Security Directory

B

BOAS Gestion SA

boas-swiss-hotels.ch

53

BOAS Gestion SA operates the Boas Swiss Hotels group, a well-established Swiss hospitality company founded in 1989. The company offers a range of services including hotel accommodations, restaurants, leisure activities, and conference facilities, targeting tourists, business travelers, and event organizers. The website reflects a professional presence with multilingual support and integrated booking capabilities, positioning the company as a medium-sized player in the Swiss hospitality market. Technically, the website is built on TYPO3 CMS and incorporates modern tracking and consent management tools such as Cookiebot and Google Tag Manager, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs security headers, and uses reCAPTCHA to mitigate bot activity. Cookie consent is managed in compliance with GDPR, and advertising practices are transparent with user consent. However, the absence of a dedicated security policy, incident response contacts, and terms of service pages suggests areas for improvement in governance and transparency. Overall, the website is trustworthy, professionally designed, and compliant with privacy regulations, supporting the company's credibility in the hospitality sector.

S

Sequotech

sequotech.ch

72

Sequotech is a medium-sized Swiss IT group founded in 2021, specializing in digital transformation services including data platforms, analytics, cloud infrastructure, cybersecurity, software development, and proprietary AI products. The company positions itself as a unifying force in IT excellence, leveraging partnerships with major technology vendors and a constellation of subsidiaries to deliver comprehensive IT solutions. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on WordPress with modern plugins and consent management, hosted with Cloudflare DNS and secured by HTTPS. Security posture is good with no visible vulnerabilities, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Business credibility is high, supported by transparent WHOIS data and detailed company information. Overall, Sequotech demonstrates a solid market position and digital maturity suitable for its business goals.

T

Tooplate

tooplate.com

51

Tooplate is a small technology-focused website offering over 60 free, responsive HTML website templates primarily targeting web developers, small businesses, and individuals seeking easy-to-use website layouts. The business model centers on free distribution of templates built on Bootstrap frameworks, with no registration required. The website is professionally designed with good content quality and clear navigation, optimized for mobile devices. Technically, it uses modern web technologies including Bootstrap, Google Fonts, Google Analytics, and advertising networks such as Google AdSense and DoubleClick. The site implements GDPR consent mechanisms and a privacy policy, indicating awareness of privacy compliance. Security posture is moderate with HTTPS enforced but lacks visible security headers and explicit incident response contacts. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for this business type. Overall, the site is safe, reliable, and suitable for general audiences seeking free web templates.

W

WeTransfer

we.tl

72

WeTransfer is a well-established technology company founded in 2007, specializing in providing a platform for fast and easy transfer of large files. The website presents a professional and modern design, targeting general users and professionals who need to share large files efficiently. The business model is primarily freemium, offering free file transfers with options for paid upgrades. The company holds a strong market position as a leading file transfer service globally. Technically, the website leverages modern frameworks such as Next.js and React, integrates payment processing via Stripe, and uses Google Analytics and Tag Manager for analytics and marketing. Hosting is provided through Amazon AWS infrastructure, ensuring good performance and scalability. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and visible security headers, which are recommended for enhanced security. No explicit privacy, cookie, or terms of service policies were detected in the provided content, indicating room for improvement in privacy compliance. No vulnerability disclosure or incident response information is publicly available. Overall, the website is trustworthy and professional with a good security posture but could enhance privacy compliance and security transparency. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and cookie policies, implementing security headers, and providing clear incident response contacts.

D

Dropbox

dropbox.com

68

Dropbox is a leading global technology company specializing in cloud storage, file sharing, and collaboration solutions. It serves both individual users and enterprises with a suite of products including Dropbox, Replay, Backup, Dash, DocSend, and Sign. The company is well-established with a strong market position and recognized brand. Technically, Dropbox employs modern web technologies such as React and RequireJS, delivering a fast, mobile-optimized, and accessible website experience. Security is robust, with HTTPS enforced, comprehensive security headers, and adherence to industry standards like ISO 27001 and SOC 2. Privacy compliance is evident through detailed policies and GDPR adherence. Overall, Dropbox demonstrates a mature digital infrastructure and strong business credibility.

