Real Estate security reports

N

NOVASOL

novasol.hr

61

NOVASOL is a well-established vacation rental platform specializing in holiday homes and apartments across Europe, including Croatia, Italy, and France. Owned by the parent company Awaze, NOVASOL offers a comprehensive booking service targeting European travelers seeking quality vacation accommodations. The website demonstrates a mature digital presence with multi-language support and a focus on user experience. Technically, the site leverages modern frameworks such as Next.js and React, with performance and monitoring tools like New Relic and Boomerang integrated to ensure reliability and responsiveness. Security practices are robust, featuring HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. Overall, NOVASOL presents a trustworthy and professional online platform with strong business credibility and compliance with privacy regulations.

N

Nagel Haus

nagelhaus.de

41

Nagel Haus is a small regional architecture and home building company based in Germany, specializing in custom, solidly built, and turnkey single-family homes. Their business model emphasizes regional craftsmanship, customer customization, and the use of quality materials sourced locally. The website reflects a professional and consistent brand image, targeting private home buyers seeking personalized housing solutions. Technically, the site is built on WordPress with modern plugins and SEO optimizations, hosted on kasserver.com. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy and compliant with GDPR requirements.

H

Heinze GmbH

baunetz-maps.de

58

BauNetz Maps is a well-established interactive platform dedicated to showcasing contemporary architecture projects worldwide. Operated by Heinze GmbH, a subsidiary of Infopro Digital, the platform aggregates over 10,000 architectural projects and related content from multiple BauNetz services, including news, architect profiles, and educational resources. The website targets a broad audience interested in architecture, including professionals and enthusiasts, and offers additional services such as job listings in the architecture and construction sectors. Technically, the website employs modern web technologies including JavaScript frameworks (likely Vue.js), Google Maps API for geolocation and mapping, and Cloudflare CDN for performance and security. Consent management and analytics are handled via ConsentManager and Webtrekk respectively, ensuring compliance with privacy regulations. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some accessibility improvements could be made. From a security perspective, the site enforces HTTPS and uses Cloudflare for DDoS protection and content delivery. Cookie consent mechanisms are implemented, and no critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers could be enhanced, and the site lacks a public incident response or vulnerability disclosure policy. Overall, BauNetz Maps presents a professional, trustworthy, and content-rich platform with strong business credibility and compliance posture. Strategic improvements in security headers and incident response transparency would further strengthen its security maturity.

Baunetz Architekt*innen is a well-established German-language online platform dedicated to showcasing architectural firms, their projects, news, events, and job opportunities. The site serves a broad audience interested in architecture, including professionals and enthusiasts, positioning itself as a key resource within the German-speaking architecture community. The platform is part of the BauNetz network, which includes several related portals and services, enhancing its market presence and ecosystem. Technically, the website employs modern JavaScript frameworks, lazy loading, and a reputable cookie consent management system, ensuring a good user experience and compliance with privacy regulations. Security-wise, the site uses HTTPS and Cloudflare DNS, but lacks explicit security policies or incident response information, which could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, with no signs of blocking or suspicious activity.

BauNetz Wissen is a specialized German-language online portal providing comprehensive knowledge and resources related to architecture and construction technology. It targets professionals such as architects, planners, and engineers, offering thousands of articles, glossary terms, and building case studies. The website is well-established within its niche, supported by a strong partner network of reputable companies in the construction sector. Technically, the site employs modern web technologies including JavaScript frameworks, consent management tools, and analytics services like Hotjar and Google Tag Manager, all integrated with GDPR-compliant consent mechanisms. Hosting and security are enhanced by Cloudflare services, ensuring good performance and SSL encryption. Security posture is solid with HTTPS and consent management, though explicit security headers and incident response policies are not publicly documented. Overall, the site demonstrates high professionalism, excellent content quality, and strong trust indicators, making it a reliable resource in its industry.

I

Input interior

inputinterior.com

56

Input interiör is a leading independent Nordic interior design group specializing in tailored interior solutions for offices, hospitality, education, and healthcare sectors. The company emphasizes sustainability and offers a broad product range supported by certifications such as Svanen and EcoLabel. Their website demonstrates a mature digital presence with multilingual support, comprehensive content, and active social media engagement. Technically, the site is built on WordPress with modern plugins and performance optimizations, ensuring fast and accessible user experience. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be enhanced. WHOIS data for the exact www subdomain is unavailable, but this is typical and does not detract significantly from trust given the professional site content. Overall, Input interiör presents a credible and well-managed online presence aligned with their business stature.

G

Guémas Immopro

guemas.fr

58

Guémas Immopro is a French real estate company specializing in commercial properties such as offices, activity spaces, and parking in cities including La Rochelle, Paris, and Bordeaux. The website is professionally designed using the Wix platform, featuring modern web technologies and a cookie consent mechanism via Usercentrics, indicating some level of GDPR compliance. However, the absence of explicit privacy and terms of service pages and lack of visible contact information limit transparency. The WHOIS data for the domain is unavailable, which raises concerns about domain registration legitimacy and age, especially given the company's claim of 30 years in business. Security posture is moderate with HTTPS implied but no detected security headers or advanced protections. Overall, the website presents a professional front but would benefit from enhanced transparency and security measures.

