Real Estate security reports

B

Back Simonsen

backsimonsen.ch

46

Back Simonsen is a Swiss architecture firm based in Basel, founded in 2015 by Valerie Simonsen and Lukas Back. The firm offers architectural design, planning, and project management services for private and public clients, focusing on sustainable and high-quality building culture. Their portfolio includes interior renovations, private homes, residential complexes, public buildings, and urban quarters. The website presents a professional image with clear contact details and project listings, targeting clients in the Swiss real estate and construction sectors. Technically, the site is built with modern React technology and CSS modules, providing a good user experience and mobile optimization. However, the site lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and security. No blocking or WAF protections hinder content access, and the domain registration data aligns well with the business profile, supporting legitimacy. Overall, the website is a good representation of a small architecture firm with room for improvement in security and privacy compliance.

S

Stücheli Pestalozzi Schiratzki Architekt*innen ETH SIA

stuepetzki.ch

44

Stücheli Pestalozzi Schiratzki Architekt*innen ETH SIA is a small architecture firm based in Zürich, Switzerland, specializing in architecture and urban planning projects ranging from new constructions to renovations. The website showcases a portfolio of projects with extensive imagery, targeting clients interested in architectural services. The technical infrastructure is modern, leveraging the SvelteKit framework and JavaScript modules, indicating a contemporary digital presence. However, the site lacks critical privacy and security policies, contact information, and security best practices, which impacts its overall security posture. No WAF or blocking mechanisms were detected, and the site is fully accessible. The WHOIS data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and compliance.

B

Benner Holding

benner-holding.com

61

Benner Holding is a well-established German family-owned holding company founded in 1882, with diversified business interests spanning real estate, trade, agriculture, energy, and hospitality sectors. The company emphasizes long-term investments and diversification to maintain stability even during economic downturns. The website reflects a professional corporate presence with clear business sector segmentation and leadership visibility, notably CEO Dr. Dominik Benner. Technically, the site is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile-optimized and SEO-friendly but lacks some advanced accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no explicit security or incident response policies are published. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional but could improve in security and privacy transparency.

D

Dark Design Group

darkdesigngroup.no

61

Dark Design Group is a multidisciplinary design collective based in Norway, comprising architecture, landscape architecture, interior design, and planning firms. Founded in 2020, the group leverages collaboration among its subsidiaries DARK Arkitekter, Lark Landskap, and Zinc interiørarkitekter to deliver comprehensive design solutions. The website reflects a professional and cohesive brand presence targeting clients in the architecture and urban planning sectors. Technically, the site is built on WordPress using Elementor and related plugins, offering a modern and responsive user experience with good SEO practices. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response policies. Privacy policies are present and GDPR compliant, though cookie consent mechanisms could be improved. Overall, the site is trustworthy and well-maintained, with room for enhancements in security and privacy transparency.

L

Lark Landskap

larklandskap.no

59

Lark Landskap is a medium-sized landscape architecture firm based in Oslo, Norway, founded in 2014 and part of the Dark Design Group. The company specializes in sustainable and climate-adapted landscape and urban design, focusing on creating functional and socially engaging outdoor spaces. Their market position is solidified by award-winning projects and a professional digital presence. Technically, the website is built on WordPress with Elementor and modern plugins, showing good SEO and mobile optimization but lacking explicit privacy and security policy pages. Security posture is good with HTTPS and cookie consent, though improvements in security headers and incident response transparency are recommended. Overall, the business appears legitimate and professional with a moderate risk profile.

D

DARK Arkitekter

darkarkitekter.no

61

DARK Arkitekter is a well-established Norwegian architecture firm founded in 2001, specializing in designing urban spaces and buildings where people live, work, and interact. The company operates multiple local studios across Norway and offers a broad range of architectural services including urban planning, residential, commercial, cultural, health, and educational projects. Their market position is strong within the Norwegian real estate and architecture sector, supported by a professional online presence and a portfolio of completed projects. Technically, the website is built using modern frameworks such as Next.js and Sanity CMS, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enabled and secure forms, though there is room for improvement in security headers and privacy compliance. Overall, the website is professional, trustworthy, and provides a positive user experience, but lacks explicit privacy and cookie policies which are important for GDPR compliance.

G

GVB Privatversicherungen AG

gvb-privatversicherungen.ch

69

GVB Privatversicherungen AG is a Swiss insurance company specializing in supplementary building insurance products that complement the obligatory building insurance in Switzerland. The company targets property owners across Switzerland, offering tailored insurance solutions and online contract services. The website reflects a professional and consistent brand image with clear business focus and relevant content for its audience. Technically, the site employs modern technologies including Adobe's tag management and analytics platforms, Cookiebot for cookie consent, and CDN services for hosting and media delivery. Security posture is strong with HTTPS enforcement and security headers, although explicit privacy and terms of service documents are missing. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

