Security Directory

Y

YourWay Digital

yourway.digital

0

YourWay Digital is a Brazilian digital agency specializing in custom development of applications, websites, and digital marketing services. Established in 2019 and based in Caxias do Sul, Brazil, the company has delivered over 70 projects and holds a Platinum partnership with RD Station, highlighted by winning the Limitless RD Station 2024 award. The website showcases a comprehensive portfolio of services including app development, marketing strategy, site creation, e-commerce solutions, social media management, and branding. Technically, the site is built on modern frameworks such as Next.js and React, hosted on Vercel, and integrates with AWS and Heroku platforms. However, the site lacks a valid SSL certificate, resulting in no proper HTTPS support, which is a critical security concern. Security headers are present but the SSL/TLS configuration is incomplete, exposing the site to potential risks. Privacy compliance is minimal with no visible privacy or cookie policies, though SPF and DMARC DNS records are properly configured for email security. Overall, the website is professionally designed with excellent content quality and user experience, but security and privacy practices require urgent improvement to enhance trust and compliance.

A

AKZONOBEL LTDA.

coralmatiz.com.br

0

Coral Matiz is a Brazilian loyalty and professional engagement platform operated by AKZONOBEL LTDA., targeting architects, interior designers, and landscapers. The platform offers curated content, professional tools, and a points-based rewards program to enhance user engagement and brand loyalty. The website is well-branded and content-rich, with clear navigation and a focus on professional users and students in the design sector. Technically, the site uses a modern front-end stack including Bootstrap, jQuery, and integrates Google Analytics and Tag Manager for tracking. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture, exposing users to risks when submitting sensitive personal data. Privacy and cookie policies are comprehensive and GDPR/LGPD compliant, with consent mechanisms implemented. Overall, the site demonstrates good business credibility but requires urgent security improvements to protect user data and comply with best practices.

A

Akzo Nobel N.V.

akzonobel.com

0

Akzo Nobel N.V. is a global leader in the manufacturing and distribution of paints and coatings, with a rich history dating back to 1792. The company operates in over 150 countries and manages a portfolio of well-known brands such as Dulux, International, Sikkens, and Interpon. Their business model focuses on providing innovative and sustainable surface solutions to a wide range of industries including manufacturing, energy, and transportation. The website reflects a mature digital presence with comprehensive content aimed at customers, investors, and partners worldwide. Technically, the website is built on Adobe Experience Manager (AEM) and leverages modern web technologies including HTML5, CSS3, JavaScript, and various marketing and analytics tools such as Google Tag Manager and Adobe DTM. Hosting is provided via Amazon AWS infrastructure. While the site is mobile-optimized and accessible, performance is somewhat slow with a load time exceeding 8 seconds, indicating room for optimization. From a security perspective, the site employs HTTPS with a valid SSL certificate, SPF and DMARC email authentication records, and no detected vulnerabilities or subdomain takeover risks. However, security headers like HSTS and OCSP stapling are not enabled, and TLS 1.3 is not supported, suggesting moderate security posture. Privacy compliance is strong with clear privacy and cookie policies and an active consent mechanism, aligning with GDPR requirements. Overall, the website demonstrates a high level of professionalism, trustworthiness, and business credibility. The main risks relate to technical performance and some security hardening opportunities. Strategic recommendations include enhancing SSL configurations, enabling advanced security headers, improving page load times, and maintaining rigorous privacy compliance to sustain trust and regulatory adherence.

I

Incepa

banheirosincepa.com.br

0

Incepa is a Brazilian manufacturing company specializing in bathroom and kitchen sanitary products, including ceramic sanitary ware, accessories, and complementary items. The company has recently integrated with the Roca brand, enhancing its market position. The website serves as a product catalog and brand promotion platform targeting residential customers, hotels, construction companies, and public environments. Technically, the site uses an Apache server with PHP 7.3.33 and integrates multiple marketing and analytics tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and OneTrust for cookie consent. However, the site lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts its security posture. The website content is well-structured and professionally designed, but privacy and security policies are missing or not clearly presented. Overall, the site demonstrates moderate digital maturity but requires urgent improvements in security and privacy compliance.

I

Incepa

incepa.com.br

0

Incepa is a well-established Brazilian manufacturer specializing in porcelain tiles and ceramic coatings, serving a broad audience including architects, designers, and commercial clients. The company maintains a professional online presence with multilingual support, product catalogs, technical assistance, and showroom information. Technically, the website is built on WordPress with modern front-end frameworks and plugins, providing good user experience and SEO optimization. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to risks and reducing trust. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is functional and professional but requires urgent security improvements to meet modern standards.

S

Sigevent.pro

sigevent.pro

0

The website sigevent.pro currently serves a minimal placeholder or error page in Portuguese indicating that no content was found at the requested URL. The domain appears to be related to event management services, with a partner or related site bcseventos.com.br referenced in the footer. The technical infrastructure is hosted on Amazon AWS, but the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security deficiency. No privacy, cookie, or terms of service policies are present, and no contact information beyond a single company email is found. The overall website quality is poor with minimal content, no SEO or accessibility optimizations, and no security best practices implemented. The site is accessible without WAF or security challenges but is not functional as a business-facing website in its current state.

