Technology security reports

W

Webtune AI

webtune.ai

63

Webtune AI is a SaaS platform specializing in autonomous AI-driven website SEO management, offering detection, resolution, and deployment of on-page SEO issues with a one-click approach. The platform targets SEO professionals, small business owners, startups, and digital marketers, positioning itself as a pioneering solution in automated SEO optimization. The website is well-branded, consistent, and associated with Scalenut, a recognized AI-SEO platform, enhancing its market credibility. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, Microsoft Clarity, Hotjar, and integrates marketing and analytics tools effectively. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS and no exposed sensitive data, though it lacks some advanced security headers and published security policies. Privacy compliance is partial, with a comprehensive privacy policy but no visible cookie consent mechanism. WHOIS data is unavailable publicly, likely due to privacy protection, which is justified for this business type. Overall, the site demonstrates a mature digital presence with room for improvement in security transparency and privacy controls.

E

Eelume AS

eelume.com

68

Eelume AS is a Norwegian technology company specializing in the development of All-Terrain Autonomous Underwater Vehicles (AUVs) and advanced marine cybernetics. Their products, including the S-Series and M-Series AUVs and underwater hyperspectral imagers, serve sectors such as energy, defense, research, and underwater exploration. The company positions itself as an innovative leader in marine technology, focusing on sustainable and cost-effective oceanic data collection and seabed mapping. The website reflects a professional and consistent brand image with comprehensive product information and a clear target audience of marine professionals and organizations. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including Google reCAPTCHA Enterprise for form security and Cloudflare services for hosting and CDN. The site is mobile-optimized, fast-loading, and accessible, with good SEO practices. However, explicit security headers are not visibly implemented, and there is no cookie policy or terms of service page detected, which are areas for improvement. From a security perspective, the site uses HTTPS and integrates advanced bot protection on its contact form, indicating a good baseline security posture. The absence of WHOIS registration details suggests privacy protection, common for tech companies, but reduces transparency. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the security posture is solid but could be enhanced by adding security headers and formal policies. The overall risk assessment is low, with the main recommendations focusing on improving privacy compliance by adding cookie consent mechanisms, publishing terms of service, and enhancing security headers. These steps will strengthen trust and compliance with data protection regulations. The website is professional, trustworthy, and well-suited for its business purpose, with minor technical and compliance improvements recommended.

T

Transactional Email API Service For Developers | Mailgun

mailgun.com

75

Mailgun is a leading transactional email API service provider targeting developers and businesses that require reliable, scalable email delivery solutions. The company offers a comprehensive suite of email services including sending, validation, optimization, and testing, positioning itself strongly in the technology sector with a large enterprise customer base including major tech companies. The website demonstrates a mature technical infrastructure built on WordPress with modern performance and SEO optimizations, ensuring excellent user experience and accessibility. Security posture is robust with HTTPS enforcement, ISO 27001 certification, and a dedicated security portal, although WHOIS data is unavailable which slightly impacts trust but is mitigated by the company's known parent entity, Sinch. Overall, Mailgun presents a professional, trustworthy, and technically sound platform for transactional email services.

T

teuto.net Netzdienste GmbH

teuto.net

72

teuto.net Netzdienste GmbH is a German-based IT service provider specializing in Kubernetes, cloud, and hosting solutions. Founded in 1996, the company offers a broad portfolio including managed Kubernetes, bare-metal hosting, private and public cloud services, consulting, and data science platforms. Their market position is that of a specialized regional provider with a strong focus on modern container orchestration and cloud infrastructure technologies. The website reflects a professional and consistent brand image targeting businesses and IT professionals seeking advanced infrastructure solutions. Technically, the website is built on WordPress with the Divi theme, leveraging modern SEO and analytics tools such as Yoast SEO, Matomo, and Google Tag Manager. Hosting and DNS are managed via InterNetX GmbH and Cloudflare respectively, ensuring good performance and security. The site is mobile-optimized and accessible with good SEO practices. From a security perspective, the site uses HTTPS with a good SSL configuration and employs clientTransferProhibited status on the domain to prevent unauthorized transfers. While security headers are not explicitly detected, the site uses reCAPTCHA and cookie consent mechanisms, indicating awareness of security and privacy best practices. No critical vulnerabilities or exposed sensitive data were found. However, enabling DNSSEC and additional security headers would enhance the security posture. Overall, the website and domain demonstrate a high level of trustworthiness and professionalism. The business is compliant with GDPR, provides clear contact information, and maintains transparency in domain registration. The risk profile is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing DNS security, publishing a formal security policy, and continuous monitoring of third-party components.

UTZ MEDIEN AG is a Swiss digital agency specializing in innovative web design, TYPO3 portal development, AI integration, and SEO services. With over 20 years of experience and a portfolio including notable clients such as SAP and Roche, the company positions itself as a trusted partner for comprehensive digital solutions. The website reflects a professional and modern digital presence, leveraging TYPO3 CMS and integrating analytics tools like Google Analytics and Matomo. Privacy and cookie consent mechanisms are well implemented, indicating a strong commitment to GDPR compliance. However, the absence of WHOIS domain registration data raises questions about domain legitimacy, which should be further investigated. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but the lack of explicit security headers and incident response information suggests room for improvement. Overall, UTZ MEDIEN AG demonstrates a mature digital infrastructure and business model with minor security and compliance gaps.