Hausinfo.ch is a Swiss-based advisory website operated by GVB Services AG, providing neutral guidance around house and garden topics, primarily targeting homeowners and property owners in Switzerland. The site is positioned as a service linked to the Swiss Homeowners Association, offering insurance-related advice and consultation services. The business model focuses on providing informational content and facilitating insurance and property management services through digital forms and advisory tools. The website demonstrates a consistent brand presence and targets a niche market segment effectively. Technically, the website employs modern web technologies including JavaScript, Adobe Experience Platform Launch for tag management, and Cookiebot for cookie consent management. The hosting appears to be managed or supported by GVB's CDN infrastructure. The site is moderately performant, mobile-optimized, and includes basic accessibility features. SEO practices are well implemented with proper meta tags and structured data. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes standard security headers such as Content-Security-Policy and Strict-Transport-Security. Cookie consent mechanisms are in place, supporting GDPR compliance. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not published, representing areas for improvement. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, hausinfo.ch presents a trustworthy and professional online presence with good privacy compliance and security posture. Strategic recommendations include publishing detailed security and incident response policies, adding a terms of service page, enhancing accessibility, and maintaining vigilance on third-party scripts. These steps will further strengthen the site's security and compliance maturity.

S

Stone

stone.be

60

STONE is a well-established Belgian company specializing in natural stone, terrazzo, and ceramics with over 100 years of experience. The company operates both as a producer and an international trader, serving architects, designers, and construction professionals. Their website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on Drupal 11, uses modern libraries like Slick Slider, and integrates Google Tag Manager for analytics. Security posture is good with HTTPS enabled and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy or terms of service pages detected. WHOIS data confirms the domain's legitimacy and long history, consistent with the company's claims. Overall, the website is professional, trustworthy, and business-focused with no signs of malicious or adult content.

B

BD4Jobs

bd4jobs.com

10

BD4Jobs is a UK-based specialized job board focusing on architecture and related professions. The platform offers job search, job alerts, CV uploads, and recruiter services, positioning itself as a niche player in the real estate recruitment market. The website is built on the Madgex Job Board Platform and integrates multiple Google services for analytics and advertising. The technical infrastructure is modern and supports good mobile optimization and accessibility. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and published policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The absence of WHOIS data for the domain raises concerns about domain legitimacy, though the website content and branding appear professional and trustworthy. Strategic improvements in security transparency and privacy compliance are recommended to enhance trust and compliance.

H

House Of Builders

houseofbuilders.no

62

House Of Builders operates as an innovative showroom and meeting place within the Norwegian construction industry, targeting professionals and companies in this sector. The website presents a professional image with good SEO and structured data, reflecting a small but focused business established in 2017. The technical infrastructure is based on WordPress, utilizing common libraries and plugins such as jQuery, Bootstrap, FontAwesome, and Cookiebot for cookie consent management. Google Analytics is employed for visitor tracking, indicating moderate user tracking levels. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of a published privacy policy and terms of service pages represents compliance gaps. No WAF or blocking mechanisms were detected, and no suspicious or malicious content was found.

M

Moratti & Söhne AG

morattisoehne.ch

48

Moratti & Söhne AG is a well-established Swiss construction company founded in 1905, offering a comprehensive range of construction and related services including high-rise construction, civil engineering, road construction, excavation, demolition, remodeling, transport, and building materials supply. The company targets private individuals, businesses, and public sector clients primarily in the Gstaad and Saanen regions. Their website reflects a professional and consistent brand image with clear service descriptions and multiple physical office locations, supporting their regional market position. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and uses performance optimization tools like WP Rocket. It integrates Google Analytics and Google Maps APIs for analytics and location services. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some accessibility features are basic, and there is room for improvement in SEO and security headers. From a security perspective, the site uses HTTPS with good SSL configuration and anonymizes IPs in Google Analytics, indicating some privacy awareness. However, it lacks important security headers and does not provide explicit security policies or incident response contacts. There is no cookie consent mechanism, which may affect GDPR compliance. No vulnerabilities or suspicious patterns were detected in the visible content. Overall, the website is trustworthy and professional with a solid business presence. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance their security posture and regulatory adherence.

Kurztusch Gipsdesign AG is a small Swiss company specializing in plastering, drywall, stucco, facades, monument preservation, and decorative plastering services. The company emphasizes craftsmanship and quality with over 25 years of experience, targeting clients primarily in the Aargau region. Their website is built on TYPO3 CMS and uses a range of JavaScript libraries for UI enhancements. The site is professionally designed with clear navigation and content relevant to their business domain. However, the WHOIS data for the domain www.gipsdesign.com is missing, which raises questions about domain registration legitimacy despite the active and professional website presence. The company provides clear contact information including a Swiss phone number and uses email obfuscation to protect against scraping. Privacy and cookie policies are implemented with GDPR compliance in mind, including a consent mechanism.

