Security Directory

M

MEO

meo.pt

0

MEO is a leading Portuguese telecommunications and energy services provider offering a broad portfolio including 5G mobile, TV, fixed and mobile internet, telephone, energy, and health services. The company targets both individual consumers and businesses within Portugal, leveraging a strong brand presence and comprehensive service offerings. The website reflects a mature digital infrastructure built on Microsoft SharePoint with modern JavaScript libraries and third-party integrations for marketing and analytics. Security posture is robust with HTTPS enforcement and consent management, though explicit security policies and incident response contacts are not publicly detailed. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting a large enterprise business model.

N

NOS

nos.pt

0

NOS is a major Portuguese telecommunications company offering a wide range of services including 5G mobile networks, fixed and mobile internet, television, telephone, and alarm systems. The website reflects a mature digital presence with a comprehensive online store and customer support resources. The company targets general consumers in Portugal and maintains a strong market position as a leading telecom operator. Technically, the site leverages Adobe Experience Manager, Salesforce SDKs, and Google marketing and analytics tools, indicating a modern and integrated infrastructure. Security posture is solid with HTTPS, cookie consent, and bot protection, though explicit security policies and vulnerability disclosure mechanisms are not publicly available. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting NOS's credibility and customer engagement.

Nomad Gym in Ericeira is a new fitness facility targeting nomadic travelers and fitness enthusiasts, scheduled to open in 2025 in Ericeira, Portugal. The website serves as a promotional landing page highlighting the gym's focus on flexible workout spaces, top-tier equipment, and ultra-fast Wi-Fi to support a mobile lifestyle. The business is positioned as a niche gym catering to the growing nomad community, with a small-scale operation and a clear target audience. Technically, the website is built with standard HTML, CSS, and JavaScript, hosted and DNS managed via Cloudflare. The site is mobile optimized and presents a professional design with good user experience. However, it lacks advanced frameworks, CMS, or analytics integrations, indicating a simple but effective digital presence. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers such as Content-Security-Policy or Strict-Transport-Security. No privacy or cookie policies are present, and no contact or incident response information is provided, which limits compliance and trust. There are no visible vulnerabilities or exposed sensitive data. Overall, the website is safe and professional but would benefit from enhanced privacy compliance, security headers, and contact information to improve trust and regulatory adherence. The domain registration is consistent with a new business launch, registered through a reputable registrar without privacy protection, which aligns with the business profile.

P

PT2020

portugal2020.pt

0

PT2020 is an official Portuguese government platform dedicated to supporting and disseminating information about the Portugal 2020 EU funding programs. The website serves as a central hub for project approvals, monitoring, user support, and communication with stakeholders. It targets public and private sector entities interested in EU investment opportunities, providing transparent access to program details and results. The platform maintains a consistent brand presence and leverages social media channels to enhance outreach and engagement. Technically, the website is built on WordPress using the Divi theme and several advanced plugins such as Advanced Custom Fields Pro. It integrates Google Analytics and Matomo for analytics tracking and employs Google Fonts and jQuery for frontend enhancements. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with room for improvement in security headers and hosting transparency. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms. Cookie consent mechanisms are implemented, and privacy policies are comprehensive and GDPR compliant. No critical vulnerabilities or exposed sensitive data were detected, though updating WordPress and plugins regularly and adding security headers would strengthen the security posture. Overall, PT2020 presents a trustworthy, professional, and well-maintained digital presence aligned with its government mandate. The risk level is low, with recommendations focusing on enhancing security best practices and accessibility compliance to maintain high standards.

Lavva Digital Agency is a Portugal-based creative digital agency specializing in branding, website design, and digital activation services. Established in 2015, the agency has built a strong market position with a portfolio of award-winning projects and a focus on delivering innovative digital experiences to ambitious companies. Their services include brand identity, UX design, web development, marketing consultancy, and SEO, targeting a diverse range of industries including technology, energy, hospitality, and healthcare. Technically, the website is built on a modern stack using Next.js and React, optimized for performance and mobile responsiveness. The site employs Google reCAPTCHA v3 for form security and includes a cookie consent mechanism, reflecting good privacy compliance practices. SEO and accessibility features are well implemented, contributing to a professional user experience. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements best practices such as secure forms and consent management. However, explicit security headers and a public security policy or incident response contacts are absent, representing areas for improvement. No vulnerabilities or suspicious activities were detected. Overall, Lavva Digital Agency presents a trustworthy and professional online presence with strong business credibility and technical maturity. Strategic enhancements in security policy transparency and additional security headers would further strengthen their security posture.

J

J. Soares Correia - Armazéns de Ferro, S.A.

jsoarescorreia.pt

0

J. Soares Correia - Armazéns de Ferro, S.A. is a well-established Portuguese company specializing in the wholesale and retail distribution of steel and iron products, including bars, profiles, sheets, tubes, and meshes. Founded in 1907, the company has grown to become a market leader in Portugal with a significant presence including a subsidiary in Angola. Their services also include manufacturing pre-molded concrete reinforcement products and providing a client portal for business customers. The website reflects a mature digital presence built on WordPress with Elementor and Yoast SEO, offering good content quality and navigation. Security posture is solid with HTTPS and no exposed sensitive data, though improvements can be made by adding security headers and formal security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the website is professional, trustworthy, and well-aligned with the company's business claims.

