Security Directory

R

Real Betis Balompié

realbetisbalompie.es

0

Real Betis Balompié operates an official website serving as the primary digital platform for the Spanish football club. The site offers comprehensive club information, news updates, match schedules, ticket sales, merchandise, and fan engagement services. It maintains a strong presence across multiple social media platforms and integrates media streaming services for TV and radio content. The website targets football fans and supporters, providing a professional and content-rich experience aligned with the club's brand and market position in Spanish and European football. Technically, the site uses a modern JavaScript stack including jQuery, Google Tag Manager, and OneTrust for cookie compliance, delivering a mobile-optimized and SEO-friendly experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be enhanced. No blocking or WAF interference was detected, allowing full content accessibility. Overall, the website demonstrates a mature digital infrastructure supporting the club's business and fan engagement objectives.

RCD Mallorca's official website serves as the primary digital platform for the professional football club based in Mallorca, Spain. It offers comprehensive information about the club, including team rosters, schedules, ticket sales, merchandise, and fan engagement opportunities. The site targets football fans and stakeholders interested in the club's activities and events. The business model revolves around sports entertainment, fan engagement, and e-commerce through ticketing and merchandise sales. Technically, the website is built using modern web technologies such as React and Next.js, ensuring a responsive and dynamic user experience. Integration with multiple analytics and marketing platforms like Google Tag Manager, TikTok Pixel, and Facebook Pixel indicates a mature digital marketing strategy. The site includes a cookie consent mechanism compliant with EU regulations, although explicit privacy and terms of service pages are not clearly identified. From a security perspective, the site enforces HTTPS and uses cookie consent tools, but lacks visible security headers and explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable due to registry restrictions, which is common for .es domains and does not detract from the site's legitimacy. Overall, the website presents a professional and trustworthy front for RCD Mallorca, with room for improvement in security headers, privacy disclosures, and contact transparency to enhance compliance and user trust.

R

RCD Espanyol de Barcelona

rcdespanyol.com

0

RCD Espanyol de Barcelona operates an official website serving as the primary digital platform for the historic football club founded in 1900. The site provides information, news updates, membership services, and ticket sales targeting football fans and club members. The website demonstrates a moderate level of digital maturity with integration of modern tools such as Google Tag Manager, reCAPTCHA, and Cookiebot for analytics, security, and privacy compliance respectively. The site is mobile optimized and presents consistent branding aligned with the club's identity. However, the absence of WHOIS registration data and lack of explicit privacy and terms of service policies indicate areas for improvement in transparency and compliance. Security posture is generally good with HTTPS enforced and use of anti-bot measures, but missing security headers and incident response contacts reduce overall security maturity. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact information for users and security incidents.

R

RC Celta

rccelta.es

0

RC Celta's official website serves as the primary digital platform for the professional football club, providing fans with news, ticket purchasing options, and club-related services. The site targets supporters and stakeholders interested in the club's activities and offerings. The business model centers on fan engagement and service provision through digital channels, positioning RC Celta as a recognized entity in the sports media sector within Spain. Technically, the website is built on WordPress CMS, leveraging popular plugins such as Yoast SEO and WPBakery Page Builder to enhance content management and SEO performance. Integration with Google Tag Manager, Google Analytics, and Cookiebot demonstrates a mature approach to analytics and privacy compliance. The site is mobile-optimized and exhibits good design and navigation clarity, supporting a positive user experience. From a security perspective, the website enforces HTTPS and includes several security headers, alongside the use of Google reCAPTCHA to mitigate bot activity. Cookie consent mechanisms comply with GDPR requirements, reflecting a commitment to privacy. However, the absence of explicit terms of service, security policy, and incident response contact information represents gaps in the security posture that could be addressed to enhance trust and compliance. Overall, the website is professional, trustworthy, and well-structured, with minor areas for improvement in security transparency and contact availability. The domain registration aligns with the club's identity, reinforcing legitimacy. Strategic recommendations include publishing comprehensive legal and security policies, enhancing accessibility, and establishing clear incident response channels.

Girona FC operates an official website serving as the primary digital presence for the professional football club based in Spain. The site offers comprehensive club-related content including news, match schedules, ticket sales, and merchandising. It targets football fans and supporters, positioning itself as a key platform for engagement and commerce related to the club. Technically, the website leverages modern web frameworks such as Next.js and React, integrates Google Analytics and Tag Manager for analytics, and employs OneTrust for cookie consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and appropriate security headers in place, though the absence of explicit privacy and terms of service pages and missing WHOIS data slightly reduce trust. Overall, the site is professional, well-branded, and user-friendly, but could improve transparency and compliance documentation.

Getafe CF operates an official website serving as the primary digital platform for the Spanish football club. The site provides comprehensive information including news, match results, ticket sales, merchandise, and club history, targeting fans and supporters. The website demonstrates a good level of digital maturity, utilizing modern web technologies such as Next.js and React, with integration of third-party services for analytics and cookie consent management. The hosting infrastructure appears to leverage Microsoft Azure Blob Storage for static assets, ensuring reliable content delivery. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not clearly published. The absence of WHOIS registration data raises questions about domain registration status, but the presence of official branding and social media links supports legitimacy. Overall, the website is professional, user-friendly, and compliant with GDPR requirements, though improvements in security transparency and domain registration verification are recommended.

