Security Directory

E

Eurochambres

eulep.eu

40

EULEP is a European Union co-funded project platform led by Eurochambres, focusing on enhancing vocational education and training (VET) excellence across multiple European countries. The platform emphasizes innovative subjects such as artificial intelligence, virtual reality, and social innovation to promote lifelong learning tailored to enterprise needs. The website serves as a collaborative hub for 20 organizations from 8 countries, providing resources, partner information, and news related to VET development. Technically, the site is built on WordPress with Elementor and uses Matomo for analytics, indicating a moderate level of digital maturity. However, the absence of a valid SSL certificate and lack of security headers represent significant security weaknesses. Privacy and cookie policies are present with consent mechanisms, reflecting basic GDPR compliance. Overall, the site is functional and informative but requires urgent security improvements to protect user data and enhance trust.

E

Eurochambres

connectingcompanies.eu

40

EU4Business: Connecting Companies is an EU-funded initiative managed by Eurochambres, focused on supporting SMEs in the Eastern Partnership countries to foster sustainable economic development and job creation. The project provides services such as trade expansion support, investment attraction, and business networking. The website is built on WordPress using Elementor and Astra theme, hosted on OVH infrastructure. However, the site lacks a valid SSL certificate and does not enforce HTTPS, which is a critical security concern. There is no cookie policy or consent mechanism, and security headers are absent, indicating a basic security posture. The content is relevant and well-structured, targeting SMEs and business support organizations in the EaP region. Social media presence is active across multiple platforms. Overall, the site demonstrates moderate business credibility but requires significant improvements in security and privacy compliance to meet modern standards.

E

EU Business Hub

eubusinesshub.eu

44

The EU Business Hub website serves as an EU-funded platform supporting European companies in the green, digital, and healthcare sectors to access the markets of Japan and the Republic of Korea. It offers business missions, coaching, networking, and logistical support to facilitate market entry and partnerships. The site is built on Drupal 10 and uses modern web technologies including Matomo for analytics. However, a critical security weakness is the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy compliance is well addressed with clear cookie policies and consent mechanisms. The business model is credible and well-aligned with EU initiatives, but contact information is limited to web forms without direct emails or phone numbers.

O

OVH SAS

entrecomp4transition.eu

32

EntreComp4Transition is an EU co-funded educational project focused on fostering entrepreneurial mindsets and supporting the green and digital transition through innovative teaching and learning methodologies. The project targets a broad audience including teachers, trainers, businesses, and students across Europe, offering MOOCs, AI-based tools, and open badges to verify competencies. Technically, the website is built on WordPress with several plugins and uses Google Analytics and Piwik PRO for tracking. However, the site suffers from slow performance and lacks HTTPS, which is a critical security shortfall. Security posture is weak with no security headers or advanced DNS configurations, and privacy compliance is basic with a privacy policy but no cookie policy or GDPR explicit statements. Overall, the site is functional and professional in content but requires significant security and privacy improvements.

P

Programme AL-INVEST Verde

alinvest-verde.eu

32

Programme AL-INVEST Verde is a European Union funded initiative aimed at fostering sustainable growth and job creation in Latin America by supporting the transition to a low-carbon, resource-efficient economy. The program operates across 12 Latin American countries, engaging both public and private sectors, with a focus on innovation, technical assistance, and intellectual property rights. The website serves as an information hub, providing news, events, and resources related to the program's activities. Technically, the site is built on WordPress with Elementor and several plugins for events and membership management. It integrates marketing and analytics tools such as Brevo and Matomo, and supports multilingual content. However, the site lacks a valid SSL certificate, which is a critical security vulnerability, exposing users to potential risks. Privacy and cookie policies are well implemented with GDPR compliance and consent mechanisms. Overall, while the content and business credibility are strong, the security posture requires urgent improvement to protect user data and enhance trust.

E

Eurochambres

eurochambres.eu

40

Eurochambres is a well-established non-profit association representing European chambers of commerce and industry, serving as a key voice for the business community at the EU level since 1958. The organization focuses on advocacy, information dissemination, and supporting SMEs through various projects and services. Their website reflects a professional and consistent brand presence targeting European businesses and policymakers. Technically, the site is built on WordPress with the Divi theme and integrates several plugins and external services such as Cookiebot for cookie consent and Google Analytics for tracking. However, the website suffers from critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. While privacy compliance is well addressed through Cookiebot and a comprehensive privacy policy, the lack of security best practices and slow performance pose risks to user trust and data protection. Strategic improvements in SSL deployment, security headers, and performance optimization are recommended to enhance the overall security and user experience.

S

Stripeless Zebra LLC

stripelesszebra.com

56

Stripeless Zebra LLC is a newly founded (2024) small technology company specializing in innovative digital media solutions including interactive eBooks, AI-powered virtual companions, and digital marketing funnels. Their flagship product is a WhatsApp-based virtual companion service targeting Spanish-speaking users in Latin America, demonstrating a niche focus and cultural adaptation expertise. The website presents professional branding and clear contact information but lacks critical security features such as HTTPS and security headers. The technical infrastructure uses modern frontend libraries and Cloudflare DNS but does not implement SSL/TLS, which is a significant security gap. No privacy or cookie policies are published, indicating low privacy compliance. Overall, the business appears legitimate but is at an early stage with room for improvement in security and compliance.