O

O FELIZ Metalomecânica

ofeliz.com

0

O FELIZ Metalomecânica is a Portuguese manufacturing company specializing in metal construction, sheet profiling, laser cutting, and fabrication of lighting columns and communication towers. The company has a solid market presence since 2008, offering end-to-end solutions from design to final assembly. Their website reflects a medium-sized enterprise with a professional digital presence built on Drupal CMS, featuring multilingual support and integrated marketing tools like Google Analytics and reCAPTCHA for security. While the site is well-structured and content-rich, it lacks some privacy compliance features such as a cookie consent banner. Security practices include HTTPS and CAPTCHA protections, but could be improved with DNSSEC and security headers. Overall, the domain registration data aligns well with the business claims, indicating a trustworthy and legitimate operation.

Constálica is a medium-sized Portuguese company specializing in innovative structural systems for construction, including MadreMax®, OmegaMax®, and Réservoir®. The company targets construction professionals and partners globally, offering solutions for industrial, housing, agricultural, and photovoltaic structures. Their business model focuses on B2B manufacturing and structural simulation tools such as MAXBOX®. The website reflects a mature digital presence with modern technologies like React and Next.js, and integrates Google Tag Manager for analytics and Cookie Script for privacy compliance. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and policies could be improved. The domain is well-established since 2008, consistent with the company's claims, and no suspicious WHOIS patterns are detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

Antero & Ca SA is a well-established Portuguese steel products company with over 90 years of history, operating as a steel service center and distributor. It is part of the Hiemesa Group, a recognized entity in the Iberian steel market. The company offers a wide range of steel products and industrial supplies, targeting industrial clients, construction companies, locksmiths, and equipment industries. The website reflects a professional and comprehensive digital presence with detailed product information, multiple contact points, and integration with the parent group's ecosystem. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Maps API, providing a responsive and user-friendly experience. Security-wise, the site uses HTTPS and basic form protections but lacks advanced security headers and explicit incident response policies. Privacy compliance is addressed with clear privacy and cookie policies, though no explicit cookie consent mechanism is present. The absence of WHOIS domain registration data is a notable concern, slightly reducing trustworthiness from a domain legitimacy perspective.

C

CMM – Associação Portuguesa de Construção Metálica e Mista

digitalsteel.pt

0

Digital Steel is a project promoted by the Portuguese Association of Metal and Mixed Construction (CMM) aimed at promoting the digitalization of processes in SMEs within the metal and mixed construction sector in Portugal. The website serves as an informational and promotional platform offering details about workshops, events, and digital transformation initiatives such as BIM, 3D printing, and robot welding. The target audience primarily consists of small and medium enterprises in the construction industry seeking to adopt Industry 4.0 technologies. Technically, the website is built on WordPress using the Divi theme, leveraging modern web fonts and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in compliance and security transparency.

Nomad Cafe is a small hospitality business focused on providing artisanal coffee and a nomadic lifestyle experience, targeting travelers and remote workers. The website presents a modern, well-designed interface with good mobile optimization and clear branding. The business plans to open a location in Portugal in 2025, indicating growth or expansion. Technically, the site uses standard web technologies and is hosted via Cloudflare, ensuring good performance and availability. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy and compliance policies are absent, which is a notable gap. Overall, the site is professional but could improve in privacy, security, and contact transparency.

K

KRKA Farmaceutica, Unipessoal Lda.

krka.pt

0

KRKA Farmaceutica, Unipessoal Lda. is a well-established pharmaceutical company specializing in generic medicines with over 70 years of experience. The company operates in Portugal as part of the larger Krka group, a recognized global player in the healthcare sector. Their website clearly communicates their business focus on prescription, non-prescription, and veterinary medicines, targeting both healthcare professionals and general consumers. The site is professionally designed, mobile-optimized, and provides comprehensive corporate and product information.

T

Thomann

thomann.pt

0

Thomann is a leading European e-commerce retailer specializing in musical instruments, accessories, studio, lighting, and PA equipment. The website www.thomann.pt serves the Portuguese market with a comprehensive product catalog and strong customer service offerings including repair and warranty services. The company positions itself as the largest music retailer in Europe, targeting musicians and music enthusiasts ranging from amateurs to professionals. The business model is focused on online retail with a large warehouse infrastructure supporting fast delivery and extensive product availability. Technically, the website employs modern JavaScript frameworks and custom internal modules, integrates Google Tag Manager for analytics, and uses Turnstile CAPTCHA for bot protection. The site is well optimized for performance, mobile responsiveness, accessibility, and SEO. Security best practices are observed with HTTPS enforcement, multiple security headers, and a cookie consent mechanism aligned with GDPR requirements. The security posture is strong with no evident vulnerabilities or exposed sensitive data. However, explicit incident response contacts and a vulnerability disclosure policy are not publicly available, representing areas for improvement. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms. Business credibility is high, supported by consistent branding, trust signals such as money-back guarantees, and warranty policies. Overall, the website presents a low risk profile with a mature digital presence and strong compliance posture. Strategic recommendations include publishing incident response contacts, adding a security.txt file, and enhancing transparency on data retention policies to further strengthen trust and security culture.