R

RIEDER BACH ARCHITEKTUR GSTAAD

riederbach.ch

48

Rieder Bach Architektur Gstaad AG is a well-established architecture firm specializing in high-end residential architecture in Switzerland, particularly in the Gstaad region. The company positions itself as a market leader with a history dating back to 1990. Their website reflects a professional and consistent brand image, targeting affluent clients seeking bespoke architectural services. The business model focuses on delivering architectural design and real estate project expertise, supported by a clear digital presence including social media channels and a contact form with GDPR compliance features. Technically, the website is built on WordPress using Elementor and Yoast SEO, incorporating modern web technologies such as Google reCAPTCHA for form security and Google Analytics for visitor tracking. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect contact forms, but lacks several recommended security headers and does not publish a security policy or incident response contacts. Privacy compliance is partially addressed with a privacy policy and GDPR acceptance on forms, but no cookie consent mechanism is present. Overall, the security posture is solid but could be improved with additional headers and transparency. The domain registration data aligns well with the business claims, showing consistency and legitimacy. No suspicious patterns or privacy protection masking registrant data were found, supporting trustworthiness. The website content is safe for general audiences, with no adult or questionable material detected. Strategic recommendations include enhancing security headers, implementing a cookie consent banner, publishing a security policy, and improving accessibility features to further strengthen the website's security and compliance posture.

A

Alpine Properties

alpineproperties.ch

66

Alpine Properties is a well-established real estate agency based in Gstaad, Switzerland, specializing in residential property sales, rentals, and concierge services. Founded in 1989, it holds a leading market position in the region, offering a comprehensive range of services including real estate consulting and property administration. The website reflects a professional and consistent brand image targeting clients interested in the Swiss Alps real estate market. Technically, the site is built on the Squarespace platform, leveraging modern web technologies and Google Maps integration, with good mobile optimization and moderate performance. Security posture is strong with HTTPS and HSTS enabled, though the absence of explicit privacy and cookie policies indicates compliance gaps. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security disclosures.

L

Link Arkitektur A/S

linkkompass.ai

66

Link Arkitektur A/S operates the website linkkompass.ai, offering a digital sustainability dialogue tool called LINK Kompass® aimed at guiding projects and businesses through environmental and social sustainability requirements. The company is positioned as a leading Scandinavian architectural business with a focus on strategic sustainability consulting. The website is built on Drupal 10, uses Cookiebot for GDPR-compliant cookie consent, and supports multiple languages including Norwegian Bokmål. The technical infrastructure is modern and well-implemented, with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website reflects a professional and trustworthy business presence in the sustainability consulting sector.

H

Holidu GmbH

holidu.com.mx

68

Holidu.com.mx is a localized vacation rental platform operated by Holidu GmbH, offering a wide range of verified holiday homes, apartments, and rural houses primarily targeting families and pet owners in Mexico and Europe. The platform emphasizes quality, trust, and convenience with features like free cancellation and star host badges. Technically, the website employs modern web technologies including React, Tailwind CSS, and integrates multiple analytics and advertising services such as Google Analytics, Facebook Connect, and Taboola. The site is mobile-optimized and provides a seamless user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks explicit public security policies or incident response information. Privacy compliance is strong with comprehensive privacy and cookie policies and consent mechanisms in place. Overall, the website is trustworthy, professional, and well-positioned in the vacation rental market.

H

Holidu GmbH

holidu.pt

68

Holidu GmbH operates a comprehensive online vacation rental platform specializing in verified holiday homes, villas, and apartments across Europe. The website targets European travelers seeking family-friendly and pet-friendly accommodations, offering a broad selection of properties with features like free cancellation and mobile app support. Technically, the site employs modern web technologies including React and Tailwind CSS, with integrations for analytics and marketing tools such as Google Analytics and Facebook retargeting. The security posture is solid with HTTPS enforced and standard security headers present, though there is room for improvement in advanced headers and public security policies. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the site presents a professional, trustworthy, and user-friendly experience with no signs of blocking or adult content.

H

Holidu GmbH

holidu.es

68

Holidu GmbH operates a professional vacation rental platform focused on offering a wide range of holiday homes, including apartments, rural houses, and pet-friendly accommodations across Europe. The website targets families and travelers seeking verified vacation rentals with features such as pools, sea views, and child-friendly options. The platform supports multiple languages and countries, indicating a mature and expansive market presence. Technically, the site employs modern web technologies including React, Tailwind CSS, and integrates various analytics and marketing tools such as Google Analytics, Google Tag Manager, Taboola, and Facebook Connect. The site is mobile-optimized and provides a seamless user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS, uses security headers, and implements cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly available. WHOIS data confirms the legitimacy of the domain and its alignment with the business entity Holidu GmbH. Overall, the site demonstrates a strong digital maturity and trustworthy business model, with recommendations to enhance transparency around security policies and incident response.