L

Luminor

luminorcareers.ee

37

LuminorCareers.ee is a professional career portal for Luminor bank, primarily targeting job seekers in Estonia and the Baltic region. The website offers detailed job listings, employee testimonials, and career-related information, positioning Luminor as an employer of choice in the banking sector. The site leverages modern web technologies and a CMS platform to deliver content but suffers from significant security shortcomings, notably the absence of a valid SSL certificate and HTTPS support. Privacy compliance is well addressed through OneTrust cookie consent and a comprehensive privacy policy. However, the lack of visible contact information and security policies limits transparency. Overall, the site is functional but requires urgent security improvements to protect user data and enhance trust.

C

Cambra de Terrassa

garantiajuvenil.cat

38

Garantiajuvenil.cat is a government-backed youth employment program website managed by Cambra de Terrassa, targeting young people aged 16 to 29 who are not currently working or studying, as well as companies interested in hiring youth with incentives. The program is promoted by the Ministry of Labour and Social Economy and co-financed by the European Social Fund. The website provides information, orientation, and support services to its target audience. Technically, the site is built on WordPress using Elementor and Yoast SEO plugins, with integration of Google Analytics and social media links. However, the site suffers from critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which severely impacts its security posture. Privacy compliance is basic but present, with cookie consent and privacy policies linked. Overall, the site is functional but requires urgent security improvements to protect user data and enhance trust.

A

AS CREDITINFO EESTI

e-krediidiinfo.ee

40

AS CREDITINFO EESTI operates the e-krediidiinfo.ee website, providing comprehensive credit and business information services primarily for Estonian, Lithuanian, and Finnish companies. The platform offers services such as credit risk assessments, monitoring, payment default management, and sanctions screening, targeting businesses seeking to evaluate their partners and clients. The website demonstrates a professional design with clear navigation and relevant content tailored to its target audience. However, the technical infrastructure shows room for improvement, particularly in security and performance aspects. The absence of a valid SSL certificate and HTTPS support is a critical vulnerability that undermines user trust and data security. The site employs modern web technologies and integrates multiple analytics and marketing tools with a compliant cookie consent mechanism, reflecting a moderate level of digital maturity.

A

AS Kredītinformācijas Birojs

kib.lv

40

AS Kredītinformācijas Birojs is a Latvian credit information bureau providing credit data and reporting services to individuals and businesses. The company is positioned as a trusted entity in the Latvian financial sector, supported by ISO 27001 certification and memberships in recognized organizations such as Creditinfo and the Latvian Chamber of Commerce (LTRK). Their services focus on promoting responsible lending and credit transparency. Technically, the website is built on WordPress with common libraries like jQuery and uses Cookiebot for GDPR-compliant cookie consent. The site is moderately performant and mobile-optimized, though page load times could be improved. Security posture is adequate with HTTPS and SPF/DMARC email protections, but lacks advanced SSL features like HSTS and OCSP stapling. Privacy policies and terms of service are clearly presented and GDPR compliant. Overall, the website reflects a professional and credible business with room for technical and security enhancements.

C

Creditinfo

creditinfo.is

52

Creditinfo is a leading Icelandic company specializing in the provision of financial and business information services, including credit scoring, business data, and media monitoring. The company targets both individuals and businesses in Iceland, offering subscription-based and service-oriented products to support informed decision-making. The website reflects a mature and professional business with a clear market position and a comprehensive range of services. Technically, the site is built on Webflow and integrates modern marketing and analytics tools such as Google Tag Manager, Cookiebot, and Weglot for multilingual support. However, the website suffers from a critical security deficiency due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy and cookie policies are well-presented and GDPR compliant, with active consent mechanisms. Overall, while the business credibility and content quality are strong, the security posture requires urgent improvement to protect user data and maintain trust.

Ს

სს საკრედიტო საინფორმაციო ბიურო კრედიტინფო საქართველო

creditinfo.ge

47

Creditinfo Georgia is a mature credit information bureau operating since 2006, providing a range of credit-related services including credit reports, scoring, monitoring, and business risk databases. The company targets individuals and legal entities in Georgia, leveraging its affiliation with the international Creditinfo Group to maintain a strong market position. The website is built on WordPress and uses common plugins and scripts to deliver content and interactive forms. While the site is professionally designed with good content relevance and navigation, it lacks a valid SSL certificate, which severely impacts its security posture. Contact information is clearly presented, and privacy policy exists, but cookie policy and terms of service are missing. Overall, the site demonstrates moderate trustworthiness but requires urgent security improvements.

