Security Directory

S

Stiftung z'Rieche

zrieche.ch

48

Stiftung z'Rieche is a Swiss cultural foundation dedicated to publishing the annual 'Jahrbuch z’Rieche', a yearbook focusing on the history, culture, and societal developments of the Riehen community near Basel. Established in 1961, the foundation serves a niche audience interested in regional heritage and cultural documentation. The website is built on TYPO3 CMS and integrates modern web technologies such as Google Analytics and Google Tag Manager for visitor tracking. The site is well-designed, mobile-optimized, and provides clear navigation to its key offerings including yearbook sales and news updates. However, direct contact information such as emails or phone numbers is not explicitly displayed, relying instead on a contact form.

S

Settelen AG

settelen.ch

53

Settelen AG is a well-established Swiss mobility service provider based in Basel, with a history dating back to 1883. The company offers a comprehensive range of services including new and used car sales, garage and repair services, car rental, moving services, and group travel by bus. It holds a strong regional market position and is recognized as a leading Toyota center in Switzerland. The website is professionally designed, content-rich, and targets both private and corporate customers in the Basel region. Technically, the site is built on TYPO3 CMS with modern frontend technologies and includes Google Analytics for visitor tracking. Security posture is good with HTTPS enabled and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy compliance is basic with clear privacy and cookie policies and consent mechanisms. Overall, the site reflects a credible and trustworthy business with strong branding and user experience.

Burgergemeinde Bern is a municipal government entity serving the city and canton of Bern, Switzerland. It provides a broad range of social, cultural, environmental, educational, and scientific services aimed at improving the quality of life for its residents. The website reflects a well-established public institution with clear communication of its mission and services, supported by active social media channels and event listings. Technically, the site is built on the Plone CMS platform, leveraging modern JavaScript libraries and a responsive design that supports good user experience across devices. Security posture is solid with HTTPS enforced and CSRF protections in place, though some improvements in security headers and incident response transparency are recommended. Privacy compliance is good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a notable gap. Overall, the website is professional, trustworthy, and aligned with the expectations for a government organization.

A

AC Alpina Consult GmbH

ac-alpina.ch

49

AC Alpina Consult GmbH is a small Swiss consulting firm specializing in fiduciary and financial advisory services tailored to SMEs and private clients. The company emphasizes a personalized, trust-based coaching approach, positioning itself as a generalist guiding clients through complex financial and entrepreneurial challenges. The website reflects this with professional content, clear contact information, and trust signals such as membership in Treuhand Suisse. Technically, the site is built on WordPress with modern frontend libraries like jQuery and Slick Slider, and it is mobile-optimized with good SEO practices. Security posture is solid with HTTPS enforced and secure forms, though it lacks advanced security headers and explicit security policies. Privacy compliance is well addressed with a cookie consent mechanism and a privacy policy. Overall, the site is trustworthy and professionally maintained, supporting the company's market position as a reliable small consulting firm.

T

TourCert

tourcert.org

52

TourCert is a well-established non-profit organization specializing in sustainable tourism certification, consulting, and training. Founded in 2009, it serves tourism companies, destinations, and travelers with a comprehensive portfolio of services aimed at promoting responsible tourism practices. The website reflects a mature digital presence with multilingual support and a strong emphasis on transparency and community engagement. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security measures include HTTPS, Google reCAPTCHA, and cookie consent mechanisms, though some security headers and DNSSEC are missing. The domain registration is consistent with the organization's history and shows no suspicious patterns. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

L

LandesSportBund Niedersachsen

masterplan-inklusion-sport-nds.de

62

The website 'Masterplan Inklusion im niedersächsischen Sport' is a regional non-profit initiative led by the LandesSportBund Niedersachsen and associated sports organizations. It aims to promote inclusive sports participation for people with and without disabilities in Lower Saxony, Germany. The site provides information on goals, funding programs, events, and partner organizations, targeting sports clubs, associations, and individuals interested in inclusive sports. The business model is focused on community engagement and non-commercial support for inclusion in sports. Technically, the website is built on TYPO3 CMS with Bootstrap and jQuery, hosted by Hetzner. It demonstrates good mobile optimization, accessibility compliance (BITV-konform certified), and moderate performance. The site uses HTTPS with no visible security headers, and no analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site enforces HTTPS and obfuscates email addresses to reduce spam. However, it lacks explicit security headers and does not publish incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy, professional, and well-aligned with its non-profit mission. Strategic improvements include adding cookie consent, security headers, and public security policies to enhance compliance and security posture.

S

Stone

stone.be

60

STONE is a well-established Belgian company specializing in natural stone, terrazzo, and ceramics with over 100 years of experience. The company operates both as a producer and an international trader, serving architects, designers, and construction professionals. Their website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on Drupal 11, uses modern libraries like Slick Slider, and integrates Google Tag Manager for analytics. Security posture is good with HTTPS enabled and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy or terms of service pages detected. WHOIS data confirms the domain's legitimacy and long history, consistent with the company's claims. Overall, the website is professional, trustworthy, and business-focused with no signs of malicious or adult content.

