Security Directory

V

VNV SA

vnv.ch

61

VNV SA is a Swiss IT company founded in 2001, specializing in software engineering, IT managed services, cloud solutions, and business strategy consulting. The company positions itself as a reliable IT service provider with a strong focus on efficiency, pragmatism, and realism. It serves business clients seeking comprehensive IT and software solutions, leveraging strategic partnerships with major technology vendors such as Lenovo, Cisco, Microsoft, and Palo Alto Networks. The website reflects a mature digital presence built on WordPress with modern technologies and SEO optimization.

E

Executive Travel Airport SA

e-travel.ch

52

Executive Travel Airport SA is a well-established Geneva-based travel agency with over 40 years of experience providing personalized business and leisure travel services. The company offers a broad range of services including business travel, tourism, group events, and VIP services, targeting both corporate clients and individual travelers. Their market position is that of a trusted, independent agency with a strong local presence and a commitment to quality and customer service. Technically, the website is built on WordPress with modern plugins and libraries, supporting multilingual content and online booking capabilities. The site demonstrates good performance, mobile optimization, and SEO practices. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security policies and advanced security headers. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with room for improvement in security transparency and incident response readiness.

U

UL LLC

ulprospector.com

75

UL Prospector is a professional B2B platform operated by UL LLC, providing a comprehensive materials search engine for product developers and engineers in manufacturing sectors. The platform offers access to technical data, supplier information, and marketing solutions to accelerate product development and supplier reach. The website demonstrates a mature digital presence with modern technologies, consent management, and good user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data for the domain is a notable anomaly but does not detract significantly from the overall legitimacy given the strong UL branding and content quality. Privacy and cookie policies are comprehensive and GDPR compliant, supporting trust and compliance.

A

autoSense

autosense.ch

65

autoSense is a Swiss-based company specializing in intelligent mobility solutions, focusing on electric vehicle charging and fleet management. Their offerings include comprehensive charging solutions for workplaces, public charging, home charging reimbursement, and telematics services such as digital logbooks. The company targets fleet managers and drivers transitioning to electric vehicles, providing integrated software and hardware solutions to simplify and optimize electric mobility. The website is professionally designed, mobile-optimized, and uses modern web technologies including Webflow CMS, Google Tag Manager, and Facebook Pixel for analytics and marketing. From a technical perspective, the website demonstrates a mature digital infrastructure with fast performance, good SEO, and accessibility features. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit privacy policy and terms of service pages, which are critical for GDPR compliance and user trust. Cookie consent is implemented, indicating some privacy awareness. Overall, the security posture is solid but could be improved by publishing comprehensive privacy and security policies and providing clear contact information including incident response contacts. The domain registration data aligns well with the business claims, supporting legitimacy. The website content is safe and appropriate for a general audience, with no adult or questionable content detected.

F

Fondation Nicolas Bogueret

fondation-nicolasbogueret.ch

51

Fondation Nicolas Bogueret is a Swiss non-profit foundation dedicated to creating and developing housing solutions for individuals and families with modest incomes, young people in training, and seniors. The website presents a professional and consistent brand image with content primarily in French, targeting a Swiss audience. The foundation operates in the real estate sector with a focus on affordable housing development. Technically, the website is built on WordPress using Divi Builder and Yoast SEO, indicating a moderate level of digital maturity. The site is well-optimized for SEO and mobile devices, with good performance and accessibility at a basic level. Security posture is adequate with HTTPS enabled and some security plugins in use, but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy and legitimate but would benefit from enhanced privacy and security practices.

S

Smeetz SA

smeetz.com

65

Smeetz SA operates a sophisticated unified commerce platform tailored for visitor attractions such as amusement parks, zoos, museums, and live venues. Their AI-powered solutions focus on optimizing ticketing, retail, and F&B sales through centralized inventory management, dynamic pricing, marketing intelligence, and performance insights. The company positions itself as a modern leader in the hospitality technology sector, leveraging AI to enhance visitor experience and revenue growth. The website reflects a mature digital presence with professional design, multilingual support, and comprehensive content targeting B2B customers in the hospitality industry. Technically, the website is built on Webflow CMS and integrates multiple modern marketing and analytics tools including Google Tag Manager, Facebook Pixel, Hotjar, LinkedIn Insight Tag, and HubSpot forms. The site is well-optimized for performance, mobile responsiveness, and SEO, demonstrating a high level of digital maturity. Security best practices are observed with HTTPS enforcement and security headers, though explicit cookie consent mechanisms and incident response information are lacking. From a security perspective, the site shows a good posture with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain www.smeetz.com introduces some uncertainty regarding domain registration legitimacy. Despite this, the professional branding, customer testimonials, and active social media presence support the company's credibility. Privacy compliance is partially addressed with a comprehensive privacy policy, but cookie consent and GDPR explicit indicators could be improved. Overall, Smeetz SA presents a trustworthy and professional online presence with strong business and technical foundations. Strategic improvements in privacy compliance and transparency around security policies would further enhance trust and regulatory adherence.