A

AS Creditinfo Eesti

creditinfo.ee

40

AS Creditinfo Eesti operates Estonia's largest and most trusted business information database, offering comprehensive credit information, payment default registers, credit ratings, and business lists. As part of the international Creditinfo Group, it serves a broad audience including businesses and individuals seeking to manage credit risks and make informed financial decisions. The company is well-established with a domain age of 9 years and recognized certifications such as ISO 27001, underscoring its commitment to information security. Technically, the website is built on WordPress with modern JavaScript libraries like jQuery and Slick Carousel, integrated with analytics and marketing tools including Google Tag Manager, Hotjar, and Facebook Pixel. The site demonstrates good SEO and mobile optimization, though performance is moderate and could benefit from further optimization. The hosting and DNS infrastructure is stable but lacks advanced security features like DNSSEC and domain protection locks. Security posture reveals critical issues, notably the absence of a valid SSL certificate, which severely impacts user trust and data protection. While DMARC policies and some best practices are in place, the lack of HTTPS and HSTS headers exposes the site to potential risks. Privacy compliance is strong, with clear cookie consent mechanisms and GDPR adherence. Business credibility is high, supported by clear contact information, social media presence, and trust signals. Overall, the site is functional and professional but requires urgent remediation of SSL/TLS issues to ensure secure communications and maintain trust. Strategic improvements in DNS security and domain management would further enhance its security posture.

C

Creditinfo Group

creditinfosolutions.com

50

Creditinfo Group operates as a global leader in credit information and risk management solutions, providing software and credit bureau services across mature and emerging markets worldwide. The company focuses on facilitating access to finance through innovative software solutions tailored for financial institutions and lenders. Their market position is strong, supported by over 19 years of domain maturity and a presence in multiple countries, including a headquarters in the Czech Republic. The website content reflects a professional and consistent brand with clear business messaging and case studies highlighting their global impact. Technically, the website is built on WordPress and leverages common web technologies such as jQuery and Google Analytics for tracking. Hosting and CDN services are provided by Cloudflare, enhancing performance and security at the network edge. However, a critical security gap exists as the site lacks a valid SSL/TLS certificate, serving content over unencrypted HTTP, which exposes users to potential interception risks. From a security perspective, while some security headers are present, the absence of HTTPS and modern TLS protocols significantly lowers the security posture. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. Contact information is clearly provided, enhancing business credibility and user trust. Overall, the site is functional and professional but requires urgent security improvements to protect user data and maintain trust. Strategic recommendations include implementing HTTPS, enabling HSTS, and enhancing security headers to align with best practices.

D

DA Industries OÜ

digitaladventurers.com

54

Digital Adventurers (DA Industries OÜ) is a small Estonian technology company specializing in website and mobile app development with a focus on the global B2B sector. Their flagship offering includes an AI-powered virtual companion service, Lulu, targeting Portuguese-speaking users via WhatsApp. The company demonstrates expertise in natural language processing, cultural adaptation, and scalable integration. Technically, the website uses modern frontend technologies such as Bootstrap and jQuery and is hosted behind Cloudflare DNS services. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the site's security posture. While SPF and DMARC email protections are configured, the lack of security headers and privacy policies indicates gaps in compliance and best practices. Overall, the business appears legitimate and consistent with WHOIS data, but the website's security and privacy implementations require urgent improvement.

PricewaterhouseCoopers Italy operates a mature, well-branded professional services website targeting businesses seeking consulting, auditing, tax, and advisory services. The site demonstrates a strong market position consistent with PwC's global reputation, offering a wide range of services and localized content for the Italian market. Technically, the site uses modern frameworks such as AngularJS and Adobe Experience Manager, but suffers from slow load times and lacks a valid SSL certificate and modern security headers, which are critical for trust and compliance. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the website is professional and trustworthy but requires urgent improvements in security posture to meet industry standards.

D

Digital Impulse Hub

digitalimpulsehub.eu

40

Digital Impulse Hub is a strategic alliance focused on supporting the digital transformation of SMEs and local public administrations in Spain. It leverages partnerships with chambers of commerce, universities, and public entities to provide consulting, training, financing, and networking services. The website reflects a mature digital presence with integration into the European Digital Innovation Hubs network, showcasing a strong regional market position and trust indicators such as the Seal of Excellence. Technically, the site is built on WordPress with modern frameworks and libraries, though performance optimization is needed due to slow load times and large page size. Security posture is adequate with HTTPS, SPF, and DMARC configured, but could be enhanced with additional headers and HSTS. Privacy compliance is well addressed with GDPR-compliant cookie consent and policies. Overall, the site is professional and trustworthy, though direct contact details are limited to forms and social media.

ilMioDono is a donation platform operated by UniCredit S.p.A., focused on facilitating donations to non-profit organizations and social projects primarily in Italy. The platform showcases multiple projects and organizations, providing a community engagement space for donors and beneficiaries. The website is built on Adobe Experience Manager and hosted via Akamai, with moderate performance and good mobile and accessibility features. However, a critical security issue is the absence of a valid SSL certificate and HTTPS support, which severely impacts the security posture. The site implements DMARC with a reject policy, enhancing email security. Privacy and cookie policies are present and appear comprehensive, supporting GDPR compliance. Overall, the business credibility is strong due to the UniCredit brand and mature domain age, but security improvements are urgently needed.