C

Casinoble

casinoble.pt

0

Casinoble is a well-established online platform specializing in providing comprehensive reviews, comparisons, and guides for online casinos and sports betting sites, primarily targeting the Portuguese market. Founded in 2016, the company has grown into an international brand with presence in over 25 languages and 30 countries, offering trusted insights and promoting responsible gambling. The website is professionally designed, content-rich, and optimized for mobile users, ensuring a high-quality user experience. Technically, Casinoble leverages WordPress CMS with modern analytics tools such as Google Tag Manager and RudderStack, alongside fingerprinting technology for enhanced user tracking and data collection. Security practices include HTTPS enforcement and adherence to licensing and regulatory standards, although there is room for improvement in explicit security headers and incident response transparency. Overall, Casinoble demonstrates a strong security posture, good privacy compliance, and high business credibility, making it a trustworthy resource for its audience.

I

Intercultura-AFS Portugal

intercultura-afs.pt

0

Intercultura-AFS Portugal is a well-established non-profit organization dedicated to promoting intercultural learning and global education through international student exchange programs. The website serves as a comprehensive portal for students, families, and volunteers interested in participating in or supporting these programs. It offers detailed information about program destinations, application processes, scholarships, and testimonials, positioning itself as a trusted resource in the education sector in Portugal. Technically, the website is built on WordPress with modern SEO and security practices, including HTTPS and Google reCAPTCHA Enterprise integration, ensuring a secure and user-friendly experience. While the site lacks a dedicated security policy or incident response page, it maintains strong privacy and cookie compliance aligned with GDPR standards. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical maturity, supporting its mission effectively.

G

Global Pixel

globalpixel.pt

0

Global Pixel is a well-established Portuguese company specializing in web development, graphic design, and digital marketing services with over 15 years of experience. The company targets businesses and organizations seeking professional digital solutions, offering a broad range of services including website creation, online stores, SEO, social media management, and advertising campaigns. Their market position is solidified by a diverse portfolio of reputable clients and a consistent brand presence. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and integrates popular analytics and marketing tools like Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS with a strong SSL configuration and incorporates security best practices such as CSRF tokens and CAPTCHA for forms. However, it lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low risk profile with strong business credibility and privacy compliance. Strategic improvements in security policy transparency and header implementation would enhance the security posture further.

A

AN E+ JA

juventude.pt

0

AN E+ JA is the Portuguese National Agency responsible for managing and promoting the Erasmus+ program, focusing on youth education, mobility, and strategic partnerships. The agency serves young people, youth organizations, and educational institutions, positioning itself as a key governmental entity facilitating European Union youth initiatives in Portugal. The website reflects a professional and consistent brand image, providing comprehensive information and resources related to Erasmus+ and youth policies. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, ShareThis, Bootstrap, and FontAwesome, ensuring a responsive and user-friendly experience. The site is well-structured with good SEO practices and mobile optimization, although accessibility features could be enhanced. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and applies best practices such as rel="noopener noreferrer" on external links and CAPTCHA for form submissions. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for improved security posture. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, the website is trustworthy, professionally maintained, and aligned with its governmental mission. Strategic recommendations include implementing security headers, publishing a security policy, enhancing accessibility, and maintaining vigilance on third-party scripts to sustain a robust security and compliance posture.

H

hansgrohe

hansgrohe.pt

0

Hansgrohe Portugal operates a premium brand website focused on bathroom and kitchen fixtures, offering high-quality mixers, showers, and related products. The website targets consumers and professionals seeking modern design and durable products. The business model centers on manufacturing and retail, positioning itself as a premium player in the market. The site demonstrates consistent branding and a professional digital presence. Technically, the site uses a modern technology stack including SAP Hybris platform, advanced analytics tools like Google Tag Manager and Piwik PRO, and performance monitoring via New Relic. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and published privacy policies. Overall, the site is trustworthy and well-maintained, though improvements in transparency and contact information would enhance compliance and user trust.

E

EDP Group

edpr.com

0

EDP Group is a well-established global energy company with a strong focus on renewable energy and sustainability. The website serves as a centralized hub for information about the group and its subsidiaries, including EDP Renewables. The site is professionally designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content for investors, clients, and partners. Technically, the site is built on Drupal CMS and integrates modern analytics and monitoring tools such as Google Tag Manager, HubSpot, and Dynatrace. Security posture is solid with HTTPS enforced and domain transfer protection enabled, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is partially demonstrated through cookie consent mechanisms, but a dedicated privacy policy page was not found on the analyzed URL. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the site.

