Security Directory

B

BB Finance OÜ

raha24.ee

63

Raha24, operated by BB Finance OÜ, is an Estonian online lending platform specializing in unsecured loans up to 10,000 EUR with quick approval processes. The company targets individuals in Estonia seeking fast and reliable credit solutions. The website demonstrates a mature digital presence with a domain registered since 2010, consistent with the business's operational history. Technical infrastructure is based on WordPress with modern SEO and consent management tools, indicating a moderate to good level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers appear missing. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with comprehensive privacy and cookie policies and GDPR-aligned consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for its target market.

A

Adcash

adcash.com

58

Adcash is a well-established global online advertising platform founded in 2000, serving media buyers, affiliates, and publishers worldwide. The company offers a variety of advertising and monetization solutions including Pop-Under, Interstitial, Native, and Banner ads, supported by advanced targeting, anti-fraud technology, and real-time analytics. The website reflects a mature digital presence with comprehensive SEO, mobile optimization, and a professional design that supports user engagement and conversion. Technically, the site leverages modern tools such as Google Tag Manager, Matomo Analytics, and Cloudflare DNS, hosted on a WordPress CMS platform, ensuring fast performance and good accessibility. Security posture is solid with HTTPS enforced and domain registration protections, though improvements could be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. Overall, Adcash demonstrates a high level of business credibility and digital maturity, positioning itself as a trusted player in the online advertising industry.

I

Industry62

industry62.com

60

Industry62 is a small, employee-owned digital design company operating primarily in Finland and Estonia, with offices in Helsinki, Turku, Tallinn, and Tampere. The company focuses on creating impactful digital services and positions itself as a human-centric, value-driven organization. Their website reflects a professional and consistent brand image, targeting businesses seeking digital design and development services. The technical infrastructure is based on the Squarespace platform, leveraging modern web technologies including Google Analytics and YouTube integrations, providing a moderate performance and good mobile optimization. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies, which is a notable gap given GDPR requirements. The domain WHOIS data is missing, raising concerns about domain registration legitimacy, though the website content and social media presence support the business's authenticity. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and clearer domain registration transparency.

D

DUX

dux.ee

43

DUX is a small, established UX and UI design studio based in Estonia, founded in 2014. They specialize in creating digital experiences including mobile and desktop applications, websites, e-commerce platforms, and SaaS products. Their portfolio showcases over 200 projects, targeting NGOs, startups, SMEs, and global/local leaders, positioning them as a reputable design partner in the technology sector. The website is professionally designed with excellent content quality and clear navigation, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries, Google Analytics, and Google Tag Manager, hosted by Elkdata OÜ, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no exposed sensitive data, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

C

CCP Games

ccpgames.com

75

CCP Games is a well-established interactive entertainment company founded in 1997 in Reykjavik, Iceland, best known for its flagship product EVE Online. The company positions itself as an innovative leader in the gaming industry with a focus on immersive online experiences. The website reflects a professional digital presence with modern technologies such as Google Tag Manager, Cookiebot for privacy compliance, and Bootstrap for responsive design. The site is well-optimized for SEO and mobile devices, providing a good user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security or incident response policies are published. The absence of WHOIS data for the domain is a notable concern, as it raises questions about domain registration legitimacy despite the professional appearance of the site. Overall, CCP Games demonstrates a mature digital infrastructure but should address transparency in domain registration and enhance security disclosures to improve trust and compliance.

Sportlyzer LLC. operates a SaaS platform focused on player development and team management software tailored for youth and amateur sports clubs. The platform facilitates membership management, invoicing, attendance tracking, communication, and athlete homework assignments, serving coaches, managers, players, and parents globally. The company maintains a professional web presence with mobile apps on iOS and Android, and a consistent brand image emphasizing ease of use and comprehensive sports club management. The website content is well-structured, informative, and targets sports organizations seeking digital management solutions. Technically, the website employs modern JavaScript frameworks and integrates multiple marketing and analytics tools such as Google Tag Manager, Google Analytics, and Facebook Pixel. The site is mobile-optimized and uses HTTPS exclusively, ensuring secure data transmission. However, some security best practices like security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. The lack of WHOIS data transparency is a moderate concern but does not outweigh the professional presentation and trust signals on the site. Privacy and terms of service pages are present and comprehensive, indicating attention to compliance, though explicit cookie consent is absent. Overall, the security posture is good but could benefit from additional transparency and policy disclosures. Strategically, Sportlyzer is positioned as a specialized SaaS provider in the sports management niche with a solid user base and positive testimonials. The company should focus on improving security headers, cookie consent, and publishing incident response policies to strengthen trust and compliance. Enhancing WHOIS transparency or providing verified domain registration details would also improve legitimacy perception.

