock.de serves as the official city portal for the Hanseatic and University City of Rostock, Germany. It provides comprehensive information on tourism, lifestyle, culture, activities, historical and maritime topics, targeting residents and visitors alike. The portal is positioned as a government entity's digital presence, offering key city-related services and information. Technically, the site is built on the Contao Open Source CMS platform, employs modern web technologies including lazy loading and cookie consent via Cookiebot, and integrates Google Tag Manager for analytics. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place; however, the absence of explicit security headers and a published security policy limits its security maturity. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service pages. WHOIS data indicates hosting within academic and government infrastructure, consistent with the city’s profile, though registrant details are minimal. Overall, the site is trustworthy and professional but would benefit from enhanced transparency in privacy and security policies.

A

Avoy Technologies Ltd.

snapsea.io

65

SnapSea, operated by Avoy Technologies Ltd., is a specialized visual marketing platform tailored for the travel and tourism industry. It offers comprehensive solutions including user-generated content acquisition, digital asset management, embeddable galleries, and media centers. The platform is trusted by numerous top European destinations and tourism boards, positioning it as a leading SaaS provider in this niche market. The business model revolves around subscription and contract-based licensing, targeting tourism boards, local authorities, and hospitality groups. Technically, SnapSea employs a modern technology stack centered on Next.js and React, hosted on DigitalOcean with integrated third-party analytics and marketing tools such as Google Analytics, Hotjar, FullStory, and Bing UET. The website demonstrates excellent design quality, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, implements standard security headers, and uses a robust cookie consent mechanism compliant with GDPR. However, there is a lack of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. Overall, SnapSea presents a professional, secure, and privacy-conscious platform with strong market credibility. The absence of WHOIS data limits domain registration trust analysis, but the website's quality and client base support its legitimacy. Strategic improvements in security transparency and contactability would further strengthen its posture.

W

WhistleOut

whistleout.com

70

WhistleOut is a well-established online platform specializing in the comparison of phone and internet plans, providing consumers in the United States with expert guides, reviews, and news to help them make informed decisions. The website is professionally designed, mobile-optimized, and rich in relevant content, positioning it as a trusted resource in the telecommunications comparison market. Technically, the site employs a modern technology stack including Google Analytics, Google Tag Manager, Crazy Egg, Mouseflow, and Microsoft Application Insights, indicating a mature digital infrastructure focused on user analytics and experience optimization. Security-wise, the site enforces HTTPS, implements multiple security headers, and uses a consent management platform for privacy compliance, though it lacks explicit public security policies or incident response information. The absence of WHOIS registration data reduces transparency but does not detract significantly from the site's legitimacy given its professional presentation and clear affiliate disclosures. Overall, WhistleOut demonstrates a strong digital presence with good security posture and privacy compliance, suitable for its consumer audience.

D

Digital Privacy Corporation

gleam.io

67

Gleam.io is a technology company operating a SaaS platform that enables businesses and marketers to run contests and giveaways to grow their customer base and capture emails. The company, Digital Privacy Corporation, has maintained the domain since 2013, indicating a stable market presence. The website is built using modern web technologies including Framer for site generation and Cloudflare for DNS and hosting, supplemented by multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and TikTok Pixel. The site is accessible without any WAF or security challenges, and the content is professionally presented with good design and user experience. However, the absence of explicit privacy, cookie, and terms of service policies in the provided content is a notable gap in compliance and transparency.

M

Macworld

macworld.com

63

Macworld is a well-established media brand specializing in news, reviews, and tips related to Apple's product ecosystem. It serves a broad audience of Apple users and technology enthusiasts, providing comprehensive content including articles, podcasts, and deals. The website is owned by Foundry, a parent organization, and maintains consistent branding and high content quality. Technically, the site is built on WordPress with a modern tech stack including advanced advertising and consent management tools. It is optimized for SEO, mobile-friendly, and uses HTTPS with strong security headers. Privacy compliance is robust with clear privacy and cookie policies and active consent mechanisms. However, explicit Terms of Service and security policy pages are not found, and no direct contact information is publicly listed. The WHOIS data is privacy protected, which is justified for a media brand. Overall, the site demonstrates a mature digital presence with good security posture and compliance, suitable for its business model and audience.