S

SOMA - Environmental Solutions, Lda.

soma.pt

0

SOMA - Environmental Solutions, Lda. is a Portuguese company specializing in the commercialization, design, manufacturing, and technical assistance of urban cleaning and environmental equipment. Their product portfolio includes waste collection vehicles, sweepers, washing equipment, electric ecological solutions, cranes, and a proprietary operational management system called WISEWASTE®. The company holds ISO 9001:2015 certification and is recognized for innovation, including being the first Portuguese company with Common Criteria certification for an RFID container identification system. Their target audience includes public and private urban cleaning operators, municipalities, and environmental entities. The website reflects a medium-sized enterprise with over 50 years of experience, offering a comprehensive range of products and services.

W

Webwiki

webwiki.pt

0

Webwiki.pt operates as a specialized search engine focusing on Portuguese language websites, providing users with trustworthy site information, user reviews, and ratings. The platform aggregates and analyzes website data to rank sites by popularity and relevance, serving a niche audience primarily in Portugal. The business model revolves around offering a directory and search service with user-generated content and site registration options for webmasters. Technically, the site employs a modern tech stack including Bootstrap, jQuery, Google Fonts, and Google advertising and analytics services, ensuring a responsive and moderately performant user experience. Security-wise, the site enforces HTTPS, uses security headers, and integrates a comprehensive GDPR-compliant consent management platform, though it lacks explicit published security policies or incident response contacts. Overall, the site is safe for general audiences, with no adult or questionable content detected, and maintains a moderate trust level supported by consistent WHOIS data and transparent privacy practices.

B

biodiversityDS

biodiversitydatascience.com

0

Biodiversity Data Science is a specialized research and educational platform focused on leveraging data science tools to support biodiversity conservation and the United Nations 2030 Agenda for Sustainable Development. The website offers research publications, project descriptions, data science courses, code resources, and a podcast to engage researchers, policymakers, and environmental stakeholders. The platform positions itself as a niche player in the environmental data science domain with a strong emphasis on marine biodiversity and climate change impacts. Technically, the website is built using the Jekyll static site generator and incorporates modern front-end libraries such as Bootstrap, jQuery, and Font Awesome. It demonstrates good mobile optimization, clear navigation, and SEO best practices. Google Analytics is used for user tracking, indicating moderate data collection practices. However, no privacy or cookie policies are present, which is a compliance gap. From a security perspective, the site lacks visible security headers and formal security policies. The WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy and trustworthiness. No forms or sensitive data inputs are present, reducing immediate risk exposure. Overall, the security posture is moderate but could be improved with better policy disclosures and technical hardening. The overall risk assessment suggests the website is a credible source of biodiversity data science content but requires improvements in domain registration transparency, privacy compliance, and security best practices to enhance trust and reduce potential vulnerabilities.

C

CBPPE – Corporate Benefits Portugal, Unipessoal Lda.

corporate-benefits.pt

0

Corporate Benefits Portugal operates as a leading European platform providing employee benefit offers and discounts to increase employee satisfaction. The company serves a large client base of over 40,000 companies and 15.6 million users, positioning itself as a market leader with over 21 years of experience. Their business model focuses on B2B services offering customized portals and premium brand discounts to employees. Technically, the website is built on TYPO3 CMS with modern tracking and consent management tools, ensuring GDPR compliance and a good user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

I

IZODOM

izodom.pt

0

IZODOM is a company specializing in the manufacture and sale of building blocks and technology for energy-efficient and passive houses. The website positions the company as a niche leader offering innovative construction solutions such as the IZOClick® system for block connection without mortar, targeting individual customers, contractors, developers, and architects. The company appears to be recently established in 2024 with a medium-sized operational scale and international presence indicated by multiple language options and partner domains. Technically, the website is built on WordPress with Elementor and uses modern libraries like Swiper.js and jQuery, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced and secure forms, but lacks advanced security headers and explicit privacy and terms policies, which are compliance gaps. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

C

Cision

cision.pt

0

Cision Portugal operates as a regional branch of the global Cision brand, providing cloud-based communications and PR solutions. The company offers a comprehensive suite of services including PR software, media monitoring, content distribution via PR Newswire, social listening, and analytics. Their target audience includes PR professionals, marketers, and communication teams seeking to enhance media relations and brand reputation. The website demonstrates a mature digital infrastructure built on Adobe Experience Manager, integrating modern web technologies and analytics tools to deliver a professional user experience. Privacy and cookie compliance are well addressed with clear policies and consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site reflects a reputable, enterprise-level media technology provider with strong market positioning and consistent branding.

T

Team Zones.sk

cotacao-euro.pt

0

Cotacao-Euro.pt is a Portuguese language website providing daily updated currency exchange rates, historical data, and a currency converter tool, primarily sourcing data from the European Central Bank. The site targets individuals and businesses interested in currency exchange information, offering a niche service with a focus on the Portuguese market. The business appears to be small-sized, founded in 2016, and operated by Team Zones.sk. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, Google Fonts, Google Tag Manager, Google Adsense, and Facebook SDK. The site is mobile optimized with good navigation and content relevance. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks some security headers and comprehensive privacy documentation. Advertising and analytics are implemented via Google and Facebook services, with a cookie consent mechanism in place. Overall, the website is trustworthy and safe, with no adult or questionable content detected.

