Real Estate security reports

M

Maccreanor Lavington

maccreanorlavington.com

61

Maccreanor Lavington is a professional architecture and urbanism firm operating from London and Rotterdam, offering design and planning services. The website presents a well-structured portfolio of projects and clear contact information, targeting clients and professionals in the real estate and urban development sectors. The firm positions itself as an established medium-sized business with a consistent brand and professional online presence. Technically, the website is built on WordPress with modern libraries and CDN hosting, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and anonymized analytics, but lacks some security headers and cookie consent mechanisms. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy. Overall, the site is professional, trustworthy, and well-maintained.

M

Morris+Company

morrisand.company

56

Morris+Company is a professional architecture and design firm with a strong portfolio covering housing, workplace, community, education, healthcare, placemaking, tall buildings, interiors, re-use, hospitality, and mission-critical projects. The firm operates primarily in the UK and Europe, with offices in London and Copenhagen, targeting clients seeking sustainable and innovative architectural solutions. The website reflects a medium-sized, established company with consistent branding and a professional online presence. Technically, the website employs modern web technologies including jQuery, SimpleBar, Google Analytics, Google Tag Manager, and Google Maps API. Hosting of media assets on Amazon S3 indicates a scalable infrastructure. The site is mobile-optimized with good design quality and navigation, though accessibility and SEO optimizations are basic. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and privacy compliance elements such as privacy and cookie policies. No vulnerability disclosures or incident response contacts are provided. WHOIS data is unavailable due to privacy protection, which is common and likely justified for this business type. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

J

Jamie Fobert Architects

jamiefobertarchitects.com

47

Jamie Fobert Architects is a reputable architectural firm specializing in innovative design across residential, retail, and arts sectors. The company has a strong market presence with a portfolio of completed and ongoing projects internationally, including high-profile cultural and retail spaces. The website serves as a professional portfolio showcasing their work and expertise. Technically, the website is built on WordPress with Yoast SEO for optimization and uses modern JavaScript libraries for interactive elements. Google Analytics is implemented for user tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and security transparency. Overall, the domain is well-established and trustworthy, supporting the firm's credibility.

H

Hopkins Architects

hopkins.co.uk

48

Hopkins Architects is an established architectural practice with over 40 years of experience, focusing on clear and logical design, material honesty, and contextual respect. The website showcases a broad portfolio of architectural projects across various sectors including education, healthcare, hospitality, and civic culture. The technical infrastructure employs modern JavaScript libraries such as jQuery, HeadJS, and lazy loading techniques, indicating a moderate level of digital maturity. However, the site lacks visible privacy and cookie policies, and no contact emails or phone numbers are explicitly provided on the homepage, which may impact user trust and compliance. Security posture is moderate with no detected security headers and incomplete WHOIS data due to domain naming rules, though the site is accessible without WAF or blocking mechanisms. Overall, the site is professional and content-rich but would benefit from enhanced privacy compliance and security best practices.

H

Hawkins\Brown

hawkinsbrown.com

51

Hawkins\Brown is a UK-based architecture firm focused on societal impact and human-centered design. The website presents a professional and modern digital presence with rich content including conversations, projects, and thought leadership. The firm holds a B Corp certification, indicating commitment to social and environmental performance. Technically, the site is built on WordPress with modern JavaScript and analytics integrations, optimized for performance and accessibility. Security posture is good with HTTPS enforced and secure forms, though explicit security policies and incident response details are absent. The lack of WHOIS data for the domain is a notable anomaly, reducing trust slightly despite the professional site content. Overall, the website reflects a mature business with strong branding and digital maturity.

D

David Chipperfield Architects

davidchipperfield.com

63

David Chipperfield Architects is a well-established international architectural practice founded in 1985, with offices in multiple global cities. The company provides architectural design and related cultural and research services, targeting clients interested in high-quality architectural projects. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content about projects and news. Technically, the site uses modern web standards, is mobile optimized, and employs privacy-focused analytics. Security posture is good with HTTPS and domain protection measures, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with a clear privacy policy, but lacks a cookie consent mechanism. Overall, the website is trustworthy and professionally managed, supporting the company's market position as a leading architectural firm.

A

Allies and Morrison

alliesandmorrison.com

71

Allies and Morrison is a London-based architectural and urbanist practice focused on designing beautiful buildings and shaping enduring places with attention to detail and context uniqueness. The firm serves clients interested in architecture, urban planning, and sustainable development, positioning itself as a reputable medium-sized player in the real estate and design sector. Their website showcases a comprehensive portfolio of projects, research, and talks, reflecting a mature and professional business model. Technically, the website employs modern web technologies including Google Analytics with IP anonymization, Imgix for image delivery, and JavaScript ES6, ensuring fast performance and excellent mobile optimization. The site is well-structured with good SEO and accessibility features, although no CMS or hosting provider details are explicitly identified. From a security perspective, the site uses HTTPS with a good SSL configuration and secure form handling for newsletter subscriptions. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. No vulnerability disclosures or incident response contacts are published, representing an area for improvement. Overall, the website is professional, trustworthy, and safe for general audiences. The absence of WHOIS data is a notable anomaly but does not detract significantly from the site's credibility given the quality of content and contact transparency. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and improving WHOIS transparency to strengthen trust and compliance.

