Security Directory

G

GPW Institute Finland Oy

greatplacetowork.fi

69

Great Place To Work Finland (GPW Institute Finland Oy) is a leading expert in corporate culture and employee experience research in Finland, operating since 2007. The company offers globally recognized employee surveys, workplace certification, and publishes annual best workplace lists. Their services target Finnish businesses aiming to improve workplace culture and employer branding. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to their audience. Technically, the site is built on WordPress with modern analytics and marketing tools integrated, including Google Analytics, Microsoft Clarity, and CookieYes for consent management. Security posture is strong with HTTPS, CAPTCHA on forms, and bot management via Cloudflare, though some security headers could be improved. Privacy compliance is robust, with detailed cookie consent and a comprehensive privacy policy in Finnish. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

G

Great Place to Work® Institute

greatplacetowork.dk

71

Great Place to Work® Denmark operates as a recognized consulting and certification organization specializing in employee experience surveys and workplace certification services. The company targets employers and HR professionals in Denmark and Europe, offering services such as employee surveys, Great Place To Work certification, and publishing lists of best workplaces. Their market position is strong within the workplace certification niche, supported by professional branding and consistent digital presence. Technically, the website is built on Joomla CMS with modern libraries like Bootstrap, jQuery, and Font Awesome, integrated with HubSpot for lead capture and Google Tag Manager for analytics. The site demonstrates good mobile optimization and SEO practices, although accessibility could be improved. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but additional HTTP security headers could enhance protection. The absence of WHOIS data limits domain trust analysis, but the overall professionalism and presence of trust indicators suggest legitimacy. No WAF or blocking mechanisms were detected, and the site content is safe and business-focused.

The website at greatplacetowork.com.au is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. As a result, no business descriptions, contact information, or policy documents are available for analysis. The domain is registered through a reputable Australian registrar with consistent WHOIS data, indicating legitimacy of the domain ownership. However, the lack of accessible content severely limits the ability to assess the company's market position, services, or technical infrastructure. The technical footprint is minimal, with only Google Fonts and EasyDNS name servers referenced. No analytics, scripts, or security headers are present in the accessible content. Overall, the site appears to be either restricted or down, resulting in a very low AI score and inability to perform a comprehensive security or compliance evaluation.

S

Spitex Magazin

spitexmagazin.ch

53

Spitex Magazin is a specialized online media outlet focused on the Spitex home care sector in Switzerland. It provides news, articles, and information relevant to home care professionals and the general public interested in Spitex services. The website is professionally designed using WordPress, supports multiple languages (German, French, Italian), and integrates advertising and newsletter subscription services. The business model centers on media publication and advertising revenue within a niche healthcare segment. Technically, the site uses modern web technologies including Google Tag Manager and Mailchimp, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though some improvements like a security.txt file and explicit security policies could enhance compliance and transparency. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate media presence in Switzerland.

The Swiss Institute of Emergency Medicine Ltd (SIRMED) is a reputable Swiss organization specializing in emergency medicine education and training. It offers a range of courses including first aid seminars for laypersons, professional paramedic training, and continuous medical education for specialists. The institute operates under the umbrella of the Swiss Paraplegic Group, reinforcing its credibility and market position in the healthcare education sector. The website reflects a professional and well-structured digital presence with clear branding and comprehensive service descriptions targeting healthcare professionals and first responders. Technically, the website is built using modern web technologies such as React and Gatsby, ensuring fast performance and excellent mobile optimization. It integrates key marketing and analytics tools like Google Tag Manager and Visual Website Optimizer, alongside a robust cookie consent mechanism via Cookiebot, demonstrating a mature approach to privacy compliance. The site is well-optimized for SEO and accessibility, providing a positive user experience. From a security standpoint, the website enforces HTTPS, employs multiple security headers, and shows no signs of vulnerabilities or exposed sensitive data. Certifications such as ISO 9001 and eduQua further attest to its commitment to quality and security standards. However, the absence of a public vulnerability disclosure policy and incident response contact information suggests areas for improvement in transparency and security readiness. Overall, SIRMED's website presents a trustworthy, professional, and secure platform aligned with its business objectives. Strategic recommendations include establishing a vulnerability disclosure channel, publishing incident response contacts, and continuous monitoring of third-party scripts to maintain security posture.

C

CONCORDIA

concordia.ch

72

CONCORDIA is a well-established Swiss health insurance provider offering a comprehensive range of insurance and pension provision services tailored for individuals and families. The company maintains a strong market position supported by multiple agencies and a broad service portfolio including basic and supplementary health insurance, private pension solutions, and digital health advisory services. The website reflects a professional and user-friendly digital presence with clear navigation and extensive content relevant to its target audience. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies such as jQuery and Adobe Analytics for performance and user insights. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a positive user experience across devices. Security measures include HTTPS enforcement, appropriate security headers, and secure form handling, indicating a mature security posture. While the site demonstrates strong privacy compliance with a comprehensive privacy policy and cookie consent mechanism, it lacks explicit incident response contact details and a vulnerability disclosure policy. The WHOIS data aligns well with the business claims, showing no suspicious patterns and supporting the legitimacy of the domain. Overall, CONCORDIA's website is a trustworthy, secure, and professionally maintained platform that effectively supports its business objectives and customer engagement.