G

Generalitat de Catalunya

atm.cat

66

Autoritat del Transport Metropolità (ATM) is a public consortium under the Generalitat de Catalunya, managing integrated transport tariffs and mobility projects in the Barcelona metropolitan area. The website serves as an official portal providing comprehensive information about transport tariffs, mobility plans, transparency, and customer support. It targets residents and public transport users in Catalonia, offering multilingual content and links to related government services. The business model is public sector focused, emphasizing transparency and service delivery rather than commercial revenue. Technically, the website is built on the Liferay CMS platform with modern web technologies including React and Bootstrap. While the site is content-rich and accessible, performance is hindered by a high load time and large page size. The site is mobile optimized and includes accessibility features. SEO and metadata are well implemented, including Open Graph tags. Security posture is adequate with HTTPS enforced, valid SSL certificates, and email authentication via DMARC and SPF. However, advanced security headers like HSTS and DNSSEC are missing, and domain protection locks are not enabled, which could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear cookie and privacy policies and consent mechanisms. Overall, the site is trustworthy and professionally maintained, reflecting its governmental nature. Recommendations include enhancing security headers, enabling DNSSEC, improving performance, and adding explicit security and incident response policies to further strengthen trust and compliance.

M

Moventia

moventia.net

48

Moventia is a well-established multinational family business specializing in sustainable mobility solutions since 1923. The company offers integrated services in collective and private mobility, emphasizing quality, innovation, and sustainability. Their digital presence is built on a modern WordPress platform with multilingual support and SEO optimization, reflecting a mature and professional online identity. However, the website suffers from a critical security flaw due to an invalid SSL certificate, resulting in the absence of HTTPS protection, which poses risks to user data and trust. While privacy and cookie policies are present and GDPR compliant, no explicit security or incident response policies are found. The domain registration is consistent and mature, supporting the company's legitimacy. Strategic improvements in SSL deployment and security headers are recommended to enhance the security posture and user trust.

M

Marfina, SL

moventisexperience.es

40

MoventisExperience is an online platform operated by Marfina, SL, offering road transport services and excursions primarily in Catalonia, Spain. The company provides shuttle transfers, private transfers, and guided tours, targeting tourists and travelers seeking convenient booking options. The website reflects a medium-sized business with consistent branding and a focus on customer service, including 24/7 telephone support and cancellation policies. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and Google Tag Manager, but suffers from slow load times and lacks a valid SSL certificate, which impacts its security posture. Privacy compliance is well addressed with clear cookie and privacy policies and a consent mechanism via Cookiebot. However, no explicit security or incident response policies are found on the site. Overall, the site is professional and trustworthy but requires improvements in security and performance to enhance user trust and compliance.

M

Moventia

moventia.es

40

Moventia is a well-established Spanish multinational company specializing in collective and private mobility solutions since 1923. The company positions itself as a leader in the transportation sector with a strong emphasis on innovation, sustainability, and quality service. Their website reflects a mature digital presence with multilingual support, rich multimedia content, and comprehensive corporate information. Technically, the site is built on WordPress with modern plugins and frameworks, though performance is somewhat slow likely due to heavy resource usage. Security posture is a concern due to an invalid SSL certificate and lack of modern TLS protocols, which exposes the site to risks and undermines user trust. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business credibility is high, supported by consistent branding and trust signals, but security improvements are critical to maintain reputation and compliance.

C

Consorci Localret

localret.cat

40

Consorci Localret is a well-established consortium focused on supporting local governments in Catalonia, Spain, with digital transformation initiatives. Their website showcases a comprehensive range of services including advisory, procurement centralization, telecommunications infrastructure, innovation office, and digital society support. The organization targets municipalities and supramunicipal entities, positioning itself as a key player in local government digital modernization. Technically, the website is built on WordPress with a mature tech stack including SEO and multilingual plugins, accessibility tools, and analytics integrations. However, the site suffers from a critical security shortfall due to the absence of a valid SSL certificate, resulting in no HTTPS support and exposing users to potential risks. Privacy compliance is strong with clear cookie and privacy policies and consent mechanisms. Overall, the site is content-rich and professionally presented but requires urgent security improvements to protect user data and enhance trust.

M

Moventis S.A.

moventis.es

40

Moventis S.A. is a well-established transportation company specializing in collective passenger transport by road, operating primarily in Spain with regional and European services. The company offers a broad range of services including urban and interurban transport, coach rental, and ITS solutions. The website reflects a mature digital presence with comprehensive content, consistent branding, and clear business information targeting travelers and clients seeking transport services. Technically, the site is built on Drupal 7 with a variety of modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. However, the site suffers from slow load times and lacks some advanced security headers and mechanisms such as HSTS, DNSSEC, and OCSP stapling. Privacy policies are present and GDPR compliance is indicated, though no active cookie consent mechanism is implemented. The WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website is professional and trustworthy but could benefit from performance and security enhancements.