B

Baloise Gruppe

baloise.com

0

Baloise Gruppe is a leading European insurance and financial services provider with a strong presence in Switzerland, Germany, Luxembourg, Belgium, and Liechtenstein. The company offers a wide range of insurance products, financial solutions, and career opportunities, targeting both private and institutional customers. Their website reflects a professional and comprehensive digital presence with extensive content, multi-language support, and clear navigation. Technically, the site employs modern web components and integrates various marketing and analytics tools, though it suffers from an invalid SSL certificate which impacts its security posture. The security configuration lacks essential headers and proper SSL, reducing the overall security score. Privacy compliance is well addressed with comprehensive policies and a robust cookie consent mechanism. Overall, the website is professional and trustworthy but requires urgent attention to its SSL configuration to enhance security and user trust.

U

UnternehmerTUM GmbH

unternehmertum.com

0

UnternehmerTUM GmbH is Europe's largest center for innovation and entrepreneurship, based in Germany, founded in 2002. It supports startups, founders, and companies by providing acceleration, incubation, corporate venturing, and networking services. The website is rich in content, professionally designed, and targets startups, researchers, and innovative companies. Technically, the site uses modern JavaScript frameworks, consent management tools, and analytics but suffers from a critical lack of HTTPS due to an invalid or missing SSL certificate, which severely impacts its security posture. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Business credibility is high with clear contact information, social media presence, and structured data. Overall, the site is professional and trustworthy but urgently needs to fix its SSL/TLS configuration to improve security and user trust.

M

mobilityportal gmbh

mobilityportal.de

0

mobilityportal gmbh operates a digital multimodal mobility platform focused on public transportation (ÖPNV) in Germany. The company offers integrated solutions for managing various transport modes including bus, tram, on-demand services, and e-scooters, enabling seamless door-to-door transport options. Their platform supports both front-end passenger services and back-office digital processes, targeting public transport operators, municipalities, and mobility providers. The website reflects a professional business presence with clear service descriptions and contact options, positioning the company as an innovative player in the transportation technology sector.

F

flexiWAN Ltd.

flexiwan.com

0

flexiWAN Ltd. operates a professional website focused on providing open source SD-WAN and SASE solutions, targeting MSPs and enterprise customers. The company positions itself as an innovator with a SaaS business model and partnerships with major technology players like Google and Intel. The website is built on WordPress with Elementor and WooCommerce, featuring rich content, structured data, and multiple trust signals including testimonials and partner logos. Technically, the site uses modern web technologies but suffers from slow load times and lacks some advanced security headers. The security posture is adequate with valid SSL and SPF/DMARC records but could be improved with HSTS and additional headers. Privacy compliance is supported by a comprehensive privacy policy and terms of service, though cookie consent mechanisms are missing. Overall, the site is professional and trustworthy but would benefit from performance and security enhancements.

E

Error: 404 Page not found

qiata.com

0

The website at qiata.com currently serves only a 404 Page Not Found error with no accessible business content or metadata. The site uses Joomla CMS with the Helix Ultimate template framework and includes Bootstrap and Font Awesome libraries. The SSL configuration supports TLS 1.2 with a strong cipher suite but lacks modern features such as TLS 1.3, HSTS, OCSP stapling, and DNSSEC, indicating a basic security posture. No privacy, cookie, or terms of service policies are present, nor is there any contact or business information available on the site. Performance is slow with a page load time of approximately 4.8 seconds. Overall, the site lacks content, security best practices, and compliance indicators, resulting in a low trustworthiness and professionalism rating.

D

Deciso

opnsense.org

0

OPNsense.org is the official website for OPNsense®, an open source firewall and routing platform developed by Deciso. The platform targets enterprises, professionals, and the open source community, offering a free core product alongside a commercial Business Edition with enhanced features. The website demonstrates a mature digital presence with comprehensive content, community engagement, and commercial offerings including official hardware and training. Technically, the site is built on WordPress with modern frontend frameworks and integrates Google Analytics and custom search capabilities. However, a critical security gap exists as the site lacks a valid SSL/TLS certificate and HTTPS support, exposing users to potential risks. Privacy policies and terms of service are present and comprehensive, but cookie consent mechanisms are not implemented. Overall, the site is professional and trustworthy but requires urgent security improvements to protect visitors and maintain credibility.

6

6WIND

6wind.com

0

6WIND is a technology company specializing in virtualized and secure networking software solutions. Their offerings target communication service providers, mobile network operators, cloud providers, and enterprises worldwide. The company positions itself as a trusted provider of high-performance, scalable, and cost-effective networking software, including virtual service routers, host accelerators, and cloud-native solutions. The website reflects a professional and consistent brand with rich content, including testimonials, case studies, and video resources. Technically, the site is built on WordPress with the Avada theme and integrates modern libraries and marketing tools such as Google Analytics, Pardot, and LinkedIn widgets. However, the security posture is weakened by an invalid or missing SSL certificate and lack of enabled TLS protocols, which is a critical issue that must be addressed to ensure secure communications and trust. Privacy compliance is well-handled with a cookie consent mechanism and a comprehensive privacy policy. Overall, the site demonstrates good digital maturity but requires immediate attention to its SSL configuration to improve security and user trust.