T

Tonotaco OÜ

viva-betreuung.ch

60

GCI - The Green Change Initiative is a Swiss-based non-profit platform focused on climate protection and sustainability, recently expanding its scope by acquiring Viva-Betreuung.ch to integrate innovative and sustainable care services. The website presents a professional and well-structured digital presence built on WordPress with modern SEO and performance optimizations. It leverages technologies such as Elementor, WP Rocket, and Google Analytics to deliver a fast, mobile-optimized user experience. Security posture is solid with HTTPS and some security best practices, though there is room for improvement in security headers and explicit privacy policies. The site maintains a strong social media presence and demonstrates trustworthiness through structured data and positive user engagement. Overall, the platform is positioned as a credible and innovative leader in sustainable climate and care initiatives in Switzerland.

V

Verein palliative bern

palliativebern.ch

58

palliative bern is a non-profit association dedicated to promoting and networking palliative care services in the Canton of Bern, Switzerland. The website serves as an information hub for patients, families, healthcare professionals, and interested parties, offering event information, resources, and support services. The organization positions itself as a regional leader in palliative care advocacy and community engagement. Technically, the website is built on TYPO3 CMS with modern web technologies including jQuery, Bootstrap, and Google Fonts. It employs HTTPS with a good SSL configuration and integrates Google Analytics with IP anonymization to respect user privacy. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site follows basic best practices such as HTTPS enforcement and secure form handling but lacks advanced security headers like Content Security Policy and does not publish explicit security or incident response policies. No cookie consent mechanism was detected, which may impact GDPR compliance. WHOIS data confirms the legitimacy of the domain with consistent registrant information matching the organization's profile. Overall, the website is trustworthy, professional, and well-maintained, with minor gaps in privacy compliance and security policy transparency. Strategic improvements in these areas would enhance the site's security posture and regulatory adherence.

P

Pallifon

pallifon.ch

54

Pallifon is a Swiss non-profit organization providing telephone emergency consultation services for palliative patients and their relatives. The website reflects a specialized healthcare support service with a clear mission to assist in acute health situations. The digital infrastructure is built on a modern WordPress platform using Astra theme and Elementor page builder, complemented by GDPR-compliant cookie management and SEO optimization. Security posture is strong with HTTPS, security headers, and reCAPTCHA integration, though formal security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with relevant privacy regulations.

V

Vitatel

vitatel.ch

66

Vitatel operates a specialized website focused on emergency call systems and fall detection devices primarily targeting seniors and individuals at risk of falls in Switzerland. The company is recognized as a testsieger in the Swiss Kassensturz, indicating a strong market position and trustworthiness. The website offers detailed product information, a shop integration, and social media presence, supporting a direct-to-consumer business model in healthcare technology. Technically, the site uses modern web technologies including service workers for PWA capabilities and is hosted on a reputable provider. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

Spitex Schweiz

spitex.ch

62

Spitex Schweiz is the national umbrella organization for Spitex cantonal associations and other professional home care providers in Switzerland. The organization focuses on coordinating professional home care and support services, advocacy, education, and providing information to clients and caregivers. The website reflects a well-established, large non-profit entity with a clear mission and strong market position within the Swiss healthcare sector. Technically, the site uses modern JavaScript libraries such as jQuery and integrates Sentry for error tracking, indicating a mature digital infrastructure. The cookie consent mechanism is implemented with granular user controls, supporting GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-structured, serving its target audience effectively.

F

FresuCare

fresucare.ch

73

FresuCare is a Swiss homecare provider specializing in clinical nutrition and related healthcare services with over 25 years of experience. As a subsidiary of Fresenius Kabi (Schweiz) AG, it offers comprehensive patient care including ambulatory nutrition therapy, a specialized pharmacy, and support for healthcare professionals. The website is well-structured, professionally designed, and targets patients, healthcare professionals, and cost bearers in Switzerland. Technically, the site uses Adobe Experience Manager CMS and integrates Adobe marketing and analytics tools along with OneTrust for cookie consent, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, CSRF protection, and cookie consent mechanisms, though explicit security and privacy policies are not prominently found. Overall, the site demonstrates high business credibility and trustworthiness with consistent WHOIS data and no suspicious indicators. Recommendations include publishing detailed privacy and security policies and enhancing accessibility features.

E

Energie Wasser Bern

ewb.ch

72

Energie Wasser Bern is a large municipal utility provider based in Switzerland, offering essential services such as electricity, water, gas, district heating, and waste management primarily to residents and businesses in Bern. The website reflects a professional and consistent brand presence with a clear focus on serving the local community. The business model centers on utility provision and energy consulting, positioning the company as a key player in the regional energy sector. Technically, the website is built on the Weblication CMS platform and integrates modern analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Hotjar, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are not publicly available. Overall, the site demonstrates high trustworthiness and business credibility, with room for improvement in privacy compliance documentation and direct contact information availability.