JauniAuto.lv is a Latvian automotive news website providing up-to-date articles, reviews, and industry news targeted at Latvian-speaking automotive enthusiasts. The site operates primarily as an advertising-supported media platform, featuring a range of automotive content with a consistent brand presentation. Technically, the website is built on WordPress and uses common web technologies such as jQuery and Google Analytics, but suffers from slow performance and lacks modern security configurations. The absence of a valid SSL certificate and HTTPS support is a critical security gap, exposing users to potential risks. Additionally, the site lacks privacy and cookie policies, which raises compliance concerns under GDPR regulations. Business credibility is moderate due to the lack of explicit contact information and security policies, although the domain registration data aligns well with the website's purpose and location.

A

A2Z Events

mya2zevents.com

49

A2Z Events is a well-established event management software provider offering a comprehensive platform tailored for trade shows, conferences, and corporate events. With over 25 years of industry presence and backing by Personify Corporation, it holds a strong market position supported by a robust suite of event management tools and services. The website demonstrates professional design, rich content, and clear navigation targeting event professionals seeking scalable solutions. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple marketing and analytics tools, reflecting a mature digital infrastructure. However, the security posture is currently weak due to the absence of a valid SSL certificate and missing security headers, which poses risks to user data confidentiality and trust. Privacy compliance is well addressed with visible policies and consent mechanisms. Overall, the site is credible and professional but requires urgent security improvements to align with best practices and user expectations.

E

European Flying Disc Federation

efdf.org

29

The European Flying Disc Federation (EFDF) is a well-established non-profit organization dedicated to the promotion and governance of flying disc sports across Europe. The website serves as an informational hub for multiple flying disc disciplines, providing news, event updates, and organizational details. The domain is mature and consistent with the organization's history, reinforcing its legitimacy. Technically, the site is built on WordPress with a standard theme and common libraries, but suffers from slow load times and lacks modern security configurations such as HTTPS. Security posture is weak due to the absence of a valid SSL certificate, missing security headers, and lack of DNSSEC. Privacy compliance is minimal, with no visible privacy or cookie policies, and no GDPR indicators. Contact information is not explicitly provided, which may hinder user trust and compliance. Overall, the site is functional and informative but requires significant improvements in security and privacy to meet modern standards.

C

Confederazione Boccistica Internazionale

cbi-prv.org

40

The Confederazione Boccistica Internazionale (CBI) is an international sports federation dedicated to the bocce sport. The organization provides comprehensive information about bocce events, news, rules, and membership. The website serves as a hub for bocce enthusiasts, players, and affiliated organizations worldwide, positioning itself as a key international governing body in this niche sport. The business model is non-profit, focusing on sport promotion and community engagement. Technically, the website is built on the 3WTURK CMS platform and uses legacy technologies such as jQuery and FlexSlider. While the site offers rich content and a consistent brand experience, it suffers from slow load times and basic mobile optimization. The absence of modern frameworks and performance optimizations indicates room for technical modernization. From a security perspective, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical vulnerability. Although SPF and DMARC records are configured for email security, the lack of HTTPS and security headers exposes users to risks. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. Overall, the site is functional and content-rich but requires urgent improvements in security and privacy compliance to protect users and enhance trust. Performance optimizations and modernization of the technology stack would further improve user experience and operational resilience.

I

ITTF Foundation

ittffoundation.org

40

The ITTF Foundation is a non-profit organization leveraging table tennis to promote social development, health, and peace globally. It operates multiple specialized programmes targeting disadvantaged groups, humanitarian aid, and health awareness. The foundation is linked to the ITTF Group and maintains an active online presence with social media and newsletter engagement. Technically, the website is built on the Contao CMS with modern JavaScript libraries and frameworks but suffers from slow performance and lacks a valid SSL certificate, which critically impacts security posture. The absence of HTTPS and security headers exposes the site to risks and undermines user trust. Privacy compliance is basic with a cookie consent banner and a privacy policy, but no explicit GDPR compliance or terms of service are found. WHOIS data indicates a mature domain with privacy protection typical for non-profits. Overall, the site is functional and professional but requires urgent security improvements to protect users and enhance credibility.

I

International Fistball Association

ifa-fistball.com

33

The International Fistball Association (IFA) operates as the global governing body for the sport of fistball, providing resources such as sport rules, education, anti-doping information, and organizational news. The website serves as an informational platform targeting fistball players, referees, associations, and fans worldwide. Technically, the site is built on WordPress with common plugins and libraries but suffers from slow performance and lacks modern security configurations. Critically, the absence of a valid SSL certificate and HTTPS support exposes users to security risks. Privacy compliance is minimal with no cookie consent mechanisms or comprehensive privacy policies visibly implemented. Overall, the website demonstrates a basic digital maturity level with significant room for improvement in security and privacy practices.