C

Central Asian Expo Uzbekistan

caexuzbekistan.com

48

CAEx Uzbekistan is a modern international exhibition center located in Tashkent, Uzbekistan, serving as a major business arena in Central Asia. It offers versatile pavilion spaces adaptable for various projects and event formats. The center is a member of prestigious international exhibition associations UFI and IAEE, underscoring its commitment to quality and international standards. The website targets businesses and event organizers seeking exhibition and event hosting services in the region. Technically, the website employs modern web technologies including Swiper.js for interactive galleries, AOS for animations, Google Tag Manager and Yandex Metrika for analytics, and a live chat widget for customer engagement. The site is hosted behind Cloudflare DNS and CDN services, ensuring reliable performance and security. The design is professional, mobile-optimized, and provides clear navigation and relevant content. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, DNSSEC is not enabled, and no explicit security headers were detected, which are areas for improvement. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific disclosures. Contact information is clearly provided, but no incident response or vulnerability disclosure policies are available. Overall, the website presents a trustworthy and professional image suitable for its business purpose. Strategic improvements in security headers, DNSSEC, and privacy compliance would enhance its security posture and regulatory adherence.

W

WISTA.Service GmbH

wista-service.de

60

WISTA.Service GmbH is a medium-sized German company founded in 2001, specializing in comprehensive building and facility management services at the Berlin Adlershof high-technology location. Their offerings include maintenance of buildings, laboratories, and clean rooms, as well as commercial services such as tenant management and IT infrastructure consulting. The company serves a clientele of research institutions, technology firms, and real estate developers, positioning itself as a trusted local leader with recognized certifications and memberships. Technically, the website is built on TYPO3 CMS, hosted by manitu.net, and demonstrates good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements could be made by adding security headers and explicit privacy consent mechanisms. Overall, the site reflects a professional and trustworthy business presence with room for enhanced privacy and security transparency.

W

WISTA.Plan GmbH

wista-plan.de

60

WISTA.Plan GmbH is a Berlin-based urban development agency specializing in regional, city, and quarter planning, land development, construction, and real estate marketing. The company operates primarily in the Berlin-Johannisthal/Adlershof and Former Güterbahnhof Köpenick areas, serving businesses and stakeholders involved in urban development. The website is professionally designed using TYPO3 CMS, with good mobile optimization and accessibility features. It provides clear business information and contact details, including a physical address, phone number, and email. The presence of a LinkedIn profile adds to its credibility. Security posture is solid with HTTPS and no visible vulnerabilities, though some security best practices like security headers and cookie consent mechanisms are missing. Overall, the site is trustworthy and well-positioned within its sector.

R

Reflexe Habitat

reflexehabitat.com

10

Reflexe Habitat is a French-language online media platform focused on home-related content including decoration, moving, gardening, real estate, and home improvement. The website targets a general audience interested in lifestyle and home trends. It operates on a WordPress CMS with Elementor and Yoast SEO plugins, indicating a modern and maintainable technical infrastructure. The site uses Cloudflare DNS and Google Analytics for performance and visitor tracking. Security posture is adequate with HTTPS and a Content-Security-Policy header, though additional security headers and DNSSEC are recommended. Privacy compliance is weak due to the absence of explicit privacy and cookie policies and no visible contact information, which could impact user trust and regulatory compliance. Overall, the website is professionally designed with good content relevance and navigation, suitable for its niche market.

H

Habitat Vision

habitat-vision.fr

9

Habitat Vision is a French-language website dedicated to providing content and advice on home living, including interior decoration, gardening, real estate, moving, and home equipment. The site targets French-speaking homeowners and individuals interested in improving their living spaces. It operates as a content publishing platform with a niche focus on lifestyle and home improvement topics. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, leveraging modern web technologies such as jQuery and WP Rocket for performance optimization. The site is well-structured with SEO best practices and mobile optimization in place. Security-wise, the website enforces HTTPS and includes basic security headers, but lacks advanced security policies or incident response information. The absence of WHOIS registration data limits the ability to fully verify domain legitimacy, though the website content and technical setup appear professional and trustworthy. Privacy compliance is basic, with a privacy policy and cookie consent mechanism present but no detailed GDPR or data protection officer information. Overall, the site presents a moderate risk profile with room for improvement in transparency and security documentation.

F

Flash Immobilier

flash-immobilier.fr

53

Flash Immobilier is a French real estate information website providing news, advice, and trends related to property investment, insurance, financing, moving, and renovation. The site targets individuals interested in real estate projects and offers a variety of content categories to support their needs. Technically, the website is built on WordPress using Elementor and WP Rocket, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and Content-Security-Policy headers, but lacks some advanced security headers and privacy compliance features. The absence of WHOIS data for the domain reduces trustworthiness from a domain legitimacy perspective. Overall, the site is professional and content-rich but should improve privacy policies and contact transparency to enhance compliance and trust.