G

Geistlich Pharma AG

geistlich-pharma.com

57

Geistlich Pharma AG is a Swiss-based global leader in regenerative dentistry and biomaterials, specializing in bone, cartilage, and tissue regeneration. The company serves both professional healthcare providers and patients with a broad portfolio of biomaterials and medical devices. Their website reflects a mature digital presence with multilingual support, comprehensive educational resources, and global distribution information. Technically, the site is built on TYPO3 CMS, integrates modern analytics and cookie consent tools, and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. WHOIS data is unavailable, which slightly impacts trust but the professional content and contact details support legitimacy. Overall, Geistlich Pharma's website is professional, secure, and compliant, supporting its market position as a trusted healthcare biomaterials provider.

B

Berner Chiropraktoren Gesellschaft

chiropraktikbern.ch

63

The Berner Chiropraktoren Gesellschaft website serves as the online presence for a regional chiropractic professional society in Switzerland. It provides information about the organization's mission, member services, and resources for patients and healthcare professionals. The site is primarily in German and targets local chiropractors, patients, and medical professionals. The business model is non-profit and focused on professional development and advocacy within the chiropractic healthcare sector. Technically, the website is built on the Jimdo CMS platform, utilizing standard Jimdo hosting and resources. It includes basic SEO and accessibility features, though mobile optimization is only basic. The site employs Facebook Pixel for analytics and tracking purposes. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a privacy and cookie policy present but no terms of service or incident response information. Overall, the website is professional and trustworthy but could benefit from enhanced security and compliance features.

D

Discord Powered by DOTEXE

discordmerch.com

67

Discord Merch is an e-commerce website powered by DOTEXE, specializing in selling official Discord branded merchandise. The site targets the Discord user community and fans interested in purchasing branded apparel and accessories. The business operates on the Shopify platform, leveraging its e-commerce capabilities and payment processing services. The domain was registered in 2019, aligning with the business timeline, and uses Cloudflare DNS services for performance and security enhancements. From a technical perspective, the website employs modern web technologies including Shopify's Boost theme, JavaScript libraries, and third-party scripts for analytics and marketing. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Performance is moderate, typical for Shopify-hosted stores with multiple external resources. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, but lacks DNSSEC and explicit security or incident response policies. Cookie consent mechanisms are implemented, but privacy and terms of service pages are missing, which impacts compliance and user trust. No contact information is readily available, which may affect customer support and trustworthiness. Overall, the website presents a moderate risk profile with good business credibility but room for improvement in privacy compliance and security transparency. Strategic recommendations include publishing privacy and terms policies, enabling DNSSEC, and providing clear contact channels for security and customer support.

D

Discord

discordstatus.com

59

Discordstatus.com serves as the official status page for Discord, a leading communication platform primarily targeting gamers and online communities. The site provides real-time and historical data on system performance, including uptime metrics and incident reports for various core services such as API, Media Proxy, Gateway, Push Notifications, Search, Voice, and Client components. The platform is built on Atlassian's Statuspage infrastructure, ensuring reliable and professional status communication. The target audience includes Discord users, developers, and administrators who require transparency on service availability and issues. From a technical perspective, the website demonstrates a mature digital infrastructure leveraging modern web technologies including jQuery, Google reCAPTCHA Enterprise for bot protection, and AWS Cloudfront CDN for fast content delivery. The site is mobile-optimized, accessible, and SEO-friendly with proper meta tags and structured content. Security best practices are evident with HTTPS enforcement, multiple security headers, and secure subscription forms with OTP verification mechanisms. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, DNSSEC is not enabled, which could be considered for enhanced DNS security. Privacy compliance is supported through links to Atlassian's comprehensive privacy policy and terms of service, though no explicit cookie consent mechanism is present on this status page. Contact information is limited to subscription forms and a link to Discord's support site, with no direct emails or phone numbers disclosed. Overall, discordstatus.com is a professional, secure, and trustworthy platform that effectively communicates service status to its users. It aligns well with Discord's brand and operational transparency goals, supporting enterprise-scale service delivery and user engagement.

S

Stadium

bystadium.com

71

Stadium operates as a global platform specializing in group gifting, swag, rewards, and recognition solutions primarily targeting corporate clients, HR departments, and marketing teams. The website presents a professional and consistent brand image, offering a variety of services including company shops, on-demand swag, snack boxes, bulk swag, peer-to-peer recognition programs, and automated gifting. The business model is B2B SaaS and service-oriented, positioning itself as a comprehensive solution for employee and client appreciation on a global scale. Technically, the website is built on WordPress using Elementor, enhanced with modern marketing and analytics tools such as HubSpot, Google Tag Manager, and PubNub for real-time features. The site demonstrates good SEO, accessibility, and mobile optimization practices, with moderate performance. Security is enforced via HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not published. The security posture is solid with no evident vulnerabilities or exposed sensitive data, but improvements are recommended in publishing security policies and implementing additional HTTP security headers. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner, indicating GDPR awareness. Overall, the website is trustworthy and professional, though the lack of WHOIS data for the domain raises some concerns about domain legitimacy and transparency. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving contact information availability to bolster trust and compliance.