F

FC Barcelona

fcbarcelona.com

0

FC Barcelona's official website serves as a comprehensive digital platform for one of the world's leading football clubs. It offers extensive content including news, ticket sales, membership services, and multimedia content, targeting a global audience of football fans and club supporters. The site demonstrates a mature digital infrastructure with modern technologies such as Adobe Launch, Google Tag Manager, and progressive web app features, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and secure user authentication mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a professional, trustworthy, and well-branded presence consistent with FC Barcelona's global stature.

D

Deportivo Alavés

deportivoalaves.com

0

Deportivo Alavés operates an official website primarily targeting football fans and supporters, providing information about matches and club activities. The website is built using modern web technologies such as Angular and integrates Google Tag Manager and Cookiebot for analytics and cookie consent management. The hosting infrastructure is based on Amazon AWS, ensuring reliable performance and scalability. While the site demonstrates good design quality and mobile optimization, it lacks visible privacy and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with HTTPS implied but no explicit security headers detected. The domain registration is consistent and long-standing, supporting the legitimacy of the site. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures.

C.D. Leganés is a sports organization with an official website serving as the primary digital platform for fans and stakeholders. The site provides comprehensive information about the club, including news, team rosters, schedules, ticketing, merchandise, and fan engagement. The website targets sports enthusiasts and club members primarily in Spain. Technically, the site is built using modern web technologies such as Next.js and integrates analytics tools like Google Tag Manager and TikTok Analytics. It also implements a cookie consent mechanism, reflecting some level of privacy compliance. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit security policies. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or data unavailability, which slightly impacts trustworthiness. Overall, the website is professional, user-friendly, and technically sound but would benefit from enhanced transparency and security documentation.

Club Atlético Osasuna operates an official website serving as the primary digital platform for fan engagement, news dissemination, and merchandising related to the football club. The site targets football enthusiasts and supporters primarily in Spain, reflecting the club's established position in La Liga. The business model focuses on sports content delivery, ticketing, and advertising revenue streams. Technically, the website leverages modern web technologies including React and Next.js, supported by Amazon CloudFront CDN for content delivery. The site integrates Google Tag Manager and Cookiebot for analytics and privacy compliance, respectively. Security posture is strong with HTTPS enforced and standard security headers inferred, though explicit security policies and incident response information are absent. Privacy compliance is robust with a comprehensive cookie consent mechanism and linkage to Cookiebot's privacy policy, indicating GDPR adherence. However, the absence of visible contact details and terms of service pages slightly detracts from business credibility. Overall, the website is professional, well-branded, and trustworthy, with room for improvement in transparency and accessibility.

A

Athletic Club

athletic-club.eus

0

Athletic Club operates a comprehensive official website serving as the primary digital presence for the historic football club based in Bilbao, Spain. The site offers extensive content including latest news, team rosters, ticket sales for matches and tours, official merchandise stores, and membership information. It targets football fans, club members, and tourists interested in the club's activities and heritage. The business model revolves around fan engagement, ticketing, merchandising, and exclusive experiences, positioning Athletic Club as a prominent sports entity with a large and loyal audience. Technically, the website leverages modern web technologies such as the Astro framework, Google Tag Manager, Microsoft Clarity, and Cookiebot for analytics and privacy compliance. The site is well-optimized for mobile devices, features good accessibility practices, and maintains strong SEO fundamentals. Performance is fast, and the site structure supports multilingual content in Spanish, Basque, and English, enhancing its reach. From a security perspective, the site enforces HTTPS with excellent SSL configuration and implements multiple security headers to protect users. Privacy compliance is robust with clear cookie consent mechanisms and a comprehensive privacy policy. However, there is a lack of publicly available security policies or incident response contacts, which could be improved to enhance transparency and trust. Overall, Athletic Club's website demonstrates a mature digital presence with strong business credibility and security posture. The domain is privacy protected, which is typical and justified for this type of organization. The site is trustworthy, professional, and well-maintained, supporting the club's brand and operational goals effectively.

L

LALIGA

laliga.com

0

LALIGA is the official governing body and organizer of the top professional football leagues in Spain, including LALIGA EA SPORTS, LALIGA HYPERMOTION, and Liga F. The website serves as a comprehensive platform providing schedules, results, standings, news, statistics, and multimedia content to football fans and sports professionals worldwide. It maintains a strong market position as a leading football league with extensive international reach and fan engagement initiatives. Technically, the website is built on modern web technologies including React and Next.js, ensuring fast performance, mobile responsiveness, and good accessibility. It integrates third-party services such as Zeotap for marketing and Google Tag Manager for analytics, alongside a robust cookie consent mechanism to comply with privacy regulations. From a security perspective, the site enforces HTTPS, employs multiple security headers, and avoids exposing sensitive data. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent management. Overall, the website demonstrates a high level of professionalism, trustworthiness, and digital maturity, supporting LALIGA's brand as a reputable sports organization. Strategic recommendations include enhancing security transparency, publishing vulnerability disclosure policies, and providing direct security contact channels to further strengthen trust and compliance.

LEVEL is a medium-sized Spanish airline specializing in direct flights between Barcelona and various destinations in America. The company targets travelers seeking affordable and convenient transatlantic flights, leveraging a low-cost business model. The website reflects a professional and consistent brand image, offering key services such as flight booking, check-in, and travel-related accommodations through partners. Technically, the site employs modern web technologies including React and Bootstrap, hosted on Azure Front Door, with integrations for marketing and analytics via Google Tag Manager and Flocktory. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user trust and regulatory adherence. Overall, the website is well-structured, user-friendly, and trustworthy, with clear contact information and social media presence enhancing credibility.