T

TwentyThree

twentythree.net

71

TwentyThree is a leading European video software company specializing in a comprehensive video marketing platform designed for businesses to leverage video content across customer journeys. The company positions itself as a pioneer with a full suite of video tools including webinars, video libraries, and personal video capabilities, targeting medium-sized to large enterprises primarily in the technology sector. The website reflects a mature digital presence with modern infrastructure, leveraging HubSpot CMS, Amazon Cloudfront hosting, and advanced analytics tools such as Google Analytics and Google Tag Manager. The site is well-optimized for mobile and SEO, providing an excellent user experience with clear navigation and professional branding. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the domain registration data corroborates the business legitimacy and history, supporting a high trust level.

P

ProFundo

profundo.no

57

ProFundo is a well-established Norwegian company specializing in fundraising and membership management solutions, offering a comprehensive CRM platform and related services tailored for non-profit organizations. The company holds a leading market position in Norway, supported by a mature digital presence and a broad portfolio of services including innovative CRM, payment solutions, communication, and creative consulting. Their website reflects a professional and consistent brand image with clear messaging targeted at voluntary organizations and fundraising entities. Technically, the site is built on WordPress with the Divi theme, leveraging modern JavaScript libraries and cloud hosting for media assets, ensuring a good user experience and moderate performance. Security measures include HTTPS, Google reCAPTCHA v3 on forms, and standard marketing and analytics integrations, although explicit security headers and incident response policies are not publicly detailed. Overall, the site demonstrates a solid security posture and privacy compliance with GDPR, supported by comprehensive privacy and cookie policies. The domain age and WHOIS data confirm the legitimacy and long-standing presence of the business. Strategic recommendations include enhancing security headers, publishing incident response information, and maintaining up-to-date software to mitigate potential vulnerabilities.

E

expoya GmbH

expoya.com

59

Expoya GmbH operates a specialized digital marketing platform focused on enhancing online visibility through AI-powered SEO tools, geo-optimization, and automated landing page creation. The company targets e-commerce shops, regional service providers, and businesses seeking to reduce dependency on paid ads by improving organic search rankings. Their platform integrates modern web technologies such as React and Next.js, ensuring a responsive and performant user experience. The website demonstrates strong privacy compliance with clear cookie consent mechanisms and comprehensive privacy policies. However, the absence of WHOIS domain registration data introduces some uncertainty regarding domain legitimacy. Security posture is generally strong with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are lacking. Overall, Expoya presents as a professional and trustworthy service provider with room for improvement in transparency and security disclosures.

A

Awelty

awelty.fr

50

Awelty is a well-established French web agency based in Amiens, specializing in digital solutions including website creation, e-commerce, custom software development, and AI integration. With over 20 years of experience, the company positions itself as a regional leader in Hauts de France, offering comprehensive digital transformation services to businesses. Their portfolio includes diverse projects such as AI-powered virtual assistants, mobile applications, and SaaS platforms, demonstrating technical maturity and innovation. Technically, the website employs a modern technology stack including PHP Symfony, Flutter, Firebase, and cloud services from Google Cloud and AWS. The site is mobile-optimized, uses Bootstrap 4 for responsive design, and integrates multiple analytics and marketing tools such as Google Analytics, Matomo, and Facebook Pixel. The CMS appears proprietary or custom-built by Awelty, supporting their specialized service offerings. From a security perspective, the site enforces HTTPS and uses secure external scripts. However, some security headers like Content-Security-Policy and X-Frame-Options are missing, which could be improved. No WHOIS registrant data is available, indicating privacy protection, which is common and justified for this type of business. The site lacks explicit privacy and security policies, which is a compliance gap. Overall, Awelty presents a professional, trustworthy digital presence with strong business credibility and technical implementation. The main risks relate to privacy policy transparency and security header enhancements. Strategic improvements in these areas would strengthen compliance and security posture.

M

Madate

madate.fr

57

Madate is a French SaaS company offering a comprehensive online appointment scheduling software tailored for various professional sectors such as beauty, medical, sports, education, and public services. The platform enables businesses to optimize their scheduling, reduce no-shows through automated reminders and prepayments, and integrate with popular tools like Google Calendar and Stripe for payments. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options including phone and login portals for users. Technically, the site leverages modern web technologies including Bootstrap 4, jQuery, and Google Analytics, hosted on the e-monsite CMS platform. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, but the site’s professionalism and business consistency support its legitimacy. Overall, Madate presents a trustworthy and functional online booking solution with room for enhanced security transparency.

W

Le meilleur logiciel de gestion d’entreprise 2025 en France

wuro.fr

57

Wuro.fr is a French SaaS platform offering a comprehensive online business management and invoicing software targeted primarily at French SMEs, entrepreneurs, and associations. The website positions itself as the leading business management software in France for 2025, providing tools for invoicing, commercial management, HR management, and performance analytics. The platform supports multiple company types and emphasizes ease of use and compliance with French tax laws. Technically, the site uses modern web technologies including Bootstrap 4, jQuery, and integrates analytics tools such as Google Analytics, Facebook Pixel, and Ahrefs Analytics. The site is mobile-optimized and uses HTTPS with valid SSL certificates, ensuring secure communications. However, no explicit cookie consent mechanism or privacy banner was detected, which may pose compliance risks under GDPR. The WHOIS data for the domain is missing, which reduces trustworthiness from a domain registration perspective and warrants further verification. Overall, the website is professional, content-rich, and trustworthy from a business and technical standpoint, but could improve privacy compliance and security header implementation.