D

digistats

digistats.ch

55

digistats is a Swiss-based privacy-focused web analytics provider offering a Google Analytics alternative that emphasizes user privacy by avoiding cookies, IP tracking, and fingerprinting. The company targets website owners who require GDPR, CCPA, and PECR compliant analytics solutions that are lightweight and easy to integrate. Their service includes real-time analytics, behavior tracking, geographic and technology insights, and adblocker-resistant data collection. The business model is subscription-based with a free 14-day trial and no credit card required, positioning digistats as a niche player in the privacy analytics market with a strong Swiss data protection emphasis. Technically, the website is built with modern web technologies including JavaScript and Bootstrap, likely running on Laravel backend as inferred from CSRF tokens. The site is fast, mobile-optimized, and well-structured with clear navigation and professional design. Hosting appears to be Swiss-based, supporting their privacy claims. The site uses HTTPS with strong SSL configuration and includes CSRF protection. However, explicit security headers are not detected, and no public security or incident response policies are published. From a security perspective, digistats demonstrates good practices by avoiding cookies and IP storage, reducing privacy risks. The presence of CSRF tokens and HTTPS is positive, but the absence of published security policies and vulnerability disclosure mechanisms is a gap. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data. The domain registration aligns with the website's Swiss privacy focus, enhancing legitimacy. Overall, digistats presents a trustworthy, professional, and privacy-compliant analytics service with strong technical and business foundations. Strategic improvements include publishing security policies, adding security headers, and providing explicit incident response contacts to further enhance trust and security posture.

P

PLR.Les Libéraux-Radicaux PRR Bienne

prr-bienne.ch

49

The website represents the local branch of the Liberal-Radical Party (PLR) in Bienne, Switzerland, serving as an informational and engagement platform for party members, voters, and the general public interested in local politics. It provides news, event agendas, party vision, elected officials information, and donation options. The site targets residents and politically engaged citizens in the Bern canton region. Technically, the site is built on TYPO3 CMS with modern front-end technologies including Bootstrap and jQuery, ensuring a responsive and user-friendly experience. Cookie consent is implemented with a high privacy standard, and Google Analytics is used with user opt-in. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, suitable for its non-profit political organization context.

P

PLR Jura bernois

plrgrandchasseral.ch

48

PLR Grand Chasseral is a regional political party website serving the Jura bernois area in Switzerland. The site provides political information, event announcements, and community engagement for local residents and voters. It is positioned as a small, regional government entity with a clear focus on local political activities. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, indicating a moderate level of digital maturity with good SEO and mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal privacy or terms of service documentation. Overall, the site is safe, professional, and trustworthy but could improve privacy compliance and security best practices.

D

Domains By Proxy, LLC

judge.me

73

Judge.me is a well-established SaaS provider specializing in product and store review solutions for e-commerce merchants. The company offers tools to collect, showcase, and share reviews via high-converting widgets and seamless integrations, aiming to build trust and boost sales. The website is professionally designed using the Framer platform and includes modern web technologies such as Google Tag Manager for analytics. The domain is long-standing, registered since 2008, and uses privacy protection services typical for businesses of this nature. Security posture is adequate with HTTPS enabled and domain locks in place, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of explicit privacy and cookie policies on the analyzed page. Overall, the website is trustworthy and functional but would benefit from enhanced transparency and security documentation.

The website pintrk.com is currently inaccessible, serving only a standard 404 Not Found error page with no visible content, metadata, or business information. The domain WHOIS data is suspicious, showing a future creation date and the registrant listed as a registrar company rather than an end-user business. No privacy, cookie, or terms of service policies are present, and no contact or security information is available. The technical infrastructure appears minimal, with nginx serving the error page and no detected security headers or HTTPS information. Overall, the site lacks any meaningful presence or trust indicators, resulting in a very low legitimacy and security posture score.