K

KIWI.KI GmbH

kiwi.ki

51

KIWI.KI GmbH is a German-based company specializing in digital access solutions tailored for the real estate and property management sectors. Their offerings include cloud-based portals, mobile applications, and hardware products that enable keyless entry and seamless access management. The company targets property owners, managers, and commercial clients seeking modern, secure, and flexible access control systems. Established in 2013, KIWI.KI GmbH has positioned itself as a niche provider with a consistent brand presence and a professional online platform. Technically, the website is built on WordPress with modern plugins and frameworks, optimized for performance and mobile responsiveness. Security posture is solid with HTTPS and domain transfer protections, though some security headers could be enhanced. Privacy compliance is partially addressed with a cookie consent mechanism but lacks explicit privacy and terms of service documentation. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

T

Tyréns Sverige AB

tyrens.se

10

Tyréns Sverige AB is a leading Swedish consultancy specializing in societal building, urban planning, infrastructure, and sustainability solutions. The company offers a broad range of engineering and architectural services targeting public and private sector clients focused on sustainable development. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content showcasing projects and expertise. Technically, the site uses modern technologies including Umbraco CMS, Google Tag Manager, and Cookiebot for consent management, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. The absence of WHOIS data for the exact domain suggests subdomain usage or registration under a parent domain, but the overall legitimacy is supported by consistent business information and linked subsidiary domains. Overall, the site is trustworthy, professional, and well-structured, supporting Tyréns' market position as a major player in Sweden's infrastructure and urban development sector.

G

Gleeds

gleeds.com

76

Gleeds is a global property and construction consultancy with a long-standing history dating back to 1875. The company offers a broad range of consultancy services focused on the built environment, targeting clients in the real estate and construction sectors. The website reflects a professional brand image with consistent messaging and a clear focus on their industry expertise. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party tools such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Accessibility features are supported via the UserWay widget, enhancing usability for users with disabilities. Security posture is generally good with HTTPS enforced and anti-forgery cookies in use; however, explicit security headers are not clearly detected and no public security or incident response policies are found. The domain WHOIS data is missing or protected, which reduces trustworthiness from a registration transparency perspective. Cookie consent mechanisms are well implemented, supporting GDPR compliance. Overall, the website is professional and secure but would benefit from improved transparency in domain registration and explicit privacy and security policy disclosures.

신세계건설의 VILLIV 브랜드 웹사이트 serves as a lifestyle magazine and real estate information portal focused on premium residential living in South Korea. The site offers rich multimedia content including articles, videos, and newsletters targeting prospective homebuyers and lifestyle enthusiasts. The business is well-established with a domain age of over 6 years, consistent WHOIS data, and clear branding aligned with the parent company. Technically, the site uses modern web technologies such as Bootstrap, Swiper.js, and integrates marketing and analytics tools like Facebook Pixel and Google Tag Manager. Security posture is moderate with domain protection flags and HTTPS usage, but lacks explicit security headers and cookie consent mechanisms. Privacy policies and terms of service are comprehensive and publicly accessible, though GDPR compliance indicators are minimal. Overall, the site is professional, trustworthy, and well-positioned in the real estate and lifestyle content market.

S

Steve Edge Design

steve-edge.com

61

Steve Edge Design is an established London-based global branding agency founded in 1985, specializing in brand identity, strategy, and digital design and build services. The company targets businesses across multiple sectors including real estate, luxury, hospitality, and professional services, positioning itself as a premium independent agency with a strong portfolio and global reach. The website reflects a mature digital presence with a modern tech stack leveraging Next.js and React, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS and security headers implemented, though the absence of a cookie consent mechanism and terms of service page are notable gaps. The lack of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, but the professional content and clear contact information mitigate this risk. Overall, the site demonstrates a high level of professionalism and trustworthiness in its business and technical presentation.

A

Arbonia AG

smart-doors.de

58

Arbonia AG is a Swiss-based company specializing in smart door solutions for residential buildings, offering keyless access systems branded as SmartDOOR. The company collaborates with KIWI.KI GmbH for sensor technology integration and distributes products through established system partners in Germany and Switzerland. Their business model combines manufacturing, distribution, and digital access management services via the KIWI Portal, targeting residents, landlords, and service providers. The website is professionally designed, multilingual, and provides comprehensive product information and contact options. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and cookie consent management tools. It demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and published security policies are absent. The WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for corporate domains. Overall, the website reflects a mature digital presence with strong business credibility and moderate security maturity. There are opportunities to enhance security transparency and incident response readiness. The site is safe for general audiences and free from adult or questionable content.

F

fahrion&partner gartenbau ag

fp-gartenbau.ch

45

fahrion&partner gartenbau ag is a Swiss small business specializing in garden construction, landscaping, and maintenance services primarily targeting private homeowners and residential developers in the Kreuzlingen region. Their website presents a professional and consistent brand image with clear service offerings including garden design, planting, pool installation, and garden care. The company positions itself as a passionate and reliable local expert in garden services. Technically, the website uses a modern Bootstrap 4 framework with jQuery and integrates Google Analytics and a consent management platform to comply with privacy regulations. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. No critical vulnerabilities or blocking mechanisms were detected. Contact information is clearly provided with a physical address, phone number, and company email. Overall, the website is trustworthy and professionally maintained but could improve in security transparency and technical hardening.