F

Foster + Partners

fosterandpartners.com

68

Foster + Partners is a globally recognized architecture and design firm specializing in sustainable architecture, urbanism, engineering, and design services. Founded in 1967 by Norman Foster, the company positions itself as a leader in innovative and sustainable building solutions. The website reflects a professional and modern digital presence, leveraging advanced web technologies such as Angular, Google Analytics, Hotjar, and CookiePro for user experience and compliance. The site is well-structured, mobile-optimized, and provides a seamless user experience with clear branding and relevant content focused on their core services. From a technical perspective, the website employs modern frameworks and tracking tools, indicating a mature digital infrastructure. Hosting appears to be on Microsoft Azure, and the site uses HTTPS with good SSL configuration. However, some security best practices such as explicit security headers and published security policies are missing. The cookie consent mechanism is implemented, but no explicit privacy policy or terms of service pages were detected in the provided content. Security posture is generally good with HTTPS and consent management, but the absence of WHOIS data and lack of published security or incident response policies reduce overall trust slightly. No vulnerabilities or exposed sensitive data were detected. The website does not appear to be blocked or protected by a WAF, allowing full content access. Overall, the website is professional and trustworthy from a business and technical standpoint, but improvements in transparency regarding privacy, security policies, and domain registration information are recommended to enhance credibility and compliance.

Eric Parry Architects Ltd is a well-established architectural practice founded in 2000, with studios in London and Singapore. The company specializes in sustainable and creative architectural design, serving clients in commercial, cultural, healthcare, and hospitality sectors. Their website reflects a professional and consistent brand image, showcasing a portfolio of projects and providing clear contact information. The business targets clients seeking high-quality architectural services and maintains a reputable market position with an international presence. Technically, the website is built on WordPress with modern JavaScript libraries such as Glide.js and LazySizes, offering good mobile optimization and user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and published security policies. Overall, the website is trustworthy, compliant with GDPR, and free from suspicious content or vulnerabilities.

D

Derwent London

derwentlondon.com

67

Derwent London is a prominent British property investment and development company headquartered in London, recognized as the largest London office-focused Real Estate Investment Trust (REIT) and a constituent of the FTSE 250 Index. The company manages a substantial portfolio of commercial real estate valued at £5.2 billion as of mid-2025, focusing on long-term value creation through property regeneration. Their services include office and retail space leasing, flexible furnished workspaces, and community-focused DL/Members lounges. The website reflects a mature digital presence with comprehensive content targeting investors, tenants, and partners. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and cookie consent management, ensuring compliance with privacy regulations such as GDPR. The site is mobile-optimized, accessible, and SEO-friendly, although no CMS or hosting provider details are explicitly identified. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms with granular controls. However, no explicit security headers were detected in the HTML source, and there is no published security policy or vulnerability disclosure program. The absence of WHOIS data limits domain trust verification, but the professional presentation and multiple industry certifications support legitimacy. Overall, Derwent London’s website demonstrates strong business credibility and privacy compliance, with room for improvement in security best practices and transparency. The domain’s WHOIS data absence warrants monitoring but does not currently undermine the site’s trustworthiness.

A

Almacantar

almacantar.com

46

Almacantar is a property investment company specializing in large-scale, complex developments in Central London. The website presents a professional image with detailed information about key properties and team members, targeting property investors and real estate professionals. The business model focuses on property investment and development, positioning itself as a specialist in the London real estate market. The domain is mature, registered since 2011, and the website uses HTTPS with Cloudflare DNS, indicating a stable technical infrastructure. Technically, the website employs common JavaScript libraries such as jQuery and FitText, and integrates Vimeo for video content. Google Analytics is used for visitor tracking via Google Tag Manager. The site is moderately optimized for performance and mobile devices, with good SEO practices evident in meta tags and Open Graph data. However, accessibility features are basic, and no CMS or advanced frameworks are detected. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and important security headers like Content-Security-Policy. No privacy or cookie policies are present, which is a compliance gap. No incident response or vulnerability disclosure information is found. The absence of contact emails and phone numbers on the site reduces transparency. Overall, the security posture is moderate but could be improved with better policies and headers. The overall risk is moderate with no critical issues detected. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, enabling DNSSEC, adding security headers, and publishing incident response information to enhance trust and compliance.