D

DCF Verlag GmbH

unternehmerjournal.de

44

UnternehmerJournal is a German online media platform dedicated to the Mittelstand business sector, providing news, interviews, and expert advice tailored for business executives and entrepreneurs. The platform is operated by DCF Verlag GmbH and positions itself as a niche media outlet for the digital German Mittelstand, emphasizing quality content and business insights. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and Iubenda for cookie compliance, ensuring a good level of digital maturity and user experience. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security policies and incident response contacts, which could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR, serving its target audience effectively.

W

wallstreetONLINE

wallstreet-online.de

69

wallstreetONLINE operates a leading German financial and stock market portal offering real-time market data, news, analysis, and a large community platform for investors and finance enthusiasts. The website targets retail investors and market participants in Germany, providing comprehensive tools and content to support informed investment decisions. The platform is well-positioned as Germany's largest financial community with a broad range of services including stock quotes, news, forums, and mobile applications. Technically, the website employs modern web technologies such as Bootstrap, Highstock charts, and integrates privacy management and consent frameworks, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, integrates consent management, and uses Google Tag Manager with opt-out capabilities, though it lacks explicit security headers and published security policies. Overall, the site demonstrates a strong security posture with room for improvement in transparency and formal security documentation. The domain WHOIS data aligns with the website's business claims, indicating legitimacy and consistency. No blocking or WAF mechanisms were detected, allowing full content access and analysis.

D

Deutscher Ärzteverlag GmbH

aerzteblatt.de

70

Deutscher Ärzteverlag GmbH operates the website Deutsches Ärzteblatt, a leading German medical news and professional journal platform. The site provides current health policy news, medical research updates, and professional information targeting medical professionals and healthcare stakeholders. The business model is primarily media publishing with revenue from subscriptions and advertising. The website is well-positioned in the German healthcare media market with a strong reputation and comprehensive content offerings including ePaper and CME materials. Technically, the website uses modern web technologies including Next.js and React, hosted likely via GoDaddy's domain control services. It integrates advanced consent management tools such as Contentpass and Sourcepoint to ensure GDPR compliance. The site is optimized for performance, mobile responsiveness, and accessibility, providing a high-quality user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements multiple security headers. It uses consent-based tracking and advertising scripts, minimizing privacy risks. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policy and incident response information are not publicly available, representing an area for improvement. Overall, the website demonstrates a mature digital presence with strong compliance and security posture, serving a professional audience with trustworthy content. Strategic recommendations include publishing detailed security policies, establishing incident response contacts, and enhancing transparency around vulnerability disclosures to further strengthen trust and security culture.

I

ID Interactive

id-interactive.fr

56

ID Interactive is a well-established digital agency based in Arradon near Vannes, France, specializing in web design, development, SEO, paid media, and graphic design services. Founded in 2006, the agency serves a diverse clientele including SMEs, startups, institutions, and brands primarily in Brittany and across France. Their business model focuses on delivering tailored digital solutions that enhance client acquisition and brand visibility through innovative web experiences and AI-enhanced SEO strategies. Technically, the website leverages modern frameworks such as React and Next.js, integrates professional CMS (Payload CMS), and employs advanced analytics and marketing tools including Google Tag Manager, Facebook Pixel, and Matomo. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and secure cookie consent mechanisms, though explicit security headers and policies could be improved. The absence of WHOIS data is a minor concern but does not detract significantly from the overall trustworthiness given the professional presentation and comprehensive contact information. Strategic recommendations include enhancing security header implementation, publishing a formal security policy, and establishing a vulnerability disclosure process to further strengthen trust and compliance.