A

Appenzeller Druckerei AG

trauer-zirkular.ch

61

The website trauer-zirkular.ch is an e-commerce portal operated by Appenzeller Druckerei AG, specializing in funeral and mourning print materials such as mourning circulars, thank you cards, and funeral meal cards. The site targets individuals in Switzerland seeking personalized funeral print products, offering a streamlined and personal ordering experience. The business operates in a niche market with a clear focus on quality and customer service. Technically, the website employs a custom or Websale-based e-commerce platform with modern web technologies including JavaScript, CSS, and AJAX. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Performance is moderate, and SEO and accessibility features are basic but adequate for the target audience. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and does not provide a public security policy or incident response contact. No vulnerabilities or suspicious activities were detected in the analysis. Overall, the website presents a trustworthy and professional front for a small specialized business. Strategic recommendations include enhancing security headers, publishing a security policy, and expanding contact information to improve trust and compliance further.

S

Solveva

actus.cloud

58

Actus by Solveva is a specialized software provider offering actuarial modelling and pricing tools primarily for the insurance and reinsurance sectors. The company positions itself as a leading partner with nearly two decades of experience, delivering modular and customizable software solutions to improve underwriting productivity and profitability. The website reflects a professional and consistent brand image with clear contact information and a focus on business clients in the finance industry. Technically, the website employs standard modern web technologies including HTML5, CSS3, JavaScript, and jQuery, with Google Fonts for typography. The site is moderately optimized for performance and mobile devices but lacks advanced frameworks or CMS platforms. No analytics or tracking tools are detected, indicating a privacy-conscious approach or minimal user tracking. From a security perspective, the domain is well-managed with domain locks in place, but the website lacks published privacy and cookie policies, security headers, and incident response information. SSL configuration details are not provided, and DNSSEC is not enabled, which suggests room for improvement in security hardening and compliance. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

B

balneotec GmbH

balneotec.de

67

balneotec GmbH is a specialized service provider in the hospitality sector focused on premium hotel modernization and renovation, particularly hotel bathrooms and rooms. The company positions itself as a holistic solution provider offering aesthetic, hygienic, and sustainable renovations tailored to hotel brands. Their market position is supported by strategic partnerships with well-known manufacturers and craftsman groups, enhancing their service quality and regional capacity. The website reflects a professional and consistent brand image with comprehensive content targeting hoteliers and hotel owners seeking modernization services. Technically, the website is built on WordPress using modern plugins such as Elementor, Rank Math SEO, and UberMenu, ensuring good SEO and user experience. The site is mobile-optimized and performs moderately well, with a clean technical stack and no blocking security mechanisms detected. Privacy and cookie policies are well implemented, indicating good GDPR compliance. From a security perspective, the site enforces HTTPS and includes standard security headers, but lacks a dedicated security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be improved with explicit security disclosures and vulnerability handling mechanisms. The overall risk assessment is low with a high trustworthiness rating. Strategic recommendations include publishing a security policy, adding vulnerability disclosure information, and enhancing accessibility features to further strengthen compliance and user trust.

S

Swiftcopters

swiftcopters.net

51

Swiftcopters is a specialized helicopter company based at Geneva International Airport, offering a range of luxury and professional aviation services including VIP flights, panoramic tours, pilot training, and maintenance. The company has a strong market position as the only IFR approved helicopter operator at this strategic location, targeting affluent clients and corporate customers in Switzerland and Europe. The website reflects a professional and consistent brand image with good content quality and clear service offerings. Technically, the site is built on WordPress with Elementor and integrates modern analytics and marketing tools such as Google Analytics and Google Tag Manager. Security posture is strong with HTTPS and security headers properly configured, though there is room for improvement in privacy compliance and explicit policy disclosures. Overall, the domain registration data supports the legitimacy and trustworthiness of the business, with a domain age consistent with the company's founding date. Recommendations include adding comprehensive privacy and cookie policies, visible contact information, and incident response details to enhance compliance and user trust.

F

Fullerton Tool Company

fullertontool.ca

47

Fullerton Tool Company is a family-owned manufacturing business specializing in the design and production of solid carbide cutting tools for various industries. The company operates primarily in North America with dedicated websites for Canada, USA, and Mexico markets. Their product offerings include end mills, drills, reamers, saws, and custom tooling services, supported by just-in-time delivery and regrinding services. The website is professionally designed, multilingual (French focus on this site), and provides clear contact information and resources for clients and distributors. Technically, the site is built on WordPress with WooCommerce and several plugins for enhanced functionality, including search filters and cookie consent management. Security posture is adequate with HTTPS and domain locks but lacks DNSSEC and explicit security headers. Privacy compliance is supported by visible cookie and privacy policies with consent mechanisms. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

Hexagon AB is a global leader in measurement technologies, providing advanced solutions that enhance productivity, quality, safety, and sustainability across vital industries such as construction, manufacturing, mining, and transportation. The company leverages cutting-edge technologies including robotics, AI, digital twins, and spatial intelligence to deliver innovative products and services tailored for enterprise clients. Hexagon's market position is strong, supported by numerous customer success stories and a consistent brand presence. Technically, the website is built on modern frameworks like Next.js and React, with content managed via Sitecore Content Hub. The site demonstrates excellent performance, mobile optimization, and SEO practices. Security is robust with HTTPS enforced and multiple security headers implemented, alongside a cookie consent mechanism indicating privacy awareness. However, explicit privacy policies, terms of service, and security incident response information are not visibly published. The security posture is solid with no detected vulnerabilities or exposed sensitive data. WHOIS data confirms the legitimacy of the domain and company information, aligning with the website's claims. The absence of direct contact emails or phone numbers and lack of published security policies represent areas for improvement. Overall, Hexagon's website reflects a mature, enterprise-grade digital presence with strong business credibility and technical implementation. Strategic enhancements in privacy and security transparency would further strengthen trust and compliance.