Soluciones Corporativas IP SL is a small Spanish technology company specializing in connectivity, internet presence, and content solutions through its multi-brand structure including MrDomain, ConectaBalear, and MediaBalear. The company targets businesses and consumers in the Balearic Islands region, offering domain registration, hosting, internet connectivity, and content network services. The website reflects a professional and consistent brand image with clear navigation and good content quality. Technically, the site uses a traditional JavaScript stack with jQuery and Matomo analytics, but lacks modern security headers and explicit cookie consent mechanisms. Security posture is moderate with HTTPS enforced but no advanced policies or incident response information published. WHOIS data is privacy protected, which is common but reduces transparency. Overall, the website is functional and credible but could improve privacy compliance and security practices.

S

Servicio Riojano de Salud

riojasalud.es

0

Rioja Salud is the official health service portal for the La Rioja region in Spain, operated under the regional government. It provides comprehensive health-related information, services for citizens such as medical appointment scheduling, and resources for healthcare professionals. The website serves as a central hub for public health communication, institutional news, and access to various health programs and plans. The target audience includes citizens, healthcare professionals, and government stakeholders. The business model is a public service funded and managed by the regional government, positioning itself as the primary health information and service provider in the region. Technically, the website is built on Joomla CMS and utilizes a variety of JavaScript libraries including jQuery, Smart Slider 3, and FontAwesome to enhance user experience. The site is mobile-optimized with good navigation and accessibility features, though some improvements could be made. Performance is moderate with proper use of HTTPS and modern web standards. SEO and metadata are well implemented, supporting good discoverability. From a security perspective, the site enforces HTTPS and does not expose sensitive data in its HTML content. However, explicit security headers are not detected, and there is no visible cookie consent mechanism, which could be improved for GDPR compliance. No vulnerabilities or suspicious elements were found in the content. The WHOIS data confirms the legitimacy of the domain as a government entity with consistent registration information. Overall, Rioja Salud presents a trustworthy, professional, and functional website that effectively serves its public health mission. Strategic recommendations include implementing cookie consent, enhancing security headers, and publishing security policies to further strengthen compliance and user trust.

T

Turismo de Galicia

turismo.gal

0

Turismo de Galicia operates as the official regional tourism authority for Galicia, Spain, providing comprehensive tourist information, trip planning tools, and cultural event details. The website is well-positioned as a trusted source for visitors, supported by official government branding and a broad multilingual offering. Technically, the site employs a mature technology stack including jQuery, Google Analytics, Microsoft Clarity, and Queue-it for traffic management, with a CMS likely based on Liferay. Security posture is strong, with HTTPS enforced, reCAPTCHA protections on forms, and no evident vulnerabilities or exposed sensitive data. Privacy compliance is evident through clear cookie and privacy policies with consent mechanisms. Overall, the site demonstrates a high level of professionalism, trustworthiness, and user experience.

X

Xunta de Galicia

xunta.es

0

Xunta de Galicia operates the official regional government portal for Galicia, Spain, providing comprehensive information, public services, and resources to citizens, businesses, and public employees. The website serves as a central hub for government news, electronic services, and institutional information, reflecting its role as a key government entity. The site is well-branded, consistent, and targets a broad audience interested in regional governance and services. Technically, the site leverages a modern tech stack including Liferay CMS, React, jQuery, and Bootstrap, ensuring a responsive and accessible user experience. Analytics and event tracking are implemented with user consent, supporting data-driven insights while respecting privacy regulations. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. WHOIS data confirms the domain's legitimacy, registered directly to Xunta de Galicia without privacy protection, reinforcing trust. Overall, the site is professional, secure, and compliant, serving as a reliable government resource.

C

CREAME

crea.me

0

CREAME is a small Spanish digital design company specializing in conversion rate optimization (CRO) and development solutions using WordPress, WooCommerce, and WhatsApp integrations. Their market position is niche-focused, targeting businesses seeking to grow through digital solutions. The website is professionally designed with good content quality, clear navigation, and mobile optimization. Technically, it leverages WordPress with Elementor, uses modern fonts and scripts, and integrates third-party tools like Joinchat for customer engagement. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. Overall, the site is trustworthy and compliant with GDPR, with clear legal and cookie policies.

U

UNIBASQ

unibasq.eus

0

UNIBASQ is the official Basque University System Quality Agency, responsible for accreditation, evaluation, and quality assurance of higher education institutions and staff in the Basque Country. The agency holds recognized memberships in major European and international quality assurance networks, reinforcing its authoritative position in the education sector. The website serves as an information portal for universities, academic staff, and stakeholders, providing access to accreditation processes, evaluation calls, publications, and international cooperation projects. Technically, the site is built on WordPress using the Divi theme, leveraging modern web technologies and offering good mobile responsiveness and user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be enhanced. Overall, the site reflects a professional, trustworthy, and well-maintained digital presence aligned with its governmental and educational mission.