S

Sputnik Bikeshop Zweisimmen

sputnik-bikeshop.ch

42

Sputnik Bikeshop Zweisimmen is a specialized local retail business focused on bicycles, e-bikes, and related accessories, offering sales, rental, repair, and personalized consultation services primarily in the Zweisimmen and Gstaad regions of Switzerland. The website reflects a well-structured and content-rich platform that supports the business model with clear product categories, service descriptions, and contact information. Technically, the site uses a combination of Bootstrap 3, jQuery, and various sliders to deliver a responsive and user-friendly experience, though some technologies are slightly dated. Security posture is solid with HTTPS enabled and no visible sensitive data exposure, but lacks advanced security headers and explicit incident response information. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy, though no terms of service or vulnerability disclosure policies are present. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

G

Gemeinde Melchnau

melchnau.ch

52

Gemeinde Melchnau operates as the official municipal government website for the Melchnau community in Switzerland, providing residents and visitors with comprehensive local information, administrative contacts, event agendas, and community news. The website serves as a key communication channel for local governance, public services, and community engagement. Its market position is that of a small local government entity focused on serving its constituency effectively. Technically, the website is built on WordPress 6.8.3 with a modern plugin ecosystem including Yoast SEO for search optimization, SuperPWA for progressive web app capabilities, and Contact Form 7 for user interactions. The site demonstrates good mobile optimization and moderate performance, leveraging common web technologies such as Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience. From a security perspective, the site enforces HTTPS and employs standard security practices, though explicit security headers like Content-Security-Policy and X-Frame-Options are not detected and could be improved. No vulnerabilities or exposed sensitive data were found in the HTML content. Privacy compliance is well addressed with clear privacy and cookie policies, including a consent mechanism, aligning with GDPR requirements. Overall, the website presents a low-risk profile with high trustworthiness, clear business legitimacy, and good content quality. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and publishing explicit security and incident response policies to further strengthen the security posture and compliance maturity.

K

kalijaga.id

kalijaga.id

43

kalijaga.id is a small-scale informational website focused on the historical and cultural figure Sunan Kalijaga, a prominent Wali Songo in Indonesia. The site provides articles and news related to social services and government institutions, targeting a general Indonesian audience interested in cultural heritage and social information. The website is built on WordPress with a modern theme and uses common web technologies such as jQuery, Slick Slider, and FontAwesome. It is hosted behind Cloudflare DNS but lacks DNSSEC and security headers, which are recommended for enhanced security. The site does not provide privacy, cookie, or terms of service policies, nor does it offer contact information or incident response details, which limits its privacy compliance and business credibility. WHOIS data shows inconsistencies, including a domain creation date in the future, which reduces trust in domain registration legitimacy. Overall, the website is accessible, well-structured, and safe for general audiences but would benefit from improved security practices and compliance documentation.

P

Palma Pertiwi Makmur Indonesia

palmapertiwimakmur.id

55

Palma Pertiwi Makmur Indonesia is an Indonesian agribusiness company specializing in sustainable palm oil plantation management. The website serves as an informational platform providing news and updates related to agribusiness and social government topics. Technically, the site is built on WordPress with modern plugins like Yoast SEO and uses Cloudflare for DNS services, though DNSSEC is not enabled. The security posture is moderate with HTTPS enabled but lacks advanced security headers and policies. Privacy and cookie policies are absent, and no direct contact information is provided, which impacts trust and compliance. Overall, the site is professionally designed with good content relevance but requires improvements in privacy compliance and security best practices.

C

Call-Up Communication & Design

call-up.ch

50

Call-Up Communication & Design is a Swiss-based web design agency specializing in affordable and professional web solutions for small and medium-sized enterprises (KMU) across Switzerland. With over 20 years of experience and more than 650 customer projects completed, the company offers a comprehensive range of services including web design, CMS implementation (notably Contao), e-commerce solutions, hosting, SEO, and online marketing. Their market position is that of a trusted local agency with a strong portfolio and client references. Technically, the website is built on modern web standards with a CMS backend, uses common JavaScript libraries, and is mobile optimized with good SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though some security headers and explicit policies are missing. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and well-aligned with the business claims. Recommendations include enhancing privacy compliance with cookie consent, publishing a security policy, and adding incident response contacts to improve trust and compliance.