I

Immo Prima

immoprima.fr

9

Immo Prima is a French real estate news and information website providing up-to-date articles and market trends to a general audience interested in property and housing. The site positions itself as a primary choice for real estate information in France, focusing on delivering relevant content through a WordPress-based platform enhanced with popular plugins such as Yoast SEO and WP Rocket for performance and SEO optimization. The technical infrastructure is modern and supports mobile responsiveness and good user experience. Security posture is adequate with HTTPS and basic security headers, though there is room for improvement in advanced security configurations. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a clearly accessible privacy policy or terms of service. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the website content and technical setup indicate a legitimate and professional operation. Overall, the site is well-structured, content-rich, and suitable for its target audience, with recommendations to enhance security and privacy transparency.

A

Actu Immobilier

actu-immobilier.com

9

Actu Immobilier is a French-language real estate news and information website providing articles and insights on property, insurance, financing, investment, relocation, and related topics. The site targets French-speaking individuals interested in real estate matters, offering a niche content publishing model focused on real estate news and advice. The website is built on WordPress, leveraging common plugins such as Yoast SEO and WP Rocket for SEO and performance optimization. It uses HTTPS with a Content-Security-Policy header, indicating a good baseline security posture. However, the absence of additional security headers and privacy-related policies suggests room for improvement in compliance and security maturity. The WHOIS data for the domain is unavailable, which raises concerns about domain legitimacy despite the active and professional website presence. No contact emails or phone numbers were found, limiting direct communication channels. Overall, the website is functional, well-structured, and safe for general audiences but lacks transparency in domain registration and privacy compliance.

I

Immo 4

immo-4.fr

9

Immo 4 is a French-language website focused on delivering real estate news, insurance, and financing information. It targets French-speaking individuals interested in real estate market updates and related services. The website operates on a WordPress platform using popular plugins such as Yoast SEO, WP Rocket, Elementor, and WPBakery Page Builder, indicating a modern and flexible technical infrastructure. The site is optimized for SEO and mobile devices, providing a good user experience with clear navigation and professional design. From a security perspective, the website enforces HTTPS and includes a Content-Security-Policy header, which are positive indicators. However, it lacks several other important security headers and does not provide explicit privacy or cookie policies, which are critical for GDPR compliance and user trust. The absence of WHOIS data raises concerns about domain legitimacy and ownership transparency, which impacts overall trustworthiness. Overall, the website presents a moderate security posture with room for improvement in privacy compliance and domain registration transparency. The content is safe for general audiences, with no adult or questionable material detected. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and cookie policies with consent mechanisms, and verifying domain registration details to improve business credibility and trust.

W

WISTA Management GmbH

wista.de

59

WISTA Management GmbH is a landeseigene Wirtschaftsförderungsgesellschaft focused on business support, innovation promotion, and real estate management in Berlin and Brandenburg. The company operates technology parks and innovation centers, supports startups and established companies, and fosters cooperation between science and industry. Their market position is strong as a government-affiliated entity with multiple subsidiaries and partner sites. The website is built on TYPO3 CMS, hosted on manitu.net, and demonstrates good technical maturity with modern frameworks and accessibility features. Security posture is solid with HTTPS and basic security headers, though improvements are recommended in cookie consent and explicit security policies. Overall, the site is professional, trustworthy, and well-structured, targeting business and innovation stakeholders in the region.

W

Wohnbau Weil

wohnbau-weil.de

47

Wohnbau Weil is a small local real estate company based in Germany, specializing in housing market services, senior living facilities, social management, and tenant support. Their website provides information about available apartments, senior housing, social engagement initiatives, and tenant communications. The site is primarily informational with basic navigation and content structure, targeting residents and tenants in the Weil am Rhein area. Technically, the website is built with basic HTML and CSS without modern CMS or frameworks detected. Hosting appears to be provided by netcup based on DNS nameservers. The site lacks advanced technical features such as mobile optimization, accessibility enhancements, or SEO best practices. No analytics or tracking technologies are present, indicating minimal user data collection. From a security perspective, the website does not show evidence of HTTPS enforcement or security headers, which lowers its security posture. There are no visible privacy or cookie policies beyond a basic imprint/privacy page, and no incident response or vulnerability disclosure information is provided. The WHOIS data is consistent with the website's business profile, indicating legitimacy. Overall, the website is functional for its purpose but would benefit from improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

H

HC24 GmbH & Co. KG

hc24.de

55

HC24 GmbH & Co. KG operates an online platform specializing in furnished temporary housing rentals across Germany. The website offers a user-friendly search and booking experience for furnished apartments, rooms, and houses, targeting individuals seeking flexible living arrangements. The company positions itself as a trusted intermediary with verified listings and customer support. Technically, the website is built on modern frameworks such as Next.js and React, with media assets hosted on Amazon S3, ensuring a moderate to good performance and mobile optimization. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism, though lacks visible security headers and explicit security or privacy policy pages. Overall, the site is professional, trustworthy, and compliant with basic privacy regulations, but could improve transparency and security posture by publishing detailed policies and contact information.

