Real Estate security reports

T

Turako AB

turako.se

33

Turako AB is a specialized Swedish company focused on developing, owning, and managing real estate properties dedicated to educational environments such as schools and preschools. Founded in 2009, the company has successfully completed over 30 projects and serves a target audience including architects, school operators, entrepreneurs, and sustainability consultants. Their business model centers on creating modern, sustainable, and child-focused educational facilities, positioning them as a trusted player in the Swedish real estate and education sectors. Technically, the website is built on WordPress using modern themes and plugins like Yoast SEO and Contact Form 7, ensuring good SEO and user experience. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and performance tuning. No advanced analytics or tracking scripts were detected, indicating a minimal user tracking approach. From a security perspective, the site enforces HTTPS and uses secure contact forms but lacks important security headers and published security policies. There are no visible vulnerabilities or exposed sensitive data, but the absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. Incident response and vulnerability disclosure mechanisms are also not present. Overall, Turako AB's website reflects a professional and credible business with a strong market position in educational real estate in Sweden. However, to enhance trust and compliance, the company should implement comprehensive privacy and cookie policies, security headers, and incident response information.

V

Värderingsdata

varderingsdata.se

56

Värderingsdata is a Swedish company specializing in providing high-quality real-time information and powerful analysis, valuation, and price information services for private residential properties. Positioned as Sweden's broadest provider of web services for successful real estate transactions, the company targets professional actors in the Swedish real estate market, including banks, real estate agents, and financial institutions. Their business model revolves around delivering automated valuation models (AVM) and comprehensive property data to support efficient and successful property transactions. Technically, the website employs modern technologies such as the UKit CSS framework, Google reCAPTCHA Enterprise for bot protection, and Cookiebot for consent management. The site is mobile-optimized, uses HTTPS with good SSL configuration, and integrates analytics and marketing tools like Google Analytics and Upsales. The technical infrastructure reflects a mature digital presence with attention to user experience and privacy compliance. From a security perspective, the site demonstrates good practices including HTTPS enforcement, secure forms with CSRF protection, and cookie consent management. However, explicit security policies and incident response information are not published, and some recommended security headers are not explicitly detected. No vulnerabilities or suspicious activities were found in the analysis. Overall, Värderingsdata presents a professional, trustworthy, and well-structured online presence with strong compliance to privacy regulations and a solid security posture. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and improving accessibility compliance to further strengthen their digital maturity and trustworthiness.

N

Novier

novire.se

51

Novier is a Swedish real estate advisory firm offering comprehensive services from property valuation to management. The company positions itself as a 360-degree real estate advisor with senior partners deeply involved in client engagements. Their website demonstrates a mature digital presence built on modern technologies such as React and Next.js, with integration of cookie consent management and analytics tools. Security posture is strong with HTTPS and consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is professional, GDPR compliant, and provides rich content including news, videos, and service details, supporting a medium-sized business in the real estate sector.

A

AktivBo AB

aktivbo.se

50

AktivBo AB operates a specialized SaaS platform focused on tenant experience and data-driven analytics for the real estate sector, primarily serving property and management companies in Sweden. Their platform integrates tenant surveys, real-time analytics, benchmarking against over 450 property companies, and advanced AI-based analysis to provide actionable insights and improve customer satisfaction and profitability. The company positions itself as a market leader in tenant experience improvements with a strong emphasis on social sustainability and ESG reporting support. Technically, the website is built on the HubSpot CMS platform, leveraging modern JavaScript libraries such as jQuery and Flickity for UI components, and integrates Google reCAPTCHA Enterprise for form security. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Security posture is strong with HTTPS enforced, security headers implied by the hosting platform, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, aligned with GDPR requirements. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, representing areas for improvement. Overall, the website reflects a professional, trustworthy, and mature digital presence suitable for its target market.

O

Olav Thon Gruppen

olavthon.no

61

Olav Thon Gruppen is a leading Norwegian enterprise specializing in real estate, hospitality, and retail sectors. The company operates a large portfolio including commercial properties, residential housing, shopping centers, and hotels across Norway and other Scandinavian countries. Their website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with their market position as Norway's largest private real estate actor. The site targets a broad audience including tenants, buyers, and business partners. Technically, the website leverages modern technologies such as Google Tag Manager, Microsoft Application Insights, and reCAPTCHA Enterprise, hosted likely on Microsoft Azure, ensuring robust performance and security monitoring. Privacy compliance is well addressed with a detailed cookie consent mechanism and a comprehensive privacy policy in Norwegian, supporting GDPR adherence. Security posture is strong with HTTPS, bot protection, and no visible vulnerabilities or exposed sensitive data. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity suitable for an enterprise of this scale.

F

Fortinova

fortinova.se

33

Fortinova is a private real estate company operating in western Sweden, specializing in residential and commercial property rentals. The company positions itself as a growing and responsible market player with a focus on sustainability and customer satisfaction. Their website reflects a professional and modern digital presence, leveraging WordPress CMS with SEO and accessibility best practices. The technical infrastructure includes modern JavaScript libraries and tracking tools, ensuring good user experience and performance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and vulnerability disclosure practices could be improved. Overall, the website and domain registration details align well, indicating a trustworthy and legitimate business.