H

Harabu Indonesia

harabu.id

56

Harabu Indonesia is a technology company specializing in innovative digital solutions aimed at supporting business and societal transformation in the era of Industry 4.0. The website presents a professional and consistent brand image, targeting businesses and government institutions in Indonesia. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses Cloudflare DNS services. The site is mobile-optimized and SEO-friendly but lacks visible security headers and privacy policies. Security posture is moderate with HTTPS enabled but no DNSSEC or advanced security headers. WHOIS data shows some inconsistencies, including a future domain creation date and registrant being the registrar company, which slightly reduces trust. Overall, the site is accessible, safe, and provides relevant content but would benefit from enhanced privacy and security disclosures.

K

Kult Byrå

kult.design

58

Kult Byrå is a small, Oslo-based technology and design agency specializing in creating visual identities, websites, and smart digital solutions for innovative clients. The website is professionally designed using modern technologies such as Astro, Preact, and Sanity CMS, reflecting a high level of digital maturity and performance. The site is mobile-optimized and accessible, with good SEO practices in place. Security posture is solid with HTTPS enabled and domain transfer protections, though DNSSEC is not enabled and security headers are missing. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the website presents a trustworthy and professional image but would benefit from enhanced privacy and security disclosures.

K

kelcible.fr

kelcible.fr

47

Kelcible.fr is a French digital marketing agency specializing in business-oriented digital strategies including SEO, paid media, CRM marketing, and web development. The company has a well-structured website built on WordPress with Elementor, showcasing a professional design and clear service offerings. The domain is registered since 2009 with OVH, indicating a stable and legitimate business presence. Technically, the site uses modern web technologies and is hosted by OVH, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

E

Exodream

exodream.com

53

Exodream is a small French digital agency specializing in web development, e-commerce solutions, SEO, and digital marketing services primarily serving the Alsace region including Colmar, Mulhouse, and Strasbourg. Founded in 2011, the company positions itself as a trusted regional partner with over a decade of experience and a focus on delivering modern, performant websites and digital strategies to boost client visibility and engagement. The website is professionally designed using Joomla CMS and integrates multiple analytics tools such as Google Analytics, Matomo, and Microsoft Clarity, reflecting a mature digital infrastructure. Security posture is adequate with HTTPS enabled and domain registration stable, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is well addressed with clear cookie consent and privacy policies. Overall, the site demonstrates a high level of business credibility and technical competence with room for enhanced security policies and incident response transparency.

D

digistats Analytics

digistats.de

49

digistats Analytics is a privacy-focused web analytics provider offering a GDPR-compliant alternative to Google Analytics. Their service emphasizes cookie-free, IP-free, and fingerprint-free tracking, targeting website owners and businesses concerned with data privacy. The platform provides real-time analytics, visitor behavior insights, geographic data, and event tracking with a lightweight tracking code. The company positions itself as a trustworthy and privacy-first analytics solution with a presence primarily in Germany and Switzerland. Technically, the website uses modern web technologies including JavaScript, SVG, and Bootstrap, hosted on Infomaniak servers. Security practices include CSRF protection and deferred script loading, but lack explicit security headers and published incident response policies. Overall, the site is well-designed, mobile-optimized, and professional, though contact information is limited to an encrypted email link without direct phone or email addresses. The domain registration appears legitimate and consistent with the business claims. No WAF or blocking mechanisms were detected, allowing full content access.

T

tchncs

tchncs.de

59

tchncs.de is a small, individual-operated platform based in Germany that provides a curated collection of open-source software services. The website hosts and links to various federated social media instances, collaboration tools, chat platforms, blogging, development, and gaming services. It operates on a donation-funded, ad-free model, targeting users interested in privacy-respecting and decentralized technology solutions. The platform emphasizes community and open-source values, positioning itself as a niche provider in the federated software ecosystem. Technically, the website uses standard web technologies including jQuery and SVG graphics, with hosting inferred to be through INWX based on nameservers. The site is moderately optimized for performance and mobile devices, with a clear and consistent branding approach. SEO and accessibility are basic but functional. Analytics are implemented via a privacy-friendly service (Plausible Analytics), indicating a focus on minimal user tracking. From a security perspective, the site uses HTTPS (assumed from URL scheme and modern practices), but lacks explicit security headers and published security policies. No incident response or vulnerability disclosure information is available, which could be improved to enhance trust and compliance. The WHOIS data is consistent with the website's claims, showing legitimate registration without privacy protection, appropriate for an individual operator. Overall, tchncs.de presents a trustworthy and well-maintained platform for open-source and federated services, with room for improvement in security policies and privacy compliance mechanisms. Strategic recommendations include implementing security headers, publishing incident response contacts, and adding cookie consent to align with GDPR best practices.

X

XLENT Norge

xlent.no

74

XLENT Norge is a Norwegian IT consulting company specializing in technology leadership, solution architecture, system development, CRM, and digital strategy. It operates as part of the XLENT Consulting Group with a combined workforce of 550 employees across Norway and Sweden. The company targets Norwegian IT sector clients and professionals seeking career opportunities in IT consulting. Their website reflects a professional and consistent brand image with clear service offerings and a focus on digital transformation and cybersecurity. Technically, the website employs modern JavaScript technologies, Matomo analytics, and cookie consent mechanisms, hosted likely behind Cloudflare infrastructure. Security posture is strong with HTTPS and cookie consent but lacks explicit security headers and published security policies. Privacy compliance is well addressed with comprehensive privacy and cookie policies. Overall, the website is trustworthy, well-designed, and serves as a credible digital presence for the company.