J

JP/Politikens Hus A/S

jppol.dk

58

JP/Politikens Hus A/S is a major Danish media house established in 2003, operating multiple news and publishing brands that reach approximately 3 million Danes monthly. The company holds a strong market position with about 100 million visits per month, offering news media, publishing, and niche media services. The website reflects a professional and consistent brand image targeting the Danish general public and media consumers. Technically, the site is built on WordPress using modern libraries such as jQuery and Modernizr, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements are recommended in DNSSEC implementation and security headers. Privacy compliance is partial, with a comprehensive privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with minor gaps in security and privacy transparency.

V

Vergic AB

psplugin.com

60

Vergic AB operates the Vergic Engage platform, a digital-first customer engagement solution designed to improve customer experience and revenue through personalized digital interactions. The company targets businesses and public organizations seeking to enhance their digital customer service and sales channels. The platform offers a comprehensive suite of tools including live chat, chatbots, video, digital voice, and collaboration features, supported by APIs and integrations with major CRM and contact center systems. Recently acquired by Puzzel, Vergic maintains a strong market presence with reputable clients primarily in Sweden and the Nordic region. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various marketing and analytics tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Hotjar. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site enforces HTTPS and uses several security best practices, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. However, the WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency. Overall, Vergic presents a professional and trustworthy digital presence with a solid business model and technical foundation. The main risk lies in the lack of WHOIS transparency, which should be investigated further. Strategic recommendations include enhancing security headers, verifying domain registration details, and maintaining rigorous third-party script audits to ensure ongoing security and compliance.

P

Privy

privy.com

70

Privy is a SaaS company specializing in email and SMS marketing tools tailored for e-commerce brands, particularly Shopify store owners. The platform combines intuitive marketing automation with expert coaching to help over 10,000 brands grow sales effectively. Privy positions itself as Shopify's top-reviewed marketing app, offering features like list growth, campaign management, and personalized strategy support. Technically, the website is built on modern frameworks such as React and Next.js, hosted likely on Vercel, and integrates multiple analytics and marketing tools including Google Analytics, HubSpot, Facebook Pixel, and PostHog. The site demonstrates excellent performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs standard best practices, though explicit security headers are not fully confirmed in the HTML. Privacy compliance is strong with comprehensive privacy and cookie policies and GDPR indicators. However, no public incident response or vulnerability disclosure policies were found, representing an area for improvement. Overall, Privy presents a professional, trustworthy online presence with a solid business model and technical foundation. The lack of WHOIS data due to privacy protection is typical for SaaS businesses and does not detract from legitimacy. Strategic recommendations include enhancing security header transparency, publishing vulnerability disclosure information, and improving incident response visibility.

C

Google Schema.org & Structured Data Tools by Classy Schema

classyschema.org

58

ClassySchema.org is a niche technology website offering specialized online tools to help web developers, SEO professionals, and digital marketers create structured data markup compliant with schema.org standards. The platform focuses on editors for FAQ, How-to, and Video pages to enable Google Rich Snippets, enhancing search visibility. The business appears to be a small, focused SaaS provider founded in 2019, with a consistent domain registration and a moderate market position in the structured data tooling space. Technically, the site employs modern JavaScript frameworks and libraries such as DevExtreme and Quill Editor, integrates Google Analytics 4 for extensive user and error tracking, and uses Cloudflare for DNS and likely CDN services. Performance and mobile optimization are moderate to good, though accessibility features are basic. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to missing privacy and cookie policies, and no contact or incident response information is provided. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and transparency measures.

Rivella.ch is the official website of Rivella AG, a Swiss beverage company known for its unique soft drinks made from milk serum. The website primarily serves as a corporate and product information portal targeting general consumers in Switzerland and German-speaking regions. The business model focuses on manufacturing and retail distribution of beverages, with a strong local market presence. The website uses modern web technologies such as Gatsby for static site generation and integrates Google Tag Manager for analytics purposes. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The security posture is moderate but could be improved by implementing standard security headers and enhancing privacy compliance. Overall, the website is functional but basic in content quality and user experience, with room for improvement in transparency and security practices.