P

Photothek Media Lab

photothek.de

49

Photothek Media Lab is a professional media service provider based in Berlin, specializing in photography, event photography, portrait photography, videography, and e-learning content production. The company positions itself as a premium and experienced provider, targeting clients who value creativity and reliability in visual storytelling. Their website reflects a strong brand identity with consistent and professional design, clear navigation, and comprehensive service descriptions. The business model focuses on delivering high-quality media content for various client needs, including social media content, event films, and educational videos. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, ensuring good SEO optimization and user experience. The hosting appears to be German-based, aligning with the company's location. The site is mobile-optimized and performs moderately well, with room for improvement in accessibility features. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers and incident response policies are not evident, suggesting areas for enhancement. No vulnerabilities or suspicious activities were detected, and the domain registration appears consistent with the business's geographic claims, although detailed WHOIS registrant data is limited. Overall, Photothek Media Lab presents a trustworthy and professional online presence with strong compliance to privacy regulations and a clear focus on quality media services. Strategic improvements in security policies and accessibility could further strengthen their digital maturity and client trust.

S

SAULAINAS NOMETNES BĒRNIEM 2025

saule.lv

54

The website www.saule.lv represents a small Latvian business organizing children's summer camps for ages 8 to 13. The camps focus on educational and recreational activities including expeditions, language learning, horseback riding, and cultural experiences. The business targets families seeking enriching summer activities for children within Latvia. The site is hosted on Google Sites, leveraging Google Fonts and Google Analytics for tracking. The technical infrastructure is modern and secure with HTTPS and security headers properly configured. However, the site lacks explicit privacy and cookie policies, which is a compliance gap. Contact information is limited to phone numbers and Facebook social media links, with no email addresses or incident response contacts published. Overall, the website is professionally presented with good content quality and user experience, but improvements in privacy compliance and security transparency are recommended.

O

OnzeWeb

onzeweb.ch

58

OnzeWeb is a small, Geneva-based web agency specializing in custom website creation, development, and design services. The company positions itself as a partner for businesses and individuals seeking modern, performant, and SEO-optimized web solutions. Their market presence is supported by collaborations with multiple local creative and communication agencies and a partnership with Infomaniak as their hosting provider. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Yoast SEO, and Google Analytics. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, explicit contact emails and phone numbers are not publicly listed, with contact primarily via a form.

T

Transports Publics du Chablais

tpc.ch

53

Transports Publics du Chablais (TPC) is a regional public transportation provider serving 23 communes in the Chablais region of Switzerland. The company offers train and bus services and supports tourism-related mobility. The website is professionally designed using WordPress with Elementor and Astra theme, providing good user experience and clear navigation. It targets local commuters and tourists with relevant content in French. The technical infrastructure includes modern web technologies and integrates marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are not published. Contact information and physical address are clearly provided, enhancing business credibility. No privacy policy or terms of service pages were found, indicating room for compliance improvement.

A

Afton Scientific DE

aftonscientific.de

52

Afton Scientific DE is a well-established pharmaceutical contract manufacturing and lab services provider with over 30 years of experience. The company specializes in aseptic filling of injectable drugs, analytical and microbiological lab services, and offers ready-to-fill sterile components. Their market position is strong with regulatory compliance including FDA registration, cGMP adherence, and DEA registration. The website is professionally designed, well-branded, and targets pharmaceutical and biotech companies requiring specialized manufacturing services. Technically, the website is built on WordPress with modern plugins and technologies such as Google Tag Manager, reCAPTCHA Enterprise, and GDPR-compliant cookie management. The site is mobile-optimized, accessible, and SEO-friendly. Hosting is via EuroDNS with secure HTTPS connections. Security posture is solid with form protection and consent management, though explicit security headers and a published security policy or incident response contacts are missing. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies. Overall, the website and domain demonstrate high legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further improve trust and compliance.

A

Association des Communes de Crans-Montana

cransmontana.ch

58

The Association des Communes de Crans-Montana operates as a local government association serving the communes of Crans-Montana, Icogne, and Lens in Switzerland. The website provides information about various municipal services including emergency services, police, economic promotion, and community activities. It targets residents and local businesses, positioning itself as a central hub for community engagement and public service information. The business model is that of a public sector entity focused on service provision and community support. Technically, the website employs modern web technologies such as Google Fonts, Bootstrap CSS classes, and Google Analytics for visitor tracking. The CMS appears to be Umbraco, inferred from cookie consent scripts. The site is mobile-optimized with good navigation and a professional design, though some SEO and accessibility features could be enhanced. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS (implied by canonical link with http but likely redirects), includes a cookie consent mechanism, and avoids exposing sensitive data. However, no advanced security headers were detected, and there is no published privacy policy or terms of service, which are compliance gaps. Incident response and vulnerability disclosure information are absent, limiting transparency in security matters. Overall, the website is trustworthy and professional, serving its public sector role effectively. The main risks relate to compliance with privacy regulations and enhancing security posture through headers and published policies. Strategic improvements in these areas would strengthen user trust and regulatory adherence.