X

Xunta de Galicia

xunta.gal

0

Xunta de Galicia operates as the official regional government portal for the autonomous community of Galicia, Spain. The website serves as a comprehensive platform providing government information, public services, news updates, and access to various consellerías and e-services. It targets citizens, businesses, and public sector employees, offering a well-structured and multilingual user experience. The business model is focused on public service delivery and information dissemination, positioning itself as a key government resource in the region. Technically, the website leverages a mature technology stack including Liferay CMS, Bootstrap, React, and various JavaScript libraries such as jQuery and VideoJS. The site demonstrates good digital maturity with responsive design, accessibility features, and SEO optimization. Performance is moderate, with asynchronous loading of analytics and other scripts enhancing user experience. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms, and avoids exposing sensitive data. While explicit security headers are not fully visible in the HTML, the overall posture is strong with no detected vulnerabilities or blocking mechanisms. Privacy compliance is robust, with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a high level of professionalism, trustworthiness, and business credibility. The domain registration data aligns with the official government entity, reinforcing legitimacy. Strategic recommendations include enhancing visible security headers, maintaining updated third-party libraries, and improving incident response contact visibility to further strengthen security and compliance.

G

Gobierno de Navarra

navarra.es

0

The website navarra.es serves as the official digital portal for the Gobierno de Navarra, providing comprehensive information, services, and electronic procedures to citizens and residents of the Navarra region in Spain. It holds a strong market position as the authoritative government source, offering key services such as tax information, employment opportunities, health services, and citizen attention. The site targets a broad audience including individuals, businesses, and public sector stakeholders within the region. Technically, the site is built on the Liferay CMS platform, leveraging modern web technologies including Bootstrap, jQuery, and Alloy UI. It integrates multiple analytics platforms such as Google Analytics, Matomo, and Quantum Metric to monitor user interactions and improve service delivery. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with excellent SSL configuration and employs standard security best practices. However, it lacks visible security policies, incident response contacts, and a cookie consent mechanism, which are important for compliance and user trust. No critical vulnerabilities or exposed sensitive data were detected. Overall, navarra.es is a well-maintained government portal with high trustworthiness and professional presentation. Strategic improvements in privacy compliance and security transparency would further enhance its posture and user confidence.

X

Xunta de Galicia

contratosdegalicia.gal

0

The website contratosdegalicia.gal is the official public procurement portal for the Xunta de Galicia, the regional government of Galicia, Spain. It serves as a centralized platform for publishing public contracts, preliminary consultations, and announcements relevant to public sector entities and bidders within the region. The portal offers comprehensive search functionalities, documentation, and access services tailored to both contracting authorities and prospective contractors. Its market position is that of an essential government service, providing transparency and regulatory compliance in public procurement processes. Technically, the website employs a modern technology stack including Bootstrap for responsive design, jQuery for interactivity, and integrates Google Tag Manager and reCAPTCHA v3 for analytics and bot protection respectively. The site is mobile-optimized with good navigation clarity and SEO practices, although accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS with an excellent SSL configuration and uses reCAPTCHA to mitigate automated abuse. However, it lacks some advanced security headers and does not publicly expose a vulnerability disclosure policy or security.txt file. Contact information for incident reporting is provided, and the site displays ENS certification, indicating adherence to Spanish National Security Scheme standards. Overall, the website demonstrates a strong business credibility as an official government portal with consistent branding and trust indicators. Privacy compliance is moderate, with a privacy policy likely available on legal pages but no visible cookie consent mechanism on the main page. There are no signs of blocking or WAF interference, allowing full content access and analysis.

C

Comunidad de Madrid

comunidad.madrid

0

The Comunidad de Madrid website serves as the official digital portal for the regional government of Madrid, Spain. It provides segmented thematic information relevant to citizens, including services, news, government actions, and digital administration tools. The site targets residents, businesses, tourists, and media, positioning itself as a comprehensive government resource with a strong market presence in the public sector. Technically, the website is built on Drupal CMS with modern JavaScript libraries such as jQuery, Owl Carousel, and Video.js, and uses Matomo for privacy-conscious analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. The infrastructure appears stable and professionally maintained. From a security perspective, the site enforces HTTPS with excellent SSL configuration and employs standard security best practices. However, it lacks some advanced security headers and does not publicly disclose a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a minor gap. Overall, the website is trustworthy, professional, and well-aligned with its government role. Strategic improvements include implementing explicit cookie consent, publishing security and incident response policies, and adding vulnerability disclosure information to enhance transparency and user trust.

Gobierno de La Rioja operates an official regional government website serving the citizens and public employees of La Rioja, Spain. The site provides comprehensive information on government actions, public services, transparency, and citizen engagement. It is positioned as the authoritative source for regional government information and services, targeting a broad audience including citizens, businesses, and public sector workers. The business model is that of a public sector portal offering digital access to government resources and services. Technically, the website is built on Joomla CMS with Bootstrap and common JavaScript libraries such as jQuery and Font Awesome. The site demonstrates moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though accessibility could be improved. The site uses HTTPS with a good SSL configuration but lacks explicit security headers. Privacy and cookie policies are present and indicate GDPR compliance. From a security perspective, the site enforces HTTPS and uses secure cookies with a cookie consent mechanism. However, it uses an older version of jQuery which may have vulnerabilities, and no explicit security policy or incident response contacts are published. No WAF or blocking mechanisms are detected, and no exposed sensitive data or critical vulnerabilities are visible. Overall, the website is professional, trustworthy, and well-maintained with a strong focus on transparency and citizen services. Strategic improvements in security headers, library updates, and publishing security policies would enhance its security posture and compliance.