The website www.jynk.net represents a professional portfolio for Daniel Crabbe, a frontend engineer specializing in modern frontend technologies such as Vuejs, Nuxt, React, and WordPress development. The site showcases a variety of projects primarily in fintech, higher education, and think tank sectors, indicating a niche market positioning as a skilled freelance or consultancy developer. The business model is service-oriented, targeting clients seeking frontend engineering and design system expertise. The website content is well-structured, professional, and optimized for SEO, with good mobile responsiveness and accessibility features. Technically, the site is built on WordPress CMS with modern JavaScript frameworks and tools integrated, including TypeScript, Jest, Vitest, and Storybook JS. The use of Yoast SEO and Jetpack plugins enhances SEO and analytics capabilities. Performance is moderate with lazy loading and caching optimizations. However, no explicit hosting provider or DNSSEC information is available. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks security headers and published security policies. From a security and compliance perspective, the site lacks visible privacy, cookie, and terms of service policies, which impacts GDPR compliance and user trust. WHOIS data is missing or unavailable, raising concerns about domain registration legitimacy. Contact information is clearly provided, but no incident response or vulnerability disclosure mechanisms are published. Overall, the site is safe and professional but would benefit from improved compliance documentation and domain registration transparency. The overall risk is moderate with recommendations to implement privacy and cookie policies, add security headers, publish incident response information, and verify domain registration details to enhance trust and compliance.

W

web4business

we22solutions.com

51

web4business is a professional web design and website creation service provider based in Berlin, Germany, operating under the parent company IONOS GROUP SE. The company offers full-service web solutions including modern web design and personalized customer service, targeting businesses and professionals seeking to establish or improve their online presence. With over 10 years of experience and more than 25,000 websites created, web4business holds a solid market position in the technology sector. Technically, the website is built on TYPO3 CMS with Bootstrap framework, integrating Google Analytics and Tag Manager for analytics and klaro for cookie consent management. The site is mobile optimized and demonstrates good SEO and accessibility practices. Security posture is adequate with HTTPS enforced and privacy compliance well addressed through clear privacy and cookie policies. However, there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

T

TRINTEC Informatik GmbH

trintec.ch

48

TRINTEC Informatik GmbH is a Swiss-based IT services company specializing in consulting, sales, installation, and support of IT solutions including PCs, servers, networks, hosting, and Digitalstrom systems. The company targets both businesses and private individuals, positioning itself as a professional provider of comprehensive IT solutions. The website reflects a small-sized, regionally focused business with a consistent brand presence and clear contact information. Technically, the site is built on Joomla CMS using the Helix Ultimate framework and Bootstrap, with modern fonts and Google Tag Manager for analytics. Mobile optimization is good, though accessibility and SEO could be improved. Security posture is solid with HTTPS and CSRF tokens but lacks important security headers and a published security policy. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could enhance compliance and security practices.

MainAd is a performance marketing company specializing in dynamic advertising solutions powered by machine learning and customer journey data. Their flagship product, LOGICO, optimizes ad placements in real-time bidding environments to boost campaign performance globally. The company targets businesses seeking to enhance conversion rates and optimize media spend through tailored digital marketing strategies. Technically, the website is built on WordPress with standard SEO and analytics integrations, demonstrating moderate digital maturity. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks advanced security headers and explicit privacy or cookie policies. The absence of WHOIS data raises concerns about domain legitimacy, though the professional website and global campaign presence suggest an established business. Overall, the site is functional and professional but would benefit from improved transparency and security practices.

E

E-monsite

e-monsite.com

61

E-monsite is a French-based online platform specializing in website creation for individuals and businesses, offering free and professional website, blog, and e-commerce store creation without requiring coding skills. The platform targets a broad audience from beginners to experts, emphasizing ease of use, SEO optimization, and customizable design themes. The website is well-structured, content-rich, and professionally designed, reflecting a mature digital presence. Technically, the site uses modern web technologies including Bootstrap 4, jQuery, and integrates Google Analytics and Tag Manager for traffic analysis. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is partially addressed with a privacy policy and GDPR indicators, but lacks a visible cookie consent mechanism. WHOIS data is unavailable, which slightly reduces domain trustworthiness but the business presence and certifications like E-confiance support legitimacy. Overall, the site demonstrates a solid business and technical foundation with room for minor security and privacy enhancements.

M

MPskin

mpskin.com

64

MPskin is a specialized technology company offering an overlay solution to enhance Matterport virtual tours with advanced features such as augmented reality, multilingual support, and virtual staging. The company targets real estate professionals and digital marketers seeking to create engaging digital twins and immersive virtual experiences. Their market position is niche but well-defined, supported by a professional website and ISO 27001 certified hosting infrastructure. Technically, the website leverages modern JavaScript frameworks like Vue.js and Nuxt.js, integrates multiple analytics and marketing tools, and demonstrates strong performance and mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and certified hosting, though the absence of public WHOIS data and incident response contacts suggests areas for improvement. Overall, MPskin presents a trustworthy and professional digital presence with minor gaps in transparency and vulnerability disclosure.