G

GarBo Försäkring AB

gar-bo.se

54

GarBo Försäkring AB is a leading Swedish insurance company specializing in construction-related insurance products and inspection services. The company offers a broad portfolio of insurance solutions such as payment guarantees, defect insurance, completion insurance, and specialized homeowner insurance. Their target audience includes contractors, housing cooperatives, and private homeowners in Sweden. GarBo positions itself as a trusted partner in creating safer building processes and more secure homes, supported by educational initiatives like podcasts and training programs. The website reflects a professional and consistent brand image with comprehensive service offerings and clear contact channels. Technically, the website is built on a modern stack including ASP.NET Core, Umbraco CMS, Bootstrap, and integrates with Microsoft Azure cloud services. It employs Google Tag Manager and Google Analytics for tracking, alongside CookieTractor for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine understanding. Hosting and security infrastructure appear robust, with HTTPS enforced and appropriate security headers in place. From a security perspective, GarBo demonstrates good practices including secure session management, anti-forgery tokens, and a comprehensive cookie consent mechanism aligned with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy or incident response page, which could enhance transparency and preparedness. Overall, the security posture is strong, supporting the company's credibility and trustworthiness. The overall risk assessment is low, with the website presenting a professional, secure, and compliant digital presence. Strategic recommendations include publishing explicit security and incident response policies, maintaining vigilance on third-party scripts, and considering a vulnerability disclosure program to further strengthen security culture and stakeholder trust.

S

Security Assistance Syd AB

secass.se

0

Security Assistance Syd AB is a certified and authorized security service provider based in Malmö, Sweden, offering a comprehensive range of security solutions including guarding services, alarm monitoring, camera surveillance, and security consulting. The company targets private individuals, businesses, and public sector clients across Sweden, positioning itself as a reliable partner with certifications such as ISO 9001 and SSF136. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site is built on WordPress with Elementor and integrates modern SEO and analytics tools, ensuring good performance and mobile optimization. Security-wise, the site enforces HTTPS, employs cookie consent mechanisms, and uses spam protection on forms, though it lacks explicit security policy and incident response information. Overall, the domain registration details align well with the business identity, supporting a high legitimacy score.

N

Niam AB

niam.se

58

Niam AB is a well-established Northern European fund manager specializing in real estate, infrastructure, and credit investments. Founded in 1998 and headquartered in Stockholm, Sweden, Niam positions itself as a leading player in the European investment fund market, focusing on creating lasting value for clients and communities. The website reflects a professional and consistent brand image, targeting investors, partners, and potential employees with clear navigation and relevant content. Technically, the site is built on modern web standards using Umbraco CMS, Bootstrap framework, and integrates Cookiebot for GDPR-compliant cookie management along with Google Tag Manager for analytics. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through comprehensive privacy and cookie policies and active consent mechanisms. Overall, the website demonstrates a mature digital presence with good performance, accessibility, and SEO practices, supporting the company's credibility and trustworthiness.

L

Lundin Fastighetsbyrå

lundin.se

47

Lundin Fastighetsbyrå is a well-established real estate agency based in Gothenburg, Sweden, with over 40 years of experience in providing comprehensive real estate brokerage services including property sales, valuations, buyer registration, and new production projects. The company positions itself as a trusted local expert with a strong market presence and a medium-sized team. The website reflects this professionalism with clear branding, consistent content, and a user-friendly interface targeting individuals looking to buy or sell properties in the Gothenburg area. Technically, the site employs modern JavaScript libraries and tracking tools with appropriate consent mechanisms, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS and manages user consent effectively but lacks explicit security policies and some recommended HTTP security headers. Overall, the website is trustworthy and compliant with GDPR, though it could improve by publishing terms of service and incident response information.

A

Avy

tmpl.se

49

Avy is a leading Nordic digital housing platform that simplifies the residential journey for nearly 400,000 households through a comprehensive solution spanning from move-in to move-out. The company offers a SaaS platform tailored for property managers, housing companies, and residents, featuring modules for property management, communication, resident services, smart property features, AI-driven insights, and integration capabilities. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization, leveraging modern web technologies such as Webflow, Google Tag Manager, Hotjar, and LinkedIn Insight Tag. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security and privacy policies are not prominently linked. The domain WHOIS data aligns well with the business claims, showing registration by Avy AB in Sweden since 2017, supporting legitimacy. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR through consent management, but could improve transparency by adding explicit terms of service, security policies, and direct contact information.

H

HomeEnter

homeenter.com

43

HomeEnter is a small business specializing in personalized home design and consulting services. Founded in 2020, it offers customized design plans, advanced visualization tools, and seamless project management to homeowners seeking tailored home transformation solutions. The website positions the company as a niche provider focused on creativity, precision, and customer-centricity in the real estate and home design sector. Technically, the site is built on WordPress using the Neve theme, enhanced with SEO and analytics plugins such as Rank Math and Jetpack. The site is mobile optimized and performs moderately well with good SEO practices and accessibility basics. Security posture is strong with HTTPS and multiple security headers implemented, though there is room for improvement in privacy compliance, particularly regarding cookie consent and explicit security policies. Overall, the domain registration details align well with the business claims, supporting legitimacy and trustworthiness.