P

PRÜM Premiumkante

premiumkante-pruem.de

55

PRÜM Premiumkante is a German manufacturer specializing in premium doors featuring innovative edge technology called Nullfugentechnik, designed for high durability and aesthetic appeal. The website showcases detailed product benefits, use cases across various sectors such as residential, healthcare, hospitality, and commercial buildings, and provides project references to demonstrate real-world applications. The company targets architects, builders, and facility managers seeking robust and stylish door solutions. The business positions itself as a premium brand with a focus on quality and innovation. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Borlabs Cookie, ensuring good SEO and privacy compliance. The site is mobile-optimized, accessible, and performs moderately well. Hosting appears to be managed via your-server.de, with no WAF or blocking detected. Structured data and Open Graph tags are properly implemented, enhancing search engine visibility. From a security perspective, the site enforces HTTPS, uses standard security headers, and implements cookie consent mechanisms. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced trust and compliance. No vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and well-structured, with minor gaps in explicit security and compliance documentation. Strategic improvements in these areas would further strengthen the company's digital trustworthiness and customer confidence.

S

Startup-Verband

startupverband.de

38

Startup-Verband is a prominent German startup association dedicated to fostering a startup-friendly environment in Germany and Europe. It serves as a large network and research pioneer with approximately 1,200 members including startups, scaleups, corporates, and investors. The organization provides political advocacy, research publications, legal resources, educational webinars, and community platforms to support innovation and entrepreneurship. The website is professionally designed, content-rich, and well-structured, reflecting a mature digital presence. Technically, it is built on TYPO3 CMS with modern JavaScript libraries, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, compliant with GDPR, and free from suspicious content or vulnerabilities.

M

Mediawerk GmbH

mediawerk.ch

47

Mediawerk GmbH is a Swiss-based content creation agency specializing in video production, photo production, social media, and web development services. The company positions itself as a modern, fresh, and creative agency targeting businesses and individuals in Switzerland seeking professional content creation. The website showcases a portfolio of projects and client testimonials, reinforcing its market presence and credibility. Technically, the website is built on WordPress using popular plugins such as Elementor and Yoast SEO, with a modern tech stack including jQuery, Bootstrap, and various JavaScript libraries for enhanced user experience. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and explicit security or incident response policies. There is no cookie consent mechanism, which is a compliance gap given GDPR relevance. No vulnerabilities or suspicious content were detected. Overall, the website is professional and trustworthy, with clear business contact information and consistent branding. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance the site's security posture and compliance standing.

B

Bundesinstitut für Öffentliche Gesundheit (BIÖG)

familienplanung.de

65

familienplanung.de is an authoritative German government-backed health information portal operated by the Bundesinstitut für Öffentliche Gesundheit (BIÖG). It provides comprehensive, scientifically grounded information on pregnancy, childbirth, contraception, fertility, and related counseling services. The site targets pregnant women, couples planning families, and individuals facing pregnancy conflicts. The portal offers educational content, online tests, and access to counseling resources, positioning itself as a trusted public health resource in Germany. Technically, the website is built on TYPO3 CMS, uses Matomo analytics with strong privacy protections, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS enforcement and privacy-conscious analytics, though formal security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable source for family planning information.

D

digicube AG

bienen.ch

58

bienen.ch is a comprehensive Swiss platform dedicated to providing high-quality, scientifically grounded information about honey and wild bees, beekeeping, and environmental issues. The platform is supported by organizations focused on improving bee health and habitats, offering educational resources, services, and a marketplace for beekeeping supplies. The website targets beekeepers, environmentalists, and the general public interested in bees within Switzerland. Technically, the site is built on a modern WordPress infrastructure with a rich plugin ecosystem, optimized for performance, mobile responsiveness, and accessibility. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and minimal user tracking via Plausible Analytics. Overall, the site demonstrates high professionalism, trustworthiness, and a strong alignment between WHOIS data and business claims.

Vereinshelden is a well-established non-profit organization focused on supporting volunteer engagement in sports within Niedersachsen, Germany. The website serves as a comprehensive platform offering funding, consulting, training, and recognition services to sports clubs and volunteers. It holds a strong regional market position supported by partnerships with key sports organizations and government entities. The digital infrastructure is based on WordPress with modern plugins and themes, ensuring good SEO, accessibility, and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and incident response policies are recommended. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

B

Bundesinstitut für Öffentliche Gesundheit (BIÖG)

bioeg.de

66

The Bundesinstitut für Öffentliche Gesundheit (BIÖG) is a German federal government health institute dedicated to public health education, research, and prevention. The website serves as a comprehensive platform providing health information, research studies, and resources aimed at the general population and health professionals. It maintains a strong market position as an official government entity with a clear mission to promote health and well-being in Germany. The site is well-branded, consistent, and trusted by its audience. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies such as jQuery and Slick Slider for interactive content. It is optimized for mobile devices and accessibility, with good SEO practices. Hosting appears to be local to Germany, supporting data privacy and compliance requirements. Analytics are handled via Matomo with strong privacy protections including IP anonymization and no cookies without consent. From a security perspective, the site enforces HTTPS and employs privacy-conscious analytics. However, it lacks explicit security policy documentation and incident response contact details, which are recommended for transparency and preparedness. No vulnerabilities or suspicious activities were detected. The site complies well with GDPR and provides clear cookie consent mechanisms. Overall, the BIÖG website is a professional, secure, and privacy-compliant platform that effectively supports its public health mission. Strategic improvements include publishing a formal security policy and enhancing incident response transparency to further strengthen trust and security posture.