S

Supermedium

supermedium.com

56

Supermedium is a small technology company specializing in 3D content creation tools leveraging generative AI workflows, primarily targeting creators and developers in the VR and immersive content space. The website demonstrates a modern technical infrastructure using A-Frame and Three.js for WebVR experiences, indicating a focus on cutting-edge web technologies. While the site is professionally designed with good user experience and mobile optimization, it lacks critical compliance elements such as privacy and cookie policies, and contact information, which impacts trust and regulatory adherence. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers, suggesting room for improvement in domain and web security configurations. Overall, the business appears legitimate with consistent domain registration data and a clear niche market focus.

C

Cmsbox GmbH

cmsbox.ch

57

Cmsbox GmbH is a Swiss-based technology company specializing in a proprietary content management system designed to simplify website editing and enable rapid custom web design implementation. The company targets businesses and web professionals seeking efficient CMS solutions with a focus on ease of use and responsive design. Their market position is niche, emphasizing Swiss software quality and personalized service. Technically, the website employs modern web standards, integrates Google Analytics, Tag Manager, and reCAPTCHA for security and analytics, and uses their own Cmsbox CMS platform. The site is mobile-optimized and presents a professional user experience. Security posture is solid with HTTPS and anti-bot measures, though lacking explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professional, with clear contact information and social media presence. Recommendations include enhancing privacy compliance and security transparency to improve trust and compliance.

C

Call-Up Communication & Design

call-up.ch

50

Call-Up Communication & Design is a Swiss-based web design agency specializing in affordable and professional web solutions for small and medium-sized enterprises (KMU) across Switzerland. With over 20 years of experience and more than 650 customer projects completed, the company offers a comprehensive range of services including web design, CMS implementation (notably Contao), e-commerce solutions, hosting, SEO, and online marketing. Their market position is that of a trusted local agency with a strong portfolio and client references. Technically, the website is built on modern web standards with a CMS backend, uses common JavaScript libraries, and is mobile optimized with good SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though some security headers and explicit policies are missing. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and well-aligned with the business claims. Recommendations include enhancing privacy compliance with cookie consent, publishing a security policy, and adding incident response contacts to improve trust and compliance.

The website gmd-tg.ch currently serves as a default hosting start page provided by TRINTEC Hosting, indicating that the domain is hosted by TRINTEC and redirects users to the main site trintec.ch. The business focus appears to be web hosting services, targeting a general audience primarily in Switzerland. The site content is minimal, with no privacy, cookie, or terms of service policies present, and limited contact information consisting of an email and physical address. Technically, the site uses basic HTML and CSS without modern frameworks or CMS, and lacks mobile optimization and accessibility features. Security posture is weak due to absence of HTTPS and security headers, and no incident response or vulnerability disclosure information is provided.

S

Stolz WEB GmbH

stolzweb.ch

47

Stolz WEB GmbH is a Swiss-based small technology company specializing in custom web development, online shops, and web applications. Founded in 2012, the company offers tailored software solutions including their proprietary CMS 'Simpli', targeting designers, agencies, and businesses seeking bespoke digital solutions. The website reflects a professional and consistent brand image with clear service descriptions and customer testimonials, positioning Stolz WEB as a reliable niche player in the Swiss web development market. Technically, the site employs modern web technologies such as HTML5, CSS, JavaScript, PHP, and Bootstrap, with a moderate performance profile and good mobile optimization. Analytics are implemented using Google Analytics with IP anonymization and Matomo, indicating some privacy awareness. Security posture is adequate with HTTPS enabled but lacks standard security headers and explicit security policies. Contact information is comprehensive and clearly presented, though privacy and terms policies are missing. Overall, the website is trustworthy and professional but could improve in privacy compliance and security best practices.

B

BOTfriends

botfriendsx.com

63

BOTfriends X is a conversational AI platform designed to enable businesses and developers to build, optimize, and scale virtual assistants efficiently. The platform offers a comprehensive suite of tools including AI workflow management, human handover capabilities, and integration with various NLU services. Positioned as a specialized SaaS provider in the conversational AI market, BOTfriends targets enterprises seeking advanced AI-driven customer engagement solutions. The company was founded in 2019 and operates primarily out of Germany, reflecting a medium-sized technology business profile. Technically, the website leverages modern web technologies such as Vue.js, Nuxt.js, and Vuetify, ensuring a responsive and user-friendly interface. The use of Google Fonts and Material Design Icons enhances the visual appeal and usability. Hosting and domain registration are managed through reputable providers, although DNSSEC is not enabled, representing a minor security gap. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and uses secure input types for authentication forms. However, no explicit security headers were detected in the provided data, and there is no published security or incident response policy. The absence of privacy and cookie policies reduces compliance confidence, although the platform does collect analytics data via Chatbase. The WHOIS data indicates a consistent and legitimate domain registration with no suspicious patterns. Overall, BOTfriends X presents a professional and credible online presence with a solid technical foundation. To enhance trust and compliance, it is recommended to publish comprehensive privacy and cookie policies, enable DNSSEC, and implement standard security headers. These improvements will strengthen the platform's security posture and regulatory adherence, supporting its growth in the competitive conversational AI market.