E

Edmond J. Safra Foundation

edmondjsafra.org

51

The Edmond J. Safra Foundation website represents a well-established philanthropic organization dedicated to supporting charitable projects in science, medicine, religion, education, and general philanthropy. The foundation targets donors, researchers, and philanthropic partners, positioning itself as a reputable non-profit entity with a global outreach. The website is built on WordPress with modern plugins and technologies, providing a professional and responsive user experience. Security posture is solid with HTTPS and reCAPTCHA implemented, though some security headers and explicit policies could be improved. Privacy compliance is strong with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, the site reflects a trustworthy and credible foundation, though the lack of WHOIS transparency slightly reduces domain trust. Strategic recommendations include enhancing security headers, publishing incident response information, and adding a security.txt file to improve vulnerability disclosure transparency.

P

Plus que pro

plus-que-pro.fr

63

Plus que pro is a French online platform specializing in providing verified customer reviews to help consumers identify and select trustworthy professional service providers. The website positions itself as a network for qualitative business recommendations, targeting French consumers seeking reliable companies. The platform offers services centered around controlled customer feedback and professional search capabilities, establishing a solid market presence in France. Technically, the website employs modern web technologies including Google Tag Manager and the Didomi Consent Management Platform, ensuring compliance with privacy regulations and enabling effective user tracking and analytics. The site is mobile-optimized with good SEO practices and a professional design, contributing to a positive user experience. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks visible advanced security headers and explicit incident response or vulnerability disclosure policies. The absence of WHOIS data for the domain is a concern, reducing trust in domain legitimacy, although the website content and business model suggest a legitimate operation. Overall, the site demonstrates a mature digital presence with room for improvement in security transparency and domain registration clarity.

O

OSS Directory

ossdirectory.com

62

OSS Directory is a German-language platform serving as a comprehensive directory and informational resource for open source software providers, products, customers, and community-related content. The website is built using modern Angular framework and Material Design components, indicating a mature technical infrastructure. It employs privacy-conscious analytics via Plausible Analytics and demonstrates good mobile optimization and user experience. However, the absence of privacy and cookie policies, lack of visible security headers, and missing WHOIS registration data present concerns regarding compliance and domain legitimacy. Overall, the site is professional and content-rich but would benefit from enhanced security and privacy transparency.

H

Heli GmbH

helikopterflug.ch

69

Heli GmbH operates a specialized e-commerce platform offering helicopter flight experiences, including sightseeing tours, pilot experiences, and VIP taxi flights primarily in Switzerland. The company targets general consumers interested in unique aerial experiences and gifts. The website is built on the Shopify platform, leveraging modern web technologies and third-party marketing and analytics tools to provide a professional and user-friendly experience. The site includes comprehensive privacy and cookie policies with active consent mechanisms, reflecting good compliance with GDPR standards. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although formal security policies and incident response information are absent. Overall, the website is trustworthy, well-maintained, and suitable for its niche market.

F

Fred Fischer

fredfischer.fr

54

Fred Fischer is a freelance web designer and WordPress expert based in Lille, France, offering specialized services including responsive WordPress theme development, plugin creation, SEO optimization, and web accessibility. The website presents a professional portfolio and emphasizes a user-centric approach combining form and function. The business targets clients directly and agencies seeking expert WordPress development and web design services. Technically, the site is built on WordPress with modern frameworks such as Materialize CSS and uses Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security posture is good with HTTPS enforced and minimal plugin use, though security headers and explicit privacy policies are lacking. The absence of WHOIS data limits domain legitimacy verification, which slightly impacts trust. Overall, the website is professional, secure, and well-positioned for its niche market.

T

TheFork

lafourchette.com

66

TheFork is a prominent online restaurant reservation platform primarily serving the French market, offering users the ability to search, select, and book tables at top restaurants with added promotional offers. As a subsidiary of TripAdvisor, it holds a strong market position in hospitality services. The website demonstrates a mature technical infrastructure leveraging modern web technologies such as Next.js, Google Tag Manager, Stripe for payments, and DataDome for bot protection, ensuring a robust and scalable platform. Security posture is strong with HTTPS enforcement, security headers, and bot mitigation, although explicit privacy and security policies are not clearly presented in the accessible content. The absence of WHOIS data transparency slightly impacts trust but is mitigated by the brand's reputation and professional presentation. Overall, the platform is well-positioned with a high-quality user experience and solid technical foundation.

L

Loomly

loomly.com

70

Loomly is a well-established SaaS social media management platform designed to empower marketing teams, agencies, brands, and creators to efficiently plan, schedule, collaborate, and analyze social media content. The platform integrates with major social networks and offers a comprehensive suite of tools including content calendars, approvals, campaign tracking, and analytics. The website is professionally designed, mobile-optimized, and provides rich content resources such as blogs, tutorials, and webinars, positioning Loomly as a trusted player in the social media management market. Technically, the site leverages modern marketing and analytics technologies including HubSpot CMS, Google Tag Manager, Intercom, and Osano for consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly detailed. WHOIS data is not publicly available, likely due to privacy protection, which is common for SaaS businesses. Overall, Loomly presents a credible, secure, and user-friendly platform with good privacy compliance and marketing transparency.