L

Lofo-Gewerbepark

lofo-gewerbepark.de

41

Lofo-Gewerbepark is a commercial real estate provider specializing in offering industrial and production land and properties in Weil am Rhein, Germany, strategically located in the tri-border area of Germany, France, and Switzerland. The website presents a professional image with clear business focus on attracting handcraft and production companies seeking growth opportunities in a well-connected location. The technical infrastructure is based on the Weblication® CMS platform, with a moderate performance profile and good mobile and accessibility features. Security posture is moderate, with HTTPS likely enabled but lacking explicit security headers and detailed security policies. Privacy compliance is adequate with accessible privacy and cookie policies, though terms of service and incident response information are missing. Overall, the site is trustworthy and suitable for its business purpose but could improve in security and contact transparency.

B

Baufragen Software GmbH

baufragen.de

55

Baufragen Software GmbH operates a specialized online platform, Baufragen.de, offering free expert consultation in the construction sector via chat. The platform connects users such as architects, planners, craftsmen, and housing companies with over 200 experts across more than 40 competence areas. This unique service aims to streamline research and planning processes in construction projects by providing direct access to product and planning advice online. The company positions itself as an independent, transparent, and cost-free service provider within the German construction industry. Technically, the website employs modern web technologies including JavaScript and Vue.js frameworks, with responsive design optimized for mobile devices. The hosting is managed via rzone.de nameservers, indicating a professional hosting environment. SEO and accessibility are adequately addressed, though some improvements could be made in accessibility features and performance optimization. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible security headers and explicit cookie consent mechanisms. No direct contact information or security policies are prominently displayed, which could be improved to enhance trust and compliance. WHOIS data aligns well with the business identity, supporting legitimacy. Overall, Baufragen.de presents a professional and trustworthy platform with good content quality and business credibility. However, enhancements in privacy compliance, security headers, and contact transparency would strengthen its security posture and user trust.

B

Bauspot.de

bauspot.de

60

Bauspot.de is a German online platform serving the construction industry by providing product information, training, webinars, and a partner portal for manufacturers. The site targets construction professionals and manufacturers within Germany, positioning itself as a niche resource and marketplace. Technically, the website employs modern technologies such as Vue.js, integrates third-party services like YouTube and Vimeo for video content, and uses Cookiebot for GDPR-compliant cookie consent management. Hosting is provided via German-based nameservers, consistent with the business location. Security posture is solid with HTTPS enabled, CSRF protection, and anonymized IP tracking in analytics, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. No direct contact emails or phone numbers are publicly listed, with contact likely via legal or contact pages. Overall, the website is professional, trustworthy, and well-structured, with moderate tracking and advertising practices primarily through Google services.

Hofheimer Wohnungsbau GmbH (HWB) is a regional real estate company focused on socially responsible housing and city development in Hofheim am Taunus, Germany. The company offers a broad range of services including residential construction, social management, property management, and community engagement. Their market position is that of a trusted local housing provider with a strong emphasis on social responsibility and sustainability, supported by published annual and sustainability reports. Technically, the website employs a moderate technology stack with jQuery and several UI libraries, delivering a well-structured, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and updating legacy libraries. Privacy compliance is partially met with a privacy policy and cookie policy present, but lacks an active cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the business's mission and audience.

B

Building4Jobs

building4jobs.com

9

Building4jobs.com is a specialized online job board focused on the construction sector, primarily serving jobseekers and recruiters in the UK construction industry. The platform offers job search, job alerts, CV uploads, and recruiter services such as job posting and candidate search. The website is powered by the Madgex Job Board Platform and integrates standard digital marketing and analytics tools including Google Analytics and Google Tag Manager. The site is well-structured, mobile-optimized, and provides a professional user experience with clear navigation and relevant content. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and business model appear credible and consistent with a legitimate niche job board.

SHINSEGAE E&C is a well-established South Korean construction company specializing in residential, architectural, and civil engineering projects. The company emphasizes customer happiness and corporate social responsibility, with a strong focus on sustainable management and community contributions. Their website reflects a professional corporate presence with clear navigation and a consistent brand identity aligned with the Shinsegae Group. Technically, the site uses a combination of legacy and modern JavaScript libraries, hosted on Akamai CDN infrastructure, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and uses outdated libraries that could pose risks. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Overall, the domain registration data supports the legitimacy and long-term operation of the business.

HanmiGlobal Co., Ltd. is a large Korean construction and project management company with a global footprint, specializing in advanced technology and strategic construction services. The company has executed over 3,200 projects worldwide and offers a broad range of services including project management, development, supervision, and energy infrastructure consulting. Their market position is strong, reflected by a world ranking of 7 in ENR 2025 and a diversified portfolio of subsidiaries and partners. Technically, the website employs a moderate modern tech stack including jQuery, Swiper.js, GSAP, and Google Analytics, with good mobile optimization and a professional design. However, some outdated libraries and missing security headers indicate areas for improvement. The site uses HTTPS but lacks DNSSEC and explicit security policies. Security posture is moderate with good practices like HTTPS and reCAPTCHA on forms, but the absence of security headers, outdated libraries, and missing privacy and cookie policies reduce compliance and security maturity. No incident response or vulnerability disclosure information is published. Overall, the website is professional and trustworthy but would benefit from enhanced security measures, privacy compliance, and updated technical components to improve risk posture and user trust.