V

Viakom

viakom.cloud

49

Viakom is a German technology company specializing in modular, open-source-based digital solutions focused on cloud providing, service providing, and infrastructure providing. The company targets business and public sector clients seeking digital sovereignty and tailored IT solutions. Their website is professionally designed, mobile-optimized, and SEO-friendly, built on WordPress with modern plugins and analytics integration. Security posture is good with HTTPS enabled, but lacks explicit security headers and formal privacy or cookie policies. No incident response or vulnerability disclosure information is present, indicating room for improvement in compliance and transparency. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

C

Creanet Internet Service AG

creanet.ch

77

Creanet Internet Service AG is a Swiss-based web agency specializing in web design, IT security, cloud solutions, and digital signage, primarily serving the regions of Luzern, Sursee, Zug, Basel, and Zürich. The company positions itself as a regional expert offering tailored IT and web services to small and medium-sized enterprises, emphasizing project planning, execution, and ongoing support. Their service portfolio includes web development, SEO, online marketing, IT security solutions such as ESET and SonicWALL, and cloud services, supported by a professional and user-friendly digital presence. Technically, the website is built on the CONTENS CMS platform and leverages modern web technologies including jQuery, Flickity for carousels, and Lottie for animations. Analytics are implemented via Google Analytics and Matomo, with a robust cookie consent mechanism powered by CookieHub, reflecting a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO practices, although accessibility could be further enhanced. From a security perspective, the site enforces HTTPS and employs cookie consent for privacy compliance. While explicit security headers are not evident, the company promotes IT security services and uses reputable security products. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, Creanet Internet Service AG presents a professional, trustworthy, and well-structured online presence with strong regional market positioning. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving accessibility standards to further strengthen their security posture and compliance.

FlectraHQ operates as an open-source ERP and CRM software provider, offering a comprehensive suite of business management tools including sales, marketing, accounting, inventory, and human resources modules. The company targets businesses seeking customizable and integrated ERP/CRM solutions, positioning itself as a niche player in the open-source software market since its domain registration in 2016. The website content is well-structured, detailing extensive features and industry applications, reflecting a mature product offering. Technically, the website is built on the Flectra CMS/framework, utilizing modern web technologies such as Bootstrap and FontAwesome, with Cloudflare DNS services and Tawk.to live chat integration. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with deferred loading of JavaScript assets. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No privacy or cookie policies were found, indicating gaps in privacy compliance. No incident response or vulnerability disclosure information is published, which could impact trust and security readiness. Overall, the website is professional and content-rich, with moderate security posture and privacy compliance. Strategic improvements in security headers, privacy policies, and incident response transparency would enhance trust and compliance.

S

SPOTHEROZ

spotheroz.ch

56

SPOTHEROZ is a Swiss-based creative studio specializing in the intersection of planning, design, and technology. The company positions itself as a niche player offering art direction, design, and technology integration services primarily targeting creative professionals and businesses seeking innovative digital solutions. The website reflects a modern and visually appealing design, leveraging Webflow CMS and advanced 3D graphics via Spline, indicating a moderate level of digital maturity and technical sophistication. However, the site lacks comprehensive privacy and cookie policies, direct contact information such as emails or phone numbers, and explicit security policies, which are critical for compliance and trust. The security posture is minimal with no detected security headers or incident response contacts, representing an area for improvement. Overall, the website is professional and credible but would benefit from enhanced security and privacy compliance measures to reduce risk and improve user trust.

S

Systemantics

systemantics.net

49

Systemantics is a specialized web development company focusing on CMS implementation and website creation primarily for clients in the arts, culture, architecture, education, museums, and theater sectors. Their extensive portfolio demonstrates a strong market position within these niche industries, collaborating with various designers and agencies to deliver tailored digital solutions. The company operates primarily in Germany and targets organizations seeking professional and accessible web presence. Technically, the website employs modern JavaScript frameworks and CMS platforms such as Hylex and Wordpress, with Matomo analytics for user tracking. The site is well-designed, mobile-optimized, and accessible, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. WHOIS data is unavailable or protected, which slightly impacts trust but is mitigated by the professional site content and clear contact information. Overall, Systemantics presents a credible and professional business with room to enhance privacy compliance and security transparency.

S

StatusPal UG

statuspal.io

73

StatusPal UG operates a SaaS platform providing hosted status pages and incident communication tools targeted at CTOs, DevOps, SREs, and support engineers. The company positions itself as a reliable and scalable solution for monitoring and communicating system status, with features including multi-language support, notifications, and powerful APIs. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site uses modern frameworks such as Next.js and React, integrates Google Tag Manager and Cookiebot for analytics and consent management, and employs SVG graphics for visual appeal. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and published security policies are absent. Overall, the domain WHOIS data is privacy protected, which is common for SaaS businesses, and no suspicious patterns are detected. The website demonstrates high trustworthiness and professionalism.

H

hosttech GmbH

hosttech.at

61

Hosttech GmbH is a well-established Austrian web hosting provider founded in 2000, offering domain registration, web hosting, and server solutions primarily to Austrian businesses and individuals. The company maintains a strong local presence with sister sites in Switzerland and Germany, reinforcing its regional market position. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content relevant to its target audience. Technically, the site is built on WordPress with Elementor, integrating modern marketing and analytics tools such as HubSpot and Google Tag Manager. Security posture is strong with HTTPS enforced, appropriate security headers, and GDPR-compliant cookie consent mechanisms. However, the site lacks a dedicated security policy and vulnerability disclosure program, which could enhance trust and incident readiness. Overall, Hosttech demonstrates a mature digital infrastructure and trustworthy business operations with room for improvement in security transparency and accessibility.