L

LPO Arkitekter

lpo.no

60

LPO Arkitekter is Norway's largest independent architectural firm specializing in architecture for cities, places, buildings, and spaces with a strong focus on innovation, sustainability, and inclusive design processes. The company positions itself as a leader in the Norwegian architectural market, serving a broad audience including municipalities, developers, and the general public interested in urban development. Their business model centers on delivering comprehensive architectural and urban planning services with an emphasis on human-centric solutions. Technically, the website employs modern web technologies such as jQuery, Google Analytics, Google Tag Manager, and Plausible Analytics for tracking, alongside lazy loading for performance optimization. The site is mobile-optimized and features good SEO practices, although some accessibility features could be enhanced. The infrastructure appears stable and professionally maintained, with no signs of outdated or vulnerable libraries. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not provide a visible cookie consent mechanism or detailed privacy and security policies, which are important for GDPR compliance. The WHOIS data is not publicly available due to Norid's policies, but the domain and website content align with a legitimate and professional business entity. Overall, the website presents a strong business credibility and technical foundation but would benefit from improved privacy compliance and security best practices to enhance trust and regulatory adherence.

A

Add arkitekter AS

addarkitekter.no

65

Add arkitekter AS is a Norwegian architectural firm established in 1998, specializing in architectural design and urban development. The company recently rebranded to Add arkitekter and serves clients primarily in Norway, including municipalities and private sector entities. Their website reflects a professional and consistent brand image with clear contact information and relevant project articles. Technically, the site is built using modern frameworks such as Next.js and React, with some creative use of p5.js for visual effects. The site is mobile optimized and has good SEO practices, though accessibility could be improved. From a security perspective, the website uses HTTPS as indicated by the Open Graph URL, but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No WHOIS data is publicly available due to .no domain privacy restrictions, which is typical but reduces transparency. No signs of malicious content or tracking scripts were found, indicating a low-risk profile. However, the absence of privacy and cookie policies and security headers are notable gaps. Overall, the website is professional and trustworthy from a business perspective but could improve its security posture and privacy compliance to meet modern standards. The domain registration information is not publicly accessible, which is common for Norwegian domains but should be considered when assessing transparency.

DRMA AS is a Norwegian architecture and planning firm established in 2006, specializing in community-focused architectural design, planning, placemaking, and landscape architecture. The company positions itself as a local expert with a global outlook, demonstrated by participation in international exhibitions and collaborations. Their website showcases multimedia content highlighting their projects and approach, targeting clients interested in innovative and community-driven architectural solutions. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Mapbox GL JS for mapping features. The site is mobile-optimized with good design quality and user experience, though some accessibility and SEO optimizations could be improved. No CMS or hosting provider details were identified. From a security perspective, the site uses HTTPS with good SSL configuration but lacks security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No forms or analytics scripts were detected, indicating minimal data collection and tracking. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, DRMA's website is professional and trustworthy but would benefit from enhanced privacy compliance, security headers, and accessibility improvements to strengthen its security posture and regulatory adherence.

L

Lundhagem

lundhagem.no

57

Lundhagem is a small, award-winning architecture and urban design practice based in Oslo, Norway. The website presents a professional image focused on showcasing their design work and company identity. The business targets clients seeking architectural and urban design services, positioning itself as a specialized and reputable firm in its sector. The website uses modern web technologies such as Nuxt.js and Imgix for image optimization, indicating a moderate level of digital maturity. However, the site lacks visible contact information, privacy policies, and security headers, which impacts its overall security posture and compliance stance. No WHOIS data is publicly available, suggesting privacy protection for the domain registration, which is typical for small professional firms. Overall, the website is functional and professional but could improve in security and compliance transparency.

N

Nordic Office of Architecture

nordicarch.com

61

Nordic Office of Architecture is a well-established international architectural firm with studios in Norway, Denmark, and Iceland. The company serves a global clientele with a strong presence in the Nordic region, positioning itself as a leading architectural practice. Their website reflects a professional and modern design, showcasing key projects and providing comprehensive contact information for multiple office locations. The firm emphasizes transparency and compliance with privacy regulations, evidenced by a comprehensive privacy policy and cookie consent mechanism. Technically, the website employs modern JavaScript frameworks and analytics tools, ensuring a good user experience and performance. Security posture is solid with HTTPS enforcement and domain transfer protections, though there is room for improvement in security headers and incident response disclosures. Overall, the website and domain registration data indicate a credible and trustworthy business with a strong digital presence.

A

Arkitektbedriftene i Norge AS

arkitektbedriftene.no

62

Arkitektbedriftene i Norge AS is a professional association and employer organization representing architectural offices and practitioners in Norway, including architects, landscape architects, and interior architects. The organization provides membership services, quality tools such as MAKS and MAKS-søk, legal guidelines, statistical data, webinars, and an architect search portal. Their market position is that of a key industry association supporting architectural professionals in Norway. The website is well-structured, professionally designed, and targets architectural firms and professionals within Norway. The business model revolves around membership and providing value-added services to its members.