S

Socomec Portugal

socomec.pt

0

Socomec Portugal is a specialized manufacturer and distributor of electrical energy control, safety, and efficiency equipment focused on low voltage electrical networks. The company operates under the Socomec Group umbrella and targets industrial and commercial energy sectors. The website demonstrates a professional and consistent brand presence with a well-structured product catalog and multi-language support, indicating a mature digital presence. Technically, the site is built on Drupal CMS with modern analytics tools such as Piwik PRO and Microsoft Clarity, and it employs HTTPS with good security practices. However, explicit privacy policies, terms of service, and security incident response information are not readily found, which could be improved to enhance compliance and user trust. Overall, the site is safe, business-focused, and trustworthy with moderate to good technical and security posture.

O

OlivaCreativeFactory

olivacreativefactory.com

0

Oliva Creative Factory is a small business incubator based in São João da Madeira, Portugal, focused on supporting creative talents and proven market projects to build sustainable businesses. The website is built on the Wix platform, leveraging standard Wix technologies and polyfills to ensure compatibility and performance. The site content is primarily in Portuguese and targets entrepreneurs and startups in the creative sector. Technically, the site demonstrates moderate performance and mobile optimization but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS implied and some JavaScript security measures, but lacks explicit security headers and privacy policies. The absence of WHOIS registration data raises concerns about domain legitimacy, impacting overall trust. No contact information or social media presence is evident, limiting direct engagement opportunities. Strategic recommendations include improving transparency with privacy and cookie policies, enhancing security headers, and providing clear contact channels to boost credibility and compliance.

S

Sanjotec

sanjotec.com

0

Sanjotec is a technology and science park based in São João da Madeira, Portugal, focused on supporting entrepreneurship and accelerating technology and creative projects. Positioned in a strongly industrial region, it aims to foster an ecosystem linked to Industry 4.0 and new product development. The website is professionally designed with good content quality and mobile optimization, but lacks critical compliance and security documentation such as privacy policies, cookie consent, and terms of service. The absence of WHOIS registration data raises concerns about domain legitimacy, which should be verified. Technically, the site uses modern web standards but lacks visible security headers and analytics tools. Overall, the security posture is moderate with room for improvement in compliance and transparency.

E

Edubox

edubox.pt

0

Edubox is a Portuguese technology company specializing in the development and implementation of educational software solutions and services for municipalities and schools. Founded in 2010, it has established itself as a reputable provider of integrated management systems, educational resources, and consultancy services. The company maintains a professional online presence with clear branding, contact information, and social media engagement. Technically, the website employs modern JavaScript libraries and tracking tools, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and standard security headers, though there is room for improvement in privacy compliance, particularly regarding cookie consent and incident response disclosures. Overall, Edubox presents a trustworthy and credible business profile with a focus on education technology.

T

Turismo Industrial S. João da Madeira

turismoindustrialsjm.pt

0

Turismo Industrial S. João da Madeira is a small tourism promotion entity focused on industrial heritage tourism in São João da Madeira, Portugal. The website serves as a portal to promote the city's industrial past and cultural tourism offerings, targeting tourists interested in industrial and cultural experiences. The business operates primarily as a local/regional tourism promoter with a focus on heritage and visitor engagement. Technically, the website is built on WordPress using Bootstrap and Font Awesome, with moderate performance and good mobile optimization. It integrates Google Analytics and Facebook tracking for visitor insights but lacks comprehensive privacy and cookie policies, which impacts GDPR compliance. Security posture is moderate with HTTPS enabled but missing important security headers and incident response information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

T

Transtech

transtech.pt

0

Transtech is a Portuguese technology-focused company specializing in qualification, digitalization, innovation, and technological development projects. The website presents a professional and consistent brand image targeting businesses interested in technological innovation and digital transformation. The technical infrastructure uses modern front-end technologies such as Google Fonts, FontAwesome, and popular JavaScript libraries for UI components, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information, which are recommended for improvement. Privacy compliance is minimal, with no visible privacy or cookie policies, which could expose the company to regulatory risks. Overall, the website is functional and professional but would benefit from enhanced security and privacy practices to improve trust and compliance.

P

PortusPark

portuspark.org

0

PortusPark is a well-established network of science and technology parks and incubators serving the northern region of Portugal. Founded in 2007, it operates as a regional leader providing capital participation and advanced services to its member parks and associated companies. The website reflects a professional and consistent brand presence, targeting technology parks, incubators, and related stakeholders in the region. Technically, the site is built on WordPress with common plugins for multilingual support and rich media content, delivering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no privacy or cookie policies are published, indicating room for compliance improvements. Overall, the domain registration data aligns well with the business claims, supporting a high legitimacy score. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing comprehensive privacy and cookie policies to improve compliance and trust.