H

HBG

hbg-helicopteres.aero

49

HBG is a large, family-owned helicopter group established in 1980 in France, operating multiple subsidiary brands and offering a wide range of helicopter services including passenger transport, aerial work, pilot training, mountain rescue, emergency medical services, and maintenance. The company positions itself as a leader in the French helicopter market with a presence on four continents. The website is professionally designed using WordPress with modern plugins and technologies, providing good user experience and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA usage, but lacks explicit security policies and incident response contacts. Privacy compliance is good with visible cookie consent and GDPR-aligned data collection practices. WHOIS data is incomplete and malformed, limiting domain trust verification. Overall, the website and business appear legitimate and professional, but domain registration details should be verified for full trust.

F

Frontify AG

frontify.com

65

Frontify AG operates a sophisticated brand management SaaS platform designed to streamline digital asset management, brand guidelines, and collaboration for marketing teams and agencies globally. The company positions itself as a leader in brand consistency and efficiency, offering integrations and developer tools to enhance brand ecosystems. The website reflects a mature digital presence with modern technologies such as Webflow CMS, Google Tag Manager, Cookiebot for privacy compliance, and Vimeo for media delivery. Security posture is strong with HTTPS, content security policies (though currently report-only), and cookie consent mechanisms integrated. However, the absence of WHOIS registration details introduces a minor trust gap, though this is mitigated by the professional presentation and comprehensive privacy and security policies. Overall, Frontify demonstrates a robust business and technical infrastructure suitable for enterprise clients seeking brand management solutions.

E

Eden: People+Planet

edenprojects.org

59

Eden: People+Planet is a newly established environmental and social advocacy organization, launched in early 2024. The website serves as a platform to promote sustainability initiatives and community engagement. The organization appears to be small and focused on niche advocacy efforts. Technically, the website is built on WordPress using the Divi theme, hosted behind Cloudflare, and employs standard plugins such as Yoast SEO and Cookie Law Info for compliance and SEO. Performance and mobile optimization are moderate to good, with basic accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service policies. Business credibility is moderate due to the lack of explicit contact information and trust signals. Overall, the site is functional and professional but would benefit from improved security and compliance documentation.

R

RUAG International

ruag.com

66

RUAG International is a large, established technology and manufacturing company specializing in aerospace and defense sectors. The company offers key services including aerostructures manufacturing, space technology, and defense technology, positioning itself as a trusted international player with a strong brand presence. The website reflects a professional corporate identity with clear navigation and relevant content targeted at industry professionals and partners. Technically, the site is built on Drupal CMS, uses modern web technologies such as Google Fonts, Matomo analytics, and Google Maps API, and implements cookie consent mechanisms for privacy compliance. Security posture is good with HTTPS enforced and security headers present, though explicit security policies and vulnerability disclosures are absent. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency but does not detract from the professional presentation of the website. Overall, RUAG International's digital presence is solid but could benefit from enhanced transparency in privacy and security documentation.

M

mont blanc hélicoptères

mbh.fr

50

Mont Blanc Hélicoptères is a leading French helicopter company specializing in a wide range of aviation services including tourist flights, pilot training, emergency medical services (SAMU), mountain rescue, and helicopter maintenance. The company targets tourists, corporate clients, and aviation service customers, positioning itself as a market leader in France. The website is well-structured, professionally designed, and provides comprehensive information about its services and bases across France and neighboring regions. Technically, the site is built on WordPress with modern plugins and technologies, including SEO optimization and cookie consent mechanisms. Security posture is good with HTTPS and reCAPTCHA in use, though some security headers and explicit policies could be improved. The absence of WHOIS data limits domain trust analysis, but the site shows strong trust indicators such as social media presence and detailed service descriptions. Overall, the site is safe, professional, and suitable for a general audience.

H

Heliswiss International AG

heliswissinternational.com

47

Heliswiss International AG is a Swiss-based specialist company with over 35 years of experience in heavy load helicopter transport and construction flights worldwide. Their services include precision transport of loads up to five tonnes, forestry/logging operations, humanitarian services such as fire fighting and rescue, and various construction-related helicopter operations. The company targets businesses and organizations requiring specialized helicopter heavy load services globally. The website presents a professional and consistent brand image with detailed service descriptions and fleet information, supporting their market position as an established specialist in the transportation sector. Technically, the website is built on the SilverStripe CMS platform, utilizing modern web technologies such as jQuery and Flexslider for interactive content. The site is mobile-optimized with good navigation and SEO practices, although performance is moderate. The presence of a cookie consent banner indicates some level of privacy compliance, but no explicit privacy policy was found. Security headers and SSL configuration details are not evident from the provided data, suggesting room for improvement in security posture. From a security perspective, the website is accessible without WAF or blocking mechanisms, but the absence of WHOIS registration data raises concerns about domain legitimacy. The site does not expose sensitive data or show signs of vulnerabilities in the analyzed content. However, the lack of explicit privacy and security policies, as well as missing security headers, indicates potential compliance gaps. Overall, the site demonstrates a moderate security maturity level with recommendations to enhance security controls and transparency. The overall risk assessment is moderate with a legitimacy score affected by missing WHOIS data. Strategic recommendations include improving domain registration transparency, implementing comprehensive privacy and security policies, enhancing security headers and SSL configurations, and establishing incident response and vulnerability disclosure mechanisms to strengthen trust and compliance.