E

Eusko Jaurlaritza - Gobierno Vasco

euskadi.eus

0

Euskadi.eus is the official web portal of the Basque Government (Eusko Jaurlaritza), serving as a comprehensive platform for disseminating government information, public procedures, and services to citizens. The portal targets residents and public administration users in the Basque Country, providing access to employment offers, official gazettes, electronic headquarters, and other government-related resources. The website is well-branded, consistent, and professionally maintained, reflecting its status as a government entity. Technically, the site employs modern web technologies including JavaScript, Google Tag Manager, and Google Analytics, with a custom CMS platform developed by EJIE, S.A. The site is mobile-optimized, accessible, and SEO-friendly, ensuring good user experience and reach.

The Plataforma de Serveis de Contractació Pública (PSCP) is an official government platform operated by the Generalitat de Catalunya, providing comprehensive services and information related to public procurement in Catalonia. It serves public sector entities and companies interested in participating in public contracts, offering tools such as electronic bidding, document creation, and subscription services. The platform is well-positioned as the authoritative source for public contracting in the region. Technically, the website is built using modern web technologies including Angular 18.2.8 and Bootstrap, with integrated Piwik PRO analytics for user tracking under a consent management framework. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience. Hosting and analytics are managed within the Generalitat de Catalunya's infrastructure, enhancing trust and control. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms with accessibility considerations. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the platform exhibits a strong security posture and business credibility consistent with its government affiliation. Strategic recommendations include publishing detailed security and incident response policies, implementing a vulnerability disclosure program, and maintaining regular security audits to uphold trust and compliance.

E

Engage-Adrian S.L.

engageadrian.com

0

Engage-Adrian S.L. is a small design agency specializing in integrated design and visual solutions, primarily serving the financial services and fintech sectors. Their website showcases a portfolio of projects and case studies, emphasizing user experience and visual design tailored to financial clients. The company positions itself as a niche provider with a focus on building trust through design in the financial industry. Technically, the website is built on WordPress using the Enfold theme, incorporating modern web technologies such as Google Fonts, jQuery, and Lottie animations. The site is mobile optimized and has moderate performance. Security-wise, the site uses HTTPS with Google Analytics configured for IP anonymization and includes a cookie consent mechanism. However, it lacks explicit privacy policies, terms of service, security headers, and vulnerability disclosure information, which are important for compliance and trust. Overall, the website is professional and functional but could improve its privacy and security posture to enhance user trust and regulatory compliance.

D

Dirección General del Patrimonio del Estado

contrataciondelestado.es

0

The Plataforma de Contratación del Sector Público is an official Spanish government platform managed by the Dirección General del Patrimonio del Estado under the Ministry of Hacienda y Administraciones Públicas. It serves as the primary digital portal for public sector contracting in Spain, providing services such as publication of tenders, contractor profiles, and access for public bodies and companies. The platform integrates regional contracting portals, enhancing its reach and utility across Spain's autonomous communities and local entities. Technically, the site is built on a Java EE-based custom platform with standard web technologies, offering good mobile responsiveness and accessibility. Security posture is moderate with HTTPS usage and secure form handling, though explicit security headers are not evident and should be reviewed. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, though no explicit cookie consent mechanism was detected. Overall, the site is professional, trustworthy, and well-positioned as a government service platform.

F

Fundació Catalunya La Pedrera

fundaciocatalunya-lapedrera.com

0

Fundació Catalunya La Pedrera is a well-established non-profit organization based in Spain, focused on social betterment through programs in inclusive employment, dignified aging, scientific and cultural talent promotion, sustainability, and healthy nutrition. The website is professionally designed using Drupal 8, with good mobile optimization and accessibility features. It employs Google Tag Manager for analytics and marketing, and has a clear cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS and no visible vulnerabilities, though formal security and incident response policies are absent. Contact is primarily via web forms, with no direct emails or phone numbers published. Social media presence is active across major platforms, enhancing trust and outreach.

B

Barcelona Supercomputing Center

bsc.es

0

Barcelona Supercomputing Center (BSC) is a leading public research consortium in Spain specializing in high performance computing (HPC). The organization provides supercomputing resources, conducts advanced research, and facilitates technology transfer to industry. Their market position is strong within the European HPC ecosystem, supported by recognized excellence certifications such as Severo Ochoa and HR Excellence in Research. The website targets researchers, academic institutions, industry partners, and students, offering services including access to the MareNostrum supercomputer, research projects, and educational programs. Technically, the website is built on Drupal 7 with a mature technology stack including jQuery, Shadowbox, and Google reCAPTCHA. Analytics are implemented via Google Analytics and Piwik/Matomo, with a clear cookie consent mechanism in place. The site is mobile optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and use of CAPTCHA on forms, though some security headers could be improved. Overall, the security posture is good with no critical vulnerabilities detected. Privacy compliance is strong, featuring comprehensive privacy and cookie policies with GDPR alignment. The domain registration details are consistent with the organization's identity and history, reinforcing trustworthiness. Strategically, BSC should enhance security headers, maintain up-to-date CMS versions, and consider publishing a vulnerability disclosure policy to further strengthen security culture and transparency.