W

Wagner-Bazin WB

wagner-bazin-wb.com

42

Wagner-Bazin WB is a professional cycling team based in France, providing news, team information, race calendars, and merchandise through their official website. The site targets cycling enthusiasts and supporters, offering a well-structured and visually consistent platform. Technically, the website is built on WordPress with WooCommerce and Elementor, integrating modern marketing and analytics tools such as Google Tag Manager and Brevo. The site is mobile-optimized and SEO-friendly, with a moderate performance profile. Security-wise, HTTPS is enforced and cookie consent is managed via Axeptio, but there is a lack of visible security headers and no explicit privacy policy or terms of service pages, which are areas for improvement. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content and social media presence suggest a legitimate operation. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

A

André Bazin - Charcuterie et Salaison

andre-bazin.fr

51

André Bazin is a medium-sized French company specializing in charcuterie and salting products, with a history dating back to 1954. The company operates multiple brands and serves mass retailers, food service professionals, and ready-meal manufacturers. Their website is professionally designed using WordPress and Elementor, featuring multilingual support and comprehensive business information. Technically, the site uses modern plugins and SEO tools, hosted by OVH, with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and secure forms, though there is room for improvement in explicit security policies and incident response information. Overall, the website is trustworthy, compliant with GDPR, and provides clear contact channels.

C

ClickUp

clickup.com

77

ClickUp is a well-established SaaS company founded in 2001, offering an integrated productivity platform that consolidates tasks, documents, goals, and chat into a single application. Positioned as a leading solution in the productivity and project management market, ClickUp targets businesses and teams seeking to streamline workflows and maximize productivity. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the site leverages modern frameworks such as Next.js and React, hosted on AWS infrastructure, and integrates advanced analytics and marketing tools with robust consent management via OneTrust. Security posture is strong with HTTPS enforcement, domain protection statuses, and cookie consent mechanisms, though DNSSEC is not enabled and no explicit security policy or vulnerability disclosure program is publicly available. Overall, ClickUp demonstrates a high level of digital maturity and business credibility, with room for improvement in transparency around security policies and incident response.

K

Karlsruher Messe- und Kongress GmbH

offerta.de

63

offerta.de is the official website for the offerta trade fair, a major regional event held in Karlsruhe, Germany, organized by Karlsruher Messe- und Kongress GmbH. The platform provides comprehensive information about the event, including schedules, exhibitors, ticket sales, and thematic areas, targeting families and general visitors interested in shopping, enjoyment, and live events. The website demonstrates a strong market position as a leading regional event organizer with a focus on sustainability and regional products. Technically, the website is built on modern frameworks such as Vue.js, Nuxt.js, and Vuetify, ensuring a responsive and user-friendly experience. It integrates advanced privacy management tools like Usercentrics CMP and analytics services including Google Tag Manager and Hotjar, reflecting a mature digital infrastructure. The site is well-optimized for SEO and mobile devices, with good performance and accessibility standards. From a security perspective, the site enforces HTTPS and employs consent mechanisms for cookies, but lacks explicit security headers and a public security policy or incident response contact. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the website's claims, indicating legitimacy and trustworthiness. Overall, offerta.de presents a professional, secure, and privacy-compliant platform suitable for its business model. Strategic improvements could include enhancing security headers, publishing a security policy, and adding a security.txt file to further strengthen its security posture and trustworthiness.

S

Steuerkontor Weinert

steuerkontor-weinert.de

58

Steuerkontor Weinert is a well-established tax consultancy firm based in Rostock, Germany, with over 25 years of experience. The company specializes in digital financial and payroll accounting, personalized tax planning, and business consulting services tailored for commercial, freelance, and non-profit organizations primarily in the Mecklenburg-Vorpommern region. Their business model focuses on professional services with a strong emphasis on digital transformation and cooperative client relationships. The website reflects a consistent and professional brand image, supported by recognized certifications such as go-digital and Offensive Mittelstand. Technically, the site is built on the Contao CMS platform, uses modern web technologies including lazy loading for images, and integrates Google Tag Manager for analytics. Hosting is provided by Timme Hosting, consistent with the domain's WHOIS data.