S

SECUDOS GmbH

secudos.de

0

SECUDOS GmbH is a German-based technology company specializing in innovative IT security solutions aimed at ensuring digital sovereignty and high-performance network infrastructures for businesses. Their product portfolio includes secure data exchange software (Qiata), a hardened operating system (DOMOS), and recovery technology for hardware appliances (SDR). The company positions itself as a reliable and experienced partner with over 20 years of expertise in complex network environments, serving a broad range of corporate clients. Technically, the website is built on Joomla CMS with modern frameworks like Bootstrap and jQuery, offering good mobile optimization and user experience. However, the absence of a valid SSL certificate and lack of HTTPS support significantly weaken the security posture, despite proper email authentication records and GDPR compliance. Overall, the site demonstrates good business credibility and privacy practices but requires urgent improvements in SSL/TLS implementation to enhance security and trust.

E

Elewit

elewit.ventures

0

Elewit is a technology platform under the Redeia group focused on driving innovation in the energy and telecommunications sectors. The company operates through venture capital investments, innovation challenges, and partnerships with startups and technology providers to accelerate the energy transition and connectivity. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding aligned with its parent company. Technically, the site is built on Drupal CMS with modern libraries and integrates Google Analytics and Cookiebot for tracking and compliance. Security posture is solid with HTTPS, valid SPF and DMARC records, and OCSP stapling, though improvements like HSTS and DNSSEC are recommended. No critical vulnerabilities or exposed sensitive data were detected. Overall, Elewit presents a professional and trustworthy online presence with good privacy compliance and a well-established partner ecosystem.

R

Redinter

redinter.company

0

Redinter is a well-established energy infrastructure company specializing in the construction and management of high voltage electricity transmission networks across Latin America, primarily in Peru, Chile, and Brazil. As a subsidiary of Redeia, it benefits from strong corporate backing and a significant regional presence managing thousands of kilometers of transmission circuits. The company focuses on ensuring reliable and secure electricity supply, contributing to sustainable development in the regions it serves. Technically, the website is built on Drupal CMS, uses modern web technologies, and is hosted behind Imperva CDN/WAF, ensuring good performance and security. The site is well-structured, mobile-optimized, and includes comprehensive privacy and cookie policies with consent mechanisms. Security posture is strong with HTTPS enforcement, security headers, and no detected vulnerabilities. However, explicit security policies and incident response information are not publicly available. Overall, the website and business demonstrate a mature digital presence with good compliance and security practices.

R

Reintel

reintel.es

0

Reintel is the largest neutral operator of dark fiber infrastructure in Spain, operating as a subsidiary of Grupo Red Eléctrica (redeia). The company provides critical telecommunications infrastructure services including long-distance fiber networks, dedicated cables, equipment hosting, and customized connectivity solutions. Their market position is strong within the Spanish energy and telecommunications sectors, serving businesses requiring extensive fiber optic connectivity. The website reflects a mature digital presence built on Drupal 10, integrating modern technologies such as Google Tag Manager, Cookiebot for consent management, and Google Maps API. Despite a slow page load time, the site offers excellent content quality, clear navigation, and good mobile optimization. Security posture is solid with HTTPS, valid SSL certificates, and OCSP stapling, though improvements are recommended in DNS security and HTTP security headers. Privacy compliance is robust with comprehensive privacy and cookie policies and active consent mechanisms. Overall, Reintel demonstrates a professional and trustworthy online presence aligned with its business stature.

R

Red Eléctrica

ree.es

0

Red Eléctrica is the Spanish Transmission System Operator (TSO) responsible for the operation, development, and maintenance of the national electricity grid. The company plays a critical role in ensuring the quality and security of electricity supply across Spain and supports the country's ecological transition by integrating renewable energy sources and developing infrastructure projects. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional design, targeting energy sector stakeholders and the general public interested in electricity data and sustainability. Technically, the site is built on Drupal 10 with modern front-end libraries and uses Akamai and Imperva for DNS and CDN services. However, a critical security shortcoming is the absence of a valid SSL certificate and proper HTTPS configuration, which significantly impacts the site's security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Business credibility is strong, supported by consistent branding, corporate governance links, and trust signals. Overall, the site scores well in content and business credibility but requires urgent improvements in SSL/TLS security to enhance trust and protect users.

N

New Work SE

new-work.se

0

New Work SE is a large technology company focused on shaping the future of work through its portfolio of strong brands including XING, kununu, onlyfy, and InterNations. The company operates primarily in the German-speaking market, providing recruitment, employer branding, and global networking services. Their website reflects a professional and consistent brand image with comprehensive content aimed at professionals and companies seeking talent solutions. Technically, the website uses modern technologies such as Algolia for search, Usercentrics for consent management, and Adobe Analytics for tracking. Hosting is on Amazon AWS infrastructure. Security posture is solid with HTTPS, SPF, and DMARC configured, though improvements like HSTS and OCSP stapling are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy and professional, though performance optimization could enhance user experience.