I

IBP Digital

ibpdigital.com

0

IBP Digital is a Spanish digital agency specializing in comprehensive 360-degree digital marketing, branding, and web development services. The company positions itself as a partner for businesses seeking to enhance their online presence through strategic branding, SEO/SEM, and tailored web solutions. The website content is professionally crafted in Spanish, targeting businesses and brands looking for expert digital growth solutions. Technically, the site is built on WordPress with Elementor and integrates modern marketing and analytics tools such as HubSpot, Google Analytics, Hotjar, and Facebook Pixel, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data, although some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a legitimate, professional business with a good market position in the Spanish digital marketing sector.

S

Soluciones Corporativas IP, SL

mrdomain.com

0

MrDomain, operated by Soluciones Corporativas IP, SL, is a well-established domain registration and web hosting provider founded in 2006. The company offers a comprehensive suite of services including domain registration, web hosting, email accounts, SSL certificates, and reseller programs. Positioned as a trusted player in the technology sector, MrDomain targets individuals and businesses seeking reliable digital presence solutions, supported by over 15 years of industry experience and recognized certifications such as ICANN accreditation and Sectigo partnership. The website reflects a professional and user-friendly design with clear navigation and mobile optimization, enhancing user experience and accessibility. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and JSON-LD structured data for SEO and social media integration. The site is performant with moderate loading speeds and excellent mobile responsiveness. Security is robust with HTTPS enforced and secure form practices, although there is room for improvement in security headers and explicit security policy disclosures. Analytics are handled via Matomo, indicating a moderate level of user tracking with some privacy considerations. From a security standpoint, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. However, the absence of a cookie consent mechanism and a dedicated security policy page suggests partial privacy compliance. Incident response is addressed through an abuse policy page, but more explicit contact channels for security incidents could enhance readiness. The WHOIS data confirms domain legitimacy, consistent registrant information, and appropriate domain age aligning with the company’s history. Overall, MrDomain presents a credible and professional online presence with strong business credibility and technical maturity. Strategic enhancements in privacy compliance and security transparency would further strengthen its security posture and regulatory adherence.

S

Spainmedia

nautikmagazine.es

0

Nautik Magazine is a specialized online media portal operated by Spainmedia, focusing on the blue economy and nautical lifestyle in Spain. It leverages the Forbes brand to position itself as a niche publication delivering news, interviews, and lifestyle content related to maritime topics. The website targets enthusiasts and professionals interested in nautical events, boats, and related economic sectors. Monetization is primarily through advertising and branded content, supported by a newsletter subscription service. Technically, the site is built on WordPress with modern SEO and consent management tools, ensuring compliance with GDPR and providing a good user experience across devices. Security posture is solid with HTTPS and consent frameworks, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and well-integrated within its parent company’s media ecosystem.

H

HIGHXTAR.

highxtar.com

0

HIGHXTAR is a Spanish-language digital media platform specializing in fashion, streetwear, music, and lifestyle content targeting the Latin urban audience. The website is professionally designed with excellent content quality and strong branding consistency. It offers a variety of articles, news, and multimedia content, supported by a membership model and newsletter subscriptions. Technically, the site is built on WordPress with modern SEO and analytics tools, including Google Analytics, Google Tag Manager, and OneSignal for push notifications. The site demonstrates good GDPR compliance with integrated consent management platforms and cookie policies. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. WHOIS data confirms domain legitimacy with consistent registrant information and appropriate domain age. Overall, HIGHXTAR presents as a credible and professional media outlet with a mature digital infrastructure.

T

Tapas Magazine

tapasmagazine.es

0

Tapas Magazine is a well-established Spanish online media publication specializing in gastronomy, lifestyle, and travel content. It holds a strong market position as a national award-winning gastronomy magazine and is part of the SpainMedia group. The website demonstrates a mature digital infrastructure using WordPress CMS, enhanced with SEO and performance optimization plugins, and integrates advanced consent management for GDPR compliance. Advertising is managed through reputable networks such as Google Ad Manager and InMobi, ensuring monetization while respecting user privacy. Security posture is solid with HTTPS enforcement and consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for user experience and search engines.

S

SPAINMEDIA

spainmedia.es

0

SpainMedia is a Spanish media company specializing in publishing influential magazines such as Forbes Spain and Tapas Magazine. The company targets Spanish-speaking audiences interested in brands, influence, and data-driven marketing. Their business model revolves around media publishing and brand influence services, positioning themselves as a recognized media entity in Spain. The website reflects a professional digital presence with consistent branding and clear contact information. Technically, the site is built on WordPress with WooCommerce and uses modern analytics and consent management tools, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses Google reCAPTCHA, and implements GDPR consent mechanisms, though it lacks explicit security policies and vulnerability disclosure information. Overall, the website is trustworthy and professionally maintained, with room for improvement in security transparency and incident response readiness.

O

ONiAd

oniad.com

0

ONiAd is a Spanish-based digital advertising software company specializing in omnichannel programmatic advertising solutions including DOOH, audio, video, native, and contextual advertising. The company positions itself as a technology-driven platform connecting brands with their audiences across multiple devices and channels. The website demonstrates a mature digital infrastructure leveraging WordPress with Elementor, Yoast SEO, and WP Rocket for performance and SEO optimization. Security posture is good with HTTPS enforced and partial CSP implementation, though some improvements are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Business credibility is supported by client testimonials, university usage, and EU funding disclosures. Overall, ONiAd presents a professional and trustworthy digital presence with room for enhanced security policies and incident response transparency.