H

HELMES

helmes.ee

74

Helmes is a well-established software development company specializing in custom software solutions, digital transformation, and consulting services. With over 30 years of experience and a global presence spanning 20 offices, Helmes serves more than 500 international clients including major organizations such as Airbus, Telia, OECD, and CERN. Their service portfolio includes mobile app development, legacy software modernization, data analytics, design, and cybersecurity services, positioning them as a comprehensive digital innovation partner for enterprises. Technically, the website is built on WordPress with modern SEO practices implemented via Yoast SEO. It integrates multiple analytics and consent management tools such as Google Analytics, Microsoft Clarity, Google Tag Manager, and Conseno for GDPR compliance. The site is mobile-optimized, accessible, and demonstrates good performance, although some security headers are not explicitly detected. The company holds ISO certifications (27001, 9001, 14001), reflecting a strong commitment to security and quality management. From a security perspective, Helmes employs HTTPS, Google reCAPTCHA, and a consent management platform to protect user data and ensure compliance. However, the absence of WHOIS registration data and lack of visible incident response contacts or security.txt file slightly reduce the overall trust score. No critical vulnerabilities or exposed sensitive data were detected in the analysis. Overall, Helmes presents a professional, trustworthy, and technically mature digital presence suitable for enterprise clients. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to improve trust and compliance further.

W

WHSmith PLC

whsmithcareers.co.uk

68

WHSmith PLC is a well-established global retailer with a rich history dating back to 1792. The company operates over 1,700 stores across more than 30 countries, encompassing a diverse portfolio of retail and online brands including WHSmith Travel, WHSmith High Street, funkypigeon.com, and cultpens.com. The careers website serves as a comprehensive portal for job seekers, highlighting the company's growth, culture, and opportunities across various business areas. Technically, the website employs modern web technologies such as Google Tag Manager, Vimeo for video content, and a chatbot powered by Chatter Communications, ensuring a user-friendly and interactive experience. The site is mobile-optimized, accessible, and SEO-friendly, with clear navigation and professional design. Security posture is strong with HTTPS enforced, secure forms, and cookie consent mechanisms, although there is room for improvement by adding explicit security policies and incident response contacts. Overall, the domain registration and WHOIS data align well with the company's legitimacy and long-standing market presence, supporting a high trustworthiness rating.

P

Proekspert

proekspert.ee

65

Proekspert is an established technology company founded in 2005, specializing in full-cycle software services for device and machine manufacturers. Their offerings include smart product development, device-to-cloud connectivity, and digital services, positioning them as a key player in digital business transformation within the technology sector. The company targets B2B clients, particularly manufacturers seeking to enhance their products with software and connectivity solutions. Technically, the website is built on WordPress with multilingual support, leveraging modern tools such as Google Analytics, Google Tag Manager, and Cookiebot for analytics and privacy compliance. The site demonstrates good design quality, mobile optimization, and SEO practices, although accessibility features are basic. Security-wise, the site enforces HTTPS, uses clientTransferProhibited domain status, and implements cookie consent mechanisms, but lacks DNSSEC and explicit security headers. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website reflects a mature digital presence with room for improvement in security policies and contact transparency.

H

Hotel Telegraaf

telegraafhotel.com

55

Hotel Telegraaf is a luxury 5-star hotel located in Tallinn’s Old Town, operating under the Marriott Autograph Collection brand. The hotel offers upscale accommodation, spa services, fine dining at Restaurant Tchaikovsky, and event hosting facilities. It targets luxury travelers and business guests seeking premium hospitality experiences. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site is built on WordPress with modern libraries and SEO best practices, supported by Google Analytics and cookie consent mechanisms ensuring GDPR compliance. Security posture is strong with HTTPS and no visible vulnerabilities, though security headers could be improved. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and registration transparency, which impacts overall business credibility. Strategic verification of domain registration is recommended to reinforce trust. Overall, the site demonstrates a solid business and technical foundation with room for security and compliance enhancements.

T

Tammiste Personalibüroo OÜ

tammistepersonal.ee

47

Tammiste Personalibüroo OÜ is an established Estonian recruitment and training company with over 25 years of experience. The company specializes in recruitment services, training programs, emotional intelligence assessments, coaching, and outplacement services. Their website reflects a professional and consistent brand image, targeting Estonian businesses and job seekers. The technical infrastructure is based on WordPress with Elementor, leveraging modern web technologies and tracking tools such as Google Tag Manager and Facebook Pixel. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though some security headers are missing. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service detected. Overall, the website is trustworthy and well-positioned in its market segment, though improvements in privacy and security documentation are recommended.

