Security Directory

eKupon.ba is a regional e-commerce platform focused on providing discounted travel, wellness, and leisure offers primarily targeting customers in Bosnia and Herzegovina. The website presents a professional and modern design with a good user experience, showcasing a variety of hotel deals, spa treatments, and travel packages. The platform leverages modern web technologies including Alpine.js and Laravel Livewire, and integrates multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. Security posture is strong with HTTPS enforced and appropriate security headers, although privacy compliance could be improved by adding explicit cookie consent and detailed GDPR-compliant privacy policies. Contact information is limited to a contact form, with no direct emails or phone numbers visible. WHOIS data aligns well with the business claims, indicating a legitimate and consistent registration. Overall, the site is well-positioned in its market niche but should enhance privacy and compliance transparency to improve trust and regulatory adherence.

I

Internacionalni teatarski festival MESS

mess.ba

0

The Internacionalni teatarski festival MESS website serves as the official online presence for a well-established cultural and theatrical festival in Bosnia and Herzegovina. It provides comprehensive information about upcoming events, exhibitions, and festival news, targeting theater enthusiasts and the cultural community. The website leverages a modern WordPress infrastructure with popular plugins such as Elementor and Slider Revolution, ensuring a visually appealing and moderately performant user experience. However, it lacks critical compliance elements such as privacy and cookie policies, which are essential for GDPR adherence and user trust. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and incident response information. Overall, the site is credible and professional but would benefit from enhanced privacy and security practices.

P

Promotim d.o.o.

kupipoklon.ba

0

KupiPoklon.ba is an established e-commerce platform based in Bosnia and Herzegovina, specializing in the sale of gift vouchers redeemable at a network of retail partners. The business targets general consumers and corporate clients seeking convenient gifting solutions. The website presents a professional design with clear navigation and relevant content in Croatian, supporting multiple brands and services. Technically, the site uses legacy JavaScript libraries such as jQuery 1.3.2 and plugins like Fancybox and Cycle, indicating some technical debt and potential security risks. The platform integrates payment processing partners including Monri, Mastercard, and Visa, reflecting a mature payment infrastructure. Security posture is moderate with HTTPS enforced but lacks modern security headers and uses outdated libraries. Privacy compliance is partial, with privacy and terms pages present but no cookie consent mechanism or explicit GDPR compliance indicators. Overall, the site is functional and credible but would benefit from modernization and enhanced security and privacy practices.

G

Garden of Dreams

gardenofdreams.ba

0

Garden of Dreams is a cultural event organizer focused on the electronic music festival held in Sarajevo, Bosnia and Herzegovina. The website promotes the 2025 festival and includes a talent development program called Dreamers Talent Camp, aimed at supporting emerging DJs and producers from the region. The business model revolves around event management, sponsorship partnerships, and community engagement through online voting and mentorship programs. The website is built on WordPress with modern frontend technologies and integrates multilingual support and social media channels to reach a broad audience. Technically, the site is well-structured with good mobile optimization and SEO practices, though performance is moderate. Security posture is adequate with HTTPS and secure form handling, but lacks some advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

P

Promotim d.o.o.

promotim.ba

0

Promotim d.o.o. is a Bosnian technology company specializing in innovative web development and online marketing solutions since 2003. The company offers a range of services including web development, e-commerce platforms, web applications, and social media marketing, supported by their proprietary CMS platform PromoCMS. Their market position is strong locally with a portfolio of notable clients including news agencies and government entities. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Owl Carousel, and integrates Google Analytics for tracking. However, the site lacks published privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate with HTTPS implied but no visible security headers or incident response information. Overall, the website is professional and well-structured but could improve in privacy and security transparency.

D

Dobra knjiga

dobraknjiga.ba

0

Dobra knjiga is a well-established Bosnian bookstore and publisher specializing in offset and digital printing, publishing, and design services. With over 18 years of experience, it serves readers across Bosnia and Herzegovina and the diaspora, offering a curated selection of quality books through an online e-commerce platform. The website is built on WordPress with WooCommerce and Elementor, reflecting a modern digital infrastructure suitable for retail and publishing operations. Security posture is solid with HTTPS and password strength enforcement, though improvements in security headers and GDPR compliance mechanisms are recommended. Overall, the site presents a professional and trustworthy online presence with clear contact information and active social media engagement.

UniCredit Bank Bosnia and Herzegovina operates a professional and comprehensive retail banking website offering a wide range of financial products including loans, savings, digital banking, and insurance. The bank is part of the UniCredit Group, a well-established international banking group, which is reflected in consistent branding and domain registration data. The website demonstrates a mature digital infrastructure with modern technologies such as Adobe Experience Manager CMS, Adobe Analytics, and Tealium tag management, supporting a good user experience and mobile optimization. Security measures include HTTPS enforcement and Content Security Policy headers, although some improvements in header strictness are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Contact information is transparent and includes multiple channels such as phone, email, and online forms. Overall, the website is trustworthy, professionally maintained, and suitable for general audiences.