S

Stiftung Habitat

aktienmuehle.ch

57

Stiftung Habitat is a Swiss non-profit organization focused on revitalizing historic industrial properties in Basel, such as the Aktienmühle, into vibrant creative workspaces and social hubs. Their website presents detailed information about their properties, including the Werkstatthaus and Pförtnerhaus, emphasizing community engagement and support for small businesses and social initiatives. The organization targets creative professionals, social enterprises, and the local community, positioning itself as a niche player in real estate with a social mission. Technically, the website employs modern analytics and tracking tools including Google Analytics, Microsoft Clarity, Facebook Pixel, and LinkedIn Insight Tag, integrated via Google Tag Manager. The site is well-structured, mobile-optimized, and uses HTTPS with good SSL configuration. However, it lacks visible cookie consent mechanisms and security headers, which are areas for improvement. From a security perspective, the site shows good practices such as HTTPS enforcement and no exposed sensitive data. There is no evidence of vulnerability disclosure or incident response contacts, which could be enhanced to improve trust and compliance. Overall, the domain registration aligns well with the organization's claims, supporting legitimacy. The website is safe for general audiences, with no adult or questionable content detected. The overall risk is low, but strategic improvements in privacy compliance and security headers are recommended to strengthen the security posture and regulatory adherence.

K

kHaus AG

khaus.ch

46

kHaus AG operates as a cultural and community hub in Basel, Switzerland, offering event spaces, coworking offices, and opportunities for co-creation and cultural engagement. The website reflects a medium-sized organization focused on providing spaces for cultural events, seminars, workshops, and coworking with a family atmosphere. Their market position is local and community-oriented, targeting individuals and groups interested in culture and coworking. Technically, the website employs modern web technologies including jQuery, ConsentFriend for consent management, Google Analytics for performance tracking, and Google reCAPTCHA for security. The site is mobile-optimized with good SEO practices and moderate performance. Consent management is robust, supporting GDPR compliance with clear cookie consent mechanisms. From a security perspective, the site uses HTTPS with good SSL configuration and implements Google reCAPTCHA to protect forms from spam. However, explicit security headers are missing, and there is no published security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations. The risk level is low, but enhancing security policies and transparency would further strengthen their posture.

D

dorsa + 820 Architektur AG

dorsa-820.com

52

dorsa + 820 Architektur AG is a small Swiss architecture firm with a minimalist online presence hosted on the Cargo Collective platform. The website primarily serves as a portfolio and contact point, providing essential contact details and links to partner sites. The technical infrastructure is modern and secure with HTTPS enabled, but lacks advanced security headers and privacy policies. The domain is newly registered, which aligns with a potentially new or rebranded business. Overall, the site is functional but basic in content and compliance.

LAFRENTZ Baugesellschaft mbH is a specialized construction company based in Hannover, Germany, focusing on park deck renovation, building waterproofing, flood protection, and road marking services. The company targets commercial, public, and private clients with comprehensive services from planning to maintenance. Their market position is that of a niche specialist in construction waterproofing and related services within Germany. The website is professionally designed, mobile-optimized, and provides clear navigation and detailed service descriptions, supporting their business credibility. Technically, the site is built on the 1&1 IONOS Website Editor platform, using modern JavaScript libraries and CDN services, with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enforced but lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of a privacy policy and terms of service pages, though a cookie consent mechanism is present. Contact information is limited to a phone number with no email or social media links. WHOIS data lacks detailed registrant information, slightly reducing trust but not contradicting the business claims. Overall, the website is a good representation of a small specialized construction business with room for improvement in privacy and security transparency.

I

iart ag

fluxdock.io

47

Fluxdock is a Swiss-based business offering modular and flexible workspace rentals located in the urban Dreispitz area near Basel. The company targets SMEs and organizations seeking agile, collaborative project spaces with options for short-term and long-term rentals. The website presents a professional and consistent brand image with clear service descriptions and partner affiliations. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Swiper.js, and is mobile-optimized with moderate performance. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA, but lacks DNSSEC and security headers, and does not have an active cookie consent mechanism. The WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the site is trustworthy and business credible but could improve privacy compliance and security best practices.

G

Gebäudeversicherung Bern

gvb.ch

65

Gebäudeversicherung Bern (GVB) is a well-established regional insurance provider specializing in obligatory building insurance for the Canton of Bern, Switzerland. With over 200 years of history, GVB offers comprehensive insurance products including obligatory building and construction period insurance, as well as voluntary insurance products through its subsidiaries. The website targets property owners and residents in Bern, providing detailed information on insurance services, claims, fire prevention, and natural hazard protection. The company maintains a strong market position as a trusted insurer in the region.