I

IGEL

igel.com

72

IGEL Technology operates a professional website focused on delivering a secure enterprise endpoint operating system tailored for SaaS, DaaS, and VDI environments. The company positions itself as a transformative technology provider in the endpoint OS market, targeting enterprise IT organizations. The website demonstrates a mature digital presence with modern technologies such as WordPress CMS, Cookiebot for GDPR compliance, and integration with marketing and analytics platforms. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are not publicly available. The absence of WHOIS registration data is a notable anomaly, suggesting privacy protection or domain registration issues, which slightly impacts trustworthiness. Overall, the website is professional, well-branded, and compliant with privacy regulations, supporting IGEL's market credibility.

F

Flaticon

flaticon.com

68

Flaticon is a leading online platform offering millions of free and premium vector icons and stickers in multiple formats such as PNG, SVG, EPS, PSD, and CSS. The website targets designers, developers, and digital content creators seeking high-quality graphical resources. It operates on a freemium business model, providing free downloads with attribution and premium subscription plans for unlimited access and commercial licensing. The platform is well-positioned in the digital design market with strong brand recognition and a comprehensive resource library. Technically, Flaticon employs a modern web infrastructure leveraging JavaScript frameworks, Google Analytics, Google Tag Manager, Hotjar for user behavior analysis, and OneTrust for cookie consent management. The site is hosted on a CDN likely provided by Akamai, ensuring fast performance and excellent mobile optimization. SEO and accessibility practices are robust, supported by structured data and meta tags. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements multiple security headers. It uses reCAPTCHA for form protection and provides cookie consent mechanisms aligned with GDPR. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, which could be improved to enhance trust and compliance. Overall, Flaticon presents a professional, secure, and user-friendly platform with high content quality and strong market presence. The absence of WHOIS registrant data slightly reduces trust but is mitigated by external verification and consistent branding. Strategic recommendations include publishing detailed security policies, providing clear contact information, and implementing a vulnerability disclosure program to further strengthen security posture and business credibility.

3

360 Rumors

360rumors.com

53

360 Rumors is a specialized online platform providing in-depth reviews, news, and tutorials related to 360 cameras and virtual tour technologies. The website targets consumers and professionals interested in immersive camera technology, offering comprehensive content on brands like Insta360, DJI, and Theta. The business model primarily revolves around content publishing supported by affiliate marketing and advertising revenue streams. The site maintains a niche authority position within the 360 camera review market segment. Technically, the website is built on WordPress 6.6.4 with a modern tech stack including Yoast SEO Premium, Google Analytics, Facebook SDK, and affiliate marketing plugins like Lasso. The site demonstrates good SEO optimization, mobile responsiveness, and moderate performance. Hosting and DNS are managed through DNC Holdings, Inc. with Directnic name servers. Structured data and Open Graph tags are properly implemented to enhance search engine visibility and social media sharing. From a security perspective, the site enforces HTTPS with a good SSL configuration and domain registration protections such as clientDeleteProhibited status. However, DNSSEC is not enabled, and some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected. No exposed sensitive data or vulnerabilities were found in the HTML content. Privacy and cookie policies are present and indicate GDPR compliance, though no explicit security policy or incident response contacts are published. Overall, the website presents a low-risk profile with a high level of professionalism, good content quality, and standard security practices for a content publishing platform. Strategic recommendations include enabling DNSSEC, implementing additional security headers, and publishing a formal security policy to enhance trust and compliance.

The website kuula.io currently presents minimal accessible content, likely due to Cloudflare WAF or security challenge mechanisms blocking full access. The domain is registered since 2016 with a US-based registrant and uses Cloudflare for DNS hosting, indicating a standard security setup. However, the lack of visible website content, metadata, policies, or contact information severely limits the ability to assess the business and security posture comprehensively. The site does not expose any adult or explicit content and appears safe for general audiences. The security posture is basic with no advanced headers or configurations detected, and privacy compliance is lacking due to missing policies. Overall, the site appears legitimate but underdeveloped or protected behind security layers that restrict analysis.

L

LANtana Gesellschaft für angewandte Daten- und Netzwerktechnik mbH

lantana.de

49

LANtana Gesellschaft für angewandte Daten- und Netzwerktechnik mbH is a German IT service provider specializing in IT infrastructure and data center solutions for medium-sized companies primarily in northern Germany. The company offers a broad range of services including hardware and software sales, commissioning, maintenance, and operation of IT infrastructure, supported by their own data centers. Their market position is strong, evidenced by a top-3 ranking among German IT service providers in 2024. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on WordPress with modern optimization plugins and is mobile-friendly, though some accessibility and security header improvements are possible. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies and incident response information. Privacy compliance is good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a gap. Overall, the site is trustworthy and well-positioned for its target audience.

esko-systems GmbH is a small IT service provider based in Bavaria, Germany, specializing in IT security solutions and managed services. The company offers a broad range of services including managed security, IT infrastructure, audits, backup solutions, and network security. Their website reflects a professional and consistent brand image with a focus on IT security challenges and solutions for businesses. The company maintains an active social media presence and uses modern web technologies such as WordPress with Elementor and Yoast SEO for content management and optimization. Technically, the website is well-structured, mobile-optimized, and uses HTTPS with good SSL configuration, indicating a mature digital infrastructure. However, the absence of explicit privacy policies, terms of service, and incident response contacts suggests areas for compliance and transparency improvement. Overall, the security posture is solid with cookie consent mechanisms in place, but could benefit from enhanced security headers and formal vulnerability disclosure policies.