U

Union Banka d.d. Sarajevo

unionbank.ba

0

Union Banka d.d. Sarajevo is a well-established financial institution in Bosnia and Herzegovina, providing a broad range of banking services including accounts, loans, cards, savings, and digital banking platforms such as eUnion and mUnion. The bank targets both individual and corporate clients, with a notable focus on energy efficiency financing and sustainable banking initiatives. The website reflects a mature digital infrastructure built on modern technologies like React and Next.js, offering fast performance and excellent mobile optimization. Security measures such as HTTPS, security headers, and Google reCAPTCHA v3 are implemented, though explicit security policies and incident response information are not publicly detailed. Overall, the bank demonstrates a strong market position with consistent branding and trust indicators, supported by legitimate WHOIS registration data.

B

BH Telecom d.d. Sarajevo

bhtelecom.ba

0

BH Telecom d.d. Sarajevo is the leading telecommunications operator in Bosnia and Herzegovina, offering a comprehensive range of services including mobile telephony, fixed telephony, internet access, television services, and device sales. The company targets both private and business customers within the country, maintaining a strong market position supported by a professional and well-structured website. The digital infrastructure is built on WordPress with modern plugins and frameworks, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS enforcement and use of reCAPTCHA, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a mature digital presence aligned with the company's business stature.

А

Агенција за безбједност саобраћаја Републике Српске

absrs.org

0

The website absrs.org represents the Агенција за безбједност саобраћаја Републике Српске, a government agency dedicated to traffic safety in Republika Srpska, Bosnia and Herzegovina. The agency provides comprehensive information on traffic laws, safety campaigns, licensing procedures, and statistical data to support safer road usage. The site targets the general public, local communities, and government stakeholders, positioning itself as an authoritative source for traffic safety in the region. Technically, the website employs a moderate technology stack including Bootstrap for responsive design, jQuery, Slick Carousel, and Fancybox for UI elements, alongside Google Fonts and Google Analytics for tracking. Hosting is managed by BitLab, with domain registration dating back to 2012, indicating an established presence. The site is accessible, mobile-optimized, and features clear navigation, although some SEO and accessibility features are basic. From a security perspective, the site uses HTTPS URLs but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Google Analytics is implemented via an older ga.js script, and no cookie consent mechanism is detected. The WHOIS data is transparent and consistent with the agency's government status, supporting legitimacy. Overall, the website is functional and trustworthy as a government information portal but would benefit from improved security practices and privacy compliance to enhance user trust and regulatory adherence.

A

Agencija za upravljanje oduzetom imovinom Republike Srpske

auoirs.net

0

The website represents the Agencija za upravljanje oduzetom imovinom Republike Srpske, a government agency under the Ministry of Justice of Republika Srpska, Bosnia and Herzegovina. The agency manages assets confiscated through criminal proceedings, as established by law. The website is built on WordPress using the Divi theme and Yoast SEO plugin, indicating a moderate level of digital maturity with good SEO practices but lacking advanced security configurations such as DNSSEC and security headers. The site is accessible via HTTPS, ensuring encrypted communication, but lacks visible privacy, cookie, or terms of service policies, which are important for compliance and user trust. No contact emails, phone numbers, or social media links were found, limiting direct communication channels. Overall, the site is professional and consistent with a government entity but could improve in privacy compliance and security posture.

Р

Републички завод за стандардизацију и метрологију

rzsm.org

0

The Republika Srpska Institute for Standardization and Metrology (RZSM) is a government administrative organization under the Ministry of Economy and Entrepreneurship of Republika Srpska, Bosnia and Herzegovina. It is responsible for standardization, metrology, control of precious metal items, and conformity assessment of products within Republika Srpska. The website serves as an official informational portal targeting citizens, businesses, and institutions in the region, providing regulatory and procedural information related to its mandate. Technically, the website is built on Joomla CMS with modern frontend technologies including WebComponents and FontAwesome. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Hosting details are limited but domain registration and DNS setup appear legitimate and stable. No advanced analytics or tracking tools are present, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and has domain transfer protections enabled. However, DNSSEC is not enabled and no explicit security headers were detected in the provided HTML content. There are no published privacy or cookie policies, which is a compliance gap. No forms or user input fields were found, reducing attack surface. The domain WHOIS data is consistent with the business claims and shows a mature registration age. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced security headers, published privacy and cookie policies, and DNSSEC implementation to improve security posture and compliance. The absence of tracking and advertising tools supports a low-risk profile for user privacy.

Републички педагошки завод Републике Српске is a governmental educational institution serving the Republika Srpska region of Bosnia and Herzegovina. It provides pedagogical advisory services, professional development for educators, student achievement analysis, and supports educational projects including e-learning initiatives. The website is well-structured, primarily in Serbian Cyrillic, targeting educators, students, and educational institutions within the region. The institution holds a key position in the local education sector with a domain registered since 2003, indicating established presence and trust. Technically, the website employs modern web technologies including Bootstrap 4.5, jQuery, Font Awesome, and Google Fonts, hosted by BitLab. The site is mobile responsive and offers good user experience and navigation clarity. However, some technical improvements are recommended such as enabling DNSSEC and implementing security headers to enhance security posture. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers and DNSSEC. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and security readiness. Overall, the website is professional and trustworthy with good business credibility but requires enhancements in privacy compliance and security best practices to reach higher maturity levels.