C

Câmara Municipal de São João da Madeira

cm-sjm.pt

0

The Câmara Municipal de São João da Madeira website serves as the official digital presence of the municipal government of São João da Madeira, Portugal. It provides citizens, investors, and visitors with news, municipal services, event agendas, and transparency information. The site targets local residents and stakeholders interested in municipal affairs and investment opportunities. The business model is that of a government entity focused on public service delivery and community engagement. Technically, the website employs a moderate technology stack including jQuery, slick carousels, and AddThis for social sharing. The site is mobile responsive and offers a good user experience with clear navigation. However, it lacks modern security headers and explicit privacy and cookie policies, which are important for compliance and user trust. From a security perspective, the site uses HTTPS with a valid SSL certificate, but no advanced security headers were detected. There is no visible vulnerability disclosure or incident response information. The absence of privacy and cookie policies indicates a gap in GDPR compliance. No contact emails or phone numbers were explicitly found, limiting direct communication channels. Overall, the website is professional and trustworthy as a government portal but would benefit from enhanced privacy compliance, improved security headers, and clearer contact information to strengthen its security posture and user trust.

P

Portugal Empreende 4.0

ptempreende40.pt

0

Portugal Empreende 4.0 is a Portuguese business ecosystem platform focused on Industry 4.0 entrepreneurship. The website serves as a hub for businesses and entrepreneurs interested in the digital transformation and industrial innovation within Portugal. The platform positions itself as a niche player supporting Industry 4.0 initiatives, targeting Portuguese companies and stakeholders in manufacturing and technology sectors. The website content is professionally presented with a consistent brand identity and good user experience, although it lacks explicit contact and policy information. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript with Google Fonts and icon libraries, delivering moderate performance and good mobile optimization. Security posture is limited due to missing security headers and absence of privacy or cookie policies, which impacts compliance with GDPR and best practices. No incident response or vulnerability disclosure information is provided. WHOIS data confirms the domain is registered since 2019 with consistent registrant information matching the website's Portuguese business focus, supporting legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

C

Catrapum

catrapum.com

0

Catrapum is a Portuguese e-commerce business specializing in the sale of used auto parts for major automotive brands such as Volkswagen, Audi, Toyota, and Mazda. The website offers a catalog of used parts, enabling vehicle owners and drivers to find reliable components for their vehicles. The business appears to be small-sized and focused on the transportation sector, with a market position as a specialized supplier of used auto parts. The website is professionally designed with good content quality and consistent branding, targeting Portuguese-speaking customers primarily, with an English language option available. Technically, the website uses standard web technologies including jQuery and implements HTTPS for secure communication. It employs Google Tag Manager for analytics and tracking, indicating a moderate level of digital maturity. The site is mobile-optimized and has good SEO practices, although accessibility features are basic. However, there is a lack of advanced security headers and no visible privacy or terms of service policies, which are areas for improvement. From a security perspective, the site enforces HTTPS but lacks important security headers and detailed privacy compliance documentation. No critical vulnerabilities were detected in the visible content, but the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. The cookie consent mechanism is present, supporting GDPR compliance to some extent. Overall, while the business and website present a professional front with relevant services, the missing WHOIS data and limited privacy/security policies suggest a moderate risk profile. Strategic improvements in security headers, privacy documentation, and domain registration transparency are recommended to enhance trust and compliance.

G

GoFox - Tecnologias de Informação

ffletter.com

0

FFLetter is an online email marketing platform operated by GoFox - Tecnologias de Informação, targeting businesses and marketers primarily in Portuguese-speaking markets. The platform offers tools for newsletter creation, subscription form integration, campaign analytics, and anti-spam enforcement. The website is professionally designed with clear navigation and mobile optimization, reflecting a mature digital presence. Technically, the site uses established libraries such as jQuery and Swiper.js, integrates Google reCAPTCHA for bot protection, and employs Google Analytics for user tracking. Security posture is solid with HTTPS enforced and anti-spam policies actively monitored using AI, though some improvements in security headers and library updates are recommended. The absence of WHOIS data for the domain is a notable concern, impacting trust and business credibility. Overall, the site is functional, compliant with privacy regulations, and positioned as a niche SaaS provider in the email marketing industry.

G

GoFox - Tecnologias de Informação

gofox.pt

0

GoFox - Tecnologias de Informação is a Portuguese technology company specializing in web design, development, and digital marketing services. With over 20 years of experience and a portfolio exceeding 1200 projects, GoFox positions itself as a trusted partner for businesses seeking tailored web solutions, including mobile applications, e-commerce platforms, and SEO optimization. The company emphasizes strategic vision and technical expertise to deliver measurable results for its clients. Technically, the website demonstrates a mature digital infrastructure leveraging modern technologies such as PHP, Django, React, and mobile development frameworks, hosted likely within the PTisp Partners Network. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a high level of digital maturity. Security-wise, the website employs HTTPS, secure forms with CAPTCHA, and cookie consent mechanisms, though it lacks a publicly stated security policy or incident response contacts. Overall, GoFox exhibits a strong security posture with room for improvement in formal security disclosures. The domain registration data aligns well with the company's claims, reinforcing legitimacy. The website is professional, trustworthy, and compliant with GDPR requirements, making it a reliable digital presence for the business.