B

BCS Itera

itera.ee

38

BCS Itera is a medium-sized Estonian technology company specializing in consulting and implementing business software solutions including ERP, HRM, CRM, and BI systems. The company has a solid market position in the Baltic region, supported by partnerships and certifications such as the LS Retail Platinum Partner status. Their website reflects a professional and consistent brand image with good content quality and active client engagement. Technically, the site is built on WordPress with modern SEO and analytics tools, and it demonstrates good performance and mobile optimization. Security posture is strong with HTTPS and consent management in place, though explicit security headers and policies could be improved. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

D

DFDS Iberia S.L.U.

frs.es

65

FRS Ferry, operated by DFDS Iberia S.L.U., is a well-established ferry transportation company with over 150 years of experience, primarily serving routes between Spain and Morocco. The company offers passenger, vehicle, and freight transport services, supported by a modern online booking system and multilingual website. Their market position is strong regionally, with a focus on reliable ferry services and customer convenience. Technically, the website is built on TYPO3 CMS and integrates modern analytics and tracking tools, ensuring good performance and mobile optimization. Security measures include HTTPS enforcement, reCAPTCHA on forms, and appropriate security headers, reflecting a mature security posture. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Overall, the website presents a professional and trustworthy digital presence, though WHOIS data is unavailable due to query restrictions, limiting domain registration insights.

F

Fontes PMP OÜ

fontes.ee

47

Fontes PMP OÜ is a well-established Estonian company specializing in talent management, recruitment, mentoring, and consulting services. With 35 years of experience, it holds a strong market position as a trusted partner for organizations seeking to develop and retain talent. The website reflects a professional and comprehensive digital presence, leveraging WordPress CMS and modern web technologies to deliver a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms in place, though explicit security policies and incident response details are absent. Overall, the site demonstrates high business credibility and privacy compliance, supporting Fontes' reputation as a leading talent management consultancy in Estonia.

B

Brightway.ro

brightway.ro

46

Brightway.ro is a Romanian company specializing in professional and personal development training, coaching, consulting, recruitment, and team building services. Established since 2004, it offers a broad portfolio of courses and programs aimed at individuals and organizations seeking to enhance leadership, sales, technical skills, and organizational culture. The company leverages expert trainers and innovative methodologies to deliver value and growth opportunities to its clients. The website reflects a mature digital presence with comprehensive content, client testimonials, and multiple service offerings.

R

Responda Group

h1.se

46

Responda Group is a Swedish telecommunications service provider specializing in customer service and answering services, handling over 10 million customer contacts annually for more than 3,500 clients. The company consolidates several subsidiaries including Kalix Tele24, Personlig Svarsservice, Call4U, K2C, and H1 Communication, positioning itself as a significant player in the Nordic customer service market. The website is professionally designed using WordPress with Elementor and Astra theme, reflecting a modern digital infrastructure with good SEO and mobile optimization. Security posture is solid with HTTPS enabled and cookie consent managed via Usercentrics CMP, though DNSSEC is not enabled and no explicit security or incident response policies are published. Overall, the domain registration data is consistent and transparent, supporting the legitimacy of the business.

O

Online store Bauhof

bauhof.ee

67

Bauhof is a large Estonian retail company specializing in construction, garden, tools, and interior finishing products. The company operates an e-commerce platform built on Vue Storefront 2, offering customers fast pickup and delivery options, flexible payment terms, and a customer-friendly return policy. The website demonstrates a good level of digital maturity with modern frameworks and a responsive design optimized for mobile users. Security posture is solid with HTTPS enforced and cookie consent managed via Cookiebot, though explicit security policies and incident response contacts are absent. Overall, the site is professional and trustworthy, with room for improvement in privacy compliance and security transparency.

Liewenthal Electronics Ltd. is a small Estonian engineering and R&D company specializing in embedded systems, electronics, and software design. With over 15 years of experience, the company serves diverse sectors including telecom, medical, industrial, aerospace, and consumer electronics. Their website reflects a professional B2B service provider with a clear portfolio of key services such as system design, software and electronics design, FPGA/PLD design, testing, and small volume production. The company holds ISO 9001 certification and is recognized as an AMD Adaptive Computing Partner, enhancing its market credibility. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Slider Revolution, and uses Google Analytics and Tag Manager for analytics. The site is mobile optimized and has good SEO practices, though performance is moderate. Cookie consent is implemented via Cookiebot, but a domain authorization error is present, indicating a configuration issue. No WAF or blocking mechanisms were detected, and the site uses HTTPS with good SSL configuration. Security posture is moderate; HTTPS is enforced but lacks explicit security headers and dedicated security or incident response policies. No vulnerability disclosure or security.txt files were found. Privacy compliance is basic with a privacy policy present but no strong GDPR compliance indicators. Contact information is clearly provided, supporting business credibility. Overall, the website is trustworthy and professional but could improve security practices and privacy compliance. Strategic recommendations include fixing Cookiebot errors, adding security headers, publishing security and incident response policies, and implementing vulnerability disclosure mechanisms.

G

Guardtime OÜ

guardtime.com

68

Guardtime OÜ is an established technology company founded in 2005, specializing in blockchain-based data integrity and cybersecurity solutions primarily targeting governments and enterprises. Their flagship KSI blockchain platform enables frictionless value exchange in decentralized digital economies. The company maintains a professional and consistent web presence with clear branding and a focus on enterprise clients. Technically, the website is built on the Voog CMS platform, uses modern tracking and analytics tools such as Google Tag Manager, and is hosted with Cloudflare DNS services. The site is mobile optimized and demonstrates good SEO practices. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, but lacks DNSSEC and explicit security or incident response policies. No privacy policy page was found, which is a notable compliance gap. Overall, the domain registration data aligns well with the company information, indicating high legitimacy and trustworthiness.