R

Republički centar za istraživanje rata, ratnih zločina i traženje nestalih lica

rcirz.org

0

The Republika Srpska Center for Research of War, War Crimes, and Searching for Missing Persons is a government institution dedicated to the investigation, documentation, and analysis of war crimes and missing persons related to conflicts in Bosnia and Herzegovina and the former Yugoslavia. The organization provides expert services including data archiving, forensic support, and cooperation with judicial and international bodies. The website serves as an informational and research platform primarily targeting government entities, researchers, and families of missing persons. Technically, the website is built on WordPress using the Divi theme, incorporating standard SEO and analytics tools such as Yoast SEO and Google Analytics. The site demonstrates moderate performance and good mobile optimization but lacks advanced security headers and comprehensive privacy compliance features. The absence of visible contact information and policy documents limits user trust and regulatory adherence. From a security perspective, the site uses HTTPS but does not implement key security headers, and the WHOIS data is incomplete, which raises concerns about domain transparency. No forms or sensitive data collection mechanisms were detected, reducing immediate risk exposure. However, the lack of privacy and cookie policies indicates potential compliance gaps with GDPR and related regulations. Overall, the website reflects a legitimate government entity with a focused mission but requires improvements in transparency, security best practices, and privacy compliance to enhance trustworthiness and regulatory alignment.

The website www.mpoo.org represents the Zavod za obrazovanje odraslih, an official government institute under the Ministry of Education and Culture of Republika Srpska, Bosnia and Herzegovina. It serves as an informational portal focused on adult education, traffic education, licensing, and related public announcements. The site targets adult learners and professionals seeking education and licensing services within the region. The content is primarily in Serbian and includes resources such as test preparation, schedules, and official notices. Technically, the website is built on WordPress 6.8.2 with a variety of plugins enhancing SEO, accessibility, anti-spam, and content management. The site is mobile-optimized and includes accessibility tools, cookie consent mechanisms, and structured data for SEO. Performance is moderate, with room for improvement in security headers and advanced optimization. From a security perspective, the site uses HTTPS and anti-spam protections but lacks visible security headers like CSP or HSTS. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a cookie consent modal present but no explicit privacy policy or terms of service pages found. Overall, the website is trustworthy and professional, reflecting its government affiliation. However, improvements in security headers, privacy documentation, and WHOIS transparency would enhance its security posture and compliance standing.

Ц

Центар за бесплатну правну помоћ

mpr-centar.org

0

The website represents the 'Центар за бесплатну правну помоћ', a government-affiliated legal aid center in Republika Srpska, Bosnia and Herzegovina. It provides free legal assistance and representation before courts and other competent authorities, targeting socially vulnerable citizens. The organization is established by the Government of Republika Srpska and operates through offices in multiple cities. The website is built on WordPress using the Divi theme and employs Yoast SEO for optimization. The technical infrastructure is modern and moderately performant, with mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Business credibility is high given the official nature and consistent WHOIS data. Overall, the site is professional, trustworthy, and safe for general audiences.

Р

Републички хидрометеоролошки завод

rhmzrs.com

0

The Republika Srpska Hydrometeorological Institute (Републички хидрометеоролошки завод) is a government agency responsible for meteorological, seismological, hydrological, and environmental monitoring and reporting within Republika Srpska, Bosnia and Herzegovina. The website serves as an official portal providing weather forecasts, seismic activity reports, hydrological bulletins, and environmental quality data primarily in Serbian language. It targets citizens, governmental bodies, agricultural stakeholders, and scientific communities. The business model is a public service institution funded and operated by the government, with a stable market position as the official source of hydrometeorological information in the region. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript with jQuery, Bootstrap framework, Leaflet.js for interactive maps, and Axios for asynchronous requests. Hosting is supported by Cloudflare DNS services, enhancing reliability and performance. The site is mobile optimized with good navigation clarity and professional design, though accessibility features are basic. SEO is implemented at a basic level with meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and has domain transfer protections. However, it lacks DNSSEC, security headers like CSP or HSTS, and a cookie consent mechanism, which are areas for improvement. No explicit privacy policy or GDPR compliance statements are present, and no incident response or vulnerability disclosure policies are published. The WHOIS data aligns well with the website’s governmental nature, showing a consistent registration history and no privacy protection, which is appropriate. Overall, the website is a trustworthy and professional government resource with good content quality and technical implementation. Security posture is moderate with room for enhancements in headers and compliance. Privacy compliance is basic and could be improved with explicit policies and consent mechanisms. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and security policies, and implementing cookie consent to enhance trust and compliance.

L

Lanaco

nasljedje.org

0

The website represents the official online presence of the Republika Srpska Institute for the Protection of Cultural-Historical and Natural Heritage, a government agency under the Ministry of Education and Culture of Republika Srpska, Bosnia and Herzegovina. It provides information on cultural and natural heritage protection, public procurement, news, projects, and contact details. The site targets the general public, cultural professionals, and government stakeholders. The business model is a government service institution focused on heritage preservation and public information dissemination. Technically, the website is built on WordPress with common plugins such as Slider Revolution and Unyson Framework, using jQuery and Bootstrap for frontend functionality. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Hosting details are not explicitly stated but domain registration and DNS indicate a stable infrastructure. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. No privacy or cookie policies are found, indicating compliance gaps. Contact information is clearly provided, enhancing trust. No signs of malicious content or adult material are present. Overall, the website is a credible government resource with good content and moderate technical maturity. Improvements in privacy compliance and security hardening are recommended to enhance trust and protect user data.