C

Computer Manufaktur GmbH

computer-manufaktur.de

70

Computer Manufaktur GmbH is a Berlin-based IT system house specializing in IT services, consulting, and software/web development primarily for medium-sized companies and associations. The company positions itself as a reliable partner for digital transformation, combining solid craftsmanship with passion for IT technologies. Their market position is strengthened by notable client references and industry awards, including recognition as a top IT service provider in Germany. Technically, the website is built on TYPO3 CMS, integrates modern tools like HubSpot forms and Google Analytics, and offers remote support via Teamviewer, reflecting a mature digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit incident response policies. Overall, the website is professional, well-structured, and GDPR compliant, supporting a trustworthy business presence.

B

BS2 Systemhaus GmbH

bs2-computer.de

55

BS2 Systemhaus GmbH is a small, regionally focused IT system house based in Koblenz and Boppard, Germany. With over 15 years of experience, the company offers tailored IT solutions, including computer hardware, telephony, printing, security, and comprehensive IT services and consulting. Their market position is that of a trusted local IT partner for medium-sized businesses, emphasizing personalized service and efficiency enhancement. The website reflects a mature digital presence built on WordPress with Elementor, integrating advanced cookie consent and tracking tools to ensure GDPR compliance. The technical infrastructure is modern and well-maintained, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site projects professionalism and trustworthiness, with clear contact information and social proof via customer review widgets.

B

BASYS Brinova GmbH

basys-brinova.de

50

BASYS Brinova GmbH is a medium-sized, well-established IT services company based in Bremen and Oldenburg, Germany, and part of the connexta group. The company offers a comprehensive portfolio of IT solutions including consulting, managed services, IT security, backup, cloud, and virtualization, targeting primarily medium-sized businesses in the region. Their website reflects a professional and consistent brand image with detailed service descriptions and a clear regional focus. Technically, the site is built on WordPress with modern plugins and tracking tools, showing good SEO and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

I

IF-TECH AG

if-tech.de

54

IF-TECH AG is a Munich-based IT service provider specializing in cloud solutions, modern workplace, and IT security. The company positions itself as an innovation leader and strategic partner, offering scalable and flexible IT concepts tailored to customer needs. Their services include consulting, managed services, and proprietary AI solutions, targeting businesses primarily in Germany. The website demonstrates a mature digital presence with modern technologies such as WordPress, Elementor, and integrated analytics tools. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and explicit privacy documentation are recommended. WHOIS data lacks detailed registrant information, which slightly impacts transparency but does not detract from the professional business presentation. Overall, IF-TECH AG presents a credible and trustworthy IT services business with a strong market position and good technical implementation.

I

IGEL

igel.de

68

IGEL is a technology company specializing in secure endpoint operating systems designed for enterprise SaaS, DaaS, and VDI environments. The company positions itself as a transformative and secure endpoint OS provider, targeting large enterprises and businesses requiring robust endpoint security solutions. The website reflects a professional and consistent brand image with good content quality and clear messaging tailored to its target audience. Technically, the site is built on WordPress with a commercial theme, leveraging modern web technologies including Cloudflare for DNS and security, Cookiebot for GDPR-compliant cookie management, and Google Tag Manager for analytics and marketing. The site demonstrates moderate to good performance and mobile optimization.

N

Nutanix

nutanix.com

74

Nutanix operates as a leading enterprise technology company specializing in a unified platform that integrates infrastructure and management to enable seamless operation of applications, data, and AI workloads across hybrid and multi-cloud environments. The company positions itself as a leader in distributed hybrid infrastructure, offering a broad portfolio of products including cloud platforms, Kubernetes management, unified storage, and enterprise AI solutions. The website reflects a mature enterprise-grade digital presence with comprehensive product information and clear navigation tailored to IT professionals and business decision-makers. Technically, the website leverages Adobe Experience Manager as its CMS, combined with Adobe's marketing and analytics suite, and OneTrust for privacy compliance. The site demonstrates good performance, mobile optimization, and accessibility features. Security best practices are observed with HTTPS enforcement and security headers, although explicit security policies and incident response details are not publicly disclosed. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through cookie consent mechanisms and a comprehensive privacy policy. The absence of WHOIS data limits transparency but does not detract from the overall legitimacy and professionalism of the site. Overall, Nutanix's website presents a trustworthy, professional, and secure digital front that aligns with its enterprise market positioning. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and trust further.