T

tõlkebüroo Interlex

interlex.ee

52

Tõlkebüroo Interlex is a well-established Estonian translation bureau founded in 2010, offering a wide range of professional translation and interpreting services including written, oral, AI-assisted, and sworn translations. The company holds internationally recognized certifications ISO 17100 and ISO 18587, underscoring its commitment to quality and industry standards. Their market position is strong within Estonia and internationally, supported by a diverse client base and subsidiary operations such as Dussan OÜ specializing in sworn interpreting. The website reflects a mature digital presence with multilingual support, professional design, and comprehensive service descriptions.

H

Hogarth

hogarthww.com

70

Hogarth Worldwide is a global enterprise specializing in creative, commerce, and media content production at scale. The company integrates human craftsmanship with advanced technology to deliver innovative content experiences, positioning itself as a leader in the media production industry. Their website showcases a professional and modern digital presence, leveraging Drupal 10 CMS, Vimeo for video content, and Google Tag Manager for analytics. The site is mobile-optimized and includes a cookie consent mechanism, reflecting awareness of privacy compliance requirements. However, the absence of a visible privacy policy and terms of service pages, as well as the lack of WHOIS domain registration data, introduces some trust and compliance concerns. Security posture is generally good with HTTPS enabled, but could be improved by adding explicit security headers and publishing incident response information. Overall, Hogarth Worldwide demonstrates a mature digital infrastructure and strong market positioning, but should enhance transparency and security documentation to strengthen trust and compliance.

E

Eesti Rahva Muuseum

erm.ee

48

Eesti Rahva Muuseum (ERM) is a prominent national museum in Estonia dedicated to preserving and showcasing Estonian ethnography, culture, and history. Operated under the Estonian Ministry of Education and Research, ERM offers a wide range of exhibitions, educational programs, events, and visitor services including a restaurant and retail shop. The museum targets a broad audience including the general public, educators, researchers, and cultural enthusiasts, positioning itself as a leading cultural institution in Estonia. Technically, the website is built on Drupal CMS with modern web technologies such as jQuery, Bootstrap, and various JavaScript libraries for enhanced user experience. It integrates analytics and marketing tools like Google Analytics, Google Tag Manager, and Facebook Pixel, demonstrating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS and employs Google reCAPTCHA on forms to prevent abuse. However, it lacks some security headers that could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is evident through a GDPR-compliant privacy policy, though a cookie consent mechanism is not clearly present. Overall, ERM's website reflects a professional, trustworthy, and well-maintained digital presence suitable for a government cultural institution. The domain registration aligns with the official entity, reinforcing legitimacy. Strategic improvements in security headers and cookie consent transparency could further strengthen the site's security and compliance posture.

B

BLRT Grupp

blrt.ee

64

BLRT Grupp is a leading industrial holding company in the Baltic Sea region, managing over 50 subsidiaries across multiple countries including Estonia, Latvia, Lithuania, Poland, Ukraine, Finland, and Norway. The company operates in diverse sectors such as shipbuilding, ship repair, manufacturing of high-tech equipment, metal processing, mechanical engineering, transport services, equipment rental, port and stevedoring services, industrial and medical gas production, casting production, and real estate development. Their market position as the largest industrial holding in the Baltics is supported by a broad portfolio and extensive regional presence. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery, Swiper.js, and Fancybox, and integrates Google Tag Manager and Google Analytics for marketing and analytics purposes. The site is hosted with Cloudflare DNS and uses HTTPS with good SSL configuration, providing a secure browsing experience. Mobile optimization and SEO practices are implemented at a good level, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA v3 to protect forms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no published security or incident response policies are found. Cookie consent mechanisms are in place, indicating GDPR compliance, but more comprehensive privacy and security documentation could enhance trust. Overall, the website reflects a professional and credible industrial business with a solid digital presence. The domain registration data aligns well with the business claims, reinforcing legitimacy. Strategic improvements in security policy transparency and enhanced security headers are recommended to strengthen the security posture and compliance.

T

Telia Eesti AS

telekom.ee

79

Telia Eesti AS operates as a leading telecommunications provider in Estonia, offering a comprehensive range of services including mobile telephony, home internet, TV packages, and IT solutions for both private individuals and businesses. The website reflects a mature digital presence with multi-language support and a strong brand identity consistent with Telia's corporate standards. The company targets a broad audience encompassing both consumers and enterprises, positioning itself as a one-stop-shop for telecommunications and digital services in Estonia. Technically, the website leverages modern web technologies such as React, integrates advanced consent management via Cookiebot, and employs Google Tag Manager and Telia's own RUM agent for analytics and performance monitoring. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with strong SSL configurations and implements key security headers to protect users. Cookie consent mechanisms are in place, aligning with GDPR requirements. However, explicit security policies, incident response procedures, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement in transparency and security maturity. Overall, the website and business exhibit a high level of professionalism, trustworthiness, and compliance with privacy regulations. The absence of blocking mechanisms or WAF challenges allows for full content accessibility and analysis. Strategic recommendations include publishing detailed security policies, establishing clear incident response contacts, and enhancing vulnerability disclosure practices to further strengthen security posture and stakeholder trust.