В

Влада Републике Српске

srpska2030.rs

0

The website srpska2030.rs serves as the official government platform for the Sustainable Development Strategy of Republika Srpska for 2024-2030. It provides comprehensive information on sustainable development goals, normative frameworks, strategic platforms, and public consultation mechanisms. Supported by the UNDP and the Slovak Ministry of Finance, it targets citizens, government officials, and stakeholders interested in sustainable development. The platform is built on WordPress with modern frontend technologies like Bootstrap and AOS, offering a responsive and user-friendly experience. Security posture is adequate with HTTPS and secure forms, but lacks advanced security headers and privacy compliance elements such as privacy and cookie policies. The domain registration is consistent with the business purpose and recent project timeline, enhancing trustworthiness.

L

Lanaco d.o.o

skolers.org

0

The website skolers.org serves as a centralized portal hub for the Ministry of Education and Culture of Republika Srpska, Bosnia and Herzegovina. It provides access to multiple educational eServices including portals for education, electronic courses, student enrollment, and electronic diaries for various school levels. The target audience includes students, parents, teachers, and educational institutions within Republika Srpska. The business model is government-affiliated digital service provision, positioning itself as an official and trusted educational platform in the region. Technically, the website uses standard HTML5, CSS3, and jQuery 3.5.1, with a moderate performance and good mobile optimization. The site lacks advanced frameworks or CMS indications and does not show evidence of analytics or tracking scripts in the provided content. SEO and accessibility are basic but functional. The domain is registered with Lanaco d.o.o in Bosnia and Herzegovina, consistent with the website's purpose and geographic focus. From a security perspective, the site uses HTTPS but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. No privacy, cookie, or terms of service policies are present, indicating gaps in compliance with GDPR and related regulations. No forms or data collection mechanisms are visible on the main page, reducing immediate data exposure risks. Social media links connect to official Ministry accounts, enhancing trust. Overall, the website is a credible and functional government educational portal with good business credibility but requires improvements in privacy compliance and security best practices to strengthen its posture and user trust.

R

Republicka uprava civilne zastite RS

ruczrs.org

0

The website represents the Republic Civil Protection Administration of Republika Srpska, Bosnia and Herzegovina, providing governmental civil protection and emergency preparedness services. It serves as an official communication channel for public safety information, warnings, and organizational updates. The organization is positioned as a regional government authority with a focus on protecting citizens and property from natural and other disasters. The site content is primarily in Serbian Cyrillic, targeting the local population and stakeholders. Technically, the website is built on WordPress CMS with a suite of common plugins for SEO, forms, translation, and media display. The infrastructure is moderately modern with good mobile optimization and SEO practices. Performance is moderate, and accessibility is basic. The site uses HTTPS with a valid SSL certificate but lacks DNSSEC and some security headers, indicating room for security enhancements. Security posture is adequate but could be improved by enabling DNSSEC, adding security headers, and publishing explicit security and incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms, which is critical for GDPR adherence. Business credibility is strong given the official nature, consistent branding, and social media presence. Overall, the site is trustworthy and professional but should address privacy compliance and security best practices to enhance user trust and regulatory adherence.

П

Пореска Управа РС

poreskaupravars.org

0

The Poreska Uprava Republike Srpske (Tax Administration of Republika Srpska) is a government entity responsible for the impartial and efficient collection and control of public revenues in Republika Srpska, Bosnia and Herzegovina. The website serves as an official portal providing information, e-services, and updates to taxpayers including individuals, legal entities, and entrepreneurs. It maintains a strong market position as the authoritative tax administration body in the region, offering key services such as e-fiscalization and electronic services to facilitate tax compliance. The site is multilingual, primarily in Serbian Cyrillic and Latin scripts, with an English version available, targeting local citizens and businesses.

I

Izrada web stranica

izradawebstranica.ba

0

Izrada web stranica is a small digital agency based in Bosnia and Herzegovina specializing in the creation of unique websites and e-commerce shops. The company positions itself as a full-service digital agency focused on brand growth and web development services. The website is built on WordPress using Elementor, enhanced with SEO tools like Rank Math, and includes modern web technologies such as Lottie animations and Google Analytics for tracking. The technical infrastructure is solid with HTTPS enabled and a professional design, although some security best practices like security headers and privacy policies are missing. The security posture is moderate with no visible vulnerabilities but lacks formal security and privacy documentation. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and security practices.

B

Biserje

biserje.ba

0

Biserje is an online cultural magazine based in Bosnia and Herzegovina, focusing on the intersection of tradition and modernity in culture and society. It serves a niche audience interested in Bosnian history, Islam, art, and social topics. The website is powered by WordPress with a modern tech stack including Elementor and Yoast SEO, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced but lacks comprehensive security headers and incident response information. Privacy compliance is limited, with no cookie consent mechanism detected. Overall, the site is legitimate, professionally presented, and trustworthy within its domain.