V

VTT Technical Research Centre of Finland Ltd.

vtt.fi

0

VTT Technical Research Centre of Finland Ltd. is a leading European research institute providing visionary research, development, and innovation services across multiple sectors including energy, transportation, technology, manufacturing, and healthcare. The company offers a broad portfolio of advanced services such as 6G hardware technologies, quantum computing, cybersecurity, and sustainable development solutions. Their market position is strong, supported by extensive partnerships and a large expert community. Technically, the website is built on Drupal CMS with modern technologies and demonstrates good performance and accessibility. Security posture is solid with HTTPS, valid SPF, and OCSP stapling, though improvements like enabling HSTS and DNSSEC are recommended. Privacy compliance is well managed with comprehensive cookie consent via Cookiebot and a detailed privacy policy. Overall, the website reflects a professional, trustworthy, and mature digital presence.

S

SQS - Software Quality Systems

sqs.es

0

SQS - Software Quality Systems is a medium-sized Spanish company specializing in software testing, quality assurance, certification, and data space services. It serves regulated sectors such as healthcare, pharmaceuticals, railways, and automotive, offering professional consulting, managed testing services, and training. The company holds multiple recognized certifications including ISO 9001, ISO/IEC 27001, and ENS, positioning itself as a trusted provider in the technology and regulated industries. Technically, the website is built on WordPress with Divi theme and integrates modern marketing and analytics tools such as Google Analytics, Hotjar, and reCAPTCHA. However, the site lacks a valid SSL certificate and modern TLS support, which significantly weakens its security posture. Privacy compliance is well addressed with GDPR cookie consent and a comprehensive privacy policy. Contact information is clearly available, enhancing business credibility. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

G

GAIA-X 4 KI

gaia-x4ki.eu

0

GAIA-X 4 KI is a medium-sized German research project focused on developing a data and service ecosystem for training and validating AI applications, particularly in the automotive and manufacturing sectors. The project emphasizes data sovereignty, transparency, and interoperability based on the GAIA-X infrastructure. The website provides detailed information about the project, consortium partners, news, and publications, targeting industry stakeholders, research institutions, and SMEs. Technically, the site uses modern TLS protocols, Bootstrap frontend, and likely a Ruby on Rails backend, hosted on Hetzner infrastructure. While HTTPS is properly implemented, the site lacks advanced security headers, DNS security features, and privacy/cookie policies, which lowers its security and privacy posture. Overall, the site is well-branded, professionally designed, and content-rich but could improve in privacy compliance and security hardening.

N

net-maxX GmbH

net-maxx.de

0

net-maxX GmbH operates a virtual platform designed for fan communities, leveraging interactive virtual worlds to connect users. The company is a small technology startup based in Germany, founded in 2023, and collaborates with partners such as Telemaxx and agenturserver.de. The website is built on the Ghost CMS platform and demonstrates good content quality and user experience with moderate performance. Security posture is adequate with HTTPS and SPF configured, but lacks advanced TLS features and email security enhancements like DMARC. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional and trustworthy but could improve in security and privacy areas.

J

Junior-Uni Ruhr

junioruni.ruhr

0

Junior-Uni Ruhr is a non-profit, privately funded educational and research institution based in Mülheim, Germany, serving children and youth aged 4 to 17. It offers practical, curiosity-driven courses without grades or pressure, focusing on STEM and sustainable development. The institution is recognized as a zdi-Schülerlabor and holds status as a provider of free youth welfare. The website is built on WordPress with Elementor and Bootstrap, hosted by Hetzner. While content quality and business credibility are good, the site lacks a valid SSL certificate and modern security configurations, which significantly impacts its security posture. Privacy policies and terms of service are present, but cookie consent mechanisms are missing. Social media presence is active, and contact information is clearly provided.

Security assessment completed with an overall score of 50/100 (unknown risk). Total of 8 security findings identified across all modules.

V

Verivox GmbH

verivox.de

0

Verivox GmbH operates a leading independent comparison portal in Germany, offering consumers the ability to compare tariffs across energy, telecommunications, insurance, and finance sectors. Established in 1998, the company has positioned itself as a market leader with multiple awards and a strong reputation for transparency and customer satisfaction. The website provides comprehensive services including tariff comparisons, calculators, and personalized recommendations, supported by a modern technical infrastructure leveraging advanced JavaScript frameworks and third-party analytics and consent management tools. Despite its strong market presence and user-centric design, the site suffers from an invalid SSL certificate, which poses a significant security risk and undermines user trust. The company demonstrates good privacy compliance with clear policies and consent mechanisms, but should address critical security issues promptly to maintain its high credibility and protect user data.