The domain ncla.co.kr is registered to Hanmiglobal, a Korean company likely operating in architecture or construction services. The domain is mature, created in 2010, and registration data is consistent and transparent. However, the website itself is inaccessible, returning an HTTP 403 Forbidden error, indicating server-side access restrictions. This prevents any meaningful content, metadata, or technical analysis of the site. The hosting provider is Cafe24, a reputable Korean hosting service. No privacy, cookie, or terms of service policies are found, and no contact forms or social media links are present on the site. Security posture cannot be fully assessed due to lack of accessible content and headers. Overall, the domain registration is legitimate, but the website's inaccessibility severely limits trust and usability.

The domain turnerandtownsend.co.kr is registered to a South Korean company named (주)한미글로벌건축사사무소, with a registration date in 2009 and an expiry in 2026, indicating a long-standing presence. However, the website content is currently inaccessible due to an HTTP 403 Forbidden error, which blocks any direct content or service access. This limits the ability to assess the company's online presence, services, or digital maturity. The technical infrastructure inferred from nameservers suggests hosting with Hostcocoa, but no CMS or modern web technologies are detectable due to the blocked content. Security posture is weak or unknown, with no visible security headers or HTTPS confirmation, and no privacy or cookie policies are present. The WHOIS data is transparent and consistent with the registrant's location and business, supporting legitimacy. Overall, the site is currently non-functional for external users, representing a significant risk for trust and user engagement.

한미글로벌 E&C is a South Korean construction management company specializing in responsible Construction Management (CM) services. The company showcases a portfolio of architectural projects emphasizing customer-centric construction processes and quality assurance. The website reflects a medium-sized business with a focus on the Korean market and related construction sectors. Technically, the website uses legacy JavaScript libraries such as jQuery 1.12.4 and bxSlider, with basic mobile optimization and moderate performance. Security posture is limited, with no visible HTTPS enforcement or security headers, and no privacy or cookie policies present, indicating gaps in compliance and security best practices. The domain registration is consistent with the business claims, registered since 2016 with a reputable Korean registrar, supporting legitimacy. Overall, the website is professional and functional but requires improvements in security, privacy compliance, and modern technical standards.

LMD is a South Korean real estate development company specializing in premium residential and commercial projects primarily in Seoul. The website highlights several key projects and presents the company as a medium-sized player in the real estate sector with a focus on quality development and consulting services. The technical infrastructure relies on legacy JavaScript libraries such as jQuery 1.12.4 and uses fullPage.js for navigation, indicating moderate digital maturity. The website is accessible and well-structured but lacks modern security headers and visible HTTPS enforcement, which impacts its security posture. Contact information is clearly provided, but privacy and cookie policies are absent, indicating gaps in compliance. Overall, the site is professional but could improve in security and privacy transparency.

K

K2 Consultancy Ltd

k2cm.co.uk

61

K2 Consultancy Ltd operates the website www.k2cm.co.uk, providing specialized construction management services in the UK. Their business model focuses on delivering end-to-end construction management solutions that enhance financial control, risk mitigation, and collaboration among clients, design teams, and construction teams. The company positions itself as a flexible and innovative partner in complex building projects, supported by ISO certifications and a portfolio of high-profile projects. Technically, the website is built on WordPress with modern frameworks like Bootstrap and includes SEO optimizations and multimedia content, reflecting a mature digital presence. Security posture is good with HTTPS enforced and secure forms, though some security headers and consent mechanisms could be improved. Overall, the website is professional, trustworthy, and well-structured, supporting the company's credibility in the construction sector.

W

Walker Sime

walkersime.co.uk

61

Walker Sime is a UK-based multi-disciplinary construction consultancy established in 2000, offering professional services such as quantity surveying and project management. The company positions itself as a trusted and well-liked consultancy within its niche, targeting clients who require expert construction consultancy services. The website reflects a professional business model with consistent branding and good content quality, supporting its market position. Technically, the website is built on WordPress using modern technologies including WPBakery Page Builder, Google Analytics, and LinkedIn Insight tags, indicating a moderate level of digital maturity. The site is mobile-optimized and SEO-friendly, though accessibility features could be improved. Security posture is generally good with HTTPS enforced and use of reCAPTCHA, but lacks some security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

O

Otak

otak.com

55

Otak, Inc. is a professional integrated design and project delivery firm specializing in architecture, engineering, environmental consulting, planning, and project management services. The company emphasizes sustainability, integrity, and community engagement as core values, serving government agencies, developers, and communities primarily in the United States. Their market position is that of a medium-sized, reputable firm with a strong focus on delivering community-centric projects and sustainable solutions. Technically, the website is built on WordPress with a modern technology stack including Google Analytics, Google Tag Manager, and various performance and SEO optimization plugins. The site is well-optimized for mobile devices, features good accessibility, and demonstrates excellent SEO practices. The infrastructure appears robust with fast loading times and a professional design. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks visible security headers, a published security policy, and incident response contact information. The absence of WHOIS domain registration data raises some concerns about domain transparency, although the website content and social media presence support its legitimacy. Overall, Otak presents a professional and trustworthy online presence with minor gaps in security transparency and domain registration information. Strategic improvements in security policy publication and domain WHOIS transparency would enhance trust and compliance.