I

Interact

interact-sport.com

62

Interact is a non-profit initiative focused on promoting Sport for All by supporting international sport organizations in capacity building, certification, and community engagement. The website presents a professional and content-rich platform targeting sport organizations and grassroots participants. Technically, the site is built on WordPress with common libraries and plugins, but suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. The security posture is basic with HSTS enabled but no valid TLS protocols or certificate transparency compliance. Privacy compliance is well addressed with a cookie consent mechanism and GDPR-aligned privacy policy. Overall, the site is trustworthy but requires urgent improvements in SSL/TLS configuration to ensure secure user interactions.

P

Pilates Heritage

pilates-heritage.com

56

Pilates Heritage operates an international Pilates congress and educational event platform based in Germany, focusing on honoring Joseph Pilates and promoting Pilates education worldwide. The website provides detailed event schedules, presenter biographies, and registration forms targeting Pilates practitioners and educators globally. Technically, the site is built on WordPress with common plugins and uses Google reCAPTCHA for form protection. However, the absence of a valid SSL certificate and HTTPS severely impacts the site's security posture. No privacy or terms of service policies are found, indicating compliance gaps. Overall, the site is professionally designed with good content quality but requires urgent security and privacy improvements.

C

Catering & Co.

cateringandco.hu

40

Catering & Co. is a Hungarian catering company specializing in high-quality event catering services, leveraging partnerships with notable restaurants such as KIOSK, Babel, and Piazza Budapest. The company emphasizes gastronomy excellence, sustainability, and customized event solutions tailored to client needs. The website is built on WordPress with multiple plugins for sliders, multilingual support, and contact forms, hosted behind Cloudflare DNS. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security vulnerability. No privacy or cookie policies are present, indicating compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the site presents a professional business image but requires urgent security improvements.

P

Papi

papi.hu

40

Papi.hu is a small hospitality business website focused on transforming a family legacy into a farm and restaurant experience in Hungary. The website content centers around a personal story of the founder and his father, emphasizing heritage and love. The business is positioned as an emerging local hospitality venue with a unique cultural narrative. Technically, the site is built on Webflow with modern technologies such as Weglot for multilingual support and Google Tag Manager for analytics. Performance is moderate with a load time of approximately 4.5 seconds. Security posture is basic with HTTPS enabled and modern TLS protocols supported, but lacks advanced security headers, DMARC, and HSTS configurations. Privacy compliance is weak due to the absence of privacy and cookie policies. No contact information or forms are present on the homepage, limiting direct communication channels. Overall, the site is professional and consistent in branding but could improve in security and compliance aspects.

M

M15 Restaurant Kft.

kiosk-budapest.hu

40

KIOSK Budapest is a well-established hospitality business operating a modern Hungarian restaurant located in the heart of Budapest. The company offers a range of services including dining, event hosting, catering, and online ordering, supported by a mature digital presence and multiple related brands. The website is professionally designed with good content quality and clear navigation, targeting both local and international visitors seeking authentic and contemporary Hungarian cuisine. Technically, the site leverages Webflow CMS, Cloudflare hosting, and integrates modern tools such as Google Tag Manager and Cookiebot for analytics and privacy compliance. While the SSL configuration is strong with TLS 1.3 support, security headers like HSTS are not enabled, representing an area for improvement. The site implements comprehensive cookie consent mechanisms and maintains GDPR compliance. Overall, the security posture is solid but could benefit from enhanced HTTP security headers and OCSP stapling. The domain is mature and consistent with the business claims, supporting high trustworthiness. Strategic recommendations include enabling HSTS, adding security headers, and improving performance to enhance user experience and security.

M

Mediarey Hungary Services Zrt.

forbes.hu

40

Forbes.hu is a mature Hungarian business media website operated by Mediarey Hungary Services Zrt., providing high-quality business, finance, lifestyle, and culture content targeted at Hungarian-speaking professionals and general readers. The site uses a WordPress CMS with React components and integrates multiple advertising and tracking technologies to support its business model, which includes advertising and premium subscriptions. Technically, the site is hosted behind Cloudflare and uses modern web technologies but lacks a valid SSL certificate, resulting in HTTP-only access which is a significant security concern. Privacy and cookie policies are comprehensive and GDPR compliant, with a consent mechanism implemented via Cookiebot. The WHOIS data confirms the domain's maturity and legitimacy, consistent with the business claims. Overall, the site is professionally designed and content-rich but requires urgent security improvements to enable HTTPS and strengthen its security posture.