A

Axfast AB

axfast.se

39

Axfast AB is a Swedish real estate company operating primarily in Stockholm, focusing on commercial property ownership, management, and development. As part of the Axel Johnson Gruppen, it holds a strong market position with a clear emphasis on sustainability, evidenced by BREEAM Excellent certifications. The website provides comprehensive news updates and corporate information targeting investors, tenants, and business partners. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, and Turbolinks, with a likely Ruby on Rails backend. The site is well-structured, mobile-optimized, and SEO-friendly, though some accessibility features could be improved. Security posture is moderate with CSRF protections and HTTPS implied, but lacks explicit security headers and published security policies. Privacy compliance is basic with a privacy policy and cookie consent banner present, but no terms of service or incident response details. Overall, the site is professional and trustworthy with room for security and compliance enhancements.

B

Bjurfors

bjurfors.se

48

Bjurfors is a well-established Swedish real estate company specializing in residential and commercial property brokerage, valuation, and new production sales. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. The technical infrastructure leverages modern analytics and marketing tools such as Google Tag Manager, Microsoft Application Insights, and Cookiebot for privacy compliance. Security posture is solid with HTTPS enforced and bot protection via reCAPTCHA, though some security headers could be improved. The site is fully accessible without WAF or blocking mechanisms, indicating good operational stability. Overall, Bjurfors demonstrates a high level of professionalism and compliance suitable for a large real estate enterprise.

E

Einar Mattsson AB

einarmattsson.se

42

Einar Mattsson AB is a well-established real estate company based in Stockholm, Sweden, with a history spanning 90 years. The company specializes in owning, managing, developing, and constructing residential properties, targeting residents, tenants, and property owners primarily in the Stockholm region. Their market position is strong, supported by a professional and content-rich website that clearly communicates their services and ongoing projects. Technically, the website leverages modern technologies including Microsoft Azure hosting, Matomo analytics, Cookiebot for consent management, and Microsoft Application Insights for telemetry. The site is well-optimized for mobile devices, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS, employs multiple security headers, and uses anti-CSRF cookies, indicating a robust security posture. However, explicit security policies and incident response contacts are not publicly available, which could be improved to enhance transparency and trust. Overall, the website demonstrates good privacy compliance with GDPR through Cookiebot integration and a comprehensive privacy policy. The business credibility is high, supported by consistent branding, social media presence, and clear contact information. The risk assessment is low, with no critical vulnerabilities or suspicious indicators detected.

B

Brunswick Real Estate

brunswickrealestate.com

52

Brunswick Real Estate is a Nordic-focused real estate investment manager specializing in building sustainable real estate companies through strategic partnerships and capital mandates. Established in 2003, the company has a strong market presence with multiple subsidiaries and capital partners, emphasizing sustainability and social impact. The website reflects a professional and consistent brand image targeting Nordic and international investors. Technically, the site is built on WordPress with modern JavaScript libraries and is optimized for mobile and SEO, though some accessibility features are basic. Security posture is solid with HTTPS and no visible vulnerabilities, but could benefit from enhanced security headers and public security policies. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, Brunswick Real Estate presents a credible and trustworthy digital presence aligned with its business operations.

R

Riksbyggen

riksbyggen.se

40

Riksbyggen is a major Swedish real estate company specializing in property development and management, focusing on sustainable and cooperative housing solutions. The website reflects a well-established market position with comprehensive services including housing sales, rentals, property management, and renovation projects. The target audience includes home buyers, tenants, housing cooperatives, and municipalities. The company operates primarily in Sweden and maintains a strong brand presence with consistent messaging and quality content. Technically, the website employs modern web technologies such as Bootstrap 5, jQuery, and Episerver CMS, supported by robust analytics and monitoring tools including Microsoft Application Insights and Google Tag Manager. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. From a security perspective, the site uses HTTPS and some security best practices but lacks comprehensive security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear cookie and privacy policies and consent mechanisms. Overall, the website demonstrates a mature digital presence with good security posture and privacy compliance, supporting the company's credibility and trustworthiness in the real estate sector.

M

Mäklarhuset

maklarhuset.se

52

Mäklarhuset is a prominent real estate brokerage chain in Sweden, operating over 110 offices and offering a comprehensive range of services including property sales, valuations, and brokerage matching. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization, targeting home buyers and sellers primarily in Sweden but also internationally. The company leverages multiple third-party analytics and advertising platforms to enhance marketing and user experience. Security posture is strong with HTTPS enforcement, security headers, and CSRF protections in place, alongside a robust cookie consent mechanism compliant with GDPR. However, explicit security policies and incident response contacts are not publicly disclosed, representing an area for improvement.