E

experimenta gGmbH

experimenta.science

72

experimenta gGmbH operates Germany's largest science center located in Heilbronn, offering interactive science exhibitions, educational programs, and unique experiences such as the Science Dome and Maker Space. The organization targets a broad audience from children to adults interested in science and technology, positioning itself as a leading educational and experiential institution in the region. The website reflects a professional and modern digital presence built on WordPress with the Divi theme, integrating various JavaScript libraries and a consent management platform to comply with privacy regulations. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are lacking. The absence of WHOIS data limits domain trust analysis but the overall business credibility is supported by consistent branding and social media presence.

E

Ebísum

ebisum.com

58

Ebísum is a Spanish-based company founded in 2021 specializing in comprehensive compliance solutions for businesses across various sectors. Their offerings include a document management system, whistleblowing channel, and eLearning platform, all designed to help companies meet regulatory requirements efficiently. The company positions itself as a trusted partner fostering ethical culture and regulatory adherence. Technically, the website is built on WordPress with Elementor and integrates modern tools such as Google Tag Manager and reCAPTCHA for security and analytics. The security posture is strong with HTTPS enforced and clientTransferProhibited domain status, although some security headers could be added for enhanced protection. Privacy compliance is robust, featuring clear privacy and cookie policies with user consent mechanisms. Overall, Ebísum presents a professional, trustworthy online presence with good technical and security maturity.

S

Securex

securex.be

72

Securex is a large international company specializing in social administration and HR services targeting individuals, startups, self-employed professionals, SMEs, large enterprises, and government entities primarily in Belgium. The company offers a comprehensive suite of services including advisory, tools, training, and client portals, positioning itself as a key player in the HR sector. The website reflects a mature digital presence with multi-language support, professional branding, and extensive content tailored to diverse customer segments. Technically, the site leverages modern frameworks such as React and Kentico CMS, integrates advanced analytics and monitoring tools like Microsoft Application Insights and Google Tag Manager, and employs security measures including HTTPS and Google reCAPTCHA. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. However, WHOIS data is restricted, which is typical for corporate domains but limits transparency. Overall, the site demonstrates strong business credibility, technical maturity, and a solid security posture with room for improvement in explicit security headers and incident response disclosures.

Hubo is a leading Belgian retailer specializing in DIY and home improvement products, operating over 150 physical stores alongside a comprehensive e-commerce platform. The website is well-structured, targeting DIY consumers in Belgium with a clear business model focused on retail and online sales. Technically, the site leverages Adobe Experience Manager CMS, integrates modern marketing and analytics tools such as Google Tag Manager and Bazaarvoice, and implements a robust cookie consent mechanism aligned with GDPR requirements. Security posture is strong with HTTPS enforced and consent-based tracking, though explicit security headers could be further verified and enhanced. The WHOIS data is privacy protected, which is common for commercial entities, and no suspicious indicators were found in the website content. Overall, the site demonstrates good digital maturity, professional design, and compliance with privacy standards.

C

CLdN

cldn.com

61

CLdN is a well-established logistics company specializing in integrated maritime and multimodal transport solutions across Europe. Founded in 1929, it operates a large fleet of RoRo ships and maintains a network of terminals and transport units, serving major economic regions including the UK, Ireland, Iberia, and Scandinavia. The company emphasizes sustainability with a low CO2 footprint and employs around 3,000 staff. The website reflects a professional and comprehensive digital presence built on Drupal 10, featuring modern web technologies and good mobile optimization. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. However, the absence of WHOIS registration data for the domain www.cldn.com is a notable anomaly that slightly impacts trust. Security posture is generally good with HTTPS enforced, but lacks visible security headers and explicit incident response or vulnerability disclosure information. Overall, the website is functional, professional, and trustworthy, but could improve transparency and security documentation to enhance confidence further.

DPG Media Group operates a privacy consent gate page for its digital media properties, primarily targeting users in the Netherlands. The page is minimalistic, serving as a redirect and consent mechanism rather than a full website. The technical infrastructure includes JavaScript-based consent management and Google Tag Manager for analytics. The security posture is moderate with HTTPS usage implied but lacks visible security headers and explicit privacy or cookie policies on this page. The absence of WHOIS data for the subdomain reduces trustworthiness, though the branding and domain structure align with the known media group. Overall, the site functions as a compliance gateway but lacks comprehensive transparency and contact information.