C

CULLIGAN PORTUGAL S.A.

culligan.pt

0

Culligan Portugal S.A. is a well-established company specializing in water solutions for residential customers in Portugal. The company offers a range of products including bottled water dispensers, filtration systems, premium faucets, and accessories, emphasizing quality, sustainability, and excellent customer service. The website reflects a professional and consistent brand image, targeting Portuguese-speaking consumers with localized content and services. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Google Analytics, TikTok Pixel, and Facebook Pixel. Security measures include HTTPS enforcement, reCAPTCHA on forms, and a cookie consent mechanism, although a dedicated security policy or incident response information is not present. Overall, the website is accessible, well-structured, and GDPR compliant, with a strong business credibility and trustworthiness profile.

Q&F - Comércio de Automóveis e Acessórios Lda is a Portuguese company founded in 1992 specializing in the commercialization and technical assistance of automotive competition, karting, and performance products. The company represents prestigious brands such as Sparco, Alpinestars, BBS, K&N, and Eibach, serving both individual customers and professional competitors. Their market position is strong within Portugal as a dynamic and innovative player in the automotive racing sector. The website is built on a modern WordPress and WooCommerce infrastructure, utilizing popular plugins like Elementor and Yoast SEO to provide a professional e-commerce experience. The technical infrastructure is solid with good mobile optimization and SEO practices, although performance is moderate. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks published security policies and incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security transparency.

R

Race Ready

raceready.pt

0

Race Ready is a small Portuguese company specializing in the organization and management of historic racing events in the Iberian Peninsula, including Historic Endurance, CSS GROUP1, Troféu Mini, and Fórmula Ford Portugal. The company positions itself as a leader in this niche market, targeting classic car racing enthusiasts and participants. The website is professionally designed using the Wix platform, featuring multilingual support and structured data to enhance SEO and social media presence. However, it lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Technically, the site uses modern web technologies and is hosted on Wix, with moderate performance and good mobile optimization. Security measures include HTTPS enforcement and some script hardening, but security headers and incident response information are absent. Overall, the site is trustworthy but would benefit from enhanced privacy compliance and clearer contact information.

H

Henkel

henkel-life-iberica.pt

0

Henkel Portugal is a leading enterprise in the manufacturing sector, specializing in industrial and consumer products including hair care, laundry detergents, adhesives, sealants, and functional coatings. The website reflects a mature digital presence with a professional design, multi-language support, and clear navigation aimed at both consumers and business clients. The company maintains a strong market position with a focus on sustainability and corporate responsibility. Technically, the site employs a modern technology stack with various JavaScript libraries and analytics tools, hosted likely on a CoreMedia CMS platform. Security posture is solid with HTTPS and Content Security Policy in place, though explicit security and incident response policies are not publicly disclosed. Privacy compliance is partially addressed with a cookie consent mechanism, but a dedicated privacy policy page was not found in the provided content. Overall, the domain registration aligns well with the corporate identity, indicating high legitimacy and trustworthiness.

H

Henkel

henkel.pt

0

Henkel Portugal is a leading enterprise operating in both industrial and consumer goods sectors, specializing in hair care products, laundry detergents, adhesives, sealants, and functional coatings. The website reflects a mature and professional digital presence consistent with a large multinational corporation. The technical infrastructure employs modern JavaScript libraries and frameworks, with a custom CMS likely based on CoreMedia. Security posture is strong with HTTPS enforcement and a comprehensive Content Security Policy, alongside cookie consent mechanisms ensuring GDPR compliance. No critical vulnerabilities or suspicious activities were detected, indicating a secure and trustworthy platform. Overall, the website demonstrates a high level of professionalism and compliance, suitable for its enterprise scale and market position.

T

Tripnbikers

tripnbikers.pt

0

Tripnbikers is a specialized e-commerce retailer focused on motorcycle luggage and accessories, serving primarily the Portuguese market with multiple international domains indicating a broader European presence. The website offers a wide range of products including top cases, side cases, soft luggage, and various motorcycle accessories from well-known brands. The business model is retail e-commerce with secure payment options and after-sales service, positioning itself as a niche player in the motorcycle accessories market. Technically, the website is built on the Magento (OpenMage) platform, utilizing modern web technologies including Google Tag Manager, Google Analytics, Google Ads, and reCAPTCHA for security and marketing automation. The site is mobile optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate with room for improvement. From a security perspective, the site enforces HTTPS, integrates reCAPTCHA, and uses a consent management platform for GDPR compliance. However, explicit privacy and cookie policies are not found in the provided content, and no incident response or security policy pages are available. No critical vulnerabilities or exposed sensitive data were detected. The domain uses privacy protection in WHOIS, which is common and justified for small e-commerce businesses. Overall, the website presents a moderate risk profile with good security posture but gaps in privacy compliance documentation and contact transparency. Strategic improvements in privacy policy publication, contact information disclosure, and accessibility would enhance trust and compliance.