A

Airport Helicopter AHB AG

airportheli.ch

56

Airport Helicopter AHB AG is a well-established Swiss company specializing in helicopter flights and pilot training since 1993. The company operates multiple locations across Switzerland including Luzern-Beromünster, Basel, Grenchen, and Zürich, offering a wide range of services such as sightseeing flights, VIP and taxi flights, glacier flights, romantic and wedding flights, events, heli-skiing, and comprehensive pilot training programs. Their website reflects a professional and consistent brand image with clear navigation and relevant content targeting aviation enthusiasts and potential pilot trainees. Technically, the website is built on Joomla CMS with modern frontend technologies including Bootstrap, jQuery, and Owl Carousel. It is mobile-optimized and integrates Google Analytics and Tag Manager for user tracking. The site uses HTTPS with a good SSL configuration and implements GDPR-compliant cookie consent mechanisms. However, there is room for improvement in security headers and publishing explicit security policies. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, CSRF protection, and cookie consent. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business claims, showing a consistent and legitimate registration since 1993. Overall, the site presents a low risk profile with a solid security posture and compliance with privacy regulations. Strategically, the company should consider enhancing its security posture by adding security headers, publishing a security policy, and possibly a vulnerability disclosure policy. Improving accessibility features and expanding transparency around data retention would further strengthen trust and compliance.

Aircraft Solutions is a specialized service provider offering comprehensive maintenance and support services for rotary and fixed-wing aircraft. Their services include maintenance, battery overhauls, parts sourcing, and CAMO management, targeting private owners and businesses worldwide with 24/7 availability. The website is built on WordPress with modern plugins and fonts, providing a professional and responsive user experience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy policies. No contact emails or phone numbers are publicly listed, which may impact user trust and compliance. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

I

Invoiceberry Limited

invoiceberry.com

64

InvoiceBerry is a UK-based small business SaaS company specializing in online invoicing software tailored for freelancers and small businesses. The platform offers invoice creation, expense tracking, payment management, and integrates with popular payment gateways. The website is professionally designed, mobile-optimized, and provides clear business and contact information, including customer testimonials that reinforce trust. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Cloudfront CDN, with analytics tools like Plausible and Facebook Pixel for user tracking. Security posture is good with HTTPS enforced and secure forms, though no explicit security headers or incident response contacts are published. Privacy and cookie policies are present with consent mechanisms, indicating GDPR compliance. WHOIS data is unavailable, which slightly reduces trust but the overall business presence and content quality support legitimacy.

M

Malix.Studio

malix.studio

57

Malix.Studio is a specialized media production company based in the Jura region of Switzerland, offering professional video production services including studio rental, live streaming, webinars, and virtual studio capabilities. Their business model focuses on providing high-quality, customizable video production environments tailored to the needs of SMEs in the Swiss market. The website demonstrates a solid digital presence with professional design and clear service offerings. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and performance optimization, though minor backend errors and lack of explicit privacy policies indicate areas for improvement. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit policies. Overall, the site is trustworthy and professional, with moderate risk due to minor technical and compliance gaps.

A

Actito

actito.com

67

Actito is a marketing automation and customer activation software provider targeting marketers and businesses seeking to transform customer satisfaction into revenue. The website presents a professional and modern digital presence, leveraging contemporary JavaScript frameworks and multiple marketing and tracking technologies. The technical infrastructure includes tools such as Microsoft Clarity, LinkedIn Insight Tag, and a consent management platform, indicating a moderate level of digital maturity. Security posture is adequate but could be improved by implementing standard security headers and publishing explicit privacy and cookie policies. The absence of WHOIS data for the domain www.actito.com is a notable concern, potentially indicating privacy protection or registry issues, which slightly impacts trustworthiness. Overall, the website is functional, business-focused, and safe for general audiences.

T

Threads of Life

threadsoflife.ca

64

Threads of Life is a Canadian non-profit charity dedicated to supporting individuals and families affected by workplace injury, illness, or death, while also focusing on preventing future workplace tragedies. The organization offers peer support, online workshops, regional gatherings, and awareness programs, powered by a strong volunteer base and national outreach. Their website reflects a professional and consistent brand image, with clear navigation and comprehensive content tailored to their target audience in Canada. Technically, the website is built on WordPress using modern frameworks such as Bootstrap 5, and integrates Google Tag Manager and reCAPTCHA v3 for security and analytics. The site is mobile-optimized, fast-loading, and includes SEO best practices, although some security headers are missing. Privacy compliance is partially addressed with a comprehensive privacy policy, but lacks a visible cookie consent mechanism. From a security perspective, the site uses HTTPS and secure form handling, but could improve by implementing additional security headers and publishing incident response information. No vulnerabilities or suspicious domains were detected. WHOIS data is unavailable, likely due to privacy protection, which is common and justified for non-profit organizations. Overall, Threads of Life presents a trustworthy and professional online presence with solid technical infrastructure and a good security posture. Enhancements in privacy compliance and security policy transparency would further strengthen their risk profile.