D

Duvel

duvel.com

73

Duvel is a well-established Belgian beer brand with a rich history dating back to 1871. The company operates a professional website that showcases its premium beer products, brand heritage, and visitor experiences. The site targets beer enthusiasts primarily in Belgium and internationally, offering detailed product information, awards, and an e-commerce platform. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and Flowbox for social media integration, with good mobile optimization and accessibility features. Security-wise, the site enforces HTTPS, includes an age verification modal to comply with legal drinking age requirements, and implements cookie consent mechanisms aligned with GDPR. However, no explicit security policy or incident response information is published, and WHOIS data for the domain is unavailable, which slightly impacts trust analysis. Overall, the website is professional, secure, and compliant, supporting Duvel's market position as a premium beer brand.

D

Digipolis Antwerpen

digipolisantwerpen.be

71

Digipolis Antwerpen serves as the IT partner for the city of Antwerp, focusing on delivering accessible and user-friendly digital services to residents, businesses, visitors, and students. The organization operates as a medium-sized government technology entity founded in 2020, with a clear market position as a key digital enabler for the city. Their website reflects a professional and consistent brand image, offering job, internship, and procurement opportunities to engage with the community and partners. Technically, the website leverages modern web technologies including Next.js (React framework), Leaflet.js for mapping, and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting details are not explicitly disclosed, but the site uses HTTPS with strong SSL configuration, ensuring secure communications. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, secure external linking, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not published, representing areas for improvement. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms, aligning with GDPR requirements. Overall, Digipolis Antwerpen's digital presence is trustworthy, professional, and aligned with its government IT service role. The domain registration details support legitimacy, and the site integrates well with partner domains for jobs, internships, and procurement. Strategic recommendations include enhancing security header coverage, publishing incident response information, and establishing a vulnerability disclosure policy to further strengthen security posture and stakeholder trust.

S

Signi

signi.com

71

Signi is a technology company specializing in digital signing and workflow solutions, targeting business and professional users. The website is built on WordPress and employs modern web technologies including Google Analytics, LinkedIn Insight, and Cookiebot for privacy compliance. The site is well-structured, mobile-optimized, and uses HTTPS with Cloudflare DNS services. Security measures include reCAPTCHA for bot protection and a cookie consent mechanism, though explicit privacy policy and terms of service pages are not detected in the scanned content. The domain is long-established since 2000, registered with a reputable registrar, and shows no suspicious patterns. Overall, the website demonstrates a moderate to good level of digital maturity and security posture.

A

Aliance žen s rakovinou prsu, o.p.s.

bellisky.cz

50

Bellis is a project operated by the Aliance žen s rakovinou prsu, o.p.s., focused on supporting young women undergoing or having undergone breast cancer treatment. The website serves as an informational and community platform offering patient stories, prevention advice, projects, and events. It targets a niche audience within the Czech Republic and operates as a small non-profit entity. Technically, the website is built on WordPress with a modern tech stack including jQuery, Yoast SEO, and Google Tag Manager, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security or incident response policies are published. The absence of WHOIS data reduces domain trust from a registration perspective, but the presence of partner logos and clear contact information supports legitimacy. Overall, the site is professional and trustworthy within its domain, but improvements in transparency and security policies are recommended.

C

Cesta domů, z.ú.

cestadomu.cz

55

Cesta domů, z.ú. is a Czech non-profit organization providing specialized home hospice and palliative care services to terminally ill patients and their families primarily in Prague. Established in 2001, it operates a multidisciplinary team offering medical, social, and psychosocial support, alongside educational and awareness programs to improve end-of-life care. The organization is funded through donations, grants, and income from its own activities, maintaining a strong community presence and transparent operations. The website reflects a mature digital presence with good content quality, clear navigation, and mobile optimization, supporting its mission effectively. Technically, the site runs on Drupal 7 with modern JavaScript libraries and integrates video content and analytics tools. Security posture is moderate, with HTTPS enforced and cookie consent implemented, but the use of an older CMS version and lack of some security headers suggest areas for improvement. WHOIS data is unavailable, limiting domain legitimacy verification, but the website content and business information align with a credible healthcare non-profit. Overall, the site is professional and trustworthy, serving a critical healthcare niche with room for technical and security enhancements.

P

Patron dětí

patrondeti.cz

47

Patron dětí is a Czech non-profit organization established in 2017, dedicated to supporting children who have faced adversity. The website serves as a platform to share stories of these children and connect donors and volunteers willing to help. The organization positions itself as a trusted charity within the Czech Republic, leveraging modern web technologies such as Nuxt.js and Vue.js to provide a responsive and user-friendly experience. The site integrates standard analytics and marketing tools including Google Analytics, Facebook Pixel, and Hotjar, while maintaining GDPR compliance through cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response procedures are not publicly disclosed. Overall, the website demonstrates a good balance of professional design, technical implementation, and privacy compliance, supporting its mission effectively.