L

LINK Arkitektur

linkarkitektur.com

66

LINK Arkitektur is a well-established Scandinavian architectural firm operating primarily in Denmark, Norway, and Sweden. The company positions itself as a leading player in the architectural sector with a focus on sustainability and comprehensive architectural services. Their website reflects a professional and modern digital presence built on Drupal 10, with multi-language support and a clear content structure. The use of Cookiebot indicates a commitment to GDPR compliance and user privacy. Technically, the website is hosted behind Cloudflare DNS, uses HTTPS, and incorporates modern web standards, although DNSSEC is not enabled. Security posture is solid but could be improved by adding security headers and publishing explicit security policies. The absence of visible contact emails and phone numbers on the front page suggests contact information may be deeper in the site or via forms. Overall, the website is trustworthy, professional, and compliant with privacy regulations.

Transborder Studio is a small architecture practice founded in 2013, specializing in architecture, urbanism, and interior design with a focus on sustainable and cultural projects. The website serves as a portfolio showcasing key projects primarily located in Norway and Venice. The business targets clients interested in green living and cultural spaces, positioning itself as a niche player in the architecture sector. Technically, the website uses modern web standards with HTML5, CSS3, and JavaScript, and images are delivered via the imgix CDN. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, and no contact information or incident response details are provided, which impacts trust and compliance. Overall, the site is professional and functional but could improve in transparency and security best practices.

S

Snøhetta

snohetta.com

58

Snøhetta is a globally recognized transdisciplinary architecture and design firm focused on creating meaningful places that connect societies and the environment. Their website showcases a broad portfolio of projects across architecture, landscape, interior, product, and brand experience disciplines, targeting clients and partners in the design and real estate sectors. The digital infrastructure is modern, leveraging lazy loading, video loops, and a likely Craft CMS backend, hosted on a CDN for performance. Security posture is moderate with HTTPS and CSRF tokens present but lacking explicit security headers and formal privacy or cookie policies. The absence of WHOIS data reduces domain trustworthiness, though the professional content and social media presence support legitimacy. Overall, the site is well-designed and user-friendly but would benefit from enhanced privacy compliance and security transparency.

S

sa_partners GmbH

sapartners.ch

51

sa_partners GmbH is a specialized consulting firm based in Zurich, Switzerland, focusing on urban design and territorial planning. Their core activities include project development, process design, and spatial strategies for urban and regional development. The company targets municipalities, developers, and planners seeking innovative and sustainable urban solutions. The website reflects a professional and consistent brand image with detailed project showcases and a clear business focus. Technically, the site uses modern web technologies such as Tailwind CSS, jQuery, and Google Tag Manager, providing a responsive and SEO-optimized experience. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and privacy compliance mechanisms could be improved. Overall, the site is trustworthy and well-positioned in its niche market.

Z

Zug Estates Holding AG

zugestates.ch

59

Zug Estates Holding AG is a Swiss real estate company specializing in sustainable development and management of living spaces primarily in the Zug region. The company emphasizes creating value through sustainable and innovative real estate solutions, targeting investors, tenants, and partners interested in environmentally responsible property management. Their website reflects a professional corporate presence with comprehensive investor relations and sustainability reporting. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and Usercentrics for cookie consent, hosted on DigitalOcean infrastructure. The website is mobile-optimized and well-structured, providing a good user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of a publicly available security policy and incident response contact is noted. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

M

Mobimo Holding AG

mobimo.ch

70

Mobimo Holding AG is a well-established Swiss real estate company specializing in property development, investment, and management. The company targets investors, tenants, and real estate professionals, positioning itself as a leading player in the Swiss real estate market. The website reflects a professional and comprehensive digital presence with clear business information and user-friendly navigation. Technically, the site employs modern technologies such as React, Google Analytics, and Google Maps API, ensuring good performance and mobile optimization. Security measures are robust, with HTTPS enforced and multiple security headers present, although explicit security policies and incident response details are not published. Overall, the site demonstrates a mature digital infrastructure and trustworthy business credibility.

H

HRS

hrs.ch

69

HRS is a well-established Swiss real estate company with over 60 years of experience, specializing in development, implementation, and investment across Switzerland. The company operates as the largest owner-managed real estate service provider in the country, emphasizing regional roots, sustainability, and innovation. Their website reflects a professional and comprehensive digital presence, leveraging modern technologies such as Next.js and Storyblok CMS, with strong mobile optimization and SEO practices. Security posture is robust, with HTTPS enforced, security headers present, and a cookie consent mechanism implemented via Cookiebot. However, there is no explicit security policy or incident response information publicly available. Overall, the website and business information align well with the WHOIS data, indicating a legitimate and trustworthy entity.

B

Bricks AG

bricks.ch

51

Bricks AG is a Swiss real estate development company specializing in innovative property projects across Switzerland. The company targets clients and partners in the real estate sector, project management, architecture, and public authorities. Their website showcases a professional portfolio of projects and emphasizes customer-centric services. Technically, the site is built on WordPress using Elementor and JetEngine plugins, indicating a modern and flexible digital infrastructure. The site is mobile-optimized and uses HTTPS with appropriate security headers, reflecting a good security posture. However, the absence of explicit privacy policies, terms of service, and incident response information indicates areas for compliance improvement. Overall, the website is trustworthy and professional but could enhance transparency and compliance documentation.