Z

Zinc

zinc.no

57

Zinc is a Norwegian interior architecture firm specializing in creating functional, aesthetic, and identity-driven spaces primarily for commercial and institutional clients. They are part of the Dark Design Group, which includes sister companies Dark Arkitekter and Lark Landskap, indicating a multidisciplinary approach to design and architecture. Their portfolio includes projects for prominent clients such as Aker BP, KPMG, and Accenture, positioning them as a reputable player in the Norwegian interior architecture market. Technically, the website is built on modern web standards, likely using Craft CMS, with optimized images, lazy loading, and custom fonts. The site is mobile-optimized and accessible, with good SEO practices. Security-wise, the site uses HTTPS and includes CSRF tokens, but lacks some security headers and visible privacy or cookie policies, which are areas for improvement. The absence of WHOIS data is a notable concern, reducing the trustworthiness of the domain registration. However, the professional presentation, clear contact information, and social media presence mitigate some of these concerns. Overall, the website reflects a mature digital presence but would benefit from enhanced transparency regarding privacy and security policies.

A

Aspelin Eiendom

aspelineiendom.no

59

Aspelin Eiendom is a well-established Norwegian real estate company founded in 1977, specializing in complex urban development projects aimed at creating attractive city environments and spaces. The company holds a strong market position supported by numerous industry awards and a professional digital presence. Their website reflects a mature digital infrastructure with modern technologies, responsive design, and privacy-conscious analytics. Security posture is solid with HTTPS and no evident vulnerabilities, though some security headers could be improved. The absence of WHOIS data suggests privacy protection, which aligns with corporate best practices. Overall, the company demonstrates professionalism, trustworthiness, and compliance with privacy regulations.

S

Surbana Jurong

surbanajurong.com

64

SJ Group is a global enterprise specializing in urban development, infrastructure, and managed services, owned by Temasek. The company offers a comprehensive portfolio of services including advisory, planning, design, construction, operations, and integrated solutions such as security and digital technology services. Their market position is strong with a presence in 40 countries and subsidiaries like SMEC, Atelier Ten, and Robert Bird Group. The website reflects a professional and consistent brand image with excellent content quality and SEO optimization. Technically, the website is built on WordPress with modern JavaScript libraries and integrations including HubSpot Analytics, Google Tag Manager, and Weglot for multilingual support. The site is mobile optimized, accessible, and performs moderately well. Security posture is good with HTTPS enforced and secure forms, though some security headers could be improved. Privacy compliance is adequate with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the security posture is strong with no visible vulnerabilities or exposed sensitive data. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for enterprises. The website is trustworthy, professional, and safe for general audiences. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing incident response information.

V

VegTech Norge

vegtech.no

59

VegTech Norge is a leading Nordic supplier specializing in green roofs, sedum roofs, and vegetation solutions. Founded in 2022, the company offers a comprehensive range of products and services including green roofing systems, vegetation for terrain and water environments, facade greening, and consulting. Their market position is strong within the Nordic region, supported by partnerships and participation in industry events. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, the site runs on WordPress with modern frameworks and integrates Cookiebot for GDPR-compliant cookie management. Security posture is good with HTTPS and secure forms, though it lacks explicit security headers and published security policies. Contact information is clearly presented with multiple channels including email, phone, and social media. Overall, VegTech Norge demonstrates a credible and trustworthy business with room for improvement in privacy and security transparency.

L

Loxton Walk

loxtonwalk.com

47

Loxton Walk is a newly developed commercial real estate destination located in Marylebone, London, offering flexible retail and restaurant spaces across multiple units. The website presents a professional and modern digital presence, leveraging contemporary web technologies such as SvelteKit and Google Maps API to enhance user experience. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy or registration status. The site lacks critical compliance documents such as privacy and cookie policies, and no direct contact information is provided, which may impact user trust and regulatory compliance. Security posture is moderate with HTTPS implied but no explicit security headers detected. Overall, the site appears to be in a development or pre-launch phase, requiring improvements in transparency and security to fully establish credibility.

D

Derwent London

networkw1.london

60

The website represents a commercial real estate property called Network located at 10 Howland Street in Fitzrovia, London, managed by Derwent London. It offers flexible office workspace across multiple floors with a focus on modern and sustainable design. The site targets businesses seeking premium office space in a central London location. Technically, the website is built using modern frameworks such as Next.js and React, indicating a contemporary digital infrastructure with moderate performance and good mobile optimization. However, some accessibility features appear basic and security headers are not detected, which could be improved. The security posture is moderate due to the presence of HTTPS (assumed) but lack of visible security headers and no published security or privacy policies. Cookie consent is implemented, but no privacy policy or terms of service are found, which impacts compliance and trust. Overall, the site is professional and relevant to its business domain but would benefit from enhanced security and compliance documentation.

S

SPAZIO

spaziomilano.org

52

SPAZIO is a small architecture gallery and bookstore based in Milan, Italy, serving as an independent platform for critical reflection and discussion on architecture, urban design, and related spatial disciplines. The website showcases a rich archive of exhibitions and cultural events dating back to 2017, positioning itself as a niche cultural institution with a focus on thoughtful engagement and storytelling. Technically, the site is built on the Cargo Collective platform, utilizing modern web fonts and Google Tag Manager for analytics, with good mobile optimization and a professional design. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security practices.