B

Bundesinstitut für Öffentliche Gesundheit (BIÖG)

bzga.de

66

The Bundesinstitut für Öffentliche Gesundheit (BIÖG) is a German federal public health institute operating under the Federal Ministry of Health. It focuses on promoting healthy lifestyles, disease prevention, and public health education through research, information dissemination, and advisory services. The website serves as a comprehensive platform for health-related information targeting the general population, healthcare professionals, and risk groups in Germany. It offers extensive resources including studies, audiovisual media, and practical guidance on various health topics. Technically, the website is built on the TYPO3 CMS platform, employs Matomo analytics with strong privacy protections, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS enforcement and privacy-conscious analytics, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site reflects a professional, trustworthy government entity with high content quality and compliance with GDPR and cookie consent regulations.

T

The Architects’ Journal

architectsjournal.co.uk

65

The Architects’ Journal is a well-established UK-based media publication focused on architecture news, building reviews, practice insights, and architectural competitions. It serves a professional audience including architects, students, and industry stakeholders. The website is professionally designed with consistent branding and offers a rich content experience supported by structured data and SEO best practices. Technically, it is built on WordPress with modern JavaScript libraries and integrates multiple analytics and advertising platforms such as Google Tag Manager, Adobe Analytics, and Optimizely. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is limited due to the absence of explicit privacy and cookie policies in the provided content. WHOIS data is unavailable due to domain naming rules, which slightly reduces trust but does not detract from the site's legitimacy based on content and technical indicators.

H

Haus der Architektur

hda-graz.at

50

Haus der Architektur (HDA) is a cultural and educational institution based in Graz, Austria, dedicated to promoting architectural culture through exhibitions, lectures, workshops, and networking. The website serves as a comprehensive platform for event information, cooperation projects, and architectural documentation, targeting architects, students, and the general public interested in architecture. The institution holds a strong regional position with partnerships involving government and cultural bodies. Technically, the website is built on the Plone CMS platform, utilizing modern JavaScript libraries and frameworks, and is secured with HTTPS and appropriate security headers. However, it lacks visible privacy and cookie policies, which impacts its compliance posture. Overall, the site is professional, content-rich, and trustworthy, with moderate user tracking via Google Analytics.

Therme Zurzach is a Swiss-based wellness and hospitality business specializing in thermal baths, sauna, spa treatments, and fitness services. The website presents a professional and well-structured digital presence powered by HubSpot CMS, integrating modern marketing and analytics tools. The company targets families and wellness customers seeking relaxation and health benefits from thermal water and related services. The site includes rich content about services, events, and packages, supported by social media channels and online ticketing. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit privacy and security policies are not found. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website is trustworthy, user-friendly, and compliant with basic privacy standards, though improvements in explicit policy disclosures and incident response contacts are recommended.

B

Burgergemeinde Bern

bgbern.ch

48

Burgergemeinde Bern is a municipal government entity serving the city and canton of Bern, Switzerland. It provides a broad range of community services including social welfare, environmental stewardship, cultural activities, urban development, sports, education, and scientific engagement. The website reflects its role as a public sector organization with clear communication and community outreach. Technically, the site is built on the Plone CMS platform, leveraging modern JavaScript libraries and frameworks to deliver a responsive and user-friendly experience. The presence of Matomo analytics indicates a privacy-conscious approach to user data collection. Security posture is solid with HTTPS enforced and CSRF protections in place, though there is room for improvement in implementing security headers and explicit cookie consent mechanisms. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's identity. Overall, the website is professional, trustworthy, and well-aligned with its governmental mission.

S

SoVD-Landesverband Niedersachsen e.V.

inklusionspreis-niedersachsen.de

48

The website www.inklusionspreis-niedersachsen.de represents a regional non-profit initiative jointly managed by the SoVD-Landesverband Niedersachsen e.V. and the LandesSportBund Niedersachsen e.V. It focuses on promoting and awarding projects that foster inclusion and equal participation of people with and without disabilities in Niedersachsen, Germany. The site provides detailed information about award categories, past winners, and event highlights, targeting volunteers, media professionals, sports clubs, and the general public interested in inclusion. The business model is centered on recognition and awareness rather than commercial activities. Technically, the website is built on TYPO3 CMS, leveraging modern frontend libraries such as jQuery and Slick Slider for interactive content. It demonstrates good digital maturity with mobile responsiveness, accessibility features, and SEO optimization. The cookie consent mechanism is implemented with clear user options, reflecting compliance with GDPR requirements. Hosting appears to be managed via Your-Server.de, with secure HTTPS enforced. From a security perspective, the site benefits from HTTPS and a cookie consent framework but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is minimal but consistent with a legitimate non-profit entity. Overall, the security posture is solid but could be enhanced by adding security headers and formal incident response information. The overall risk is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include improving security headers, publishing security and incident response policies, and enhancing contact information transparency to further build trust and compliance.