A

Atrium Ljungberg

atriumljungberg.se

45

Atrium Ljungberg is a leading Swedish real estate company specializing in the development and management of vibrant urban environments across major cities such as Stockholm, Göteborg, Malmö, and Uppsala. The company focuses on mixed-use developments that combine office spaces, residential areas, retail, and cultural offerings to create sustainable and attractive city districts. Their market position as one of Sweden's largest publicly listed real estate firms is supported by a comprehensive digital presence and investor relations resources. Technically, the website employs a modern technology stack including jQuery, HubSpot forms, Cookiebot for consent management, and various analytics and marketing tools such as Google Analytics, Facebook Pixel, and Microsoft Application Insights. The site is built on the Episerver CMS platform and demonstrates good mobile optimization, accessibility, and SEO practices. From a security perspective, the website enforces HTTPS, uses reCAPTCHA on forms, and manages cookie consent effectively. While explicit security headers are not fully evident, no critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear GDPR adherence and detailed cookie declarations. Overall, the website presents a professional, trustworthy, and user-friendly experience with extensive content relevant to its business domain. The domain registration details align well with the company's claims, reinforcing legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining up-to-date third-party scripts to further strengthen security posture.

S

Specialfastigheter Sverige AB

specialfastigheter.se

53

Specialfastigheter Sverige AB is a Swedish company specializing in owning, managing, and developing some of the country's most secure real estate properties, including correctional facilities, police buildings, courts, and defense headquarters. The company positions itself as a key national player in government-related real estate with a strong emphasis on security and sustainability. Their website reflects a professional and consistent brand image, targeting government entities, suppliers, and job seekers interested in security-focused real estate. Technically, the site is built on the SiteVision CMS platform, utilizing modern JavaScript libraries such as jQuery and React, and integrates Piwik PRO for analytics. The site is mobile-optimized, accessible, and SEO-friendly. Security-wise, the website enforces HTTPS, uses secure cookies, and provides cookie consent mechanisms, but lacks explicit security headers and published security policies. Overall, the site demonstrates a good security posture with room for improvement in transparency and incident response readiness. The domain registration data aligns well with the company's profile, indicating high legitimacy and trustworthiness.

T

Trygghem Bostads AB

trygghem.se

41

Trygghem Bostads AB is a Swedish real estate company specializing in land development and new construction of residential and community properties primarily in the Stockholm metropolitan area and Mälardalen region. The company targets investors and property buyers interested in these geographic markets. The website is built on WordPress using Elementor and related plugins, reflecting a moderate level of digital maturity with a professional design and good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and public security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site presents a credible business presence but would benefit from enhanced security and compliance disclosures.

M

MKB Fastighets AB

mkbfastighet.se

39

MKB Fastighets AB is a major real estate company operating primarily in Malmö, Sweden, managing approximately 27,000 apartments including student and senior housing. The company focuses on providing rental housing and new production of residential units, targeting tenants and prospective renters in the Malmö region. Their website reflects a strong market position with comprehensive service offerings and a clear business model centered on property management and rental services. Technically, the website employs a modern technology stack including Microsoft Azure hosting, ASP.NET Core backend, Vue.js frontend components, and integrates advanced analytics and monitoring tools such as Google Analytics and Microsoft Application Insights. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with structured data enhancing search engine visibility. From a security perspective, the site uses HTTPS with good SSL configuration, includes security best practices like cookie consent management, and does not expose sensitive data. However, explicit security policies and incident response information are not publicly available, which could be improved to enhance transparency and trust. Overall, the website is professional, trustworthy, and compliant with GDPR, featuring clear contact information and strong branding. The risk profile is low, with recommendations focusing on publishing security policies and vulnerability disclosure mechanisms to further strengthen security posture.

N

Nrep

nrep.com

41

Nrep is a prominent real estate company focused on investing, developing, and operating sustainable urban properties primarily in the Nordic region. The company positions itself as a leader in driving real change in real estate through innovation and sustainability, supported by its affiliation with Urban Partners. The website reflects a mature business with a clear market position and a comprehensive portfolio of projects and solutions. Technically, the site is built on WordPress with modern JavaScript libraries and integrates privacy-compliant analytics and cookie consent mechanisms. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear cookie consent and privacy policies. Overall, the website presents a professional, trustworthy, and user-friendly digital presence.

G

GESON MÄKLARE AB

gesonmaklare.se

33

GESON MÄKLARE AB is a small, family-owned real estate brokerage firm operating primarily in the Roslagen, Norrtälje, Rimbo, and Uppland regions of Sweden. The company offers a broad range of property services including sales, rentals, valuations, and consultation, supported by a professional website built on WordPress with modern SEO and user engagement tools. The website features a contact form protected by Google reCAPTCHA and integrates social media channels to enhance customer interaction. While the site employs HTTPS and basic security measures, it lacks advanced security headers and a cookie consent mechanism, which are recommended for improved GDPR compliance and security posture. The domain registration data aligns well with the business claims, indicating legitimacy and consistent ownership. Overall, the website presents a professional and trustworthy digital presence suitable for its market niche.