D

DataCore Software

datacore.com

76

DataCore Software is a well-established enterprise technology company specializing in software-defined storage solutions that enhance data storage performance, efficiency, and availability. Their product portfolio includes SANsymphony for SAN and HCI environments, Swarm object storage, Nexus parallel file system, and Puls8 for Kubernetes environments. The company targets IT professionals and enterprises seeking modern, flexible, and resilient data storage technologies. Their market position is strong within the software-defined storage and hyperconverged infrastructure sectors, supported by a professional and comprehensive online presence. Technically, the website is built on WordPress with a modern tech stack including Gravity Forms, Google Tag Manager, and various analytics and marketing tools. The site demonstrates excellent SEO, mobile optimization, and accessibility. Security best practices are observed with HTTPS enforcement, security headers, and use of monitoring tools like Rollbar. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. The WHOIS data for the domain is not publicly available, which reduces transparency but does not necessarily indicate illegitimacy. The website content and branding are consistent and professional, supporting the company's credibility. Overall, the site presents a low-risk profile with strong business and technical maturity. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure mechanisms, and improving WHOIS transparency to enhance trust and compliance posture.

F

Fujitsu Limited

fujitsu.com

70

Fujitsu Limited operates a comprehensive global website focused on sustainability transformation and digital innovation. The company is a large enterprise headquartered in Japan, providing consulting, IT infrastructure, cloud, AI, and industry-specific solutions to enterprise and public sector clients worldwide. The website demonstrates a high level of digital maturity with modern technologies, responsive design, and accessibility features. Security posture is strong with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the site projects a professional and trustworthy corporate image with extensive content relevant to its target audience.

Sophos is a leading cybersecurity company providing adaptive, AI-driven cybersecurity solutions and managed services to protect organizations worldwide. Their offerings include endpoint protection, managed detection and response, network security, cloud security, and advisory services. The company is recognized as a leader by Gartner and MITRE and holds ISO 27001 certification, reflecting a strong commitment to security and compliance. The website demonstrates a mature digital presence with modern technologies, comprehensive content, and strong branding consistency. Security posture is robust with HTTPS, security headers, and privacy compliance clearly implemented. The absence of public WHOIS data is typical for large cybersecurity firms and does not detract from the legitimacy of the domain. Overall, Sophos presents a trustworthy and professional cybersecurity service provider with a strong market position.

P

Paessler AG

paessler.com

73

Paessler AG is a reputable technology company specializing in network monitoring software, best known for its flagship product PRTG. The company offers solutions tailored for small to large enterprises, including hosted and enterprise-grade monitoring options. Their website reflects a mature digital presence with comprehensive product information, customer success stories, and multiple contact channels primarily via forms. Technically, the site is built on the Neos CMS and Flow PHP framework, leveraging modern JavaScript libraries and Google Tag Manager for analytics. Security measures such as HTTPS and anti-clickjacking scripts are in place, and privacy compliance is demonstrated through detailed privacy and cookie policies with consent mechanisms. However, the lack of publicly available WHOIS data slightly reduces transparency but is common for privacy-conscious businesses. Overall, the website presents a professional, trustworthy, and secure platform for its target audience of IT professionals and enterprises.

Hewlett Packard Enterprise (HPE) is a leading global technology company specializing in edge-to-cloud solutions, enterprise compute, data management, AI, and security services. The company targets enterprise IT decision makers and businesses seeking advanced hybrid cloud and AI-driven digital transformation. HPE maintains a strong market position with a comprehensive portfolio of products and services, including its GreenLake cloud platform and recent acquisition of Juniper Networks. The website reflects a mature digital presence with professional design, clear navigation, and extensive content including news, product information, and corporate resources. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and hosted likely via Akamai, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS, security headers, and privacy compliance mechanisms in place, though explicit security policies and incident response details are not publicly detailed. Overall, the site demonstrates high business credibility and trustworthiness, with no signs of blocking or malicious activity. Strategic recommendations include publishing detailed security policies, vulnerability disclosure information, and DPO contacts to enhance transparency and compliance.

C

Citrix

citrix.com

80

Citrix is a well-established enterprise software company founded in 1989, specializing in secure, scalable, and high-performing IT solutions for businesses worldwide. The company operates under the parent organization Cloud Software Group, Inc., and offers a broad portfolio of products including application and desktop virtualization, endpoint management, secure access, and analytics. The website reflects a mature digital presence with comprehensive product information, industry-specific solutions, and strong branding consistency. Technically, the site leverages modern web technologies such as Adobe Experience Manager, Google Analytics, and Akamai CDN services, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement, secure cookie practices, and consent management, though explicit security policies and incident response contacts are not prominently published. The absence of WHOIS data limits domain registration insights, but the overall trust indicators and corporate affiliations support legitimacy. Privacy compliance is well addressed with clear policies and cookie consent mechanisms.

C

connexta | IT. Gemeinsam. Stärker.

connexta.de

50

connexta is a German IT services group focused on providing multi-cloud services, IT security, managed services, and modern workplace solutions primarily targeting the German mid-sized business sector. The website is professionally designed using WordPress with SEO optimization and integrates advanced marketing and analytics tools such as HubSpot and Google Analytics. Cookie consent is managed comprehensively via Cookiebot, ensuring GDPR compliance in user tracking and data collection. The technical infrastructure is modern and hosted with INWX, a reputable German hosting provider. Security posture is solid with HTTPS enforced and WAF protection via Cloudflare, although explicit security policies and incident response contacts are not published on the site. Overall, the website presents a trustworthy and professional image suitable for its target audience.