U

Unidad Editorial Información Económica S.L.

expansion.com

0

Expansion.com is a leading Spanish-language economic news portal operated by Unidad Editorial Información Económica S.L., providing comprehensive market data, economic news, opinion pieces, and premium subscription content. The website demonstrates a mature digital infrastructure with extensive use of modern advertising and analytics technologies, including Google Tag Manager, Prebid.js, and Amazon APS, ensuring effective monetization and user engagement. Security posture is strong with enforced HTTPS, content security policies, and robust consent management mechanisms, although explicit security and incident response policies are not publicly available. Overall, the site presents a professional, trustworthy, and well-maintained platform with high-quality content and user experience.

F

Forbes

forbes.es

0

Forbes España operates as a leading Spanish-language business media platform delivering high-quality content focused on business, entrepreneurship, lifestyle, and finance. It maintains a strong market position supported by its parent company SpainMedia and multiple subsidiary media brands. The website demonstrates a mature digital infrastructure leveraging WordPress CMS, WooCommerce for e-commerce, and advanced tracking and advertising technologies with GDPR-compliant consent management. Security posture is robust with HTTPS enforcement and consent frameworks, though explicit security policies and incident response channels are not publicly disclosed. Overall, the site presents a professional, trustworthy, and user-friendly experience with comprehensive content and strong branding.

P

Payflow Digital Inc Sucursal en España

payflow.es

0

Payflow Digital Inc Sucursal en España operates Payflow, a leading financial wellness platform that empowers employees to access their earned wages instantly and manage flexible compensation through a mobile application. The company targets employers and employees in Spain and Latin America, offering a comprehensive suite of services including Payflow (earned wage access), Learnflow (financial education), Saveflow (automated savings), and Flexflow (flexible compensation card). With over 1,000 companies as clients and multiple awards, Payflow holds a strong market position in the financial technology sector. Technically, the website is built on Webflow CMS, leveraging modern web technologies such as Google Analytics, Google Tag Manager, Lottie animations, and AWS S3 for video hosting. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. Security practices include HTTPS enforcement, ISO 27001 certification, a registered Data Protection Officer, and cookie consent mechanisms, although some security headers could be improved. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust with comprehensive privacy and cookie policies aligned with GDPR. Contact information is available via phone and contact forms, and social media presence is active across major platforms. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, Payflow demonstrates a mature digital presence with strong business credibility, technical infrastructure, and security practices, positioning it well for continued growth and trust in the financial wellness market.

XIPTIC is a specialized technology company focused on providing access control and presence management solutions for businesses. Their offerings include a wide range of hardware terminals integrated with proprietary software adaptable to various projects. The company targets enterprises requiring biometric and RFID-based security and attendance systems. The website reflects a professional presence with clear business descriptions, product showcases, and multilingual support (Spanish and Catalan). Technically, the site is built on WordPress with modern plugins for SEO, cookie management, and interactive content such as sliders and galleries. While HTTPS is properly implemented, some security headers are missing, and the Google Analytics plugin is installed but not configured, indicating room for improvement in analytics and security posture. Privacy compliance is well addressed with comprehensive cookie and privacy policies and a consent mechanism. Contact information is available primarily via phone and contact page, but no direct emails or physical addresses are disclosed. Overall, the site demonstrates a moderate to good level of digital maturity and business credibility.

G

GTD System & Software Engineering

gtd.eu

0

GTD System & Software Engineering is a medium-sized, established technology company founded in 1987, specializing in the design, integration, and operation of complex, mission-critical software and systems for sectors including space, defense, science, logistics, microelectronics, and quantum cybersecurity. The company serves clients in 26 countries with a strong portfolio of over 1,500 projects and multiple international certifications, positioning itself as a trusted partner in high-tech industries. The website infrastructure is built on Webflow CMS with modern technologies such as Google Tag Manager and Weglot for multilingual support. The site demonstrates excellent performance, mobile optimization, and accessibility, reflecting a mature digital presence. The technical stack and hosting are robust, leveraging CDN and modern web standards. Security posture is strong with HTTPS enforced, multiple security headers, and no visible vulnerabilities or exposed sensitive data. However, the site lacks a dedicated security policy page and explicit incident response contact channels. Privacy compliance is adequate with a comprehensive privacy and cookie policy, though no explicit cookie consent mechanism is implemented. Overall, the website and business demonstrate high professionalism and trustworthiness, with minor recommendations to enhance privacy compliance and security transparency. The domain WHOIS data aligns well with the company’s profile, confirming legitimacy and consistency.

I

ICFO

icfo.eu

0

ICFO is a leading research institute specializing in photonic sciences, offering comprehensive research programs, educational opportunities including master and PhD studies, and fostering innovation through industrial collaborations and spin-offs. The website reflects a mature digital presence with a well-structured, professional design and clear navigation, targeting researchers, students, and industry partners. Technically, the site is built on WordPress with the Divi theme and uses modern libraries and plugins to enhance user experience and performance. Security measures such as HTTPS and security headers are properly implemented, though explicit security policies and incident response information are not publicly available. Privacy compliance is partial, with a privacy policy present but lacking a visible cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with recommendations to enhance privacy compliance and security transparency.