I

Inigo

inigo.com

66

Inigo is a specialized UK-based estate agency focusing on the sale and marketing of historic and architecturally significant homes. The company targets discerning buyers and sellers interested in authentic British homes with rich stories and heritage. Their market position is niche but well-defined, supported by professional branding and trust indicators such as accreditation by The Property Ombudsman and Trading Standards. The website offers comprehensive property listings, editorial content, and customer engagement tools such as newsletters and property alerts. Technically, the website is built on modern frameworks including Next.js and React, with integrations for analytics (Google Analytics) and marketing automation (Klaviyo). The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some improvements in security headers and incident response transparency are recommended. The SSL configuration is excellent, ensuring secure communications. From a security perspective, the site enforces HTTPS and provides cookie consent mechanisms aligned with GDPR requirements. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. No security.txt or incident response information is published, which could be improved to enhance security posture and customer trust. Overall, Inigo presents a professional and trustworthy online presence for its real estate business, but domain registration opacity and minor security best practice gaps suggest areas for improvement. Strategic recommendations include verifying domain registration details, implementing security headers, publishing security policies, and enhancing incident response readiness.

I

Input interior

inputinterior.no

59

Input interior is a leading independent interior furnishing group in the Nordic region, specializing in tailored solutions for offices, hospitality, education, and healthcare sectors. The company operates multiple showrooms and maintains a strong digital presence with comprehensive content and social media engagement. Their website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, cookie consent management, and reCAPTCHA integration, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Input interior presents a trustworthy and credible business front with strong market positioning in the Nordic interior furnishing industry.

I

IARK

iark.no

50

IARK is a Norwegian design firm specializing in workplace development, sustainability, and innovation. The company offers services including interior architecture, furniture and industrial design, and strategic innovation. Their market position is that of a leading innovator in sustainable workplace solutions within Norway, targeting organizations seeking to improve their work environments responsibly. The website reflects a professional and consistent brand with good content quality and clear navigation. Technically, the site uses modern JavaScript modules and image optimization via Imgix, indicating a contemporary frontend infrastructure. However, there is no evidence of a CMS or backend platform from the provided data. Security posture is moderate with HTTPS implied but lacking visible security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Contact information is clearly provided with company emails and a physical address in Oslo, enhancing business credibility. No forms or data collection fields are present on the homepage, reducing immediate privacy risks. Overall, the site is safe, professional, and trustworthy but would benefit from improved privacy and security disclosures.

S

Senab Eikeland

senabeikeland.no

71

Senab Eikeland is a Norwegian company specializing in furniture and interior solutions with a strong emphasis on sustainability and circular economy principles. The company offers a range of services including furniture sales, refurbishment, flexible leasing, and digital portfolio management. Their market position is that of a medium-sized, reputable player in the Norwegian real estate and interior design sector, targeting businesses and organizations seeking tailored and sustainable furniture solutions. Technically, the website is built on modern frameworks such as Next.js and uses Sanity CMS, ensuring a good level of digital maturity and performance. Security-wise, the site employs HTTPS and Google reCAPTCHA v3, with standard security headers, but lacks explicit security policies and incident response information. Overall, the website is professional and trustworthy, though improvements in privacy compliance and contact transparency are recommended.

T

The Modern House

themodernhouse.com

76

The Modern House is a well-established UK-based estate agency specializing in the sale of architecturally significant and design-led homes. Founded in 2000, it has carved a niche in the luxury real estate market with a strong editorial and curated approach to property listings. The website reflects a mature digital presence with excellent design, clear navigation, and mobile optimization, targeting affluent buyers and sellers interested in contemporary and period homes across the UK. Technically, the website leverages modern web technologies including React and Next.js, hosted likely on Vercel, with Cloudflare DNS services. Performance and SEO optimizations are well implemented, and the site integrates marketing and analytics tools such as Google Analytics and Klaviyo for user engagement and tracking. Privacy and cookie policies are comprehensive and include consent mechanisms, indicating good compliance with GDPR requirements. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. However, there is no publicly available security policy or incident response information, and no vulnerability disclosure mechanism is present. The WHOIS data is consistent with the business claims, showing a long-standing domain registration without privacy protection, enhancing trustworthiness. Overall, The Modern House website demonstrates a strong business and technical foundation with good security hygiene and privacy compliance. Strategic improvements could include publishing a formal security policy, incident response details, and vulnerability disclosure information to further enhance trust and transparency.