2

20 Minuten

20min.ch

77

20 Minuten is the largest Swiss news portal providing 24/7 news coverage, videos, and live TV content primarily targeting the Swiss general public. The website demonstrates a mature digital infrastructure using modern technologies such as React and Next.js, with strong mobile optimization and good SEO practices. Security posture is solid with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not publicly visible. Privacy compliance is well addressed through cookie consent mechanisms and GDPR-aligned policies. Overall, the site is professional, trustworthy, and well-positioned in the Swiss media market.

P

Pricenow AG

nendazveysonnaz.ch

58

The website shop.nendazveysonnaz.ch is an e-commerce platform operated by Pricenow AG, focused on selling ski passes and related tourism services for the Swiss Alps region, particularly the 4 Vallées and Printse ski areas. It targets tourists, skiers, and outdoor enthusiasts seeking access to ski lifts and seasonal passes. The platform uses modern web technologies including React, Next.js, and Sanity CMS, providing a responsive and user-friendly experience. Structured data and Open Graph tags are implemented to enhance SEO and social sharing. Security posture is adequate with HTTPS enabled and asynchronous script loading, but lacks explicit security headers and formal privacy and cookie policies, which are compliance gaps. Contact information is limited but present in meta tags. Overall, the site is professional and trustworthy with room for improvement in privacy compliance and security hardening.

Rhône FM is a regional radio station based in the Valais region of Switzerland, providing local news and information primarily in French. The website serves as a digital presence for the station, targeting the general public in the region with news broadcasting services. The business model focuses on media broadcasting and information dissemination within a localized market. Technically, the website is built using modern web technologies including Nuxt.js and Tailwind CSS, with integration of Google Tag Manager for analytics and a consent management platform for cookie compliance. The site demonstrates good mobile optimization and a professional design, although some accessibility features are basic. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy and terms of service documentation. WHOIS data confirms the domain's legitimacy and consistency with the business's regional focus. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices.

M

Magic Pass

magicpass.ch

59

Magic Pass operates a subscription service providing free and unrestricted access to partner leisure and sports facilities primarily in Switzerland. The website presents a professional and consistent brand image with clear business focus on hospitality and leisure sectors. The technical infrastructure includes modern web technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance, supported by third-party widgets from Elfsight. Security posture is strong with HTTPS enforced and multiple security headers present, alongside a comprehensive cookie consent mechanism that aligns with GDPR requirements. However, the site lacks explicit contact information, terms of service, and a dedicated security policy page, which are areas for improvement. Overall, the website is trustworthy, well-structured, and compliant with privacy regulations, supporting a medium-sized business model in the hospitality industry.

The website at mappresspro.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. Due to this restriction, no business information, contact details, or policies are available for review. The domain is registered since 2018 with Tucows Domains Inc. and uses SiteGround hosting, indicating a legitimate registration and hosting setup. However, the lack of accessible content and absence of privacy, cookie, or terms of service policies severely limit the ability to assess the company's business model, services, or compliance posture. Technically, the site uses Google Fonts but no other detectable technologies or analytics. Security posture cannot be fully evaluated due to the blocked content, but no security headers or HTTPS details were found in the provided data. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a poor user and security experience.

S

Grands Sites du Gout – Entrez dans l'univers des Grands Sites du Goût

swisstastes.ch

50

The website 'swisstastes.ch' presents itself as a culinary and gourmet portal focused on Swiss tastes and culture, targeting a general audience interested in food and travel. The site uses WordPress CMS with the Enfold theme and integrates plugins such as MapPress for Google Maps and Google Tag Manager for analytics. The technical infrastructure is moderately modern, with basic mobile optimization and SEO features. However, the site lacks visible privacy and cookie policies, contact information, and security best practices such as security headers and vulnerability disclosures. This indicates a low maturity in security and privacy compliance. Overall, the website is functional but requires improvements in security posture and compliance to enhance trust and professionalism.