O

Ortto

autopilothq.com

76

Ortto operates as a technology company providing a SaaS platform that integrates customer data, marketing automation, and analytics into a unified solution. The website presents a professional and modern design built using the Framer platform, indicating a moderate level of digital maturity. The technical infrastructure leverages JavaScript and web fonts with a focus on responsive design and user experience. Security posture appears limited based on the absence of visible security headers and explicit security policies, which suggests room for improvement in protecting user data and enhancing trust. Privacy compliance is weak due to the lack of privacy and cookie policies, which could expose the company to regulatory risks. Overall, the website is functional and professional but would benefit from enhanced security and compliance transparency to improve trustworthiness and reduce risk.

C

CIPA IGAB CIFC

cipa-igab.ch

44

CIPA IGAB CIFC is a Swiss non-profit community focused on supporting caregivers (Proches aidants). The website serves as an informational platform with content primarily in French, targeting individuals involved in caregiving. The site uses WordPress with the Divi theme, indicating a moderate level of digital maturity but lacks advanced technical or security features. The absence of privacy, cookie, and terms of service policies suggests limited compliance with data protection regulations. Security posture is minimal, with no evident security headers or incident response information. Overall, the site is accessible and safe but would benefit from enhanced security and compliance measures.

A

Associazioni Cristiane Lavoratori Internazionali SVIZZERA

acli.ch

57

ACLI.CH is a Swiss non-profit association dedicated to supporting Christian international workers through social, cultural, and legal services. The website presents a well-structured platform with clear navigation and relevant content focused on community engagement, events, and patronage services. The organization maintains a consistent brand presence and targets a niche audience within Switzerland. Technically, the site leverages WordPress with Elementor and The7 theme, ensuring a modern and responsive user experience. Security measures include HTTPS enforcement, cookie consent mechanisms, and standard security headers, although explicit security policies and incident response information are absent. Overall, the website demonstrates a solid digital maturity suitable for its non-profit mission, with room for enhanced transparency in security and contact information.

F

fh-ch

fh-ch.ch

49

fh-ch is a Swiss non-profit association representing educators and researchers at Swiss universities of applied sciences. It acts as a national umbrella organization advocating for the rights, working conditions, and educational quality for its members. The website is professionally designed using WordPress, with multilingual support and standard web technologies. While the site is accessible and well-structured, it lacks explicit privacy, cookie, and security policies, which are important for compliance and trust. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosures. Overall, the organization appears legitimate and trustworthy with a clear mission and target audience.

F

France Éducation International

lefilplurilingue.org

55

Le fil plurilingue is an educational platform operated under the auspices of France Éducation International, providing resources and support for bilingual French education worldwide. The website targets educators, coordinators, and directors involved in bilingual francophone sections, offering a variety of teaching materials, methodological guidance, and country-specific information. The platform positions itself as a niche resource provider within the education sector, leveraging its affiliation with a reputable French educational institution. Technically, the website is built on Drupal 10, utilizing modern web technologies including jQuery and Google Fonts. It employs Matomo for analytics, indicating a preference for privacy-conscious tracking. The site demonstrates good mobile optimization and a professional design, though accessibility features are basic and SEO optimization is moderate. Hosting details are not explicitly disclosed. From a security perspective, the domain is registered consistently with no privacy protection, and the registrar status clientTransferProhibited adds a layer of domain security. However, the absence of DNSSEC and security headers, along with missing explicit privacy and cookie policies, indicates room for improvement in security posture and compliance. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences. Overall, the website presents a trustworthy and professional educational resource with moderate technical maturity and some compliance gaps. Strategic improvements in privacy policy publication, cookie consent mechanisms, and security header implementation would enhance its security and compliance standing.

U

Universités de Francophonia | Apprendre de tous, savoir ensemble

universitesdefrancophonia.com

46

Francophonia.com is an educational platform focused on the Francophone academic community, promoting collaborative learning and university networking. The website is built on WordPress using the Divi theme and integrates HubSpot for marketing and analytics. The technical infrastructure is modern but shows moderate performance and basic SEO and accessibility features. Security posture is basic with HTTPS enabled but lacks advanced security headers and visible security policies. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness. No privacy or cookie policies were detected, indicating potential compliance gaps. Overall, the website serves its educational purpose well but requires improvements in security, privacy compliance, and domain registration transparency.

I

In the pocket

cookiethough.dev

61

Cookie Though is an open source technology project developed by 'In the pocket' that provides an easy-to-use, minimal footprint cookie consent management application designed to help website owners comply with GDPR regulations. The website positions itself as a niche provider focusing on usability and accessibility, targeting developers and site owners who need a compliant cookie banner solution. The business model is based on open source distribution with community engagement via GitHub. Technically, the site uses modern web standards including JavaScript and Google Fonts, with good SEO and accessibility practices. The site is fast and mobile optimized, with no detected CMS or complex frameworks. Security posture is moderate; while HTTPS is implied, no explicit security headers or policies are published, and no incident response or vulnerability disclosure information is available. Overall, the site is trustworthy and professional with a clear focus on privacy compliance but could improve by publishing more explicit security and incident response information.