S

Stiftung für die Auszeichnung guter Bauten im Kanton Zürich

architekturpreis.ch

51

The website architekturpreis.ch represents the Stiftung für die Auszeichnung guter Bauten im Kanton Zürich, a foundation dedicated to awarding exemplary architectural projects within the Canton of Zurich. It serves as a platform to promote architectural quality, sustainability, and public engagement through awards and a public voting system. The foundation has a long-standing history of about 25 years, positioning itself as a reputable entity in the regional real estate and architectural sector. Technically, the website is built on WordPress with Elementor and uses modern plugins such as Formidable Forms and interactive 3D flipbook features. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security is well-managed with HTTPS and Google reCAPTCHA integration, although some security headers and explicit privacy and cookie policies are missing, indicating room for compliance improvement. From a security perspective, the site shows a solid posture with no detected vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies and lack of incident response contacts are notable gaps. The WHOIS data aligns well with the website's claims, showing consistent registration details and domain age appropriate for the foundation's history. Overall, the website is trustworthy, professionally maintained, and serves its purpose effectively. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and providing clear contact information to improve compliance and user trust.

D

DRDH Architects

drdharchitects.co.uk

41

DRDH Architects is a London-based architectural practice with a portfolio showcasing cultural, residential, and civic projects across Europe, including Belgium and the UK. The firm targets clients seeking architectural design and masterplanning services, positioning itself as an established mid-sized player in the real estate and architectural sector. The website presents a professional portfolio with clear contact information but lacks modern privacy and security disclosures. Technically, the site relies on legacy JavaScript libraries and does not show evidence of modern CMS or hosting details. Security posture is weak due to missing HTTPS confirmation and security headers, and no privacy or cookie policies are present, which may impact compliance. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the website content itself appears professional and trustworthy. Overall, the site demonstrates moderate digital maturity but requires improvements in security and compliance to enhance trust and risk posture.

C

Carmody Groarke

carmodygroarke.com

68

Carmody Groarke is a London-based architecture practice established in 2006, specializing in cultural, heritage, and innovative architectural projects. The website serves as a professional portfolio showcasing their key projects, publications, and news updates, targeting clients and stakeholders in the architecture and real estate sectors. The firm positions itself as an established player with a focus on research, innovation, and urban heritage. Technically, the website is built using modern web technologies including React and Next.js, with content managed via Sanity CMS. The site demonstrates good mobile optimization and user experience, though some SEO and accessibility features could be enhanced. Performance is moderate with a well-structured layout and clear navigation. From a security perspective, the site uses HTTPS with a valid SSL certificate but lacks DNSSEC and security headers, which are recommended to improve security posture. No explicit security policies or incident response information is provided, indicating room for improvement in transparency and compliance. Overall, the website is professional and trustworthy with no signs of malicious content or blocking mechanisms. Privacy and cookie policies are present but basic, and no contact emails or phone numbers are explicitly listed on the homepage. Strategic recommendations include enhancing security headers, adding detailed security and incident response policies, and improving privacy compliance disclosures.

C

Caruso St John Architects

carusostjohn.com

54

Caruso St John Architects is an internationally recognized architecture firm specializing in well-crafted architectural projects, renovations, and exhibition designs. The firm has a strong market position with numerous awards, lectures, and publications highlighting their expertise and influence in the architecture sector. Their website reflects a professional and consistent brand image targeting clients and stakeholders interested in high-quality architectural services. The business operates primarily in the real estate and architectural design industry, based in the United Kingdom, with a domain age consistent with a mature and established practice. Technically, the website employs standard web technologies such as HTML5, CSS3, and JavaScript, hosted by GoDaddy.com, LLC. The site is moderately performant with good mobile optimization and accessibility features. However, there is room for improvement in security configurations, including enabling DNSSEC and implementing security headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies, and no incident response or vulnerability disclosure information is provided. The security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. No critical vulnerabilities or exposed sensitive data were detected. The website content is safe for general audiences, with no adult or questionable content. Overall, the site demonstrates high professionalism and trustworthiness but would benefit from enhanced privacy and security practices to align with best practices and regulatory requirements. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear incident response and vulnerability disclosure channels to strengthen trust and compliance.

C

Caro Communications

carocommunications.com

61

Caro Communications is a well-established London-based communications agency specializing in architecture and design PR. The company has a strong market position within its niche, offering services that connect cultural and design communities. The website reflects a professional brand image with consistent messaging and a clear focus on its target audience of design professionals and lifestyle brands. The business model centers on providing PR and communications services tailored to the architecture and design sectors. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO and Google Analytics. The hosting appears to be managed via GoDaddy, inferred from the nameservers. The site demonstrates good mobile optimization and moderate performance, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, indicating awareness of privacy regulations like GDPR. However, DNSSEC is not enabled, and no explicit security or incident response policies are published. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy with a long registration history and consistent registration details. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in security headers, DNSSEC, and publishing security policies would enhance the security posture and trustworthiness further.