V

Vasakronan AB

vasakronan.se

59

Vasakronan AB is Sweden's largest real estate company specializing in owning, managing, and developing centrally located office and retail properties in major Swedish cities including Stockholm, Göteborg, Malmö, and Uppsala. The company offers over two million square meters of commercial space across more than 170 properties, targeting businesses and investors seeking premium commercial real estate solutions. Their business model focuses on long-term property leasing and urban development, positioning them as a market leader in the Swedish real estate sector. Technically, the website is built on WordPress and integrates modern tools such as Matomo Analytics for privacy-focused data collection, Google Tag Manager for tag management, and Cookiebot for comprehensive cookie consent management. The site demonstrates good mobile optimization, SEO practices, and moderate performance, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not detected in the HTML content, no critical vulnerabilities or exposed sensitive data were found. The absence of a dedicated security policy or incident response contact suggests room for improvement in transparency and readiness. Overall, Vasakronan's website reflects a professional, trustworthy, and compliant digital presence consistent with its market position. The company demonstrates strong adherence to privacy regulations and provides clear information about its services and corporate identity, supporting a high level of business credibility and user trust.

K

Kanslihuset

kanslihuset.se

43

Kanslihuset is a Swedish real estate property management company specializing in tailored solutions for smooth leasing, professional property management, and profitable operation of properties. The company targets both tenants and property owners primarily in Malmö and Lund, offering services such as rent negotiation, legal advice, and maintenance reporting. Their market position is that of a niche, trusted local property manager with a professional online presence. Technically, the website is built on the Webflow CMS platform, utilizing modern JavaScript libraries like jQuery and Finsweet CMS Slider. It employs Google Tag Manager for analytics and Cookiebot for cookie consent management, indicating a moderate level of digital maturity. The site is mobile-optimized, accessible, and SEO-friendly with proper meta tags and structured content. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policies and incident response contact information, which could be improved to enhance trust and compliance. Overall, Kanslihuset presents a professional and trustworthy digital footprint with good content quality and technical implementation. Strategic improvements in security transparency and compliance documentation would further strengthen their risk posture and customer confidence.

R

Redito AB

redito.se

40

Redito AB is a Nordic-focused independent investment management company specializing in real estate, energy, and infrastructure investments. Founded in 2012, it manages a substantial portfolio exceeding 25 billion SEK and over 350 properties. The company targets institutional and private investors seeking exposure to the Nordic property market, offering investment opportunities through its subsidiaries and direct investments. The website reflects a professional and consistent brand image with clear business descriptions and physical office locations in Stockholm and Helsinki. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Fonts and jQuery. The site is mobile-optimized and performs moderately well, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured content. However, there is room for improvement in performance optimization and accessibility enhancements. From a security perspective, the website lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is present, indicating a gap in security transparency. No WAF or blocking mechanisms were detected, and no exposed sensitive data or vulnerable libraries were found. Overall, the security posture is moderate but requires enhancements to meet best practices and regulatory requirements. The overall risk assessment suggests that while the business is credible and the website professionally maintained, improvements in privacy compliance and security policies are necessary to reduce potential risks and enhance trust. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, establishing incident response contacts, and improving accessibility and performance.

M

Modus Architects Limited

modus.co.im

48

Modus Architects Limited is a well-established, boutique architectural and interior design practice based in the Isle of Man, with over 20 years of experience. The company specializes in bespoke residential, commercial, and community architecture, offering tailored design-led solutions and turnkey project management. Their market position is strong, supported by professional certifications and positive client testimonials, targeting clients who seek innovative and sustainable architectural services. Technically, the website is built on the Jimdo CMS platform, integrating modern analytics and marketing tools, though mobile optimization and accessibility could be improved. Security posture is solid with HTTPS and cookie consent mechanisms, but could benefit from enhanced security headers and published policies. Overall, the website reflects a professional and trustworthy business with good digital maturity.

REALTY EXPERTS is a small real estate brokerage focused on the Fremont, California area, providing residential, commercial, and land property listings along with related services such as home valuation and mortgage information. The website is professionally designed with good content quality, clear navigation, and multiple lead capture forms to engage potential clients. The technical infrastructure is based on Drupal CMS with common real estate web technologies including jQuery, Google reCAPTCHA, and accessibility widgets. While the site uses HTTPS and includes bot protection, it employs an outdated jQuery version and lacks explicit security headers, which are areas for improvement. Privacy compliance is basic with a privacy policy and terms of service present but no cookie consent mechanism detected. Overall, the site is trustworthy and legitimate, with consistent WHOIS data and clear business information.

T

Tevir Group

tevirgroup.com

54

Tevir Group is a privately-held investment management company based in the Isle of Man, focusing on a diversified portfolio including property management, redevelopment, venture capital investments, and facilities management. The company targets investors and business partners interested in regional investment opportunities with social and economic impact. Their market position is niche, emphasizing Isle of Man commercial properties and early-stage engineering ventures. Technically, the website employs a modern tech stack including Bootstrap 4, jQuery, and Google Analytics, hosted partially on Amazon S3 for media assets. The site is mobile-optimized with good navigation and consistent branding, though accessibility features are basic. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS and trusted third-party analytics but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were found, but incident response and vulnerability disclosure mechanisms are absent. Privacy compliance is basic with privacy and cookie policies present but no active consent mechanism or GDPR compliance statements. Overall, the website presents a professional and trustworthy image with moderate risk. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance their security posture and trustworthiness.