D

Deutsche Sportjugend

dsj.de

65

The website www.dsj.de represents Deutsche Sportjugend, a well-established German non-profit organization dedicated to youth sports and social engagement. The site is professionally designed using TYPO3 CMS, featuring rich content, accessibility tools like ReadSpeaker, and a clear navigation structure. The organization is positioned as a leading umbrella body for youth sports in Germany, with a history dating back to 1950. Technically, the site uses modern web technologies and hosts static content on Amazon S3, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though some security headers could be improved. Privacy compliance is lacking explicit privacy and cookie policies, which is a notable gap. Overall, the site is trustworthy, safe, and serves a general audience with no adult or questionable content.

C

ClubGolf

golf-academy.ch

61

ClubGolf operates a network of golf academies in Switzerland and nearby France, offering tailored group and private golf courses across multiple locations including Golf Sempach, Golf Kyburg, and Golf Saint Apollinaire. The website is professionally designed using TYPO3 CMS and integrates modern front-end libraries and analytics tools such as Google Analytics and Matomo. The business targets golf enthusiasts seeking to learn or improve their skills, positioning itself as a regional leader in golf education and events. Security posture is solid with HTTPS and no exposed sensitive data, though improvements are needed in security headers and privacy compliance mechanisms. Overall, the site reflects a trustworthy and professional golf academy network with clear contact information and partner affiliations.

C

ClubGolf

clubgolf.ch

63

ClubGolf is a prominent operator of golf resorts in Switzerland, managing the largest golf resort Golf Sempach along with Golf Kyburg and Golf Saint Apollinaire. The organization caters to approximately 4000 members and offers internationally recognized championship courses. Their services extend beyond golf to include event hosting for weddings, seminars, and group activities, supported by gourmet dining options. The website reflects a mature digital presence built on TYPO3 CMS, integrating modern analytics and user-friendly navigation. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in cookie consent and security policy disclosures are recommended. Overall, ClubGolf demonstrates a strong market position within the hospitality and sports sectors in Switzerland.

Q

Querfeld's Wiener Kaffeehaus GesmbH

cafe-wien.at

66

Querfeld's Wiener Kaffeehaus GesmbH operates an e-commerce platform dedicated to selling gift vouchers for its chain of cafés and restaurants in Vienna, Austria. The website offers a user-friendly interface with multiple voucher categories, a voucher value checking feature, and digital delivery options. The business targets general consumers looking to gift hospitality experiences. The company is positioned as a reputable regional hospitality brand with a medium-sized operation and consistent branding across its digital presence. Technically, the website employs a modern technology stack including Vue.js, jQuery, and various tracking and analytics tools such as Google Analytics, Facebook Pixel, and eTracker. It uses the Incert e-commerce system, which is specialized for tourism and hospitality sectors. The site is mobile-optimized and includes accessibility and SEO best practices, though accessibility could be further enhanced. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms via Klaro, and uses security headers to protect users. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are recommended for improved security posture. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively supports the business model of online voucher sales for hospitality services. Strategic recommendations include publishing security policies, adding incident response contacts, and enhancing accessibility features to further strengthen trust and compliance.

G

Golf Sempach

golf-sempachersee.ch

63

Golf Sempach is a prominent golf resort located centrally in Switzerland, offering two championship 18-hole golf courses and a variety of related services including a performance center, academy, events, gastronomy, and an online shop. The website is professionally designed using TYPO3 CMS and integrates modern analytics tools such as Google Analytics and Matomo. It provides clear contact information and maintains a consistent brand presence with active social media channels. The site is fully accessible without any blocking or WAF challenges, indicating good digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in cookie consent and security policy disclosures. Overall, the business presents a trustworthy and professional online presence aligned with its market position as a leading golf resort in Switzerland.

G

Golf Kyburg

golf-kyburg.ch

65

Golf Kyburg is a premium golf club located near Zürich, Switzerland, offering an 18 Hole Championship Course and a range of services including memberships, events, seminars, golf academy courses, gastronomy, and an online shop. The club is part of the Leading Golf Courses of Switzerland, positioning it as a high-quality destination for golf enthusiasts and event attendees. The website is well-structured, professionally designed, and provides clear navigation and contact information, targeting golfers and hospitality clients in the region. Technically, the website is built on TYPO3 CMS and employs modern frontend technologies such as Slick Slider and GSAP TweenMax. It integrates multiple analytics platforms including Google Analytics, Google Tag Manager, and Piwik/Matomo, indicating a mature approach to user behavior tracking. The site is mobile optimized and SEO friendly, though accessibility features are basic. From a security perspective, the site uses HTTPS with good SSL configuration and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response information, and a cookie consent mechanism, which are important for GDPR compliance and user trust. No vulnerability disclosure or security.txt files are present. Overall, Golf Kyburg's website demonstrates a solid business and technical foundation with good security hygiene but could improve privacy compliance and transparency. Strategic recommendations include implementing cookie consent, publishing security policies, and enhancing security headers to strengthen trust and compliance.