Z

ZENIT GmbH

zenit.de

0

ZENIT GmbH is a regional innovation and technology center based in North Rhine-Westphalia, Germany, focused on transforming the Mittelstand (SMEs) through services in innovation, technology transfer, digitalization, funding, and internationalization. The company holds a strong market position as a key facilitator and network coordinator for SMEs and research institutions in NRW, leveraging partnerships with European and regional stakeholders. The website reflects a mature digital presence with comprehensive content, event management, and community testimonials. Technically, the site is built on WordPress with modern JavaScript libraries and SEO optimizations, but suffers from a critical lack of a valid SSL certificate and modern security configurations, exposing it to significant security risks. Privacy compliance is partially met with a detailed privacy policy but lacks cookie consent mechanisms. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain credibility.

O

Attention Required! | Cloudflare

oroinc.com

0

Security assessment completed with an overall score of 50/100 (unknown risk). 10 high-priority issues should be addressed promptly. Total of 28 security findings identified across all modules.

L

Lekkerland SE

lekkerland.de

0

Lekkerland SE is a leading convenience wholesaler and logistics provider in Germany, serving approximately 40,000 retail points with a broad product assortment and tailored services. The company is part of the REWE Group, a major European retail conglomerate. The website reflects a mature digital presence with comprehensive business information, structured data, and multi-language support. However, the technical infrastructure shows critical security weaknesses, notably the absence of a valid SSL certificate and HTTPS support, which exposes users to risks and undermines trust. Privacy compliance is well managed with cookie consent via Usercentrics and a comprehensive privacy policy. The site uses modern marketing and analytics tools but suffers from slow load times and lacks advanced security headers. Strategic improvements in SSL deployment and security hardening are essential to elevate the security posture and user trust.

M

McCourt Global, Inc

mg.com

0

McCourt Global, Inc is a private family-owned company with a long-standing legacy since 1893, focused on diversified sectors including real estate, sports, technology, media, and capital investment. The company emphasizes social impact and community value alongside financial results, led by Executive Chairman Frank McCourt and an international leadership team. The website reflects a mature business with strong branding, comprehensive content, and clear navigation targeting investors, partners, and community stakeholders. Technically, the site is built on WordPress with modern SEO and accessibility practices, but suffers from critical security shortcomings due to the absence of a valid SSL certificate and HTTPS support. This exposes the site and its users to significant risks. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. Business credibility is high, supported by philanthropic initiatives and partnerships with academic institutions. Overall, the site is professional and trustworthy but urgently requires security improvements to protect its digital presence.

E

E.ON Energie Österreich GmbH

eon-energie.at

0

E.ON Energie Österreich GmbH is a leading energy provider in Austria, offering reliable electricity and natural gas supply with a strong emphasis on renewable energy, particularly 100% green electricity from Austrian hydropower. The company also provides e-mobility solutions and comprehensive customer service including online portals and live chat support. Their market position is reinforced by multiple industry awards and certifications, reflecting a commitment to quality and sustainability. Technically, the website is built on Adobe Experience Manager with modern web components and integrates various third-party services such as Google Tag Manager for analytics and Usercentrics for consent management. The site is hosted via Cloudflare and uses a valid DigiCert SSL certificate, though some security enhancements like HSTS and DNSSEC are not yet implemented. Performance is moderate with room for improvement. Security posture is solid with no critical vulnerabilities detected, proper use of HTTPS, and SPF records for email protection. Privacy compliance is strong with clear privacy and cookie policies and a consent mechanism in place. Contact information is readily available, enhancing business credibility. Overall, the website demonstrates a mature digital presence with good content quality, technical implementation, and security practices, positioning E.ON as a trustworthy and professional energy provider in the Austrian market.

G

Grazer Wechselseitige Versicherung AG

grawe.at

0

Grazer Wechselseitige Versicherung AG (GRAWE) is a well-established Austrian insurance company founded in 1828, offering a broad range of insurance products including private, business, and agricultural insurance, alongside financial services. The company maintains a strong market position in Austria with a large customer base and extensive service network. Their website reflects a mature digital presence with comprehensive content, clear navigation, and multi-language support. Technically, the site is built on TYPO3 CMS, uses modern JavaScript and CDN services, but suffers from slow load times due to high resource count and page size. Security posture is good with valid SSL, strong cipher suites, and proper DNS security records like SPF and DMARC, though improvements such as enabling HSTS and OCSP stapling are recommended. Privacy compliance is robust with clear cookie consent mechanisms and GDPR-aligned policies. Overall, the site demonstrates high professionalism and trustworthiness, suitable for its large enterprise status.

B

Bauer Media Group

bauermedia.com

0

Bauer Media Group is a large European media company specializing in publishing, audio broadcasting, outdoor advertising, and strategic investments. The company targets a broad consumer base across multiple European countries, offering a diverse portfolio of media products and services. Their website reflects a mature digital presence with rich multimedia content, clear corporate branding, and comprehensive information about their business sectors. Technically, the site employs modern frontend technologies such as Vue.js and integrates Google services for analytics and user interaction. Security-wise, the site uses HTTPS with modern TLS protocols and has valid SPF and DMARC email configurations, but lacks some advanced security headers and HSTS enforcement, which could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-structured, supporting Bauer Media Group's position as a leading media entity in Europe.