D

Duna Médiaszolgáltató Nonprofit Zrt.

dunanap.com

48

Dunanap.com is the official website for the DUNA NAPOK cultural festival scheduled for May 30 to June 1, 2025, in Hungary. The site promotes a variety of cultural and entertainment events including concerts, children's programs, exhibitions, running races, and culinary competitions. The business behind the site is Duna Médiaszolgáltató Nonprofit Zrt., a medium-sized media and nonprofit entity focused on cultural event organization. The website targets festival attendees, families, and cultural enthusiasts primarily in Hungary. Technically, the site is built on WordPress using Elementor and Yoast SEO, hosted by Websupport. While the site is mobile optimized and has good content quality, it suffers from slow load times and lacks advanced accessibility features. Security posture is weak due to an invalid SSL certificate, absence of HTTPS, no security headers, and no DNSSEC or domain protection locks. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

T

Trustly, Inc.

paywithmybank.com

53

Trustly, Inc. is a leading Pay by Bank payment solution provider with a global Open Banking network spanning over 30 countries and 110 million consumers. Their platform offers guaranteed payments, risk management, and consumer insights, targeting businesses in financial services, gaming, retail, and subscription sectors. The website demonstrates strong market positioning with trusted partnerships and comprehensive product offerings. Technically, the site is built on modern frameworks like Webflow and HubSpot, integrating various marketing and analytics tools. However, performance is hindered by slow load times and a large page size. Security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS, exposing the site to significant risks. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional and credible but requires urgent security improvements to protect users and enhance trust.

T

Trustly, Inc.

trustly.one

53

Trustly, Inc. is a leading Pay by Bank payment service provider leveraging a proprietary Open Banking technology stack to deliver guaranteed payments, risk management, and consumer insights. The company targets businesses across financial services, gaming, retail, and subscription sectors, offering a global network with over 110 million consumers in 30+ countries. Their business model focuses on enabling faster, more secure, and cost-effective bank payments compared to traditional card payments. The website reflects a mature digital presence with excellent content quality and professional branding, supported by modern marketing and analytics tools such as HubSpot, Google Tag Manager, and Weglot for multilingual support. Technically, the site is built on Webflow CMS and hosted on Amazon AWS, utilizing various JavaScript libraries and integrations. However, the site suffers from slow load times and lacks a valid SSL certificate, resulting in a critical security deficiency. Accessibility and mobile optimization are good, and SEO practices are well implemented. The absence of HTTPS and security headers significantly impacts the site's security posture, exposing users to potential risks. From a security perspective, the lack of HTTPS and essential security headers, combined with no evidence of incident response or vulnerability disclosure policies, indicates a need for urgent improvements. Privacy and cookie policies are present and comprehensive, supporting GDPR compliance. The WHOIS data shows the domain is privacy-protected but consistent with the company's US presence and age, supporting legitimacy. Overall, while Trustly's business and website demonstrate strong market positioning and professional quality, the critical absence of SSL/TLS encryption and security best practices poses a significant risk. Immediate remediation of these issues is recommended to enhance user trust and secure sensitive transactions.

I

International Sport and Culture Association

isca.org

57

The International Sport and Culture Association (ISCA) is a well-established non-profit organization focused on promoting physical activity and recreational sport globally. Their website reflects a mature and consistent brand with a clear mission to empower stakeholders and members through conferences, campaigns, and educational resources. The organization targets NGOs, sport professionals, and the general public interested in physical activity. Technically, the website uses a PHP backend with common frontend libraries such as jQuery and Bootstrap, hosted on Google Cloud infrastructure with DNS managed by Cloudflare. However, the site lacks a valid SSL certificate and modern TLS support, which significantly impacts its security posture. Security headers are present but insufficient without HTTPS. Privacy compliance is weak, with no visible privacy or cookie policies despite GDPR references. Contact information is clearly provided, including email, phone, and physical address, alongside active social media channels. Overall, the site is functional and professional but requires urgent security and privacy improvements.

N

NISZ Nemzeti Infokommunikációs Szolgáltató Zrt.

nisz.hu

40

NISZ Nemzeti Infokommunikációs Szolgáltató Zrt. is a key Hungarian government IT and telecommunications service provider, supporting digital government infrastructure and public sector digital transformation. The company offers a range of services including mobile applications, telecommunication services, managed IT services, data center and cloud services, and videoconferencing platforms. The website reflects a mature and professional organization with clear business focus on government clients and public institutions. Technically, the site uses modern frontend technologies and integrates multiple analytics and marketing tools, but suffers from a critical security flaw due to the absence of a valid SSL certificate and lack of TLS support, which severely impacts its security posture. Privacy compliance is well addressed with comprehensive cookie consent and privacy policies. Contact information and social media presence are clearly provided, enhancing business credibility. Overall, the site is functional and professional but requires urgent security improvements to protect user data and trust.

N

Nemzeti Adatvédelmi és Információszabadság Hatóság

naih.hu

40

The Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH) is the Hungarian national authority responsible for data protection and freedom of information enforcement. The website serves as an official government portal providing comprehensive information on data protection laws, GDPR compliance, public information access, and related regulatory activities. It targets data controllers, data subjects, legal professionals, and the general public in Hungary. The business model is that of a government regulatory authority with a medium organizational size and a mature domain age of 14 years, reflecting its established presence. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, hosted behind Cloudflare DNS. The site is content-rich and well-structured, with good mobile optimization and accessibility features. However, performance is slow due to a large page size and many resources. The site lacks a valid SSL certificate and modern TLS protocols, which is a critical security shortfall. No advanced security headers or session management features are implemented, exposing the site to potential risks. Security posture is weak due to the absence of HTTPS and security headers, despite no detected vulnerabilities like Heartbleed or POODLE. Privacy compliance is strong with clear privacy and cookie policies and GDPR alignment. Contact information is transparent and comprehensive, including emails, phone numbers, and physical addresses. No advertising or tracking services are detected, indicating a privacy-conscious approach. Overall, the site is trustworthy and authoritative but requires urgent security improvements, especially SSL/TLS implementation, to protect user data and maintain compliance. Strategic recommendations include deploying a valid SSL certificate, enabling modern TLS protocols, adding security headers, and optimizing performance to enhance user experience and security.