A

Agencija WEB Studio

webstudio.ba

0

Agencija WEB Studio is a full service digital marketing agency based in Bosnia and Herzegovina, positioning itself as the first such agency in the country. The website presents a professional digital marketing service offering focused on business growth and client acquisition. The technical infrastructure is built on WordPress CMS, utilizing the All in One SEO plugin and a custom theme, indicating a moderate level of digital maturity. The website is mobile optimized and has good SEO practices but lacks comprehensive privacy and cookie policies. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response policies. Overall, the website is functional and professional but could improve in privacy compliance and security best practices to enhance trust and regulatory adherence.

B

Bošnjačka zajednica kulture

bzk.ba

0

Bošnjačka zajednica kulture (BZK) is a well-established non-profit cultural organization dedicated to preserving and promoting Bosniak culture, literature, and heritage primarily in Bosnia and Herzegovina. The website serves as a platform for news, cultural projects, publications, and events, targeting the Bosniak community and cultural scholars. The organization maintains a consistent brand presence and provides valuable cultural content, positioning itself as a key cultural institution in the region. Technically, the website is built on WordPress using common plugins such as Slider Revolution, Contact Form 7, and Mailchimp integration. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled, but lacks important security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and professional, with no signs of malicious content or blocking mechanisms. However, it would benefit from enhanced privacy compliance and improved security headers to strengthen its security posture and user trust. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and conducting regular security audits to maintain a robust security posture.

I

Islamske informativne novine Preporod

preporod.com

0

Preporod.com is the online presence of Islamske informativne novine Preporod, an established Islamic informational newspaper based in Bosnia and Herzegovina. The website serves a Bosnian-speaking Muslim audience with news, cultural, spiritual, and community content. It operates a print and digital media model with subscription options and advertising. Technically, the site is built on Joomla CMS with modern web technologies like Bootstrap and jQuery, and integrates Google Analytics and Facebook Pixel for user tracking. The security posture is moderate with HTTPS enabled and CSRF protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing explicit privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, content-rich, and trustworthy, but could improve privacy and security practices.

B

Bosna Bank International

bbi.ba

0

Bosna Bank International (BBI) is a banking institution based in Sarajevo, Bosnia and Herzegovina, providing a full range of banking services to both individual and corporate clients. The website reflects a professional banking brand with consistent branding and a clear focus on financial services. The target audience includes physical and legal persons seeking banking solutions in the region. The business model is centered on traditional banking services, positioning BBI as a significant player in the Bosnian financial sector. Technically, the website is built on WordPress with Elementor and uses modern web technologies including asynchronous script loading and SEO optimization via Rank Math. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Structured data is implemented correctly, enhancing search engine understanding of the organization. From a security perspective, the site uses HTTPS with good SSL configuration and employs some security plugins like stop-user-enumeration. However, there is a lack of visible security headers and no published security or incident response policies. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms. No forms or contact details were found in the provided content, limiting user engagement and support transparency. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security best practices, and clearer contact and policy disclosures to improve user trust and regulatory adherence.

В

Влада Републике Српске

vladars.rs

0

The website vladars.rs is the official government portal of the Government of Republika Srpska, a political entity within Bosnia and Herzegovina. It serves as a comprehensive source for government news, announcements, ministry information, official documents, and multimedia content. The site targets citizens, government officials, media, and international partners, providing transparency and access to government activities. The domain is relatively new, registered in 2023, consistent with the content and recent government programs published on the site. Technically, the site is built on Microsoft SharePoint, leveraging its content management capabilities. It uses embedded videos from Vimeo and YouTube and includes social media integration with official government channels. The hosting provider is HostingMania d.o.o. Beograd, a Serbian hosting company, which aligns regionally with the website's purpose. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. From a security perspective, the site uses HTTPS with valid SSL certificates, but lacks DNSSEC and explicit security headers, which are recommended for enhanced security. There is no visible privacy policy, cookie consent mechanism, or vulnerability disclosure information, which are important for compliance and user trust. No WAF or security challenge mechanisms are detected, and the site appears fully accessible. Overall, the website is a credible and professional government portal with good content quality and business credibility. However, it would benefit from improved privacy compliance, enhanced security headers, and explicit policies to strengthen user trust and regulatory adherence.

В

Влада Републике Српске

vladars.net

0

The website vladars.rs is the official government portal of the Government of Republika Srpska, providing comprehensive information about government activities, ministries, news, press releases, and multimedia content. It targets citizens, government officials, media, and international observers. The site is built on Microsoft SharePoint technology, hosted by HostingMania d.o.o. Beograd, and uses modern web technologies including Bootstrap and embedded video platforms like Vimeo and YouTube. The content is primarily in Serbian Cyrillic with options for Latin and English languages. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy and cookie policies are not explicitly found, indicating room for compliance improvement. Overall, the site is professional, trustworthy, and serves as a key information hub for the Republika Srpska government.