P

PARENT PROJECT, z.s.

parentproject.cz

60

Parent Project Czech Republic is a specialized non-profit organization dedicated to supporting patients and families affected by Duchenne and Becker muscular dystrophy. The organization focuses on advocacy, improving patient care, education, community building, and promoting research. Their website is professionally designed, content-rich, and targets patients, families, and healthcare professionals primarily in the Czech Republic. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, and a custom CMS platform (Solidpixels). It is served over HTTPS with no visible security warnings and includes a cookie consent mechanism, indicating a basic level of privacy compliance. However, no explicit privacy policy or terms of service pages were found, which is a gap in compliance and transparency. The absence of WHOIS data for the domain is a notable concern, reducing domain transparency and trustworthiness. Overall, the website presents a good security posture with secure forms and no obvious vulnerabilities, but could improve by adding security headers, a security policy, and vulnerability disclosure information.

P

Platformance

platformance.io

64

Platformance is a technology-driven advertising platform specializing in programmatic media, affiliate marketing, and creator-led content to help brands reach and acquire high-quality customers. The company positions itself as a partner for advertisers seeking measurable business outcomes through outcome-based pricing models and a curated network of trusted suppliers and publishers. The website demonstrates a professional and consistent brand presence with a focus on digital marketing solutions tailored for various business goals including online sales growth, engagement, and app installs. Technically, the site is built on Webflow CMS with modern JavaScript libraries and tracking tools such as Google Tag Manager and LinkedIn Insight, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible sensitive data exposure, though improvements could be made by adding security headers and cookie consent mechanisms. Overall, the site is accessible, well-structured, and trustworthy, supporting the company's credibility in the Ad-Tech sector.

D

Diputación de Málaga

malaga.es

67

Diputación de Málaga is the official provincial government entity for Málaga, Spain, providing a comprehensive digital portal with news, services, cultural events, and administrative information for residents and visitors. The website serves as a central hub for government transparency, social programs, tourism, employment, and local development initiatives. It maintains a strong market position as an authoritative source for provincial information and services. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, Hotjar, and responsive design frameworks, hosted on regional infrastructure. The site demonstrates good performance and mobile optimization, though accessibility features could be enhanced. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not published. Overall, the site is trustworthy, professional, and compliant with GDPR and cookie regulations, reflecting a mature digital presence for a government institution.

Š

Škoda Motorsport

skoda-motorsport.com

70

Škoda Motorsport is the official motorsport division of the Czech automotive manufacturer Škoda Auto, with a rich history dating back to 1901. The website serves as a hub for news, customer programs, and information about Škoda's rally and motorsport activities, targeting motorsport enthusiasts and professional racing teams. The company holds a strong market position in the motorsport industry, particularly in rally championships, supported by a professional and content-rich website. Technically, the site is built on WordPress, leveraging modern technologies such as Amazon S3 for asset hosting and Azure CDN for script delivery, with good SEO and mobile optimization. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. Privacy compliance is partially addressed with a clear privacy policy and GDPR consent on newsletter forms, but lacks a cookie banner. Overall, the website is professional, trustworthy, and well-maintained, though the absence of WHOIS data for the domain is a notable anomaly requiring monitoring.

Š

Škoda Auto

skoda-storyboard.com

70

Škoda Storyboard is a professionally designed and content-rich website serving as a media and storytelling platform for Škoda Auto, a well-established automotive manufacturer. The site targets journalists, influencers, customers, and fans, providing news, press releases, and engaging stories about Škoda vehicles and company initiatives. The technical infrastructure leverages WordPress CMS with modern plugins and CDN delivery, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforcement and privacy consent mechanisms, although explicit security policies and incident response contacts are not published. The domain WHOIS data is missing, which raises some concerns about registration transparency but does not detract from the overall professional presentation and trustworthiness of the site content. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and improving direct contact information availability.

O

Onboardee.io

onbee.app

64

Onboardee.io operates the Onbee.app platform, a SaaS solution focused on digitizing and modernizing employee onboarding, offboarding, and HRIS processes. The platform targets HR professionals and team leaders, offering features such as onboarding plan templates, digital employee cards, contract templates with digital signatures, and integrations with popular ATS and SSO providers. The website demonstrates a professional and consistent brand presence with good content quality and user experience. Technically, it leverages modern web technologies including Alpine.js and Astro framework, hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS and security headers properly configured, though explicit privacy and terms policies are missing. The domain uses privacy protection in WHOIS, which is common for startups but limits transparency. Overall, the platform appears legitimate and well-positioned in the HR technology niche.

A

Association 42

s19.be

50

Campus 19 is a Belgian coding education platform affiliated with the global 42 network, offering free, peer-to-peer, project-based learning without traditional classes or teachers. It targets adults aged 18 and over, providing an innovative approach to IT education with campuses in Brussels and Antwerp. The platform emphasizes accessibility, inclusivity, and direct career placement, boasting a 100% employment rate after the core curriculum. Technically, the website is built on WordPress, leveraging modern analytics and marketing tools such as Google Tag Manager and Facebook Pixel, and is hosted by OVH. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit privacy and security policies are absent. Overall, the site is professional, trustworthy, and well-positioned in the education sector.