H

House of Rugby: o especialista em râguebi

house-of-rugby.pt

0

House of Rugby is a specialized e-commerce retailer focused on rugby apparel, equipment, and accessories, primarily targeting rugby players and fans in Portugal and possibly French-speaking markets. The website offers official club products, rugby shirts, shoes, and protective gear from well-known brands. The business operates a Magento-based platform with a professional and consistent branding approach. Technically, the site uses modern tracking and advertising technologies including Google Analytics, Google Ads, and Actito for marketing automation. The site is mobile optimized and provides a good user experience with clear navigation. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but lacks explicit security headers and published security policies. Privacy compliance is basic with a consent mechanism present but no visible privacy or cookie policies. Overall, the site appears legitimate and trustworthy but could improve transparency and compliance documentation.

P

Pecheur-Store

pecheur-store.pt

0

Pecheur-Store is an established e-commerce retailer specializing in fishing equipment, including rods, reels, baits, and accessories, targeting fishing enthusiasts primarily in Portugal and other European markets. The website demonstrates a professional and consistent brand presence with a clear product categorization and multi-language support, indicating a mature digital presence. Technically, the site leverages modern technologies such as Google Analytics, Google Ads, reCAPTCHA, and a Magento-based CMS (OpenMage), providing a solid infrastructure for e-commerce operations. Security measures include HTTPS enforcement and CAPTCHA integration, though explicit security headers and detailed privacy documentation are lacking. The absence of visible contact information and privacy policies suggests areas for compliance improvement. Overall, the site is functional, secure, and well-positioned in its niche but would benefit from enhanced transparency and security best practices.

T

Training-Fit : Matériel de Fitness et Musculation

training-fit.pt

0

Training-Fit.pt is an established e-commerce retailer specializing in fitness and muscle-building equipment, targeting fitness enthusiasts and athletes primarily in Portugal with multiple international versions of the site. The website offers a broad range of products including cardio devices, professional fitness equipment, accessories, and sportswear. The business model is retail-focused with an emphasis on fast delivery and secure payment options. The site is professionally designed with consistent branding and clear navigation, supporting a good user experience.

B

Basket-Center

basket-center.pt

0

Basket-Center is a specialized e-commerce retailer focused on basketball equipment and apparel, serving primarily the Portuguese market with an international presence through multiple language-specific domains. The website offers official products from well-known brands such as Mitchell & Ness, Spalding, Adidas, and Wilson, targeting basketball players and fans. The business model centers on online retail with fast delivery and secure payment options, positioning itself as a leading basketball store in Portugal. Technically, the website is built on Magento (OpenMage), integrating modern marketing and analytics tools including Google Analytics, Google Tag Manager, Google Ads, and Actito for marketing automation. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with preloading fonts and optimized assets. Security posture is solid with HTTPS enforced, reCAPTCHA implemented, and a consent management platform for GDPR compliance. However, explicit privacy and cookie policies are not found in the provided content, and no visible contact information for security or incident response is present. Security headers could be enhanced, and a vulnerability disclosure policy is absent. Overall, the website is professional and trustworthy with a good business reputation and technical foundation. Strategic improvements in privacy transparency, security policies, and contact information would enhance compliance and user trust.

D

Direct-Running

direct-running.pt

0

Direct-Running.pt is a professional e-commerce platform specializing in running shoes, sports apparel, and equipment, targeting runners and sports enthusiasts primarily in Portugal and other European markets. The website is part of a broader network of localized domains serving multiple European countries, indicating a well-established retail presence. The business model focuses on online retail with an emphasis on popular brands such as Adidas, Nike, and Saucony, offering fast shipping and secure payment options. Technically, the site is built on Magento (OpenMage), leveraging modern marketing and analytics tools including Google Analytics, Google Ads, and Actito. The site demonstrates good digital maturity with mobile optimization and GDPR-compliant consent mechanisms. Security posture is solid with HTTPS enforced and reCAPTCHA integration, though there is room for improvement in implementing additional security headers and publishing explicit security policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. No blocking or WAF mechanisms were detected, allowing full content access and analysis.

M

Made In Paradis

madeinparadis.pt

0

Made In Paradis is a well-established online retail platform specializing in women's fashion, footwear, and sportswear, offering products from over 300 brands. The website targets female consumers interested in fashion and sports apparel, providing a broad catalog with clear navigation and a professional design. The business operates primarily in Portugal with a physical presence in France for after-sales service, indicating a cross-border retail operation. Technically, the site is built on the Magento (OpenMage) platform, integrating modern marketing and analytics tools such as Google Analytics, Google Ads, and Actito. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the website enforces HTTPS, uses Google reCAPTCHA for bot protection, and manages cookie consent in compliance with GDPR. However, it lacks explicit security headers and a public vulnerability disclosure policy. Overall, the site is trustworthy, professional, and compliant with privacy regulations, with room for security enhancements.