S

STnet

stnet.ch

63

STnet AG is a Swiss company specializing in transport and mobility services, providing digital solutions and information primarily for public transport users in Switzerland. The company maintains a professional and well-structured website built on WordPress, incorporating modern web technologies and monitoring tools such as New Relic and Google Tag Manager. The website is accessible, mobile-optimized, and offers clear contact information, including email, phone, and contact forms, supporting user engagement and service inquiries. Security posture is solid with HTTPS enforced and standard security headers present, although explicit security policies and incident response details are absent. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a dedicated privacy policy and terms of service pages. Overall, the website reflects a trustworthy and professional digital presence aligned with the company's business focus.

S

Schweiz Tourismus

swisswinetour.com

71

The website www.myswitzerland.com/fr-ch/decouvrir/ete-automne/oenotourisme/ serves as an official tourism portal for Switzerland, focusing on wine tourism experiences. It targets luxury travelers and gourmets, offering rich content about wine-related activities, accommodations, and regional information. The site is multilingual and professionally designed, reflecting a strong market position as a national tourism authority platform. Technically, it employs modern web technologies including Google Tag Manager, Algolia search, and structured data for SEO, ensuring good performance and accessibility. Security posture is solid with HTTPS and controlled script loading, though it lacks explicit security headers and published privacy or cookie policies. The absence of WHOIS data is a concern for domain legitimacy but does not detract from the professional presentation and trustworthiness of the site content. Overall, the site is a reliable resource for travelers interested in Swiss wine tourism, with room for improvement in privacy compliance and security transparency.

The website www.myvaud.ch serves as the official tourism portal for the Canton of Vaud in Switzerland, providing comprehensive information on destinations, activities, practical advice, business events, and inspirational content for visitors and locals alike. It is positioned as a key regional tourism resource with a professional and consistent brand presence. The site leverages modern web technologies including Google Tag Manager, Matomo Analytics, and Cookiebot for analytics and privacy compliance. The technical infrastructure is solid, with HTTPS enforced and security headers implemented, contributing to a good security posture. However, the absence of an explicit privacy policy and terms of service pages, as well as the lack of visible contact information in the provided HTML snippet, represent areas for improvement in privacy compliance and user trust. Overall, the site is well-designed, mobile-optimized, and provides a safe and trustworthy user experience.

A

Audi AG

audi.de

70

Audi AG is a leading premium automotive manufacturer headquartered in Germany, operating the website www.audi.de to serve the German market. The site provides comprehensive information on Audi's vehicle models, leasing options, promotions, and customer services including test drive bookings. Audi holds a strong market position as a premium brand under the Volkswagen Group, targeting consumers seeking high-quality automobiles. The website is built on a modern technical infrastructure leveraging Adobe Experience Manager and proprietary Audi technologies, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS, security headers, and secure cookie consent mechanisms, though explicit security policies and vulnerability disclosure information are not publicly available. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

A

Audi

audi-shop.com

70

The website audi-shop.com/de/de is an official Audi branded e-commerce platform focused on selling original Audi accessories in Germany. It targets Audi vehicle owners and enthusiasts, providing genuine parts and accessories with consistent branding and a professional design. The domain is well established since 2002 and aligns with Audi's DNS infrastructure, indicating a legitimate and trustworthy business presence. Technically, the site uses custom Audi JavaScript and web fonts to maintain brand consistency and offers a moderate performance and mobile optimization level. However, the site lacks visible privacy and cookie policies, security headers, and incident response information, which are critical for compliance and security transparency. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site demonstrates a good business credibility and technical implementation but requires improvements in privacy compliance and security posture.

S

SAGAFLOR AG

sagaflor.de

64

SAGAFLOR AG is a well-established German company with over 60 years of experience in the garden and pet retail market. The company operates a B2B business model focusing on partnerships, supplier networks, and employee recruitment, supported by multiple proprietary brands. Their website reflects a professional and consistent brand image, targeting entrepreneurs and partners in the garden and pet sectors. Technically, the site is built on TYPO3 CMS with Bootstrap framework and uses Matomo for privacy-conscious analytics. Hosting is provided by Deutsche Telekom, aligning with the company's German base. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements.