D

Dynamic

dynamic.xyz

74

Dynamic is a fintech and crypto technology company specializing in wallet infrastructure, authentication, and secure key management through a flexible SDK. Positioned as a leading provider in the multi-chain wallet ecosystem, Dynamic serves fintech firms, crypto businesses, and stablecoin platforms with enterprise-grade solutions. The company recently became part of Fireblocks, enhancing its market position and resource base. The website reflects a mature digital presence with comprehensive product offerings, customer case studies, and a demo environment to engage developers and clients. Technically, the site is built on Webflow with modern JavaScript libraries and integrates analytics and marketing tools such as HubSpot and Google Tag Manager. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place. No critical vulnerabilities or compliance gaps were detected, though incident response and vulnerability disclosure policies could be more explicit. Overall, Dynamic presents a professional, trustworthy, and technically sound platform with a clear focus on fintech wallet infrastructure.

K

KLISAB

klisab.com

45

KLISAB is a Croatian fashion brand specializing in modern clothing and accessories for men and women, founded in 2020 by designers Tomislav Kliškinić and Marko Šabarić. The company operates an e-commerce platform built on WordPress and WooCommerce, targeting fashion-conscious consumers primarily in Croatia. The website presents a professional and consistent brand image with clear navigation and good mobile optimization. Technical infrastructure leverages popular WordPress plugins and themes, including GDPR-compliant cookie consent mechanisms and analytics integrations such as Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enabled and domain registration transparency, though improvements in DNSSEC and security headers are recommended. Overall, the site is trustworthy and compliant with privacy regulations, supporting a positive user experience.

A

Abalone d.o.o.

abalone.hr

10

Abalone d.o.o. operates the Abalone Hotel & Apartments located on the Crikvenica Riviera in Croatia, providing hospitality services including hotel rooms and apartments. The business targets tourists and travelers seeking accommodation in this coastal region. The website is professionally designed using WordPress with modern plugins and themes, hosted on HostGator, and includes multilingual support. It demonstrates a moderate level of digital maturity with SEO and mobile optimization in place. Security posture is adequate with HTTPS and cookie consent mechanisms implemented, though security headers and incident response policies are absent. Overall, the site is trustworthy and compliant with GDPR cookie requirements but could improve in security transparency and contact information visibility.

V

Virtualna Tvornica

virtualna-tvornica.com

10

Virtualna Tvornica is a Croatian digital agency specializing in web development and online marketing services, established in 2012. The company offers a broad range of services including web shop creation, website and web application development, AI and ERP integration, and various digital marketing solutions such as Google, Meta, and TikTok advertising. Their market position is that of a specialized, small-sized agency with a consistent brand presence and a portfolio of successful projects. Technically, the website is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile devices, and integrates standard marketing and security tools like Google Tag Manager and reCAPTCHA. Security posture is good with HTTPS and cookie consent mechanisms in place, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the website is professional, trustworthy, and compliant with GDPR, with no signs of blocking or WAF interference.

K

Kerekesh Teatar

kerekesh.hr

46

Kerekesh Teatar is a Croatian theatre company specializing in comedic and cultural performances, with a strong regional presence and active event scheduling. The website serves as a portal for event information, ticket sales, and company background, targeting a general audience interested in theatre arts. Technically, the site is built on WordPress with modern plugins and libraries, including Google Analytics and GDPR compliance tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent, though improvements could be made in security headers and incident response transparency. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting the legitimacy of the business.