Estilo-Immobilien Exclusiv, led by Werner Näth, is a small regional real estate agency specializing in the sale and rental of residential and commercial properties in the Rheinland-Pfalz and Saarland regions of Germany. The company offers a range of services including property marketing, market valuation, buyer matching, and financing advice. The website is built on the immoprofessional CMS platform and integrates common web technologies such as jQuery and Google Analytics. It provides a user-friendly experience with clear navigation and mobile optimization. Privacy and cookie policies are implemented with a consent manager, reflecting basic GDPR compliance. However, the site lacks advanced security policies and headers, and no incident response or vulnerability disclosure information is publicly available. Overall, the business presents a legitimate and professional front with clear contact details and a consistent brand presence.

L

Linus Capital Management GmbH

linus-capital.com

52

Linus Capital Management GmbH operates a digital platform providing private investors access to exclusive institutional real estate investments. The company positions itself as a bridge between institutional-grade real estate opportunities and private investors, offering a range of products including Private Real Estate Debt and Equity, access to leading real estate funds, and co-investment options. The platform is designed for professional and semi-professional investors, with minimum investment thresholds and a focus on transparency and ease of use. Technically, the website is built on the Webflow CMS, utilizing modern JavaScript libraries and integrated with multiple analytics and marketing tools. Security is robust, with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, featuring comprehensive privacy and cookie policies managed via Cookiebot. Overall, the website demonstrates a high level of professionalism, technical maturity, and business credibility.

M

McGarrigle Architects Limited

mcgarrigle-architects.com

46

McGarrigle Architects Limited is a well-established architectural practice based in the Isle of Man, founded in 1999. The company offers professional architectural and urban design services across private residential, public sector, and commercial projects. Their market position is strong locally, supported by professional accreditations such as RIBA and a client-focused approach emphasizing quality, sustainability, and project management. The website reflects a professional and consistent brand image with clear service offerings and client testimonials. Technically, the site is built on Squarespace, leveraging modern web technologies and providing good mobile optimization and user experience. However, performance is moderate and accessibility is basic. Security posture is adequate with HTTPS enabled but lacks important security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the website is credible and trustworthy but would benefit from enhanced security and privacy practices to meet modern compliance standards.

M

MAS PLC

masrei.com

43

MAS PLC is a publicly listed property investor and operator focused on green real estate investments in Central and Eastern Europe. The company is listed on the Johannesburg Stock Exchange and A2X Limited, with a business model centered on direct income property investments and co-investment developments with partners such as Prime Kapital. The website is built on WordPress and uses modern web technologies including jQuery and Mailchimp integration for marketing. It features GDPR-compliant cookie consent mechanisms and provides financial reports and announcements to investors. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Contact information is primarily via a contact form and newsletter subscription, with no explicit security or incident response policies published. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

Skonto Group is a Latvia-based construction and development group comprising five companies specializing in turnkey solutions for public, residential, and infrastructure projects worldwide. With approximately 25 years of experience, the group holds a strong market position in Latvia and offers a broad range of services including consulting, design, engineering, manufacturing, and maintenance. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting construction and development clients. Technically, the site uses modern tracking tools like Google Analytics and Tag Manager, with good mobile optimization and SEO practices, though no explicit CMS or hosting details are evident. Security posture is moderate; HTTPS is implied but no advanced security headers or policies are published, and no cookie consent mechanism is present. Business credibility is supported by clear subsidiary listings and certificates, but contact details are limited to a contact form and a Facebook link. Overall, the site is functional and professional but could improve in privacy compliance and security transparency.

C

Callin Wild

callinwild.com

45

Callin Wild is a professional law firm based in the Isle of Man, offering a broad range of legal services including litigation, commercial law, wills and probate, mediation, property and conveyancing, and corporate services through its subsidiary CW Corporate Services Limited. The firm targets both local and international clients, positioning itself as a leading legal service provider in its region. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the website is built on the SilverStripe CMS platform and utilizes common JavaScript libraries such as jQuery and bxSlider for UI elements. Google Analytics is implemented for visitor tracking, although no cookie consent mechanism is present. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features and comprehensive SEO optimization. From a security perspective, the site does not show evidence of HTTPS enforcement or security headers in the provided data, which are critical for protecting user data and ensuring trust. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. The absence of a vulnerability disclosure policy or security.txt file further limits transparency in security practices. However, no obvious vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is functional and professional but requires significant improvements in privacy compliance and security posture to meet modern standards. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies with consent mechanisms, deploying security headers, and establishing a vulnerability disclosure process to enhance trust and regulatory compliance.

M

Metro Safety

metrosafety.co.uk

39

Metro Safety is a UK-based company specializing in fire, health, and safety compliance services targeted primarily at property professionals including managing agents, retailers, local authorities, and social housing providers. The company positions itself as a leading provider in the UK market with a comprehensive service offering that includes risk assessments, testing, maintenance, consultancy, and training. Their digital presence reflects a mature business with a professional website built on Joomla CMS and enhanced by modern UIkit frameworks. The site is mobile optimized and provides clear navigation and relevant content, supporting their market position and business model effectively. From a security perspective, the website employs HTTPS and includes CSRF tokens, but lacks some advanced security headers and explicit incident response or vulnerability disclosure policies. Privacy compliance is partially addressed with a cookie and privacy policy page, though no active consent mechanism is present. Overall, the website demonstrates a solid business credibility and technical foundation with room for improvement in privacy and security transparency.