The OpenID Foundation operates as a non-profit organization focused on promoting and maintaining open identity standards globally. The domain openid.net is well-established and consistent with the organization's history and mission. However, the website content is currently inaccessible, returning a 503 Service Unavailable error, which prevents access to any meaningful content or metadata. This limits the ability to assess the website's technical maturity, security posture, or compliance status. The domain is hosted on Amazon AWS infrastructure, indicating a modern hosting environment, but no further technical details are available due to the lack of accessible content. Security posture cannot be evaluated fully; no security headers or HTTPS status could be confirmed. The absence of privacy, cookie, or terms of service policies on the accessible content is a compliance concern. Overall, the website is currently non-functional, resulting in a low AI score and limited trustworthiness from a user perspective.

L

LibreTexts

libretexts.org

71

LibreTexts is a well-established non-profit platform founded in 2016, specializing in open educational resources (OER) including customizable textbooks, adaptive homework, and interactive learning materials. It serves educators and students primarily in the United States, offering a comprehensive ecosystem for open education. The website is professionally designed using Drupal 10 and modern web technologies, providing excellent user experience and mobile optimization. The platform is recognized for its extensive textbook libraries and adaptive homework system, positioning it as a leader in the OER space. Security posture is generally good with HTTPS and domain protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Contact information is limited to email, with no phone numbers or physical addresses disclosed. Overall, LibreTexts demonstrates high business credibility and trustworthiness with strong community engagement and educational focus.

Vecteezy is a well-established online platform providing free and premium vectors, images, photos, and videos primarily targeting graphic designers, marketers, and content creators. The site operates under a freemium business model, offering a large repository of creative assets with options for premium subscriptions. Owned by Etsy, Inc., Vecteezy holds a strong market position in the digital creative asset industry. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and Fastly CDN, ensuring fast performance and excellent mobile optimization. Security-wise, the site enforces HTTPS, uses security headers, CSRF tokens, and reCAPTCHA, reflecting a mature security posture. However, the absence of public WHOIS data and explicit security policies slightly reduces trustworthiness. Overall, Vecteezy presents a professional, secure, and user-friendly platform with moderate user tracking and good privacy compliance.

D

Discord

discordapp.com

73

Discord is a leading technology company specializing in group chat, voice, and video communication primarily targeted at gamers and online communities. The platform offers a freemium business model with additional paid features through Nitro subscriptions. The website reflects a mature digital presence with excellent design, comprehensive content, and strong user engagement features. Technically, Discord employs modern web technologies including Webflow CMS, Google Tag Manager for analytics, and Cloudflare for domain registration and likely CDN services, ensuring fast performance and robust infrastructure. Security posture is strong with HTTPS enforcement, multiple security headers, and cookie consent mechanisms, although DNSSEC is not enabled and no explicit security.txt or incident response contacts were found. Overall, the site is highly professional, trustworthy, and compliant with GDPR requirements, making it a reliable platform for its users.

O

Octany

octany.com

54

Octany is a Swedish-based SaaS company providing a comprehensive fundraising platform tailored for nonprofits, associations, subscription-driven businesses, and companies running campaigns. Their platform integrates multiple payment methods including Swish, cards, and Autogiro, combined with donor management and a mini-CRM to provide full visibility of revenue and donor data. The company positions itself as a reliable technology partner with a focus on Swedish payment solutions and seamless integration with accounting and marketing tools. The website is professionally designed, mobile-optimized, and rich in content, featuring customer testimonials and partner logos that enhance trust and credibility. However, the lack of publicly available WHOIS registration data raises questions about domain registration legitimacy and transparency.

T

Trinket

trinket.io

59

Trinket is a US-based educational technology company founded in 2014 that provides an online platform for writing, running, and sharing code directly in web browsers. The platform targets individual learners, educators, and schools, offering free interactive coding resources and premium subscription plans to enhance the learning experience. Trinket positions itself as a niche player in the education sector, focusing on accessible coding education without the need for software installation. Technically, the website employs a modern but somewhat dated tech stack including AngularJS, jQuery, and various JavaScript libraries, hosted behind Cloudflare DNS and CDN services. The site is mobile-optimized and integrates Google reCAPTCHA for form security. Security posture is good with HTTPS enforced and no visible sensitive data exposure, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is supported by a clear privacy policy and terms of service, but lacks a visible cookie consent mechanism. Business credibility is strong with consistent WHOIS data and transparent company information. Overall, the website is professional, secure, and trustworthy, with room for improvement in security headers and cookie consent.