F

Fundación Telefónica España

fundaciontelefonica.com

61

Fundación Telefónica España is a well-established non-profit organization focused on digital education, social action, and cultural initiatives primarily in Spain and Latin America. The foundation operates multiple programs aimed at improving digital skills and social inclusion, leveraging technology as a key enabler. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to a broad audience including students, educators, and social organizations. Technically, the site is built on WordPress with modern libraries and includes accessibility and SEO best practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although no explicit security policy or vulnerability disclosure is publicly available. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy indicated by the website's content and social media presence. Strategic recommendations include publishing a security policy, establishing a vulnerability disclosure channel, and enhancing incident response contact visibility to further strengthen trust and compliance.

4

42 Singapore

42singapore.sg

66

42 Singapore operates as a tuition-free ICT education institution leveraging a peer-to-peer, project-based learning model derived from the 42 Paris pedagogy. It targets learners seeking innovative, hands-on coding education without traditional teachers or lectures. The institution is part of the globally recognized 42 Network and offers an EU-recognized diploma equivalent to a Bachelor's degree. Technically, the website is built on WordPress with modern JavaScript libraries and integrates multiple analytics and marketing pixels, indicating a mature digital presence. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and explicit security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and external references support legitimacy. Overall, the site is professional and user-friendly but would benefit from enhanced transparency in privacy, security policies, and domain registration details.

4

42 Abu Dhabi

42abudhabi.ae

57

42 Abu Dhabi is a tuition-free coding school based in Abu Dhabi, UAE, operating as part of the global 42 Network. The school emphasizes peer-to-peer learning and project-based education, targeting aspiring coders aged 18 and above. The website reflects a professional and consistent brand image, with clear navigation and good content quality. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools. Security posture is solid with HTTPS and anti-clickjacking measures, though lacks some security headers and explicit privacy policies. The domain registration is consistent with the business location and purpose, enhancing trustworthiness. Overall, the website is well-positioned in the education sector with a strong market presence but should improve privacy compliance and security headers to enhance user trust and regulatory adherence.

4

42 Prague

42prague.cz

64

42 Prague is a tuition-free coding institute that offers innovative, peer-to-peer software engineering education as part of the global 42 Network. The website reflects a strong market position within the education and technology sectors, targeting aspiring coders worldwide with a unique, gamified, and project-based learning model. Technically, the site employs modern analytics and marketing tools, including Google Tag Manager, TikTok Pixel, and Hotjar, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

C

Czechitas, z.ú.

czechitas.cz

58

Czechitas is a Czech non-profit organization dedicated to opening the world of IT to women, children, and other beginners. The organization offers a wide range of IT courses, including digital academies, corporate upskilling, and career development support. Their market position is strong within the Czech Republic as a leading educational entity focused on digital literacy and inclusion. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site leverages modern web technologies such as Webflow CMS, Google Tag Manager, and various marketing and analytics tools, ensuring good performance and SEO. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and explicit incident response contacts could enhance their security maturity. Overall, the domain is privacy protected, which is justified for a non-profit, and the website exhibits high trustworthiness and professionalism.

L

Legitas advokátní kancelář s.r.o.

legitas.cz

57

Legitas advokátní kancelář s.r.o. is a modern Czech legal services firm specializing in online business, e-commerce, and marketing law. The company targets e-shops, web applications, and development firms, offering comprehensive legal advice, contract preparation, and business formation services. Their website reflects a professional and client-focused approach with clear service offerings and client testimonials, positioning them as a trusted partner in their niche market. Technically, the website is built on the Webnode CMS platform, leveraging Amazon Cloudfront CDN for content delivery and integrating Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Cookie consent is implemented with granular controls, reflecting GDPR compliance. From a security perspective, the site uses HTTPS with a good SSL configuration and employs cookie consent mechanisms to manage user privacy. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, representing an area for improvement. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website and business appear legitimate and professionally managed, with a strong focus on privacy and compliance. The lack of publicly available WHOIS data is consistent with privacy protection practices common for small legal firms. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and adding a terms of service page to improve transparency and trust.

B

BeCommerce

becomsummit.digital

51

Becom Summit is a professionally managed event platform organized by BeCommerce, the Belgian e-business federation, targeting the Belgian e-commerce sector. The website effectively communicates event details, past editions, and upcoming dates, positioning itself as a leading e-commerce event in Belgium. The technical infrastructure is based on WordPress with modern plugins and multilingual support, indicating a mature digital presence. Security posture is adequate with HTTPS and domain transfer protection, though improvements like DNSSEC and security headers are recommended. Privacy compliance is well addressed with visible policies and consent mechanisms. Overall, the website presents a trustworthy and credible business front with clear contact information and legal disclosures.