W

Waste & Recycling

wasterecyclingmea.com

72

Waste & Recycling is a regional media publication focused on the waste management and recycling industry, providing news, expert insights, event information, and multimedia content. The website is professionally designed with good mobile optimization and uses modern technologies including AMP, Bootstrap, and various analytics and marketing tools. Security posture is moderate with HTTPS enabled but lacking several important security headers and explicit privacy policies. The absence of WHOIS data raises some legitimacy concerns, though the active and professional website presence suggests a legitimate business. Overall, the site serves as an important information hub for industry professionals but should improve transparency and security practices.

P

Plachutta's Mario Hietzing

plachutta-mario.at

55

Plachutta's Mario Hietzing is a hospitality business operating a restaurant in Vienna, Austria, specializing in Mediterranean and Viennese cuisine. The website presents a professional and visually appealing platform showcasing their menu offerings, including breakfast, pasta, grilled dishes, and takeaway options. The business is positioned as a local favorite with a strong brand association to the Plachutta group. Technically, the website employs modern web technologies such as JavaScript libraries for galleries and sliders, and uses Google Tag Manager for tracking, though Google Analytics is not actively configured. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit privacy or terms of service documentation. Overall, the site is accessible, well-structured, and trustworthy, though improvements in privacy compliance and security best practices are recommended.

P

Plachutta

plachutta-oper.at

64

Plachutta's Gasthaus zur Oper is a well-established hospitality business located in Vienna, Austria, specializing in traditional Viennese cuisine such as Wiener Schnitzel and Tafelspitz. The website showcases a blend of modern design and tradition, offering dine-in, takeaway, and retail services including cookbooks. The business enjoys a strong market position with recognized culinary awards and active social media presence. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries like Slick Slider and Photoswipe, and integrates Google Tag Manager and reCAPTCHA for analytics and security. The site is mobile-optimized and provides a good user experience with rich multimedia content. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security headers and published privacy or terms of service documents. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

E

el Gaucho Steakhouse

elgaucho.at

67

el Gaucho Steakhouse is a medium-sized hospitality business operating multiple steakhouse locations in Austria and Germany. The company focuses on premium beef dining experiences, combining urban lifestyle with fine dining. Their website is professionally designed using WordPress and modern web technologies, featuring good SEO and mobile optimization. The technical infrastructure includes common marketing and analytics tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers are not explicitly detected. Privacy policies are present and GDPR compliant. No direct contact information is visible on the homepage, which may affect user engagement. Overall, the website reflects a legitimate and trustworthy business with a good digital presence.

D

Das Bootshaus Alte Donau

dasbootshaus.at

76

Das Bootshaus Alte Donau is a small hospitality business located in Vienna, Austria, combining rowing culture with gastronomy. The website presents a professional and well-structured digital presence featuring online reservations, event promotions, and a strong social media footprint. Technically, the site uses modern web technologies including JavaScript libraries, lazy loading, and integrates third-party reservation widgets. Security posture is adequate with HTTPS enforced but lacks explicit security headers and published security policies. Privacy compliance is partial with cookie consent but missing explicit privacy and terms of service pages. Overall, the website is trustworthy and well-positioned in its local market niche.

P

Plachutta

plachutta.at

60

Plachutta is a well-established family-owned hospitality business operating multiple restaurant locations in Vienna, Austria, specializing in traditional Viennese cuisine such as Tafelspitz and Wiener Schnitzel. The website reflects a professional and consistent brand presence targeting tourists and locals interested in authentic Austrian culinary experiences. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript libraries like Slick Slider, and integrates Google services such as Tag Manager, Maps, and reCAPTCHA. The site is mobile-optimized and performs moderately well with good SEO practices. Security posture is strong with HTTPS enforced and multiple security headers present, alongside a cookie consent mechanism indicating GDPR awareness. However, the absence of explicit privacy policy and terms of service pages represents a compliance gap. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

B

Brain City Berlin

braincity.berlin

53

Brain City Berlin is an information and networking platform dedicated to promoting Berlin as a leading science metropolis in Europe. The website provides comprehensive content about research developments, funding opportunities, events, and a vibrant ambassador program featuring prominent figures from Berlin's scientific community. The platform targets researchers, academics, students, and stakeholders interested in Berlin's science ecosystem. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates consent management for GDPR compliance. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and policies are not evident. Overall, the site is professional, content-rich, and trustworthy, with good user experience and mobile optimization.