S

SmartBear

smartbear.co

66

SmartBear is a well-established enterprise software company specializing in tools for software testing, API lifecycle management, and observability. The company offers a comprehensive suite of products targeting developers, testers, and software teams to improve software quality and performance. Their market position is strong, supported by a mature domain and consistent branding. Technically, the website employs modern JavaScript libraries, analytics, and monitoring tools, hosted on AWS infrastructure with Kentico CMS. The site is well-optimized for SEO, mobile, and accessibility. Security posture is good with HTTPS and domain protections, though DNSSEC is not enabled and security policy disclosures are limited. Overall, the site reflects a mature digital presence with professional content and strong business credibility.

H

HTML Codex

htmlcodex.com

60

HTML Codex is a specialized provider of free and premium HTML website templates, targeting web developers, designers, and businesses seeking customizable and developer-friendly templates. The company operates a WordPress-based website with a clear market position as a top designer and publisher of free HTML templates since its domain registration in 2019. The business model revolves around offering both free and paid templates, supported by advertising and premium sales. Technically, the website employs modern web technologies including Bootstrap, jQuery, and WordPress plugins such as Yoast SEO and Mailchimp integration, ensuring good SEO and user experience. Hosting and DNS are managed via Cloudflare, providing reliable performance and security.

D

Digital Partners Group

dpgroupcorp.com

54

Digital Partners Group is a technology company specializing in the development and production of proprietary technology-based products primarily focused on improving digital environments and fostering closer connections between companies and people. Founded in 2010, the company has evolved from mobile platform consultancy to multi-industry digital product development, offering solutions such as user analytics (Undato), subscription management (Sindyk Smart), mobile site optimization (Sindyk Speed), custom software development, and SEO services. The company targets digital actors and businesses seeking advanced technological solutions to enhance their digital presence and user engagement. Technically, the website employs modern front-end technologies including Bootstrap, jQuery, FontAwesome, and integrates Google Analytics for user tracking. Hosting and DNS services are provided via Cloudflare, ensuring good SSL configuration and moderate performance. The site is mobile optimized with a professional design and clear navigation, though accessibility features are basic. SEO optimization is good with proper meta tags and Open Graph data. From a security perspective, the website uses HTTPS and has domain-level protections such as clientDeleteProhibited status, but lacks DNSSEC and security headers like Content-Security-Policy. No privacy or cookie policies are published, and no incident response or security policy information is available. Google Analytics is used without visible cookie consent mechanisms, indicating privacy compliance gaps. Overall, the website is professional and trustworthy with a moderate security posture and good business credibility. However, improvements in privacy compliance, security headers, and explicit security policies are recommended to enhance trust and regulatory adherence.

Q

QMetry Inc.

qmetry.com

58

QMetry Inc. is a technology company specializing in AI-enabled test management and automated testing tools designed for agile enterprises. Their product suite includes scalable test management solutions integrated with popular DevOps tools and AI capabilities to accelerate test case authoring and improve testing efficiency. The company is positioned as a leader in the software testing domain with a strong focus on innovation and customer collaboration. The website demonstrates a mature digital infrastructure leveraging modern frameworks such as Angular and integrates advanced marketing and analytics tools, reflecting a high level of digital maturity. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response policies could be enhanced. Overall, the site is professional, well-branded, and trustworthy, supported by customer testimonials and third-party reviews. However, the absence of WHOIS data raises some concerns about domain registration transparency, warranting further verification.