M

Magyar Rádió Művészeti Együttesei

mrze.hu

40

The website represents the official online presence of the Magyar Rádió Művészeti Együttesei, a Hungarian cultural organization focused on classical music ensembles including symphonic orchestra, choir, and children's choir. It serves as a platform for concert information, ticket sales, media content, and organizational news, targeting classical music enthusiasts and concert attendees primarily in Hungary. The site is built on WordPress with a variety of custom plugins and integrates media streaming services. However, a critical security gap exists as the site lacks a valid SSL certificate and does not support HTTPS, exposing users to potential risks. The site includes a cookie consent mechanism and links to a comprehensive privacy policy hosted on the parent MTVA domain, indicating good privacy compliance. No direct contact emails or phone numbers are visible, but a contact form is available. Overall, the site is professionally designed with good accessibility and SEO practices but requires urgent security improvements.

D

DUNA MÉDIASZOLGÁLTATÓ NONPROFIT ZRT.

duna-haz.com

58

Duna-Ház is a non-profit cultural and educational organization based in Torockó, Romania, offering a variety of programs such as children's activities, workshops, films, trainings, lectures, and online events. The website serves as a portal for event information and community engagement, targeting local families and youth interested in cultural enrichment. The organization appears to have a stable market position as a local non-profit with a mature domain and consistent branding. Technically, the website is built on WordPress using Elementor and Slider Revolution, but suffers from slow load times and lacks HTTPS security, which is a critical vulnerability. The absence of a valid SSL certificate and security headers exposes the site to risks and undermines user trust. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or advanced GDPR features. Contact information is clearly provided, including email and physical address, and social media presence is active on Facebook and YouTube. Overall, the site is functional but requires urgent security improvements to protect user data and enhance credibility.

Bonelli Bus s.a.s. is a well-established transportation company based in Italy, offering a variety of bus services including interregional lines, shuttle services, school transport, excursions, and bus rentals. The company targets tourists, commuters, and groups requiring transportation primarily in the Italian regions of Rimini, San Marino, Urbino, and Torino. The website is built on WordPress using Elementor and integrates common marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Despite a professional design and comprehensive content, the website lacks a valid SSL certificate, which significantly impacts its security posture. Privacy and cookie policies are present and appear GDPR compliant, with a functional consent mechanism. The domain is mature and consistent with the business profile, enhancing trustworthiness. However, the absence of HTTPS and security headers, along with the presence of a suspicious external script domain, pose security risks that should be addressed promptly.

I

International Beach Tennis IFBT

ifbt.eu

33

International Beach Tennis IFBT is a small, specialized sports federation focused on promoting and organizing beach tennis events globally. The organization operates a multilingual WordPress website providing comprehensive event information, player rankings, and membership services. The technical infrastructure is based on WordPress with several plugins and a custom theme, hosted by CDmon in Spain. While the website content and business information are well presented and consistent with the organization's mission, the security posture is weak due to lack of a valid SSL certificate and absence of modern TLS protocols. Privacy compliance is addressed with clear policies and consent mechanisms. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

S

San Marino Welcome

titanicojazz.com

54

Titanico Jazz Festival is a cultural event organized by San Marino Welcome, focusing on jazz music concerts, masterclasses, seminars, and social gatherings in San Marino. The website serves as an informational and ticketing portal for the festival, targeting jazz enthusiasts and cultural tourists. Technically, the site is built on WordPress with Elementor and Yoast SEO, hosted likely on AWS infrastructure. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture. While basic security headers are present, critical improvements are needed to secure user data and communications. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Contact information and social media presence enhance business credibility. Overall, the site is functional and professionally presented but requires urgent security upgrades to protect visitors and improve trust.

U

Universitat de Barcelona

ub.edu

53

The Universitat de Barcelona (UB) is a leading public academic institution in Spain, specializing in education, research, and innovation. The website serves a diverse audience including students, researchers, academic staff, alumni, companies, and media. It offers comprehensive information on academic programs, research initiatives, and institutional activities, positioning itself as a major educational entity in the region. The digital presence is supported by a mature technical infrastructure leveraging Liferay CMS and modern JavaScript frameworks, ensuring a good user experience and accessibility. However, the absence of a valid SSL certificate and HTTPS support is a critical security flaw that undermines user trust and data protection. Privacy compliance is well addressed through Cookiebot and Google Consent Mode, with clear cookie and privacy policies in place. Overall, the website is professional and content-rich but requires urgent security improvements to meet modern standards.