S

stafftastic GmbH

praktikumswoche.de

60

Praktikumswoche.de is a German educational platform operated by stafftastic GmbH that facilitates internship weeks for students across over 200 regions in Germany. The platform enables students to explore different companies and professions by participating in daily internships during the holidays. It serves both students and companies, offering free registration and participation. The website is well-positioned in the education sector with strong media recognition and a broad regional presence. Technically, the website employs a modern tech stack including Bootstrap, jQuery, FontAwesome, and Cookiebot for cookie consent management. Hosting is managed via Google Domains, and privacy-respecting analytics are implemented using Plausible Analytics. The site is mobile-optimized with good SEO and accessibility basics. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. Cookie consent is properly implemented, and privacy is respected with no-cookie YouTube embeds. However, security headers are not explicitly detected, and no public security policy or incident response contacts are provided, which could be improved. Overall, the website is trustworthy, professional, and compliant with GDPR. It lacks explicit contact information on the main page but provides social media links and a privacy policy. The domain registration is consistent and legitimate, supporting the platform's credibility.

E

Eidgenössisches Institut für Geistiges Eigentum

ipi.ch

68

The Eidgenössisches Institut für Geistiges Eigentum (IGE) is the Swiss federal authority responsible for intellectual property rights including patents, trademarks, designs, geographical indications, and copyright. The website serves as a comprehensive portal for individuals, businesses, and IP professionals to access registration services, legal information, public registers, and educational resources. It maintains a strong market position as the central Swiss IP office with a clear government affiliation and authoritative content. The site offers multilingual support and a variety of online services to facilitate IP management. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Google Tag Manager for analytics and slick sliders for UI. The site is mobile optimized, accessible, and SEO friendly with a professional design and clear navigation. Hosting details are not explicit but the site uses HTTPS with good SSL configuration. Security best practices are partially implemented, with room for improvement in security headers and published security policies. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms such as security.txt. No vulnerabilities or suspicious domains were detected. The WHOIS data confirms the domain is legitimately registered to a Swiss federal entity, reinforcing trust. Overall, the website is highly professional, trustworthy, and compliant with privacy regulations such as GDPR. It effectively serves its target audience with relevant content and services. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a vulnerability disclosure framework to further strengthen the security posture and trust.

A

Austrian Exhibition Experts GmbH

ferien-messe.at

51

Ferien-Messe Wien is Austria's largest trade fair dedicated to holidays, travel, and leisure, organized by Austrian Exhibition Experts GmbH. The event is held at Messe Wien and includes a mobility exhibition called Vienna Drive. The website presents a professional and well-structured digital presence, targeting travelers, exhibitors, and visitors interested in travel and mobility. It offers online ticketing, exhibitor information, and visitor guidance, supported by active social media channels and partner collaborations. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Complianz GDPR for SEO and privacy compliance. It uses Google Tag Manager for analytics and GTranslate for multilingual support. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and obfuscated emails to reduce spam. However, explicit security headers are not detected, and no dedicated security or incident response policies are published. The domain registration is consistent with the business entity, enhancing trustworthiness. Overall, Ferien-Messe Wien's website is a credible, secure, and privacy-compliant platform supporting a major event in Austria's hospitality and transportation sectors. Strategic improvements in security headers and incident response transparency would further strengthen its posture.

A

ATTYS 05 Rechtsanwälte GmbH

attys.law

48

ATTYS 05 Rechtsanwälte GmbH is a young, dynamic Austrian law firm specializing in employment, corporate, real estate, and intellectual property law. The firm targets entrepreneurial clients and businesses, offering tailored, transparent, and forward-looking legal solutions. Their market position is that of a modern boutique law firm with a strong emphasis on business and IP legal services. Technically, the website is built on WordPress with modern plugins and SEO optimizations, delivering a good user experience and mobile responsiveness. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is mostly met with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the firm's business objectives.

A

Austrian Exhibition Experts GmbH

wohnen-interieur.at

50

The website www.wohnen-interieur.at represents Austrian Exhibition Experts GmbH, organizing Austria's largest exhibition for home living, furniture, garden, and design, scheduled for March 2026 in Vienna. It targets both exhibitors and visitors interested in interior design, renovation, and sustainable living. The site is professionally designed with comprehensive content, clear navigation, and strong branding consistency. It integrates modern web technologies including WordPress CMS, Yoast SEO, and GDPR-compliant cookie management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, obfuscated emails, and security plugins, though some security headers could be improved. Privacy compliance is well addressed with explicit policies and consent mechanisms. Overall, the site is trustworthy, user-friendly, and well-positioned in its market segment.

K

Koeln.Business

koelnbusiness.de

60

Koeln.Business is the official economic development agency for the city of Cologne, Germany, providing support for businesses, startups, and investors. The website offers services such as funding consultation and business facilitation, targeting entrepreneurs and startups primarily within Cologne. The organization positions itself as a key facilitator for economic growth and business establishment in the region. Technically, the website is built on TYPO3 CMS, a mature and widely used content management system, and incorporates modern JavaScript libraries such as Slick Slider and Owl Carousel for enhanced user experience. Cookiebot is implemented for GDPR-compliant cookie consent management, and Matomo Analytics is used for privacy-conscious visitor tracking. The site is mobile-optimized and demonstrates good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and uses a comprehensive cookie consent mechanism. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure information, which are recommended for improving transparency and trust. No critical vulnerabilities or suspicious content were detected. Overall, Koeln.Business presents a professional and trustworthy online presence consistent with a government economic development entity. The domain WHOIS data is privacy protected but shows no signs of suspicious activity. Strategic recommendations include publishing security and incident response policies, enhancing security headers, and maintaining regular audits of third-party scripts to sustain a strong security posture.