A

Akelius Residential Property AB

akelius.com

68

Akelius Residential Property AB is a well-established international real estate company specializing in rental apartments across major cities such as New York, Boston, Washington D.C., Toronto, Montreal, Paris, and London. Founded in 1997, the company operates through multiple country-specific subsidiaries, offering modern rental apartments and property management services. The website reflects a professional and consistent brand image, targeting renters seeking quality apartments in attractive urban locations. Technically, the website is built on a modern Angular framework with integration of Google Tag Manager, Hotjar, and Google Fonts, hosted on Oracle Cloud DNS infrastructure. The site demonstrates good performance, mobile optimization, and SEO practices, although accessibility features are basic. Analytics and marketing tools are used responsibly with cookie consent mechanisms in place, indicating GDPR compliance. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and implements cookie consent. However, DNSSEC is not enabled, and some advanced security headers are missing. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is transparent and consistent with the business claims, supporting high legitimacy. Overall, Akelius.com presents a secure, professional, and trustworthy platform for real estate rental services with strong compliance and business credibility. Strategic improvements in security policies and incident response disclosures could further enhance trust and resilience.

M

Matematikcenter

webmatematik.dk

66

Webmatematik.dk is a Danish free online educational platform focused on providing mathematics learning resources and homework help for students across various educational levels in Denmark. It is operated as a non-profit service by Matematikcenter, a recognized educational organization. The website offers a broad range of math lessons, online forums, and live help sessions, positioning itself as a trusted resource in the Danish education sector. Technically, the site leverages modern web technologies including AngularJS, MathJax, and integrates with trusted third-party services such as Google Analytics, Trustpilot, and Facebook for analytics, reviews, and social engagement. The site is hosted on Microsoft Azure, ensuring reliable infrastructure and performance. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and spam protection via Google reCAPTCHA, though some security headers could be enhanced. Privacy compliance is well addressed with clear cookie policies and GDPR-aligned consent management. Overall, the site demonstrates a professional and trustworthy presence with no critical vulnerabilities or suspicious indicators.

S

SES

ses.se

48

SES (Sponsrings & Eventsverige) is a well-established Swedish non-profit membership organization focused on sponsorship, events, partnerships, and trade shows. It serves a broad ecosystem including companies, rights holders, agencies, suppliers, destinations, venues, and expo actors, aiming to strengthen business and advance the industry. The website reflects a mature digital presence with a clear business model centered on membership benefits, networking, education, and industry events such as the Gyllene Hjulet competition. Technically, the site is built on WordPress with modern plugins and themes, optimized for SEO and mobile use, hosted by a reputable provider. Security posture is good with HTTPS and secure forms, though some security headers and vulnerability disclosure mechanisms could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact channels and privacy policies.

S

Sysselmesteren på Svalbard

sysselmannen.no

59

Sysselmesteren på Svalbard is the official Norwegian government authority responsible for administration, law enforcement, environmental protection, and emergency preparedness on the Svalbard archipelago. The website serves as a comprehensive information portal for residents, visitors, researchers, and businesses, providing access to laws, regulations, permits, and public safety information. It holds a strong market position as the authoritative source for Svalbard-related governance and services. Technically, the website employs modern web technologies including Bootstrap for responsive design, FontAwesome for icons, and Microsoft Application Insights for telemetry. The site is well-structured with good SEO and mobile optimization, though some accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site enforces HTTPS and uses telemetry tools responsibly without exposing sensitive data. However, it lacks some security headers and does not provide a public security policy or incident response contact, which are areas for improvement. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy, professional, and serves its government function effectively. Recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and considering a vulnerability disclosure program to further strengthen security posture and compliance.

I

International Association of Antarctica Tour Operators

iaato.org

67

The International Association of Antarctica Tour Operators (IAATO) operates a well-established website focused on promoting safe and environmentally responsible private-sector travel to Antarctica. Founded in 1991, IAATO serves as a membership organization providing resources such as member and vessel directories, visitor guidelines, and scientific fellowship programs. The website reflects a strong market position as a leading global association in Antarctic tourism, targeting tour operators, tourists, and environmental stakeholders. Technically, the website is built on Drupal 10 with Bootstrap 5, leveraging modern web technologies and frameworks. It demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. The site uses Google Tag Manager for analytics and implements a cookie consent mechanism aligned with GDPR requirements. From a security perspective, the site employs HTTPS and session cookies for logged-in users but lacks visible security headers and published security policies. The WHOIS data confirms domain legitimacy with a long registration history and consistent organizational information. No critical vulnerabilities or exposed sensitive data were detected. Overall, IAATO's website is professional, trustworthy, and compliant with privacy standards, though it could improve by enabling DNSSEC, adding security headers, and publishing formal security and incident response policies.

A

Association of Arctic Expedition Cruise Operators

aeco.no

66

The Association of Arctic Expedition Cruise Operators (AECO) is a specialized membership organization dedicated to promoting responsible and sustainable Arctic expedition cruise tourism. The organization focuses on environmental stewardship, cultural preservation, community engagement, and safety in Arctic regions. AECO provides its members with operational guidelines, tools, resources, and organizes events to foster collaboration and knowledge sharing. The website reflects a professional and well-maintained digital presence, leveraging WordPress CMS and modern web technologies to deliver content effectively. Privacy considerations are addressed with a comprehensive privacy policy and the use of Matomo analytics with cookies disabled, although cookie consent mechanisms are absent. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities, but could be improved by implementing additional security headers and publishing formal security policies. Overall, AECO presents a credible and trustworthy online presence consistent with its mission and organizational history.