H

hosttech AG

hosttech.ch

64

hosttech AG is a Swiss-based technology company specializing in web hosting, domain registration, and server hosting services. Established in 2000, it holds a strong position in the Swiss market with subsidiaries in Austria and Germany, targeting businesses and individuals seeking reliable hosting solutions. The website reflects a mature digital presence with a professional design and clear navigation tailored for its target audience. Technically, the site is built on WordPress with Elementor, leveraging modern analytics and marketing tools such as Matomo and HubSpot, while maintaining GDPR compliance through comprehensive privacy and cookie policies. Security posture is robust with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website demonstrates a trustworthy and professional business with a solid technical foundation and good privacy practices.

M

MTF Solutions AG

mtf.ch

10

MTF Solutions AG is a Swiss IT company specializing in digital transformation, consulting, cloud solutions, and holistic IT services tailored for small and medium-sized enterprises (SMEs). With a strong regional presence across Switzerland and Liechtenstein, the company positions itself as a trusted partner for future-oriented digitalization, offering a comprehensive portfolio including IT management, cybersecurity, modern workplace solutions, business applications, professional services, and cloud infrastructure. Their market position is solid within the Swiss SME segment, emphasizing competence, innovation, and regional proximity. Technically, the website employs modern web technologies such as Google Tag Manager, Cookiebot for consent management, and SVG graphics for scalable visuals. The presence of remote support links via TeamViewer indicates operational readiness to assist clients efficiently. The site is mobile-optimized with lazy loading for performance, though accessibility features could be enhanced. SEO practices are good, supported by structured data and meta tags. From a security standpoint, the website enforces HTTPS with strong SSL configuration and includes essential security headers. Cookie consent mechanisms comply with GDPR, and no exposed sensitive data or vulnerable libraries were detected. However, explicit incident response contacts and vulnerability disclosure policies are not found, representing areas for improvement. Overall, MTF Solutions AG demonstrates a mature digital presence with strong business credibility and compliance posture. The risk profile is low, but strategic enhancements in security transparency and accessibility would further strengthen trust and operational resilience.

D

digitaleheimat GmbH

digitaleheimat.de

60

digitaleheimat GmbH is a German digital agency specializing in comprehensive online marketing solutions including SEA, SEO, social media marketing, and programming services. Established in 2011, the company has a strong market presence supported by certifications such as Google Premium Partner and a portfolio of over 1000 campaigns. The website reflects a mature digital infrastructure built on WordPress with modern plugins and frameworks, offering a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though lacking explicit security policies and headers. Overall, the business demonstrates credibility and professionalism with room for improvement in privacy and security transparency.

I

Infomaniak Network SA

infomaniak.cloud

74

Infomaniak Network SA is a Swiss-based technology company specializing in cloud infrastructure services, including public cloud IaaS solutions. The company targets businesses and developers seeking reliable, automated, and cost-effective cloud hosting. Infomaniak positions itself as a leading Swiss cloud provider with a strong emphasis on privacy, security, and sustainability, offering CHF 300 free credit to new users to encourage adoption. Technically, the website is built on modern frameworks such as React and Gatsby, ensuring fast performance, excellent mobile optimization, and good SEO practices. The infrastructure appears self-hosted with strong security configurations, including HTTPS enforcement and comprehensive security headers. Privacy compliance is well addressed with clear policies and consent mechanisms. From a security perspective, Infomaniak demonstrates maturity with ISO 27001 certification and transparent incident response contacts. No vulnerabilities or exposed sensitive data were detected. The main concern is the absence of publicly available WHOIS domain registration data, likely due to privacy protection, which slightly impacts transparency but does not undermine overall trust. Overall, Infomaniak presents a professional, secure, and privacy-conscious cloud service platform with strong business credibility. Strategic recommendations include enhancing public vulnerability disclosure, maintaining up-to-date third-party libraries, and continuing to improve transparency around data retention and incident response.

P

Papoo Software & Media GmbH

ccm19boros.de

47

The website ccm19boros.de serves as a login portal for CCM19, a cookie consent management software product developed by Papoo Software & Media GmbH. The business focuses on providing software solutions to help website operators manage cookie consent in compliance with privacy regulations. The site targets businesses requiring cookie consent management and offers a multilingual login interface. The market position appears niche, with a small company footprint and limited publicly available business information. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery. The infrastructure is hosted on servers indicated by the nameservers your-server.de and second-ns.de. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. No CMS or major frameworks are detected beyond custom theme scripts. From a security perspective, the site uses HTTPS (assumed from URL) and a POST login form with autocomplete attributes. However, no security headers such as Content-Security-Policy or HSTS are present, and no privacy or cookie policies are visible on the login page. There is no contact information or incident response details provided, which limits transparency and trust. The WHOIS data is minimal, showing only nameservers without registrant details, reducing domain trustworthiness. Overall, the website is functional for its login purpose but lacks comprehensive privacy, security, and business transparency features. The risk level is moderate due to missing policies and security headers. Strategic improvements in privacy compliance, security hardening, and business information disclosure are recommended to enhance trust and compliance.