S

Stiftung Architektur Dialoge Basel

architekturwochebasel.ch

50

Architekturwoche Basel is a biennial platform organized by Stiftung Architektur Dialoge Basel, focusing on international architecture and urban development events in Basel, Switzerland. The website serves as an information hub for the event, providing program details, news, partner information, and multimedia galleries. The platform targets architecture professionals, enthusiasts, and the general public interested in urban culture and development. The business operates as a non-profit entity with a clear focus on cultural and architectural engagement. Technically, the website is built on WordPress with modern web technologies including jQuery and MediaElement.js for media handling. It uses HTTPS with excellent SSL configuration and employs encrypted email links to protect contact information. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a published security or incident response policy. No critical vulnerabilities or suspicious activities were detected. Privacy compliance is partially met with a privacy policy present and GDPR considerations, but no explicit cookie consent mechanism was found. Overall, the website presents a professional and trustworthy front for the Architekturwoche Basel event, with room for improvement in security headers, cookie consent, and incident response transparency to enhance compliance and user trust.

Z

zinnobergruen gmbh

bestarchitects.de

50

The website bestarchitects.de represents the 'best architects award', a prestigious European architecture award recognizing outstanding architectural achievements. The site serves architects, industry professionals, and enthusiasts by providing award results, news, and a bookshop for related publications. The business model centers on award organization and publication sales, positioning itself as a recognized authority in the European architecture sector. Technically, the site is built on depage CMS with modern web standards, includes responsive design, and uses Google Analytics for visitor insights. Security posture is solid with HTTPS, CSRF protection on forms, and cookie consent mechanisms, though it lacks explicit security headers and published security policies. Overall, the site is professional, trustworthy, and compliant with GDPR, but could improve transparency on security and incident response. No blocking or WAF interference was detected, allowing full content access and analysis.

B

BSA Bund Schweizer Architekten

bsa-fas.ch

55

The Federation of Swiss Architects (BSA Bund Schweizer Architekten) is a prominent membership organization uniting over 950 members recognized for their achievements in architecture and urban development in Switzerland. The website serves as a comprehensive platform offering information about the federation, its local groups, awards, research grants, publications, and events. It targets architects, urban planners, and related professionals within Switzerland, providing multilingual support to cater to the diverse linguistic regions of the country. The business model is centered on membership services, professional networking, and advocacy within the architectural sector.

B

Beer Merz AG

beermerz.ch

61

Beer Merz AG is a small architecture firm based in Basel, Switzerland, specializing in architectural design, building renovations, and project competitions. The website presents a professional portfolio of projects primarily focused on real estate and urban development. The firm targets a general audience interested in architectural services within the Basel region. Technically, the website is built using React and modern JavaScript, with a custom CMS or framework. It shows moderate performance and good mobile optimization but lacks some accessibility features. Security posture is moderate; HTTPS is implied but no explicit security headers were detected. Cookie consent is implemented, and Google Analytics is used for tracking. However, no explicit contact information, terms of service, or security policies are present on the site. The domain uses privacy protection for WHOIS data, which is justified for this business type. Overall, the website is professional and trustworthy but could improve in security and compliance transparency.

Truwant + Rodet + is a small architecture and design studio based in Basel, Switzerland, specializing in innovative architectural projects, competitions, research studios, and exhibitions. Their portfolio includes a variety of projects primarily in Switzerland with some international collaborations, emphasizing adaptive reuse, artistic installations, and academic design studios. The website reflects a professional and artistic brand image targeting architecture professionals, clients, and academic institutions. Technically, the website employs modern JavaScript frameworks such as Alpine.js and GSAP, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies. The presence of Google Analytics without a configured tracking ID and absence of privacy compliance mechanisms indicate areas for improvement. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security practices.

D

dorsa

dorsa.cc

55

Dorsa is a small, collaborative architecture practice based in Zurich, Switzerland, specializing in innovative architectural design, research, and installations. The website showcases a comprehensive portfolio of projects, academic collaborations, and exhibitions, positioning the collective as a niche player in the architecture and real estate sectors. The technical infrastructure is modern, leveraging Cargo CMS and standard web technologies, with good mobile optimization and moderate performance. Security posture is strong with HTTPS and security headers implemented, though privacy and cookie policies are absent, indicating compliance gaps. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and incident response transparency.

K

KAWAHARA KRAUSE ARCHITECTS

kawahara-krause.com

62

KAWAHARA KRAUSE ARCHITECTS is a small, specialized architectural practice based in Germany, founded in 2007. The firm offers architectural design services, academic research, exhibitions, and publications, targeting clients interested in innovative and contextually rich architecture. The website is professionally designed using modern technologies such as Nuxt.js, Vue.js, Tailwind CSS, and Sanity CMS, providing a good user experience and mobile optimization. However, the site lacks explicit privacy and cookie policies, contact information, and security headers, which are important for compliance and security. The domain registration is consistent with the business claims, indicating legitimacy and stability. Overall, the website is safe, professional, and moderately secure but would benefit from enhanced privacy compliance and security practices.