P

Pozitivan ritam

pozitivanritam.hr

44

Pozitivan ritam is a Croatian independent media and event organization specializing in music festivals, club events, and independent music production and distribution. The website showcases a variety of music-related content including festival announcements, club event schedules, and record label news, targeting music enthusiasts primarily in Croatia and the surrounding region. The business operates multiple music venues and organizes notable festivals such as Sea Sound Festival and Martinska Punk, positioning itself as a key player in the regional independent music scene. Technically, the website is built on Drupal CMS with a modern tech stack including jQuery, Font Awesome, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile optimized with good navigation and content quality, although some accessibility features are basic. Performance is moderate, with standard use of third-party scripts and advertising networks. From a security perspective, the site enforces HTTPS and includes a Content-Security-Policy header, but could improve by adding additional security headers and tightening CSP rules. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with a GDPR-compliant cookie consent banner and a privacy policy page in Croatian. However, no terms of service or explicit contact information for security or incident response was found. Overall, the website presents a professional and trustworthy front for a small independent music business. The lack of WHOIS data due to privacy protection is typical and justified for this business type. Recommendations include enhancing security headers, publishing terms of service, and providing clearer contact information to improve trust and compliance.

N

Nacionalna i sveučilišna knjižnica u Zagrebu

nsk.hr

10

The website represents the Nacionalna i sveučilišna knjižnica u Zagrebu, the largest Croatian national and university library. It serves as a central resource for academic and public users in Croatia, providing extensive library services and resources. The domain is well-established since 1997 and registered under CARNET, a reputable Croatian academic network, supporting its legitimacy. Technically, the site is built on WordPress with modern SEO and accessibility features, including multilingual support and cookie consent mechanisms. Security posture is good with HTTPS and reCAPTCHA usage, though security headers and explicit policies could be enhanced. User tracking is moderate via Google Analytics and Tag Manager. Overall, the site is professional, trustworthy, and safe for general audiences.

L

LIBUSOFT CICOM d.o.o.

otvorenigrad.hr

58

LIBUSOFT CICOM d.o.o., operating under the brand SPI, is a Croatian technology company founded in 2011, providing software platform solutions and technology services primarily targeting businesses in Croatia and neighboring countries. The website reflects a professional B2B service provider with a regional market focus. The company maintains a consistent brand presence and offers customer service in multiple languages including English, Croatian, and German. Technically, the website is built on WordPress using the Enfold theme, integrates modern web technologies such as Google Analytics, Google Tag Manager, and reCAPTCHA, and is hosted on Amazon AWS infrastructure. Security measures include HTTPS enforcement and standard security headers, contributing to a good security posture. However, the site lacks explicit privacy and cookie policies, which impacts privacy compliance scores. Overall, the website is functional, professional, and trustworthy, but could improve transparency and compliance with data protection regulations.

S

Sport Schreiner Tischtennis

sport-schreiner-tt.de

54

Sport Schreiner Tischtennis operates a specialized German-language e-commerce platform focused on table tennis equipment including blades, rubbers, tables, clothing, and accessories. The website is built on the Shopware 6 platform, leveraging modern web technologies and integrating analytics tools such as Matomo and Google Tag Manager. The site demonstrates good design quality, mobile responsiveness, and clear navigation, targeting table tennis players and enthusiasts primarily in Germany. Security posture is solid with HTTPS enforced and privacy-conscious analytics configurations, although explicit privacy and terms policies are not detected in the provided content. The domain WHOIS data is limited, with an unusual domain status and non-matching nameservers, which slightly reduces trust but does not indicate malicious intent. Overall, the site is professional, trustworthy, and well-positioned within its niche market.

J

JAKO AG

jako.de

69

JAKO AG operates a professional e-commerce platform specializing in sportswear and equipment for men, women, and children. The company targets sports teams, clubs, and individual consumers, offering a wide range of customizable sports apparel and accessories. The website demonstrates a mature digital presence with modern search capabilities, multi-language support, and integration of trusted third-party services such as Trusted Shops for customer assurance. Technically, the site employs contemporary JavaScript libraries and analytics tools, ensuring a responsive and user-friendly experience across devices. Security measures include HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, but the overall site professionalism and trust signals mitigate this concern. Strategic recommendations include enhancing transparency around security policies and providing clear contact information to improve user trust and compliance posture.