T

TRESDEAMOS, SL

innovastory.com

0

InnovaStory is a small Spanish communication consultancy specializing in narrative, strategy, and innovation services for organizations undergoing transformation, digitalization, or leadership development. Their website presents a professional and well-structured digital presence using modern frontend technologies such as Bootstrap and GSAP, with a focus on clear communication of their service offerings and client portfolio. However, the site lacks critical privacy and cookie policies, security headers, and analytics transparency, which impacts its overall security and compliance posture. Contact information is provided but some elements are visually hidden, which may affect user accessibility. The domain registration aligns well with the company information, supporting legitimacy. Strategic improvements in privacy compliance and security practices are recommended to enhance trust and regulatory adherence.

P

Portel

portel.es

0

Portel is a Spanish company specializing in advanced software solutions for the logistics and port community sectors, with a history dating back to 1995. Their offerings include integrated systems like ICS2, Port Community System (PCS), and other e-services aimed at enhancing operational efficiency for port authorities and logistics companies. The website reflects a mature digital presence built on WordPress with modern technologies such as Bootstrap and jQuery, providing a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and GDPR compliance evident through cookie and privacy policies, although explicit security policies and incident response information are absent. Overall, the site demonstrates professionalism and trustworthiness, supporting Portel's market position as a leader in logistics software solutions.

L

LuxQuanta Technologies S.L.

luxquanta.com

0

LuxQuanta Technologies S.L. is a specialized technology company focused on Quantum Key Distribution (QKD) systems that provide ultra-secure communication solutions resilient to quantum computer attacks. The company targets sectors with stringent security requirements such as telecommunications, government, finance, healthcare, and utilities. Their business model centers on integrating innovative quantum cryptography technology into existing telecommunication infrastructures, positioning themselves as a European pioneer with recognized awards and partnerships. The website demonstrates a moderate to good level of digital maturity, employing modern web technologies including HTML5, CSS3, JavaScript, Google Analytics, and reCAPTCHA for bot protection. The site is mobile optimized with good SEO practices and clear navigation, although some backend PHP warnings indicate minor technical debt. Privacy and cookie policies are implemented with consent mechanisms, reflecting compliance with GDPR. From a security perspective, the site enforces HTTPS and uses reCAPTCHA, but lacks explicit security headers and published security policies or incident response information. No vulnerability disclosure or security.txt files were found. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the security posture is solid but could be improved by adding security headers and formal policies. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include enhancing security headers, resolving backend warnings, publishing security and incident response policies, and establishing a vulnerability disclosure program to strengthen trust and compliance.

O

Openchip

openchip.com

0

Openchip is a technology company specializing in the integration of in-house designed System on Chips (SoCs) and full-stack software solutions for AI and High-Performance Computing (HPC) applications. The company is recognized by the European Commission as an Important Project of Common European Interest (IPCEI), supporting research, innovation, and industrial deployment of microelectronics and communication technologies across the value chain. Openchip's key offerings include modular RISC-V based accelerator chips, advanced memory technologies, orchestration frameworks, and deployment-ready system designs, targeting European digital sovereignty and competitiveness. Technically, the website is built on WordPress using the Divi theme, with common plugins such as Contact Form 7 and Yoast SEO for optimization. The site demonstrates good mobile optimization and moderate performance, with appropriate SEO metadata and structured data enhancing its digital presence. Security-wise, the site enforces HTTPS and uses secure cookie settings but lacks advanced security headers and explicit security policies or incident response information. Overall, the security posture is solid but could be improved by implementing a security.txt file, enhancing security headers, and adding explicit GDPR-compliant consent mechanisms. The domain registration aligns with the company's location and business claims, indicating legitimacy. The site is professional and trustworthy, with clear business information and partner affiliations. Strategic recommendations include enhancing security and privacy compliance, publishing detailed security and incident response policies, and improving user consent mechanisms to strengthen trust and compliance.

G

GTD System & Software Engineering

gtd.es

0

GTD System & Software Engineering is a well-established high-tech company specializing in the design, integration, and operation of complex mission-critical software and systems across aerospace, defense, energy, logistics, and scientific sectors. With a strong market presence since 1987 and a client base spanning 26 countries, GTD delivers innovative and reliable solutions tailored to critical industry challenges. Their portfolio includes advanced aerospace engineering, quantum cybersecurity, and SaaS platforms for logistics, supported by multiple international certifications. Technically, the website is built on a modern Webflow CMS platform with multilingual support and integrates Google Analytics and Tag Manager for data insights. The site is fast, mobile-optimized, and professionally designed, reflecting the company's digital maturity. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and incident response disclosures are recommended. Privacy compliance is adequate with a clear privacy and cookie policy, but lacks explicit consent mechanisms. Overall, GTD presents a credible, trustworthy, and professional digital presence aligned with its business stature.

E

El Arte de la Memoria

elartedelamemoria.org

0

El Arte de la Memoria is a Spanish educational website focused on providing resources, blog content, and podcasts to help learners improve memory, concentration, and study techniques. The site targets students and individuals preparing for exams, offering guides on memorization, reading speed, and mental concentration. It operates as a small educational content provider with a niche market position in the Spanish-speaking education sector. Technically, the website is built on WordPress using the Genesis Framework and integrates common plugins for SEO, analytics, and cookie compliance. The hosting appears to be on AWS infrastructure. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and vulnerability disclosure mechanisms. Privacy compliance is good with clear privacy and cookie policies. Overall, the website is professional, well-structured, and trustworthy, though it could improve security headers and accessibility features.