A

ArchitekturBasel

architekturbasel.ch

50

ArchitekturBasel is a niche media platform dedicated to architecture news and cultural events in Basel, Switzerland. The website provides news articles, event announcements, interviews, and job listings related to the architecture sector, targeting a general audience interested in regional architectural culture. Founded around 2017, it maintains a consistent brand presence with good content quality and professional design. Technically, the site is built on WordPress with modern web technologies including jQuery and Google Analytics, and it employs SEO best practices such as structured data and Open Graph tags. The site is mobile-optimized and performs moderately well in terms of speed and accessibility. Security-wise, the website uses HTTPS and some security best practices but lacks explicit security headers like Content-Security-Policy and does not provide a security.txt or vulnerability disclosure page. Privacy compliance is basic, with no visible cookie consent mechanism or detailed privacy policy indications. Overall, the site is trustworthy and legitimate, with domain registration details consistent with its business focus.

W

Weyell Zipse

weyellzipse.ch

44

Weyell Zipse is a Swiss architecture studio specializing in architectural design, competitions, exhibitions, and academic guest critiques. The firm has a strong presence in Switzerland and Germany, with a portfolio including schools, residential buildings, and public spaces. Their market position is that of an established, award-winning practice engaged in both professional projects and academic discourse. Technically, the website is built on WordPress with modern JavaScript libraries, offering good mobile optimization and accessibility. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in compliance and security transparency.

D

Diller Scofidio + Renfro

dsrny.com

63

Diller Scofidio + Renfro (DS+R) is a well-established interdisciplinary design studio based in New York, specializing in architecture, urban design, installation art, and multimedia performance. Founded in 1981, DS+R has a strong market position with internationally recognized projects such as The High Line, The Shed, and MoMA expansion. The website reflects a professional and consistent brand image targeting architects, cultural institutions, and design enthusiasts. Technically, the site uses modern technologies including React and Sanity CMS, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protections, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the site is trustworthy and safe, with no adult or questionable content detected.

H

Herzog & de Meuron Basel Ltd.

herzogdemeuron.com

46

Herzog & de Meuron Basel Ltd. is an internationally renowned architectural practice based in Basel, Switzerland. The company specializes in architectural design, project development, exhibitions, and publications, serving a global audience including cultural institutions and design professionals. Their website reflects a strong market position with a comprehensive portfolio and professional presentation. The technical infrastructure is built on WordPress with modern JavaScript frameworks such as Alpine.js and jQuery, supplemented by Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers are missing which could be improved. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of certain security headers and a cookie consent mechanism indicates room for enhancement in compliance and security best practices. Overall, the website is professional, trustworthy, and content-rich, but the lack of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy. Strategic verification of domain registration and implementation of additional security headers and privacy mechanisms are recommended.

P

Philippe Meyer Architecte

philippemeyer.ch

54

Philippe Meyer Architecte is a small Swiss architectural firm presenting its portfolio, projects, competitions, essays, and photography through a professionally designed Drupal-based website. The site targets architecture clients and collaborators, showcasing the firm's design capabilities and team. The technical infrastructure includes Drupal CMS and Matomo analytics with privacy-conscious settings such as Do Not Track enabled. The website is mobile optimized with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enabled but lacks security headers and formal privacy or cookie policies, which are important for compliance and trust. No direct contact emails or phone numbers are provided, only a contact form. Overall, the website is professional and trustworthy but could improve privacy compliance and security best practices.

L

Land Sterling

landsterling.com

10

Land Sterling is a well-established real estate consultancy firm operating primarily in Dubai, UAE, with a strong presence across the Middle East, North Africa, and Europe. The company offers a comprehensive suite of property-related services including valuations, project management, investment advisory, and brokerage. With over 15 years of experience and more than 10,000 projects completed, Land Sterling positions itself as a top-tier consultancy regulated by RICS and RERA and holds ISO certification, enhancing its market credibility. The website reflects a professional and consistent brand image targeting property investors, developers, and buyers in the region. Technically, the website is built on WordPress using the Kadence theme and blocks, integrating modern SEO and analytics tools such as Rank Math and Google Tag Manager. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security measures include HTTPS and Google reCAPTCHA, but the absence of DNSSEC and security headers indicates room for improvement. Privacy compliance is weak due to missing privacy and cookie policies. From a security perspective, the site demonstrates a good baseline with encrypted connections and no exposed sensitive data. However, the lack of incident response contacts, vulnerability disclosure policies, and security headers suggests limited maturity in security governance. The domain registration data is consistent with the business claims, showing a long-standing domain without privacy protection, which supports legitimacy. Overall, Land Sterling's digital presence is professional and trustworthy, but it should enhance privacy compliance and security best practices to reduce risk and improve user trust.