H

Houzz Inc.

houzz.in

65

Houzz Inc. operates a leading online platform that serves both homeowners and home professionals by providing design inspiration, professional directories, and comprehensive software tools for construction and design management. The website is well-structured, rich in content, and targets a global audience with localized versions, including India. The platform's technical infrastructure leverages modern web technologies, including JavaScript frameworks, CDN-hosted assets, and video integration via Vimeo, ensuring fast and responsive user experiences across devices. Security is robust with HTTPS enforcement and appropriate security headers, while privacy compliance is demonstrated through comprehensive privacy and cookie policies with consent mechanisms. The business maintains a high level of professionalism and trustworthiness, supported by clear contact channels and active social media presence.

H

Houzz

houzz.co.nz

52

Houzz is a leading online platform that serves both construction and design professionals as well as homeowners seeking inspiration and services for home renovation and design. The website offers a comprehensive suite of tools including professional directories, project showcases, and software solutions tailored for the construction and design industry. The platform maintains a strong market position with a large global presence and consistent branding across multiple regional domains. Technically, the site employs modern web technologies such as JavaScript frameworks, CDN hosting, and integrates with third-party services like Salesforce and Calendly to enhance user engagement and operational efficiency. Security measures are robust, with HTTPS enforcement, security headers, and CSRF protections in place, although no explicit public security policy or incident response information is found. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. Overall, the website demonstrates a high level of professionalism, technical maturity, and business credibility, making it a trustworthy platform for its target audience.

H

Houzz

houzz.ie

55

Houzz.ie is a comprehensive online platform serving both construction and design professionals as well as homeowners in Ireland. It offers a wide range of services including design and build software, a vast collection of interior design ideas, and a professional directory. The platform is well-established with a consistent brand presence and localized content for multiple countries. Technically, the website employs modern web technologies, including JavaScript frameworks, video integration, and third-party services for enhanced user interaction and scheduling. Security practices are robust, with HTTPS enforcement and appropriate security headers, ensuring safe user interactions. Privacy compliance is strong, featuring clear privacy and cookie policies with consent mechanisms. Overall, the site demonstrates a high level of professionalism, technical maturity, and business credibility.

H

Houzz

houzz.se

56

Houzz is a leading global platform providing software and services for construction and design professionals as well as homeowners seeking inspiration and professional help for home renovation and design. The website offers a comprehensive collection of photos, professional directories, and tools to facilitate project management and design. The platform is well-established with a strong market presence and localized versions for multiple countries, including Sweden. Technically, the site uses modern web technologies, including JavaScript frameworks, CDN hosting, and performance optimizations, ensuring a good user experience across devices. Security practices include HTTPS enforcement and CSRF protection, although explicit security headers should be confirmed. Privacy compliance is robust with clear policies and consent mechanisms. Overall, Houzz demonstrates a mature digital infrastructure and a strong business model focused on connecting users with home improvement professionals.

H

Houzz

houzz.dk

66

Houzz.dk is a localized Danish version of the global Houzz platform, offering a comprehensive online service for construction and design professionals as well as homeowners seeking inspiration and professional services. The platform provides powerful software tools, a vast collection of design ideas, and a directory of professionals, positioning itself as a leading player in the home improvement and real estate sector in Denmark. Technically, the site employs modern web technologies including jQuery, React-based bundles, Apollo GraphQL, and integrates with third-party services like Calendly and Vimeo for enhanced user experience. Security measures are robust with HTTPS enforcement, CSRF protection, and likely content security policies, ensuring a secure environment for users. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. Overall, the site demonstrates a high level of professionalism, technical maturity, and business credibility, making it a trustworthy platform for its target audience.

H

Houzz

houzz.es

66

Houzz is a leading online platform providing software solutions for construction and design professionals, as well as inspiration and product discovery for homeowners. The website offers a comprehensive directory of professionals including architects, interior designers, contractors, and more, supporting a large user base in Spain and internationally. The platform is well-established with a consistent brand presence and extensive content offerings including photos, articles, and videos. Technically, the site employs modern web technologies, including JavaScript frameworks, CDNs, and performance monitoring tools, ensuring a fast and responsive user experience. Security practices are robust with HTTPS enforcement, CSRF protection, and appropriate security headers, although explicit security policy and incident response pages are not found. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, Houzz demonstrates a mature digital infrastructure, strong business credibility, and a secure environment for its users.

H

Houzz

houzz.it

62

Houzz is a leading online platform serving both construction and design professionals as well as homeowners seeking inspiration and services for home improvement projects. The website offers a comprehensive suite of tools including design software, a professional directory, and extensive photo galleries. It is well-positioned in the real estate and home improvement market with a strong global presence and localized versions for multiple countries. Technically, the site employs modern web technologies such as React, jQuery, and integrates with various third-party services for analytics, advertising, and user engagement. Security is robust with HTTPS enforcement, security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, featuring comprehensive privacy and cookie policies with consent mechanisms aligned with GDPR requirements. Overall, the site demonstrates high professionalism, excellent content quality, and a secure, user-friendly experience.