K

Koongo

koongo.com

0

Koongo is a specialized SaaS platform focused on enabling online sellers to succeed across multiple online marketplaces by automating product feed management and order synchronization. The company offers integrations with over 500 sales channels including major platforms like Amazon, eBay, and Google Shopping, targeting e-commerce businesses seeking to expand their sales reach efficiently. The website is professionally designed with comprehensive content, clear navigation, and good mobile optimization, reflecting a mature digital presence. Technically, the site is built on WordPress with a modern tech stack including jQuery, Google Analytics, and Intercom, but suffers from slow loading times and lacks a valid SSL certificate, which is a critical security concern. Security posture is moderate with some best practices like SPF and DMARC in place, but the absence of HTTPS and modern TLS protocols significantly reduces trust and security. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms implemented. Business credibility is supported by clear contact information, testimonials, and third-party review badges. Overall, Koongo presents a solid business offering with room for improvement in security infrastructure.

F

Firstlead GmbH

firstlead-server.de

0

Firstlead GmbH operates the website firstlead-server.de as a service platform in partnership with the affiliate network ADCELL. The site primarily serves as an informational landing page providing company contact details and links to the ADCELL affiliate network. The business model focuses on affiliate marketing services targeting advertisers and affiliates in Germany. The website content is minimal and presented in both German and English, reflecting a small-sized technology sector company with a basic online presence. Technically, the website uses Cloudflare for DNS hosting but lacks a valid SSL certificate, resulting in no HTTPS support. The site includes Google Analytics and Google Tag Manager scripts for tracking but does not implement cookie consent mechanisms or advanced SEO features. Performance is moderate with basic mobile optimization and accessibility. The meta robots tag is set to noindex, indicating the site is not intended for public search engine indexing. From a security perspective, the absence of a valid SSL certificate is a critical vulnerability, exposing users to potential data interception risks. No security headers or advanced security policies are implemented. Privacy compliance is partial, with a privacy policy and terms of service linked externally on the ADCELL domain but no cookie consent or explicit GDPR compliance indicators on the site itself. Overall, the website presents a low-risk profile due to its limited functionality and content but requires urgent improvements in SSL configuration and privacy compliance to enhance trustworthiness and security posture.

Т

ТОВ «Робота Інтернешнл»

robota.ua

0

Robota.ua is a leading Ukrainian online job search and recruitment platform operated by ТОВ «Робота Інтернешнл», part of the larger Grupa Pracuj group. The website offers job seekers and employers a comprehensive service including job listings, resume posting, and recruitment assistance. It targets the Ukrainian market with localized content and strong branding. Technically, the site is built as a modern Angular 13 single-page application, leveraging Cloudflare for DNS and likely CDN services. While the SSL certificate is valid, some security best practices such as HSTS and security headers are missing, and no cookie consent mechanism is present. Privacy and terms of service documents are available as PDFs, but GDPR compliance indicators are minimal. The site integrates common marketing and analytics tools like Google Tag Manager and Facebook Pixel, indicating moderate user tracking. Overall, the website is professional and trustworthy but could improve in security and privacy compliance to enhance user trust and regulatory adherence.

E

Engatta

engatta.io

0

Engatta is a technology company providing a SaaS content operations platform designed to help content teams plan, create, organize, and collaborate on content across multiple channels. The company targets organizations seeking to optimize their content workflows and improve team alignment with real-time performance metrics. The website is built on HubSpot CMS and integrates marketing and analytics tools such as Google Analytics and Facebook Pixel. However, the technical infrastructure shows weaknesses including an invalid SSL certificate and disabled TLS protocols, which pose significant security risks. Additionally, multiple subdomains are vulnerable to takeover due to dangling DNS records. Privacy and cookie policies are present with consent mechanisms, but GDPR compliance indicators are basic. Overall, the website presents a professional business front but requires urgent security improvements to protect user data and maintain trust.

G

GX Software B.V.

xperiencentral.com

0

XperienCentral, operated by GX Software B.V., is a Netherlands-based enterprise software company specializing in content management systems designed to deliver personalized digital experiences. The company positions itself as a market leader with award-winning CMS solutions that cater to organizations seeking advanced content personalization and delivery capabilities. Their platform supports multiple configurations including Headful, Headless, and Hybrid CMS models, targeting enterprise clients across various sectors. The website reflects a professional and consistent brand image, showcasing notable clients and emphasizing their technological strengths. Technically, the website employs a modern technology stack including Java-based backend, Bootstrap for frontend styling, and integrates HubSpot for marketing and form management. It uses Google reCAPTCHA Enterprise for bot protection and Google Tag Manager for analytics. Hosting is on Amazon AWS infrastructure. While the site is mobile-optimized and SEO-friendly, performance is somewhat slow with a page load time exceeding 6 seconds, indicating room for optimization. From a security perspective, the site enforces HTTPS with TLS 1.2 and uses strong cipher suites. However, it lacks advanced security features such as HSTS, OCSP stapling, TLS 1.3 support, and DMARC email policies. No critical vulnerabilities were detected, but improvements are recommended to enhance security posture. Privacy compliance is well addressed with clear privacy and cookie policies and a functional consent mechanism. Overall, XperienCentral's website demonstrates a solid business and technical foundation with good privacy practices and moderate security maturity. Strategic enhancements in security configurations and performance optimization would further strengthen their digital presence and trustworthiness.