C

Collettivo A/I

noblogs.org

55

NoBlogs.org is a niche, non-commercial blogging platform focused on radical activism, privacy, and social justice. Operated by the Collettivo A/I, it provides a space for activists and like-minded individuals to communicate and publish content without commercial influence. The platform is multilingual and emphasizes privacy and antifascist, antisexist values. Technically, the site runs on WordPress with a modern but modest tech stack, hosted by autistici.org, a known activist collective. Security posture is adequate with HTTPS and domain transfer protections but lacks advanced DNS security and published security policies. Privacy compliance is good with a clear cookie banner and privacy policy, though no terms of service or incident response information is provided. Overall, the site is trustworthy and well-aligned with its mission but could improve in security transparency and technical hardening.

M

Multimedia ABC GmbH (hilfmir.ch)

hilfmir.ch

51

Multimedia ABC GmbH, operating the website hilfmir.ch, is a Swiss-based small enterprise founded in 1999 specializing in multimedia projects, IT consulting, PC/MAC support, web development, livestreaming, and VoIP telephony services. The company targets private clients, SMEs, and associations, offering a diversified portfolio including remote support and podcast production. The website reflects a professional and consistent brand presence with clear contact information and a user-friendly interface. Technically, the site is built on Joomla CMS with modern UIkit and Yootheme frameworks, ensuring moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Q

quanta

quanta.io

66

Quanta is a technology company specializing in web performance optimization and digital sobriety solutions aimed at improving conversion rates and reducing environmental impact. The company serves a B2B market with a SaaS model, trusted by over 500 sites worldwide including notable brands such as Veepee, Cultura, Michelin, and Orange. Recently acquired by Centreon, Quanta positions itself as a key player in digital observability and environmental responsibility. Technically, the website is built on WordPress using the Divi theme, enhanced with modern technologies like jQuery, Google reCAPTCHA, and HubSpot forms. The site is well-optimized for performance and mobile devices, with good SEO and accessibility practices. Security posture is solid with HTTPS enforced and use of CAPTCHA, though security headers and explicit security policies are absent. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the website reflects a professional and trustworthy business with a clear market focus and modern digital infrastructure.

W

Wirtschaftsförderung Region Hannover

roboticscity.de

57

Robotics City Hannover is a regional robotics innovation network supported by the economic development agency of the Hannover region. It serves as a platform to promote robotics technology, support educational and startup initiatives, and foster collaboration among industry, academia, and government. The website is professionally designed, mobile-optimized, and provides comprehensive information about robotics projects, events, and news relevant to the Hannover region. The technical infrastructure includes modern JavaScript libraries and privacy-respecting Matomo analytics. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are not published. Overall, the site reflects a credible and trustworthy regional government initiative with a focus on technology and innovation.

S

Startup-Verband

startupverband.de

38

Startup-Verband is a prominent German startup association dedicated to fostering a startup-friendly environment in Germany and Europe. It serves as a large network and research pioneer with approximately 1,200 members including startups, scaleups, corporates, and investors. The organization provides political advocacy, research publications, legal resources, educational webinars, and community platforms to support innovation and entrepreneurship. The website is professionally designed, content-rich, and well-structured, reflecting a mature digital presence. Technically, it is built on TYPO3 CMS with modern JavaScript libraries, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, compliant with GDPR, and free from suspicious content or vulnerabilities.

T

Techfactory

techfactory.de

63

Techfactory is a German-based innovation hub focused on deep tech projects, offering co-working spaces and campus facilities primarily targeting startups and innovators in the technology sector. The website presents a professional and consistent brand image with a clear focus on fostering innovation in Hannover, Germany. The business model revolves around providing infrastructure and community support for deep tech innovation, positioning itself as a regional hotspot in this niche. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with integrations such as Matomo for privacy-conscious analytics and Google Maps and YouTube embeds controlled via user consent mechanisms. Hosting appears to be managed through DomainDiscount24, and the site demonstrates moderate performance with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism with granular user controls, reflecting good privacy compliance aligned with GDPR. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not evident, representing areas for improvement. No critical vulnerabilities or suspicious content were detected. Overall, the website is trustworthy and professionally maintained, with a solid privacy posture and a clear business focus. Strategic enhancements in transparency around security policies and contact information would further strengthen its credibility and user trust.

The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) that displays when a webpage cannot be loaded. The page includes embedded scripts and styles for the Chrome Dinosaur offline game, which is a built-in browser feature. There is no actual website content, business information, or external links present. The page title is 'brwsrfrm.com', but this appears to be a placeholder or internal reference rather than a live website. The technical infrastructure is limited to static HTML, CSS, and JavaScript for the offline game, with no CMS, hosting, or external services detected. Security posture is minimal but acceptable given the page's nature; no forms or data collection are present, and HTTPS is implied by the browser context. Privacy and compliance policies are absent, as is any business credibility information. Overall, this is not a public-facing website but an internal browser error page, and thus lacks typical website features and security controls.

H

hostNET Medien GmbH

han-solo.net

64

hostNET Medien GmbH is a well-established German hosting provider founded in 1994, offering a broad range of hosting solutions including managed-root cloud servers, baremetal cloud servers, reseller servers, dedicated servers, domain registration, SSL certificates, and backup services. The company targets businesses and individuals requiring reliable and professional hosting services, positioning itself as a trusted original hosting provider in Germany with memberships in key internet registries and councils. The website reflects a mature digital presence with a professional design, clear navigation, and GDPR-compliant privacy and cookie policies. Technically, the site uses a combination of Contao CMS, Bootstrap, and various JavaScript libraries, though some components like jQuery are outdated, suggesting room for modernization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies and incident response contacts. Overall, the domain registration details align well with the business claims, supporting legitimacy and trustworthiness.