S

Studio Partington

studiopartington.co.uk

10

Studio Partington is an award-winning architectural practice based in London, specializing in architecture, placemaking, sustainability, and guidance writing. The firm targets clients seeking professional architectural and masterplanning services, positioning itself as a reputable medium-sized business in the real estate sector. The website reflects a professional image with consistent branding and clear contact information, supported by active social media profiles on LinkedIn and Instagram. Technically, the website is built on the Squarespace platform, leveraging modern web technologies including Typekit fonts and Google Fonts. It is mobile-optimized with good SEO practices and moderate performance. Security is robust with HTTPS enforced and HSTS enabled, though additional security headers could enhance protection. Privacy compliance is basic, with a cookie consent banner present but no explicit privacy or terms of service pages found. The WHOIS lookup failed due to querying the subdomain rather than the root domain, resulting in no registrar or registration data. Despite this, the website appears legitimate and professionally maintained, with no signs of malicious activity. Overall, the site scores well on content quality, technical implementation, security posture, and business credibility, with room for improvement in privacy policy transparency and security header implementation.

BDP is a large, internationally recognized multidisciplinary design practice specializing in architecture, engineering, urban planning, and design services. The company positions itself as a leader in creating sustainable and innovative environments, targeting clients in real estate, media, education, and other sectors. The website reflects a mature digital presence with professional branding, multimedia content, and comprehensive project showcases. Technically, the site is built on modern frameworks such as Nuxt.js and Tailwind CSS, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with clear cookie consent and privacy policies. The absence of WHOIS data limits domain trust assessment, but the overall professional presentation supports legitimacy. Strategic recommendations include publishing security and vulnerability disclosure policies and enhancing contact transparency for data protection officers.

The website represents 건축사공제조합, a Korean cooperative association serving architects with financial products such as insurance, guarantees, loans, and welfare benefits. The site is professionally designed with comprehensive service menus and clear contact information, targeting Korean architectural professionals. Technically, it uses standard web technologies including jQuery and Swiper for UI components, with moderate performance and good mobile optimization. Security posture is moderate with HTTPS usage but lacks visible security headers and cookie consent mechanisms. The absence of WHOIS registration data is a notable concern, potentially indicating a registry or data retrieval issue. Overall, the site is trustworthy and business-focused but would benefit from improved security and privacy compliance measures.

(

(주)현신종합건축사사무소

hyunshin.com

61

The website www.hyunshin.com represents (주)현신종합건축사사무소, a specialized architectural firm in Korea focusing on healthcare facility design and construction supervision. The site is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as JavaScript, CSS, and HTML5. The content is primarily in Korean with some English, targeting healthcare and architectural clients in Korea. The business model centers on architectural design and supervision services with a niche in healthcare projects. The website presents a professional design and good user experience but lacks comprehensive privacy, cookie, and contact information pages, which are critical for compliance and trust.

H

HanmiGlobal Co., Ltd.

hanmiglobal.com

50

HanmiGlobal Co., Ltd. is a large, established construction and project management company based in Korea, with a global presence and a strong portfolio of over 3,200 projects. The company offers a wide range of services including construction project management, development projects, overseas business, and specialized technology services, positioning itself as a key player in the real estate and infrastructure sectors. Their market position is reinforced by an ENR world ranking of 8 for 2025, indicating significant industry recognition. Technically, the website employs a modern JavaScript stack including jQuery, Swiper.js, GSAP, and Google reCAPTCHA for security. The site is mobile optimized and provides a good user experience with multimedia content and clear navigation. However, some technical improvements are recommended such as adding security headers and enabling DNSSEC to enhance security posture. From a security perspective, the site uses HTTPS and Google reCAPTCHA to protect forms, but lacks explicit security headers and a published security policy or incident response contact. No privacy or cookie policies were found, which is a compliance gap especially under GDPR. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website is professional and trustworthy with good business credibility but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

A

Atlas Estate Agents

atlasestateagents.co.uk

45

Atlas Estate Agents is a well-established real estate agency specializing in residential and commercial property sales, lettings, and management in Liverpool, UK. The company emphasizes competitive pricing, family business values, and customer service, positioning itself as a trusted local market player since 1965. Their website provides property search functionality, valuation requests, and detailed service information targeting buyers, sellers, landlords, and tenants in the Liverpool area. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Maps API, Google reCAPTCHA, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features are basic. Security measures include HTTPS enforcement and spam protection via reCAPTCHA, but lack certain HTTP security headers and cookie consent mechanisms. From a security perspective, the site shows a moderate maturity level with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and formal privacy/cookie consent banners indicates room for improvement in compliance and defense-in-depth. The WHOIS lookup failed due to querying a subdomain rather than the registered domain, limiting domain trust verification. Overall, the site is professional and trustworthy but could enhance its security posture and privacy compliance. Strategically, the company should prioritize implementing security headers, cookie consent mechanisms, and publishing security policies to strengthen user trust and regulatory compliance. Additionally, clarifying domain registration details and improving accessibility would further enhance their digital maturity and risk management.

M

Mesresa

mesresa.fr

54

Mesresa is a French company providing a comprehensive software solution for managing seasonal and short-term rental properties. Their platform targets property owners and managers seeking to optimize bookings, automate reservation processes, and increase rental revenue. The website is professionally designed, mobile-optimized, and integrates with major rental platforms and payment gateways, reflecting a mature digital infrastructure. However, the absence of WHOIS registration data and lack of explicit privacy and security policies slightly reduce trustworthiness. The site uses modern web technologies including Bootstrap 4 and jQuery, with Google Tag Manager for analytics. Security posture is adequate with HTTPS and secure payment integration but lacks some recommended HTTP security headers. Overall, Mesresa presents a credible business with room for improvement in transparency and security best practices.