H

Houzz Inc.

houzz.de

72

Houzz Inc. operates a leading online platform dedicated to home design, renovation, and professional services, targeting both homeowners and industry professionals. The website offers a vast collection of design ideas, professional directories, and software tools for project management and marketing. Its market position is strong, supported by extensive content and a large user base. Technically, the site employs modern web technologies including JavaScript frameworks, third-party integrations like Vimeo and Calendly, and is optimized for performance and mobile use. Security measures are robust, with HTTPS, security headers, and consent mechanisms in place, though no explicit security policy or incident response details are found. Overall, the site demonstrates high professionalism, good privacy compliance, and strong business credibility.

H

Houzz

houzz.fr

64

Houzz.fr is a leading online platform dedicated to home design, renovation, and professional services for both homeowners and industry professionals. It offers a vast library of interior design ideas, professional directories, and software tools tailored for artisans, architects, and designers. The platform is well-established with a strong market presence in France and globally, providing comprehensive content and services to its users. Technically, the website employs modern web technologies including JavaScript frameworks, CDN-hosted assets, and integrations with third-party services such as Google Identity and Salesforce chat. The site demonstrates good performance and mobile optimization, ensuring a positive user experience across devices. From a security perspective, Houzz.fr enforces HTTPS, utilizes security headers, and manages user consent for cookies in compliance with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policy and incident response information are not publicly available. Overall, Houzz.fr presents a mature, professional, and secure online presence with strong business credibility. Strategic recommendations include enhancing transparency around security policies and incident response, and continuous monitoring of third-party integrations to maintain security posture.

H

Houzz

houzz.co.uk

67

Houzz is a leading online platform that serves both construction and design professionals as well as homeowners seeking inspiration and professional services for home improvement projects. The platform offers a comprehensive suite of tools including design and build software, a vast collection of interior design photos, idea books, and a directory of professionals such as architects, interior designers, and contractors. The website is well-established with a domain age consistent with its business history and operates multiple regional sites to cater to different markets. Technically, Houzz employs modern web technologies, including JavaScript frameworks, CDNs, and third-party integrations like Salesforce and Calendly, ensuring a fast and responsive user experience. The security posture is strong with HTTPS enforcement, implied use of security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring clear privacy and cookie policies with consent mechanisms aligned with GDPR requirements. Overall, Houzz demonstrates a high level of professionalism, trustworthiness, and technical maturity, making it a reliable platform in the home design and renovation industry.

H

Houzz

houzz.com.au

67

Houzz is a leading online platform serving both construction and design professionals as well as homeowners seeking inspiration and services for home renovation and design. The website offers a comprehensive collection of interior design ideas, professional directories, and software tools to facilitate project management and client engagement. Technically, the site employs modern web technologies including React, GraphQL, and various third-party integrations such as Salesforce and Calendly, ensuring a performant and responsive user experience. Security measures are robust with HTTPS enforcement and appropriate security headers, though explicit security policy and incident response information are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Houzz demonstrates a mature digital presence with strong business credibility and technical infrastructure.

H

Hayden Outdoors

haydenoutdoors.com

55

Hayden Outdoors is a specialized real estate brokerage focusing on land, ranches, farms, and recreational properties across the United States. The company offers a comprehensive online platform featuring detailed property listings, auctions, and equipment sales, targeting land buyers, sellers, and outdoor enthusiasts. Their market position is strong within the niche of rural and recreational real estate, supported by professional branding and extensive digital content. Technically, the website is built on WordPress and integrates a modern tech stack including Bootstrap, Mapbox, HubSpot, and multiple analytics tools such as Google Analytics, Matomo, and Hotjar. The site is mobile-optimized, accessible, and SEO-friendly, leveraging structured data and rich media content to enhance user experience and search visibility. From a security perspective, the site employs HTTPS with good SSL configuration and uses reCAPTCHA for form protection. However, it lacks explicit security headers like Content-Security-Policy and does not publish a dedicated security or incident response policy. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism, which may pose compliance risks. Overall, Hayden Outdoors presents a professional and trustworthy online presence with strong business credibility and technical maturity. Strategic improvements in privacy compliance and security policy transparency would further enhance their risk posture and user trust.

F

Fain Signature Group

fainsignaturegroup.com

57

Fain Signature Group is a medium-sized real estate development company focused on commercial, residential, industrial, and community projects, complemented by a media network. The company has a strong regional presence with over 60 years of experience and a diversified portfolio. Their website reflects a professional and consistent brand image, targeting community partners and investors. Technically, the site is built on WordPress with modern plugins and themes, hosted likely on GoDaddy infrastructure. The security posture is solid with HTTPS and nonce protections, though it lacks some security headers and explicit privacy and cookie policies, which are critical for compliance. Overall, the site is accessible and well-structured, but improvements in privacy compliance and security best practices are recommended.