P

Printera Grupa d.o.o.

printera.hr

53

Printera Grupa d.o.o. is a Croatian boutique printing company specializing in a wide range of paper-based printing services including brochures, catalogs, magazines, cookbooks, monographs, and direct mailing. Established in 2008, the company has over 30 years of experience and serves both domestic and international markets including Austria, Germany, Slovenia, France, Denmark, Belgium, Italy, Lichtenstein, and the USA. The website reflects a professional business with a clear market position as a leader in quality printing services in Croatia. Technically, the website uses modern technologies such as Google Tag Manager, Google Analytics 4, and Cloudflare DNS, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and reCAPTCHA implemented on forms, though some security headers and explicit security policies are missing. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the website is trustworthy and professionally maintained.

T

Thomastik-Infeld GmbH

thomastik-infeld.com

71

Thomastik-Infeld GmbH is a well-established Austrian company specializing in the development and production of high-quality music strings since 1919. The company targets musicians and music professionals worldwide, offering a broad portfolio including orchestral, guitar, and folk strings. Their website reflects a mature digital presence with professional design, multilingual support, and integrated e-commerce and consulting tools. Technically, the site employs modern frameworks such as Bootstrap and jQuery, enhanced with Google Tag Manager and reCAPTCHA for security. The security posture is solid with HTTPS and consent management, though explicit security headers and incident response policies are absent. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further investigation. Overall, the website is trustworthy, professional, and compliant with GDPR, serving as a strong digital asset for the company.

G

Glazba.hr

glazba.hr

10

Glazba.hr is a Croatian music-focused website providing music content and related media services. The site targets a general audience interested in music and entertainment. It leverages WordPress CMS and integrates modern marketing and analytics tools such as Google Analytics and Facebook Pixel, indicating a moderate level of digital maturity. The website implements a cookie consent mechanism compliant with GDPR, enhancing privacy compliance. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though some security headers could be improved. Overall, the site presents a professional and trustworthy front with good content quality and user experience.

P

Plus Hosting Grupa d.o.o.

nacional.hr

59

Nacional.hr is a Croatian political news portal operated by Plus Hosting Grupa d.o.o., established in 2014. It serves as a leading platform for political news and analysis targeting the Croatian-speaking audience. The website leverages WordPress CMS with a variety of plugins for content management, advertising, and user engagement. It employs Cloudflare for DNS and security, ensuring robust protection and performance. The site integrates multiple advertising networks and analytics services, including Google Analytics, Gemius, and Umami, to optimize monetization and user insights. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a detailed privacy policy in Croatian, aligned with GDPR requirements. However, direct contact information and explicit security policies are not publicly available, which could be improved to enhance trust and transparency.

T

Turistička zajednica grada Sv. I. Zeline

visitzelina.hr

41

The website represents the official tourism board of Sveti Ivan Zelina, Croatia, providing comprehensive information about local culture, events, gastronomy, sports, and accommodation. It serves as a key resource for tourists and local visitors, promoting sustainable tourism and regional attractions. The site is well-branded and consistent with its government and non-profit identity. Technically, it is built on Joomla CMS with modern libraries such as Bootstrap, jQuery, and Owl Carousel, and integrates Google Analytics and Google Tag Manager for visitor tracking. The site is mobile-optimized and offers interactive features like maps and video content. Security-wise, the site uses HTTPS with good SSL configuration but lacks some security headers and formal security policies. Privacy compliance is partial, with a cookie consent banner but no visible privacy policy or terms of service. Overall, the domain registration data aligns well with the website's purpose and location, indicating legitimacy and trustworthiness.