B

Bloom Facilities Management

bfm.ae

38

Bloom Facilities Management is a UAE-based company specializing in providing comprehensive facilities management services to both corporate and residential clients. Their offerings include corporate services, residential services, project management, innovation initiatives, and business excellence programs. The company positions itself as a professional and customer-centric service provider within the UAE market. Technically, the website is built on Concrete CMS, uses modern JavaScript libraries such as jQuery and jQuery UI, and integrates Google Analytics and Google reCAPTCHA for analytics and security respectively. The site is hosted under Etisalat's registrar and nameservers, consistent with its UAE location. Security posture is solid with HTTPS enforced and spam protection on forms, though there is room for improvement in security headers and published security policies. Privacy and cookie policies are not found, indicating a compliance gap. Overall, the website is professional and functional with moderate tracking and good user experience.

H

Horton Interiors

hortoninteriors.com

54

Horton Interiors is a small, award-winning interior design and fit-out company based in Dubai, serving clients across the GCC region. The company specializes in delivering high-quality interior design solutions and fit-out services, positioning itself as a reputable player in the real estate and construction sector. The website reflects a professional business model focused on service delivery to businesses and individuals seeking interior design expertise. Technically, the website is built on WordPress using the Kadence theme and blocks, with integrations for SEO (Rank Math), multilingual support (WPML), and marketing analytics (Google Tag Manager, Facebook Pixel, Hotjar). The site is mobile-optimized and demonstrates good SEO practices with structured data and meta tags. Security-wise, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and published security policies. No privacy or cookie policies were found, indicating a gap in compliance with GDPR and related regulations. The domain registration is consistent with the business claims, showing no suspicious patterns and a legitimate registration history since 2021. Overall, the website is professional and credible but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

E

Ejadah

ejadah.com

69

Ejadah is a prominent asset management company based in the United Arab Emirates, specializing in real estate asset management and community solutions. The company serves a broad range of sectors including residential, retail, commercial, hospitality, and mixed-use developments. Their market position is strong within the UAE, supported by a large workforce and extensive managed property portfolio. The website reflects a professional business with clear service offerings such as facilities management, security management, and consultancy solutions. Technically, the website is built on the Webflow platform and leverages modern web technologies including Google Analytics, Google Tag Manager, and Google reCAPTCHA for security and analytics. The site is mobile-optimized with good SEO and accessibility features, although some improvements in security headers and incident response information could enhance its posture. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and a public vulnerability disclosure policy. No WHOIS data was found for the domain, which raises questions about domain registration status, though the website content and client portfolio suggest a legitimate business. Overall, the security posture is solid but could benefit from enhanced transparency and technical controls. The overall risk assessment indicates a trustworthy and professional business website with minor gaps in domain registration transparency and security best practices. Strategic recommendations include adding security headers, publishing a security.txt file, and providing clear contact information for incident response to strengthen trust and compliance.

The Smart Built Environment Awards website serves as a professional platform to recognize excellence in the built environment sector, focusing on property management, community management, facilities management, and PropTech. The site is positioned as a regional leader in its niche, offering nomination, sponsorship, and event booking services. The business targets industry professionals and stakeholders primarily in the UAE and surrounding regions. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various UI libraries, with integration of Google Analytics and Facebook Pixel for marketing and tracking. The site is mobile optimized and presents a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, and does not provide visible privacy or cookie policies, which impacts compliance and trust. Overall, the domain registration is consistent with the business claims and shows no suspicious patterns.

I

Imdaad

imdaad.ae

57

Imdaad is a leading integrated facilities management company based in Dubai, UAE, with a strong presence across the Middle East. The company offers a comprehensive range of services including Hard FM, Environmental Services, Material Recovery, Soft FM, Home Maintenance, Fire Detection, and Lift Systems. Imdaad operates through multiple subsidiaries and brands, serving a diverse clientele with a multi-national workforce. The website reflects a mature digital presence built on modern technologies such as Next.js and React, with good performance and mobile optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy and cookie policies. WHOIS data confirms legitimacy with consistent registration details and no privacy protection, supporting trustworthiness. Overall, the site is professional, content-rich, and well-branded, targeting business customers in the facilities management sector.

G

GBC Italia

gbcitalia.org

43

GBC Italia is a well-established non-profit organization dedicated to promoting sustainable building practices in Italy. As part of the global World Green Building Council network, it offers certification programs, training, events, and research to support green building initiatives. The website reflects a professional presence with a clear focus on sustainability and education, targeting professionals and organizations in the real estate and environmental sectors. The organization has a medium size and a history dating back to 2007, supported by consistent branding and trust indicators such as social media presence and structured data.