C

Chris Dyson Architects

chrisdyson.co.uk

51

Chris Dyson Architects is a small, award-winning architecture firm based in London, specializing in diverse projects ranging from private commissions to public buildings and urban planning across Europe and Asia. The firm emphasizes context-driven design, historic building restoration, and innovative modern architecture. Their website showcases a professional portfolio and maintains a consistent brand image, targeting clients seeking architectural services. Technically, the website is built on WordPress with common plugins and integrates Google Analytics for user tracking. The site is mobile-optimized with good SEO practices but lacks some accessibility features and cookie consent mechanisms. Security posture is solid with HTTPS and secure forms, though security headers and incident response information are absent. WHOIS data is unavailable due to domain naming issues, but the website is active and legitimate. Overall, the site reflects a credible and professional business presence with room for security and privacy improvements.

A

Al-Jawad Pike

aljawadpike.com

47

Al-Jawad Pike is a London-based architectural practice specializing in architectural design and project development. The website presents a professional portfolio showcasing various projects, including award-winning and shortlisted works recognized by RIBA. The business appears to be a small-sized firm founded in 2014, with a clear focus on the real estate and architectural sector. The website is well-structured with good design quality and navigation, targeting a general audience interested in architectural services. From a technical perspective, the site uses jQuery 3.4.1 and custom JavaScript, hosted on a domain registered with PDR Ltd. The site shows moderate performance and good mobile optimization but lacks advanced frameworks or CMS indications. SEO optimization is good with proper meta tags and Open Graph data, although accessibility features are basic. Security posture is moderate; the domain uses HTTPS (implied by canonical URLs), and domain transfer is protected. However, DNSSEC is not enabled, and no security headers were detected. There are no privacy or cookie policies, nor incident response or security policy disclosures, which limits compliance and trust. No contact information or forms are present, reducing direct user engagement and support options. Overall, the website is professional and credible but would benefit from enhanced security practices, privacy compliance, and clearer contact channels to improve trust and regulatory adherence.

Bureaux Andrew Phillips is a small architectural firm specializing in contemporary and sustainable architecture, primarily operating in Luxembourg and London. Their website serves as a professional portfolio showcasing their projects, including commercial office buildings and residential architecture. The firm targets clients seeking high-quality architectural and urban design services. Technically, the website is built on Squarespace, leveraging modern web technologies such as jQuery and Typekit fonts, and is hosted on Squarespace's CDN. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security-wise, the site enforces HTTPS with HSTS, employs standard security best practices, and does not expose sensitive data or use vulnerable libraries. However, it lacks explicit privacy policies, terms of service, and incident response information, which are important for compliance and trust. Overall, the website is professional and trustworthy but could improve privacy compliance and security transparency.

A

ACME

acme.ac

70

ACME is a London-based architecture and design firm established in 2007, specializing in contemporary architecture, urban planning, interior design, and product design. The company serves private, corporate, and public clients and has a portfolio of notable projects such as Liverpool Street Station and developments in Berlin and Earls Court. The website is professionally designed and hosted on Shopify, leveraging modern web technologies and integrations such as Vimeo for video content and Google Analytics for tracking. The site demonstrates good digital maturity with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though there is room for improvement in DNSSEC and security headers. Privacy compliance is well addressed with cookie consent and GDPR-aligned privacy policy. Overall, the business presents a credible and trustworthy online presence.

Orms is a London-based architecture firm focused on delivering ultrapractical, deeply functional, and generous architectural solutions. Their website reflects a professional and modern digital presence built with Nuxt.js and Tailwind CSS, targeting clients seeking architectural design and consultancy services. The firm positions itself as an established player in the real estate sector with a clear focus on quality and client engagement. Technically, the website is well-structured, mobile-optimized, and uses modern frameworks, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS data and domain registration details introduces some trust concerns, though the website content and contact information support business credibility. Overall, the site is professional but would benefit from enhanced privacy compliance and security best practices.

M

Metropolitan Workshop

metwork.co.uk

47

Metropolitan Workshop is a well-established architectural and urban planning practice founded in 2005, with offices in London and Dublin. The company offers professional services in architecture, urbanism, and design, targeting clients interested in these sectors. Their website reflects a professional and consistent brand image, with clear navigation and relevant content tailored to their audience. The business operates primarily within the real estate sector and maintains a small company size with a focused market position. Technically, the website is built on WordPress and leverages modern web technologies including Google Analytics, Google Tag Manager, Vimeo embeds, and Google Maps API. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Hosting is provided by GoDaddy, consistent with the domain registrar information. From a security perspective, the website uses HTTPS with an excellent SSL configuration but lacks several recommended security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy and cookie policy present but no explicit cookie consent mechanism. Contact information is comprehensive, but no dedicated security policy or incident response details are available. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security headers, privacy consent mechanisms, and incident response transparency would enhance the security posture and compliance standing.