S

Shop Courtyard

shopcourtyard.com

0

Shop Courtyard is an e-commerce retail platform specializing in branded home products from Courtyard Hotels, a Marriott International brand. The website offers a curated selection of luxury bedding, pillows, linens, bathrobes, towels, and related merchandise designed to replicate the hotel experience at home. The business targets consumers seeking premium hotel-quality home goods and operates primarily in the European market with a presence in France. The site is well-branded and aligned with Marriott's hospitality sector, leveraging partnerships with sister hotel store sites.

S

Sheraton Store

sheratonstore.com

0

Sheraton Store is an e-commerce platform retailing luxury hotel bedding, bath linens, and related home products under the Sheraton brand, a subsidiary of Marriott International. The website targets consumers seeking premium bedding and home comfort products, positioning itself as a premium branded retailer with a focus on quality and brand trust. The business model is primarily direct-to-consumer online retail with a strong brand association to Sheraton and Marriott. Technically, the site is built on Magento with integrations for Adobe Launch, Google Tag Manager, and OneTrust for privacy compliance. However, the site suffers from a critical lack of a valid SSL certificate, which severely impacts its security posture and user trust. Performance is slow due to large page size and many resources, though mobile optimization and SEO are good. Privacy compliance is well implemented with a comprehensive privacy policy and cookie consent mechanism. Contact information and business details are clearly presented, enhancing business credibility.

M

Marriott International, Inc.

collectrenaissance.com

0

CollectRenaissance.com is an official e-commerce platform offering luxury bedding, pillows, linens, robes, and home decor inspired by Renaissance Hotels, a Marriott International brand. The website targets consumers seeking premium hotel-quality home products and operates as part of a large hospitality and retail ecosystem. The site demonstrates a mature digital presence with multiple marketing and analytics integrations, including Adobe Launch, Google Tag Manager, and OneTrust for privacy compliance. The technical infrastructure is hosted on AWS with modern TLS protocols and a valid SSL certificate, though performance is impacted by a large page size and resource count. Security posture is strong with strict DMARC policies and no major SSL vulnerabilities, but a subdomain takeover risk exists on the staging subdomain. Privacy compliance is robust with clear cookie consent mechanisms and comprehensive privacy policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy but could improve performance and address the subdomain vulnerability.

M

Marriott International, Inc.

shoplemeridien.com

0

Shop Le Méridien is an enterprise-level e-commerce platform operated under Marriott International, Inc., offering luxury hotel-branded lifestyle products such as bedding, bath items, fragrances, and home décor. The website targets consumers seeking sophisticated, mid-century modern inspired products associated with the Le Méridien hotel brand. The platform supports multiple international versions and currencies, enhancing global accessibility. Technically, the site employs modern JavaScript frameworks (Vue.js), integrates advanced marketing and analytics tools (Google Tag Manager, Adobe DTM), and uses OneTrust for privacy compliance. Hosting is on AWS infrastructure, ensuring scalability. Security posture is solid with HTTPS, SPF, DMARC, and cookie consent mechanisms, though improvements like HSTS and OCSP stapling are recommended. No critical vulnerabilities or malware were detected. Overall, the site demonstrates good content quality, professional design, and strong privacy compliance, positioning it well in the luxury retail hospitality market.

M

Marriott

shopmarriott.com

0

ShopMarriott.com is an e-commerce website representing Marriott's branded merchandise retail channel. The site is currently under maintenance, displaying a 403 error page with limited content and contact information. The business operates in the hospitality and retail sectors, targeting consumers interested in Marriott products. Technically, the site is hosted on AWS infrastructure but lacks a valid SSL certificate and HTTPS support, which severely impacts security and trust. The absence of privacy, cookie, and terms of service policies further reduces compliance and user confidence. Security posture is weak due to missing HTTPS and security headers, although email security records like SPF and DMARC are properly configured. Overall, the site is not fully operational and requires significant improvements in security, privacy compliance, and content availability to meet professional standards.

W

Westin Store

westinstore.com

0

Westin Store is an e-commerce retailer specializing in luxury bedding, linens, and bath products inspired by the Westin Hotels brand, a subsidiary of Marriott International. The website targets consumers seeking premium hotel-quality sleep and bath products, offering a broad catalog of branded merchandise. The business model is direct-to-consumer online retail with integrated customer support and marketing channels. Technically, the site is built on Magento with extensive use of Adobe Launch, Google Tag Manager, and OneTrust for privacy compliance. However, the site suffers from a critical security issue: the absence of a valid SSL certificate and disabled TLS protocols, which severely impacts the security posture and user trust. The site implements strong privacy and cookie consent mechanisms, including GDPR-compliant policies and DMARC email protection. Overall, the website is professionally designed with good content quality and marketing integration but requires urgent remediation of its SSL/TLS configuration and subdomain takeover vulnerability to improve security and trustworthiness.