P

Promotim d.o.o. Sarajevo

kupikartu.ba

0

Kupikartu.ba is a leading online ticketing platform in Bosnia and Herzegovina, operated by Promotim d.o.o. Sarajevo. The website offers a wide range of event tickets including music concerts, sports events, cultural performances, and cinema. It targets primarily Bosnian, Croatian, and Serbian speaking audiences interested in entertainment and cultural events. The business model focuses on e-commerce ticket sales with integrated payment processing partnerships. Technically, the site uses a modern responsive design built on Bootstrap with integrations for Google Analytics, Google Tag Manager, and advertising via Google Ad Manager. However, the use of an outdated jQuery version presents a security risk. Security posture is moderate with HTTPS enforced but lacks advanced security headers and visible security policies. Privacy compliance is basic with no cookie consent mechanism detected and limited GDPR indicators. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

F

FiXiT d.o.o.

fixit.ba

0

FiXiT d.o.o. is a small IT services company based in Bosnia and Herzegovina, founded in 2015. The company offers specialized IT services including IT support, web design, and toner distribution. Their website reflects a professional and consistent brand image, targeting business clients seeking reliable IT solutions. The company maintains a portfolio of reputable clients, indicating a solid market position locally. Technically, the website is built on WordPress using modern plugins such as Elementor and Yoast SEO, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and use of security plugins, but lacks some advanced security headers and published policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and professional but could improve compliance and security transparency.

Р

Републичка управа за геодетске и имовинско-правне послове

rgurs.org

0

The website rgurs.org represents the official portal of the Republika Srpska Republic Administration for Geodetic and Property-Legal Affairs, a government entity responsible for cadastral and property rights management in Republika Srpska, Bosnia and Herzegovina. The site provides access to various e-services including cadastral data, property registries, licensing, and public procurement information. It targets citizens, legal entities, and professionals involved in geodetic and property-related activities. The business model is that of a public service institution with a medium-sized operational scope and a history dating back to 2006. Technically, the website employs modern frontend technologies such as Bootstrap 4, jQuery, and Slick Carousel, ensuring a responsive and user-friendly interface. However, no CMS or advanced analytics tools are detected, indicating a custom or lightweight platform. Performance is moderate with good mobile optimization but basic accessibility and SEO features. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and visible security headers, which are recommended for enhanced security. There is no evidence of privacy or cookie policies, GDPR compliance statements, or incident response contacts, which are critical for regulatory compliance and user trust. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the website is a legitimate government portal with good content quality and business credibility but requires improvements in privacy compliance, security best practices, and transparency to enhance trust and regulatory adherence.

M

Media centar Islamske zajednice u BiH

mina.ba

0

MINA.ba is the official website of the Muslim Informative News Agency (MINA), operated by the Media Center of the Islamic Community in Bosnia and Herzegovina. The site serves as a niche regional news platform focused on delivering news, announcements, and community updates relevant to the Bosnian Muslim population. It maintains a consistent brand presence and provides clear contact information, supporting its role as a trusted community media outlet. The business model is non-profit and community-oriented, targeting a specific religious and regional audience.

E

El-Kalem

elkalem.ba

0

El-Kalem is a well-established publishing center affiliated with the Islamic Community in Bosnia and Herzegovina, specializing in Islamic literature and cultural heritage. The website serves as an e-commerce platform offering a variety of books, magazines, and educational materials targeting the Bosnian Muslim community and interested readers. The business has a clear market position as a niche regional publisher with over four decades of presence. Technically, the site is built on WordPress with WooCommerce, using modern themes and performance optimizations, providing a good user experience with mobile responsiveness and SEO best practices. Security posture is adequate with HTTPS and secure payment integrations, though it lacks explicit security policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and compliant with basic privacy regulations, though improvements in privacy compliance and security transparency are recommended.

G

Gazi Husrev-begova biblioteka

ghb.ba

0

Gazi Husrev-begova biblioteka is a historic and culturally significant library institution in Bosnia and Herzegovina, founded in 1537. It serves researchers, students, and the general public interested in Islamic and Bosnian heritage by providing access to a vast collection of manuscripts, printed books, periodicals, archival materials, and museum exhibits. The institution also offers digital library services and publishes scholarly works. The website reflects a mature digital presence with multilingual support and active social media engagement. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Slider Revolution, and WPBakery Page Builder. It uses HTTPS with strong SSL configuration and security headers, indicating a good security posture. Google Analytics and reCAPTCHA are implemented for analytics and form security respectively. However, the site lacks a cookie consent mechanism and explicit privacy compliance features, which are important for GDPR adherence. Security-wise, the site shows no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contact is a gap that could be addressed to improve trust and readiness. The WHOIS data confirms the legitimacy and consistency of the domain registration with the institution's identity. Overall, the website is professional, trustworthy, and well-optimized for its audience, but could improve privacy compliance and security transparency to enhance user trust and regulatory adherence.