Y

You Manage Consulting AG

mediasign.ch

53

You Manage Consulting AG is a Swiss-based consulting firm specializing in project management services for small and medium-sized enterprises (KMU), with expertise in real estate, finance, and ICT sectors. The company is led by Daniel Honegger, who brings over 20 years of experience in project leadership and business consulting. The website clearly targets KMU clients in Switzerland, offering freelance and fixed mandate consulting engagements. The business model focuses on providing tailored project management and advisory services in niche sectors, positioning itself as a trusted partner for operational efficiency and project success. Technically, the website is built on WordPress using modern frameworks such as Bootstrap 4 and jQuery, enhanced with optimization plugins like Autoptimize. The site demonstrates good mobile responsiveness, SEO optimization, and a moderate performance profile. Structured data is implemented effectively to enhance search engine understanding and trust signals. However, some improvements could be made in accessibility and security headers to strengthen the technical posture. From a security perspective, the site uses HTTPS with an excellent SSL configuration, and no exposed sensitive data or vulnerable libraries were detected. However, the absence of security headers and incident response contact information indicates room for improvement in security best practices. Privacy compliance is addressed with a privacy and cookie policy, though a cookie consent mechanism is missing, which is important for GDPR compliance. No signs of malicious content or vulnerabilities were found, supporting a strong security baseline. Overall, the website presents a professional and trustworthy image with clear business information and contact details. The risk profile is low, with recommendations focusing on enhancing security headers, incident response readiness, and privacy consent mechanisms to further improve compliance and trustworthiness.

S

Stiftung Edith Maryon

maryon.ch

42

Stiftung Edith Maryon is a Swiss non-profit foundation focused on securing land and real estate for social, cultural, educational, and agricultural projects. The organization operates primarily in Switzerland and offers services including project development, legacy consulting, housing assistance, and cultural promotion. Their market position is niche, targeting community-oriented and socially responsible real estate initiatives. The website is built on WordPress with a modern tech stack including Yoast SEO and Matomo analytics, reflecting a moderate to good level of digital maturity. Security posture is adequate with HTTPS and secure forms, but could be improved by adding security headers and a cookie consent mechanism. Overall, the site is professional, trustworthy, and compliant with GDPR, though some privacy compliance aspects could be enhanced.

A

Atelier Spolia GmbH

spolia.ch

50

Atelier Spolia GmbH is a small architectural and design atelier based in Bern, Switzerland. The company focuses on exploring architecture and design through a process of learning and rethinking, offering bespoke projects that encourage freedom of use and appropriation. Their market position is niche, targeting clients interested in innovative and open architectural solutions. The website is built on WordPress using the Lay Theme, incorporating modern JavaScript libraries such as jQuery and Swiper.js, indicating a moderate level of technical maturity. Mobile optimization is good, and the site uses HTTPS with valid SSL certificates, ensuring secure communication. However, the absence of privacy and cookie policies, security headers, and analytics tools suggests room for improvement in compliance and marketing sophistication. Security posture is adequate but could be enhanced by implementing standard security headers and formal incident response mechanisms. Overall, the website presents a professional image with clear contact information but lacks comprehensive privacy and security disclosures.

Schaffer-office is a small Swiss-based service provider specializing in accounting, tax declarations, real estate sales and rentals, administrative support, and payroll services primarily targeting small and medium enterprises (KMU) and private customers in the Wollerau region. The website presents a professional business offering with clear service descriptions and a focus on local clientele including EU citizens relocating to Switzerland. The business appears to be established since 2015, consistent with domain registration data. Technically, the website is built on WordPress using common plugins such as Yoast SEO and Contact Form 7, with a moderate performance and good mobile optimization. However, some technical debt is evident from outdated jQuery usage and visible PHP warnings, which could pose security risks. SEO is adequately addressed with proper meta tags and structured data. From a security perspective, HTTPS is enforced, but there is a lack of security headers and visible privacy or cookie policies, indicating compliance gaps. No incident response or vulnerability disclosure information is provided. The site does not employ tracking or advertising scripts, which reduces privacy concerns but also limits marketing insights. Overall, the website is functional and professional but would benefit from improved security practices, updated technical components, and enhanced privacy compliance to strengthen trust and reduce risk.

A

ARS Architektur AG

ars-architektur.ch

52

ARS Architektur AG is a Swiss architecture firm located in Münchenstein, Basel region, specializing in architecture, interior design, general planning, project development, and area development. The website presents a professional image with project showcases and a clean, modern design using the Svelte framework. The technical infrastructure is moderately modern with good mobile optimization and SEO practices, but lacks explicit CMS or hosting details. Security posture is weak due to absence of security headers, privacy policies, and incident response information. No HTTPS or SSL configuration details were available from the provided data. Overall, the site is functional and professional but requires improvements in security and privacy compliance to meet modern standards. The risk level is moderate with no critical vulnerabilities detected but gaps in security best practices and compliance.