N

Northern Safety Association

nsa-nt.ca

62

The Northern Safety Association is a Canadian non-profit organization specializing in health and safety training for workers and employers in the Northwest Territories and Nunavut. The website presents a professional and consistent brand image, offering a wide range of in-class and online training courses, including COR® certification and leadership safety programs. The organization targets regional workers and employers, positioning itself as a key provider of safety education in Northern Canada. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as Google Analytics for tracking and YouTube for video content. The site is mobile-optimized and uses HTTPS with HSTS for secure communications. However, some security headers are missing, and there is no publicly available privacy policy or terms of service, which are areas for improvement. From a security perspective, the site demonstrates good practices with HTTPS enforcement and cookie consent mechanisms. No vulnerabilities or exposed sensitive data were detected. The lack of WHOIS data due to privacy protection is common and does not raise immediate concerns given the site's professional presentation and consistent content. Overall, the website is trustworthy and well-maintained, though it would benefit from enhanced privacy disclosures and explicit contact information to improve compliance and user trust.

Northern Safety Network Yukon is a specialized organization focused on occupational health and safety training and certification primarily serving Yukon-based organizations and residents. Their offerings include COR® and SECOR® certification programs, asbestos training, and a variety of online and community safety courses. The organization is positioned as a regional leader with recognized certifications endorsed by national safety federations, targeting employers and safety professionals in the construction and industrial sectors. Technically, the website employs modern web technologies such as Bootstrap and jQuery, with hosting of static assets on Amazon S3, providing a mobile-optimized and user-friendly experience. However, some technical improvements are recommended, including enhanced security headers and privacy compliance mechanisms. Security posture is moderate with use of HTTPS implied but lacking visible security headers and cookie consent. The WHOIS data is missing or unavailable, which reduces trustworthiness but the website content and contact information appear professional and legitimate. Overall, the site scores well on business credibility and content quality but has room for improvement in security and privacy compliance.

M

MASH

mashmb.ca

58

MASH is a specialized safety program provider focused on healthcare workers in Manitoba, Canada. The company offers comprehensive safety training, consulting services, and certification programs tailored to the healthcare sector. Positioned as a leading safety program in the region, MASH targets healthcare professionals seeking to improve workplace safety and compliance. The website reflects a professional and consistent brand image with a clear focus on its niche market. Technically, the site leverages modern web technologies including Vue.js, Google Tag Manager, and international telephone input libraries, hosted by Rebel.ca Corp. The site is mobile optimized and performs moderately well, though accessibility features could be enhanced. Security posture is strong with HTTPS enforcement and appropriate domain transfer protections, but DNSSEC is not enabled. Privacy compliance is a notable gap, with no visible privacy or cookie policies and no consent mechanisms, which could expose the business to regulatory risks. Contact information is limited to a contact form without explicit emails or phone numbers, reducing direct communication channels. Overall, the website is trustworthy and professional but would benefit from improved privacy and compliance disclosures.

E

Entrepreneurship Center

entrepreneurship-bern.ch

43

The Entrepreneurship Center at the University of Bern is a specialized educational and outreach institution focused on fostering entrepreneurship and innovation. It offers continuing education programs such as CAS Corporate Strategy and CAS Entrepreneurship, practical start-up training modules in collaboration with Innosuisse, and organizes the STAGE UP business creation competition. The center targets students, researchers, entrepreneurs, and professionals seeking to develop entrepreneurial skills and business acumen. Its strong affiliation with the University of Bern and partnerships with regional academic and private entities position it as a credible and trusted resource in the Swiss entrepreneurship ecosystem. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, WPBakery Page Builder, and GDPR-compliant cookie management. The site is well-optimized for SEO, mobile responsive, and uses structured data for enhanced search visibility. Performance is moderate with good accessibility features, though some improvements in accessibility and security headers could be made. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data. However, explicit security policies and incident response information are absent, and security headers are not detected. No vulnerabilities or suspicious activities are evident. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance, making it a reliable platform for its target audience. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility to further strengthen its posture.

T

Trustmary

trustmary.com

62

Trustmary is a technology company founded in 2018, providing a SaaS platform focused on collecting, analyzing, and showcasing customer feedback to help businesses improve customer experience and build social proof. The company targets businesses across multiple industries and has a strong market presence with over 1800 companies using its services worldwide. The website is professionally designed, mobile-optimized, and offers multilingual support, reflecting a mature digital presence. Technically, the site is built on WordPress, uses modern web fonts, and integrates with Google Tag Manager and YouTube for analytics and media embedding. Security posture is adequate with HTTPS enabled and domain status protections, but lacks DNSSEC and published security policies. Privacy compliance is weak due to missing privacy and cookie policies on the homepage. Overall, the website is trustworthy and professional but could improve transparency and security documentation.

R

Rebel Communications

rebelcom.ch

47

Rebel Communications is a small creative agency based in Zurich, Switzerland, specializing in communication services aimed at societal change. The website is built on WordPress using the Divi theme and incorporates Yoast SEO Premium for search engine optimization. The site presents a professional design with good mobile optimization and clear navigation, targeting organizations interested in social impact and creative communication solutions. Security posture is adequate with HTTPS enabled and a cookie consent mechanism in place, but lacks advanced security headers and explicit privacy policies. No contact emails or phone numbers are explicitly provided in the HTML content, which may affect user trust and compliance. WHOIS data confirms legitimate domain registration consistent with the business claims, enhancing credibility. Overall, the website is functional and professional but would benefit from improved privacy compliance and enhanced security practices.