I

Institut za islamsku tradiciju Bošnjaka | www.iitb.ba

iitb.ba

0

Institut za islamsku tradiciju Bošnjaka (IITB) is a small, specialized scientific research institute affiliated with the Islamic Community in Bosnia and Herzegovina. The institute focuses on research and preservation of the Islamic tradition of Bosniaks, offering publications, conferences, and educational events primarily targeting the Bosnian-speaking academic and religious community. The website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, indicating a moderate level of digital maturity and good SEO practices. The site is mobile optimized and provides clear navigation and contact information, including email and phone contacts, as well as social media presence on Facebook, Twitter, and YouTube. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks explicit security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve compliance and security transparency.

C

Centar za dijalog - Vesatijja

cdv.ba

0

Centar za dijalog - Vesatijja is a Bosnian non-profit organization dedicated to promoting dialogue culture among Muslims and between different religious and worldview communities. The organization focuses on scientific research, educational projects, and media publications including articles, videos, and PDF releases. Their target audience primarily consists of Bosnian-speaking Muslims and individuals interested in interreligious dialogue and Islamic cultural topics. The website reflects a niche position in the non-profit sector with a clear mission and consistent branding. Technically, the website is built on WordPress 6.8.2 with common plugins such as Contact Form 7 and uses modern web technologies including jQuery and Font Awesome. The site is mobile optimized with good SEO practices and moderate performance. However, it lacks some advanced security headers and privacy compliance features such as cookie consent and privacy policy pages. From a security perspective, the site enforces HTTPS and uses secure contact forms, but it does not implement security headers like Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening. The WHOIS data is consistent with the website's claims, supporting legitimacy. Strategic improvements in privacy policy publication, cookie consent, and security headers would strengthen the site's security posture and user trust.

U

Ured za zekat

zekat.ba

0

The website zekat.ba serves as an informational and transactional platform for Zekat, an Islamic charitable practice, primarily targeting the Bosnian Muslim community. It provides current nisab values, educational content, a Zekat calculator, and facilitates online payments through a partner site. The site is operated by 'Ured za zekat', a non-profit religious organization. The website demonstrates a moderate level of digital maturity with modern JavaScript usage, integration of Google Analytics and Meta Pixel for tracking, and a cookie consent mechanism. However, it lacks explicit privacy and security policies, and no direct contact information is provided on the site. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and incident response information are notable gaps. Overall, the site is functional and trustworthy for its niche audience but would benefit from enhanced transparency and security documentation.

R

Radio BIR

bir.ba

0

Radio BIR is a Bosnian Islamic community radio broadcaster offering a diverse range of religious, educational, informational, political, youth, and musical programming. It serves a Bosnian-speaking Muslim audience across multiple regional FM frequencies, positioning itself as a key media outlet within the Islamic community in Bosnia and Herzegovina. The website is built on Joomla CMS and employs common web technologies such as jQuery, Bootstrap, and Font Awesome, reflecting a moderate level of digital maturity. The site is mobile optimized and provides clear navigation and relevant content for its target audience. Security posture is moderate; HTTPS is used, but security headers and privacy policies are lacking, indicating room for improvement in compliance and security best practices. Overall, the domain registration data aligns well with the website's claims, supporting its legitimacy.

B

Bošnjačka zajednica kulture

preporod.ba

0

Bošnjačka zajednica kulture is a Bosnian non-profit cultural organization undergoing a rebranding process, including a domain change from preporod.ba to bzk.ba. The website is currently under maintenance with a notice informing visitors about the changes. The technical infrastructure is based on WordPress with several common plugins, including Contact Form 7 and Slider Revolution. Security measures include HTTPS and Google reCAPTCHA, but there is a lack of explicit security headers and privacy policies. Contact information is limited to email addresses under the new domain, with no phone numbers or physical addresses provided on the maintenance page. Overall, the website shows moderate technical maturity but lacks comprehensive privacy and security documentation.

I

Islamska zajednica u Bosni i Hercegovini

islamskazajednica.ba

0

Islamska zajednica u Bosni i Hercegovini operates as the official religious authority for Muslims in Bosnia and Herzegovina, providing religious guidance, news, educational content, and community services. The website serves a Bosnian-speaking audience including local and diaspora communities, offering structured information about religious offices, events, and educational resources. The organization holds a strong market position as a government-recognized non-profit religious entity. Technically, the website is built on Joomla CMS with a modern tech stack including jQuery, Bootstrap, and Mootools. It is mobile responsive and provides a good user experience with clear navigation and relevant content. Performance is moderate, and SEO practices are adequately implemented. However, accessibility features are basic and could be improved. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, but lacks several important security headers such as Content-Security-Policy and HSTS. No exposed sensitive data or vulnerable libraries were detected, but the absence of explicit privacy and cookie policies indicates compliance gaps, especially regarding GDPR. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and providing clear incident response contacts to improve user trust and regulatory compliance.

The website olx.ba is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to its content. This prevents extraction of any meaningful business, compliance, or security information from the page. The page title 'Just a moment...' and the presence of Cloudflare challenge scripts confirm that the site is protected by a Web Application Firewall (WAF) which requires human verification before access. Consequently, no privacy policies, contact information, or business details are available for analysis. The technical infrastructure is limited to Cloudflare's security platform with no visible CMS or analytics tools. The security posture cannot be fully assessed due to lack of access, but the presence of Cloudflare indicates some level of protection. Overall, the site cannot be properly evaluated until the WAF challenge is passed and the actual content is accessible.