N

Niedersächsischer Integrationspreis

niedersaechsischer-integrationspreis.de

52

The Niedersächsischer Integrationspreis website serves as an official platform for a regional government-supported integration award in Lower Saxony, Germany. It targets organizations and the general public interested in integration initiatives, providing information about the award, past winners, news, and related events. The site is built on TYPO3 CMS and features a professional design with consistent branding and clear navigation, supporting a good user experience. The content is primarily in German and focuses on non-profit and governmental activities related to integration.

N

Netzwerk der Literaturhäuser

literaturhaus.net

52

Netzwerk der Literaturhäuser is a German-speaking cultural network focused on promoting literature houses through events, awards, and member coordination. The website serves as an information hub for literature enthusiasts, cultural institutions, and authors. It is built on WordPress using modern plugins and themes, providing a good user experience with multimedia content and mobile optimization. Security posture is adequate with HTTPS and some security plugins, but lacks advanced security headers and cookie consent mechanisms. The absence of WHOIS data for the domain is a notable anomaly that impacts trustworthiness. Overall, the site is professional and functional but could improve in privacy compliance and security transparency.

D

Der gesunde Menschenversand GmbH

menschenversand.ch

48

Der gesunde Menschenversand GmbH operates a German-language publishing and e-commerce website focused on spoken word, slam poetry, and literary works. The company targets a niche audience interested in cultural and literary content, offering books, audiobooks, music, and event promotion. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience. The business is small-sized, based in Switzerland, and founded around 2019, with a clear market position as a specialized literary publisher. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, enhanced by Yoast SEO for search optimization. It uses modern JavaScript libraries such as jQuery and Slick Slider for UI components, and integrates Google Analytics and Mailchimp for marketing and analytics. The site is mobile-optimized and performs moderately well, though accessibility features are basic. From a security perspective, the site enforces HTTPS with excellent SSL configuration but lacks explicit security headers and a published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism implemented, which is a gap given GDPR applicability. Overall, the website is trustworthy and professional with a solid business foundation. Strategic improvements in privacy compliance and security practices would enhance its posture and user trust.

Lokwort Buchverlag is a small Swiss book publisher specializing in thematic and regional literature, primarily targeting German-speaking audiences interested in Swiss German dialects and consciousness topics. The company operates an e-commerce platform based on WordPress and WooCommerce, offering a curated selection of books and author events. The website is professionally designed with good navigation and mobile optimization, reflecting a consistent brand image. Technically, the site uses modern web technologies including jQuery, Slick Slider, and MediaElement.js, but lacks some advanced security headers and cookie consent mechanisms. Security posture is moderate with HTTPS enforced but missing additional headers and explicit security policies. Contact information is clearly provided, enhancing business credibility. Overall, the website is safe, compliant to a basic degree with privacy regulations, and suitable for general audiences.

V

Velo Voss

velo-voss.de

43

Velo Voss is a small, established bicycle retailer located in Göttingen, Germany, specializing in high-quality e-bikes and bicycles. The company offers personalized consultation, repair services, bike leasing options, and training opportunities. They are a Bosch-certified eBike expert, which enhances their credibility and market position. The website is professionally designed with good content quality, clear navigation, and mobile optimization. Technically, it is built on WordPress with modern plugins and SEO tools, hosted on a German hosting provider. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the website reflects a trustworthy and professional local business with a clear focus on customer service and quality products.

G

GEOMAR Helmholtz-Zentrum für Ozeanforschung Kiel

geomar.de

50

GEOMAR Helmholtz-Zentrum für Ozeanforschung Kiel is a prominent German research institution specializing in oceanographic and climate research. The website serves as a comprehensive platform for scientific information, research programs, expeditions, and public outreach. It targets researchers, students, policymakers, and the general public interested in marine and climate sciences. Affiliated with the Helmholtz Association, GEOMAR holds a strong market position in the education and government research sectors. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery and Slick Slider, providing a responsive and accessible user experience. The site demonstrates good SEO practices and mobile optimization, though performance is moderate. Security posture is solid with HTTPS enforced and some security headers present, but could be improved by adding more comprehensive headers and visible incident response policies. Overall, the site is trustworthy and professional, with clear branding and consistent content quality. However, it lacks a visible cookie consent mechanism and explicit security contact information, which are areas for improvement. The domain registration data aligns well with the website content, reinforcing legitimacy and trustworthiness.