W

W Hotels Store

whotelsthestore.com

0

W Hotels Store is a luxury e-commerce platform offering branded bedding, bath, and fragrance products associated with the W Hotels brand, a Marriott International property. The website targets consumers seeking premium hotel-quality home products, leveraging the strong brand recognition of W Hotels and Marriott. The business model is retail-focused, selling directly to consumers online with a medium-sized operational footprint based in France. The site integrates advanced marketing and analytics tools such as Adobe Launch and Google Tag Manager, and employs OneTrust for GDPR-compliant cookie consent management. However, the absence of a valid SSL certificate on the main domain is a critical security flaw that undermines user trust and data protection.

S

St. Regis Boutique

stregisboutique.com

0

St. Regis Boutique is a luxury e-commerce platform offering a curated collection of premium home and lifestyle products associated with the St. Regis brand, part of Marriott International. The website targets affluent consumers and Marriott Bonvoy members seeking exclusive bedding, bath, fragrance, and signature accessories. Technically, the site uses a modern tech stack including Adobe Launch, Google Tag Manager, Salesforce integration, and AWS hosting. While the site is visually appealing and mobile-optimized, performance is somewhat slow due to a large number of resources. Security posture is strong with HTTPS, valid SSL certificates, SPF and DMARC email authentication, and cookie consent mechanisms, though DNSSEC and CAA records are absent. Privacy compliance is well implemented with clear policies and consent banners. Overall, the site demonstrates a mature digital presence with good business credibility and trust indicators.

I

ION Group

iontrading.com

0

ION Group is a global enterprise specializing in financial software and automation technology, serving financial institutions, central banks, and corporations. Their comprehensive product portfolio spans markets, analytics, core banking, treasury, commodities, and credit information, positioning them as a key player in the finance and technology sectors. The website reflects a mature digital presence with extensive content, clear navigation, and strong branding consistency. Technically, the site is built on WordPress with modern analytics and marketing tools integrated, hosted on AWS infrastructure. Security posture is solid with HTTPS and valid SPF/DMARC records, though improvements like HSTS and DNSSEC are recommended. Privacy compliance is robust, featuring a detailed cookie consent mechanism and GDPR-aligned policies. Overall, the site demonstrates high professionalism and trustworthiness, supporting ION's market position as a leading automation technology provider.

D

DASH Financial Technologies

dashfinancial.com

0

DASH Financial Technologies is a prominent provider of electronic trading platforms and capital markets technology solutions, serving large institutional clients such as hedge funds and professional traders. The company offers a broad range of services including execution services, analytics, workflow tools, regulatory technology, and prime brokerage services. Their market position is reinforced by multiple industry awards and recognitions, highlighting their leadership in the financial technology sector. Technically, the website is built on WordPress with modern technologies such as TLS 1.3, OCSP stapling, and integrates marketing and analytics tools like HubSpot, Google Tag Manager, and Facebook Pixel. Security posture is good with HTTPS enforced and SPF/DMARC email protections, though improvements like HSTS and DNSSEC could enhance security further. Privacy compliance is moderate with a privacy policy present but lacking explicit cookie consent mechanisms. Overall, the website demonstrates strong business credibility, professional design, and functional user experience, making it a reliable digital presence for DASH Financial Technologies.

I

Infralogic

inframationgroup.com

0

Infralogic is a specialized platform delivering predictive analytics and comprehensive data intelligence focused on global infrastructure investment opportunities, primarily in the energy and renewables sectors. It operates as a service under the ION Group umbrella, leveraging advanced technologies and partnerships to provide real-time market insights and analytics tailored for advisors, banks, corporates, governments, investors, and legal professionals. The website demonstrates a professional digital presence with good SEO, structured data, and a modern technology stack based on WordPress and Bootstrap. The technical infrastructure is robust, featuring TLS 1.3 support, OCSP stapling, and integration with multiple analytics and marketing tools such as Google Tag Manager, Hotjar, and 6sense. However, some security enhancements like enabling HSTS and DNSSEC could further strengthen the security posture. The site implements a comprehensive cookie consent mechanism aligned with GDPR requirements, reflecting a strong privacy compliance stance. Security-wise, the platform shows good practices with no detected vulnerabilities or exposed sensitive data. The absence of explicit security policies or incident response information on the site suggests an area for improvement in transparency and readiness communication. Overall, Infralogic presents a trustworthy and credible business platform with a clear focus on delivering value through data-driven infrastructure market intelligence.

I

ION Analytics

barclayhedge.com

0

BarclayHedge, operated under ION Analytics and the ION Group, is a well-established provider of alternative investment data and analytics with over 40 years of market presence. The company offers comprehensive fund databases, performance indices, fund rankings, and market insights targeted at financial institutions such as banks, hedge funds, advisors, and institutional investors. The website reflects a professional and consistent brand image, with clear navigation and relevant content tailored to its target audience. Technically, the site is built on WordPress with modern libraries and frameworks, though performance could be improved due to high load times and resource counts. Security posture is solid with HTTPS, TLS 1.3 support, and OCSP stapling, but lacks HSTS and some security headers. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism and a detailed privacy policy aligned with GDPR. Overall, the site demonstrates a mature digital presence with good business credibility and trust indicators.