K

KCUS

kcus.ba

0

KCUS is the University Clinical Center in Sarajevo, Bosnia and Herzegovina, providing a broad range of healthcare services across multiple specialized clinics. The website serves patients, visitors, and healthcare professionals with detailed information about clinics, contact details, and news. Technically, the site is built on WordPress using Elementor and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and has good navigation and content quality. Security posture is adequate with HTTPS enabled but lacks security headers and formal privacy and cookie policies, indicating room for improvement in compliance and security best practices. Overall, the site is trustworthy and professional but should address privacy and security gaps to enhance user trust and regulatory compliance.

Hydrogroup d.o.o. is a Bosnia and Herzegovina based company specializing in pools, wellness, fountains, and hydromassage pools. Established in 2000, it offers comprehensive services including design, supply, installation, maintenance, and consumables. The company has a solid regional presence with over 350 reference projects and partnerships with leading global brands. The website is built on WordPress with a moderate technical infrastructure including Bootstrap and jQuery, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and Wordfence plugin, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in compliance and security transparency.

O

Općina Ilidža

opcinailidza.ba

0

Općina Ilidža operates as the official municipal government portal for the Ilidža municipality in Bosnia and Herzegovina. The website provides residents and stakeholders with access to public announcements, e-forms, contact information, and details about local governance and services. It serves as a key communication channel between the local government and the community, emphasizing transparency and accessibility. Technically, the website is built on WordPress using the Elementor page builder, leveraging common web technologies such as jQuery and Google Fonts. The site is moderately optimized for performance and mobile responsiveness, with good SEO practices and basic accessibility features. Google Tag Manager is used for analytics and tracking, although privacy disclosures are lacking. From a security perspective, the site enforces HTTPS and includes several important security headers, indicating a good baseline security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of visible privacy and cookie policies, as well as incident response contacts, suggests areas for compliance and security improvement. Overall, the website is a professional and trustworthy government resource with solid technical foundations. Strategic enhancements in privacy compliance and security transparency would further strengthen its risk profile and user trust.

K

Kozmo Shop

kozmoshop.ba

0

Kozmo Shop is a regional e-commerce retailer specializing in cosmetics, makeup, hair care, maternity, fitness, and wellness products primarily serving Bosnia and Herzegovina. The website is professionally designed using the OpenCart platform with the Journal2 theme, featuring a broad product catalog and multiple brand partnerships. The technical infrastructure includes modern JavaScript libraries and integrations with marketing and analytics tools such as Google Analytics, Facebook Pixel, and AdRoll, indicating a mature digital marketing approach. Security posture is solid with HTTPS enforced and cookie consent implemented; however, the absence of security headers and limited contact information represent areas for improvement. No privacy policy or terms of service pages were detected, which may impact compliance and user trust. Overall, the site is accessible without WAF or blocking mechanisms and presents safe content suitable for general audiences.

Grand Hotel Neum is a well-established hospitality business located in Bosnia and Herzegovina, offering a wide range of services including accommodation, wellness, dining, and congress facilities. The website reflects a medium-sized hotel with a strong market position as the largest and most luxurious hotel on the Neum riviera. Technically, the site uses a traditional tech stack with jQuery, Bootstrap, and integrates third-party booking and analytics services. While the site is functional and content-rich, it lacks modern privacy and security compliance features such as privacy and cookie policies, GDPR indicators, and security headers. The domain registration data supports the legitimacy and long-term operation of the business. Overall, the website is professional but could improve in security and privacy compliance to enhance trust and regulatory adherence.

P

ProfiCentar

proficentar.ba

0

ProfiCentar is a professional e-commerce retailer specializing in tools and equipment, offering over 3500 items from renowned global brands. The website targets professional users and retail customers primarily in Bosnia and Herzegovina, positioning itself as a leading supplier in the region. The business model focuses on online sales supported by a comprehensive product catalog and customer support via phone and email. Technically, the site is built on WordPress with WooCommerce and Elementor, integrating modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The site is well-structured, mobile-optimized, and employs HTTPS with appropriate security headers, reflecting a good digital maturity level. However, it lacks visible privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is solid with no evident vulnerabilities, but the absence of published security policies and incident response contacts suggests room for improvement. Overall, the site is professional and trustworthy, with recommendations to enhance compliance and transparency.

The Sarajevo Holiday Market website represents a small-scale event organizer focused on cultural and commercial fairs held in Sarajevo since 2011. The business promotes seasonal markets including a winter holiday market and a summer market showcasing local artisans and products. The website content is bilingual, targeting both local residents and tourists, and provides essential contact information and vendor registration links. Technically, the site uses legacy JavaScript libraries such as jQuery 1.12.0 and Modernizr 2.8.3, with basic mobile optimization and moderate performance. Security posture is weak due to lack of visible HTTPS enforcement, absence of security headers, and missing privacy and cookie policies. No analytics or tracking scripts are detected, indicating minimal user tracking. Overall, the site is functional and professional but requires improvements in security and privacy compliance to meet modern standards.