S

Stamm Bau AG

stamm-bau.ch

63

Stamm Bau AG is a well-established Swiss construction company with a history dating back to 1844. The company offers a comprehensive range of construction, renovation, and building services, consolidating 12 specialized trades under one roof. Their market position is strong as the largest construction company in their region, serving both private and commercial clients. The website reflects a professional business model focused on full-service project delivery from concept to maintenance. Technically, the website is built on Silverstripe CMS 5.2 and incorporates modern JavaScript libraries such as jQuery, Swiper, and Photoswipe. The site is mobile-optimized, well-structured, and SEO-friendly, with good performance and accessibility features. Privacy and cookie policies are implemented with consent mechanisms, and the site uses Google Analytics with compliance considerations. From a security perspective, the site enforces HTTPS, employs security headers, and avoids exposing sensitive data. However, there is no explicit incident response contact or vulnerability disclosure policy visible. The domain registration is consistent with the business identity, showing a long history and legitimacy. Overall, the security posture is solid but could be enhanced with formalized incident response and disclosure policies. The overall risk assessment is low, with the website demonstrating professionalism, trustworthiness, and compliance with privacy regulations. Strategic recommendations include adding incident response contacts, publishing a vulnerability disclosure policy, and enhancing accessibility compliance to further strengthen security and trust.

D

Die Siedlung Saarbrücken

siedlung-saarbruecken.de

41

Die Siedlung Saarbrücken operates as a municipal housing provider for the city of Saarbrücken, Germany, offering rental apartments through a transparent and fair process. The website serves as a portal for current housing offers and provides a registration option for notifications about new listings. The target audience is local residents seeking affordable housing solutions. The business model is focused on public sector housing management with a medium-sized operational scale. Technically, the website uses basic HTML and CSS with custom fonts but lacks advanced frameworks or CMS indications. The site is moderately optimized for performance and mobile use but lacks accessibility and SEO enhancements. No analytics or tracking technologies were detected, indicating a privacy-conscious or minimalistic approach. From a security perspective, the site lacks visible security headers and published policies such as privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response channels are provided, limiting transparency and user trust. The domain registration data is consistent with the business's geographic and operational profile, supporting legitimacy. Overall, the website is functional and provides relevant content but requires improvements in privacy compliance, security posture, and user contact transparency to enhance trust and regulatory adherence.

S

SF Urban Properties AG

sfurban.ch

54

SF Urban Properties AG is a Swiss real estate company founded in 2001 and publicly listed on the SIX Swiss Exchange since 2012. The company focuses on managing rental properties and selling condominium units in prime urban locations, primarily Zurich and Basel. Their business model combines stable rental income with value creation through property sales, targeting investors and shareholders seeking attractive returns. The website reflects a mature digital presence built on TYPO3 CMS, with good mobile optimization and clear navigation. Integration of marketing and analytics tools like Pardot and Google Tag Manager indicates a modern approach to digital engagement. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though no explicit security policy or incident response contacts are published. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its investor and client audience effectively.

E

European Tour Destinations

europeantourdestinations.com

49

European Tour Destinations operates a professional website promoting a network of world class golf venues associated with The European Tour group. The site targets golf enthusiasts, travelers, and real estate investors, offering information on golf destinations across multiple countries and continents. The business model focuses on venue promotion, real estate, and business news related to golf tourism. Technically, the website is built on WordPress with popular plugins like Visual Composer and Slider Revolution, and integrates analytics and tracking tools such as Google Tag Manager and Facebook Pixel. The site is mobile optimized and performs moderately well, though the WordPress version is outdated, which could pose security risks. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and incident response information. Privacy compliance is basic, with no visible privacy policy or terms of service pages. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures.

A

Austrian Exhibition Experts GmbH

immobilien-messe.at

52

The website 'immobilien-messe.at' represents the Wiener Immobilien Messe (WIM), Austria's largest real estate exhibition focused on residential properties. Organized by Austrian Exhibition Experts GmbH, the site offers detailed information about the event scheduled for March 14-15, 2026, including exhibitor details, visitor guidance, and related services such as financing and legal advice. The platform targets prospective property buyers, investors, and industry professionals, positioning itself as a key marketplace in the Austrian real estate sector. Technically, the website is built on WordPress using modern plugins like Yoast SEO, Complianz GDPR Cookie Consent, and Google Tag Manager for analytics and compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Security measures include HTTPS enforcement, email obfuscation, and use of security-related plugins, although some security headers could be improved. From a security and compliance perspective, the site is GDPR compliant with a clear cookie consent mechanism and privacy policy. Contact information is transparent and professionally presented. No critical vulnerabilities or suspicious indicators were found. However, the absence of a security policy or incident response contact is noted. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure mechanism to further strengthen trust and security posture.

A

ATTYS 05 Rechtsanwälte GmbH

attys.law

48

ATTYS 05 Rechtsanwälte GmbH is a young, dynamic Austrian law firm specializing in employment, corporate, real estate, and intellectual property law. The firm targets entrepreneurial clients and businesses, offering tailored, transparent, and forward-looking legal solutions. Their market position is that of a modern boutique law firm with a strong emphasis on business and IP legal services. Technically, the website is built on WordPress with modern plugins and SEO optimizations, delivering a good user experience and mobile responsiveness. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is mostly met with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the firm's business objectives.