S

SmartBear Software

reflect.run

61

Reflect.run is a professional SaaS platform operated by SmartBear Software, specializing in AI-powered automated end-to-end testing for web and mobile applications. The platform emphasizes no-code test creation, maintenance, and execution with generative AI capabilities, targeting software testers, QA teams, and developers. The website presents a strong market position as an innovative alternative to traditional code-based testing frameworks, offering integrations with popular CI/CD and test management tools. Technically, the site is built using the Hugo static site generator and leverages modern JavaScript libraries and multiple marketing and analytics tools, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and follows several best practices but lacks visible security headers and explicit security or incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Overall, the domain appears legitimate and professionally managed, though WHOIS data is privacy-protected.

S

SEO Community

seocommunity.social

59

SEO Community operates a Mastodon-based social platform dedicated to professionals and enthusiasts in the Search Engine Optimization field. The platform facilitates community engagement and content sharing within the SEO niche, positioning itself as a specialized social network within the fediverse. The website branding is consistent and professional, targeting a small but focused audience. Technically, the site leverages Mastodon's open-source platform with React and modern web technologies, providing a responsive and functional user experience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partially met with a privacy policy present, though cookie consent mechanisms are absent. Overall, the site is legitimate and trustworthy for its community purpose, though improvements in security and privacy transparency are recommended.

AACSB is a globally recognized organization focused on accrediting business schools and fostering a network of business education leaders. The website demonstrates a mature and professional presence with comprehensive services including accreditation, membership, learning opportunities, events, and insightful research. The organization targets educators, businesses, and learners worldwide, positioning itself as a leader in business education accreditation and development. Technically, the website employs modern analytics and marketing technologies such as Google Tag Manager, Microsoft Clarity, Facebook Pixel, and OneTrust for cookie consent, indicating a digitally mature infrastructure. The site is mobile-optimized, accessible, and well-structured, providing a positive user experience. From a security perspective, the site uses HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response information. No critical vulnerabilities were detected in the content or scripts. The absence of WHOIS data is notable but likely due to .edu domain registration policies rather than malicious intent. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving transparency around vulnerability disclosures.

U

University of Fribourg

unifr.ch

56

The University of Fribourg is a well-established public educational institution founded in 1889, offering a broad range of academic programs including Bachelor, Master, and Doctorate degrees. It serves a diverse audience including students, researchers, and employees, with a strong regional and international presence. The website reflects the university's bilingual and multicultural identity, providing comprehensive information about studies, research, campus life, and support services. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and various analytics tools, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and explicit incident response information. Privacy compliance is basic, lacking cookie consent mechanisms and detailed GDPR indicators. Overall, the site is professional, trustworthy, and well-maintained, supporting the university's mission and reputation.

A

Atlassian

atl-paas.net

75

Atlassian's developer.atlassian.com website serves as a comprehensive AI-powered developer platform designed to support developers, customers, partners, and builders in innovating and integrating with Atlassian's suite of products such as Jira and Confluence. The platform emphasizes seamless integration capabilities and provides extensive documentation and resources to facilitate developer engagement. The site reflects Atlassian's strong market position as a leading technology company in collaboration and developer tools. Technically, the website employs modern web technologies including React and Algolia for search insights, hosted on Atlassian's own CDN infrastructure, ensuring fast performance and excellent mobile optimization. Security posture is robust with HTTPS enforced and privacy compliance mechanisms like OneTrust cookie consent implemented, although explicit security headers and dedicated security policy pages are not evident. Overall, the site demonstrates high professionalism, trustworthiness, and a strong alignment with Atlassian's corporate branding and business model.

L

Lessebo Paper

lessebopaper.com

62

Lessebo Paper is a premium paper manufacturer based in Sweden, emphasizing environmentally friendly and sustainable production methods. The company has a long heritage dating back to 1693, positioning itself as a leader in climate-friendly paper products. Their website reflects a professional and consistent brand image, targeting businesses and consumers interested in high-quality, sustainable paper solutions. The business model focuses on manufacturing and selling premium paper with a strong environmental ethos. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies such as Google Tag Manager and reCAPTCHA for analytics and security. Hosting is provided by Loopia, a known provider. The site performs moderately well with good mobile optimization and basic accessibility features. SEO is supported by the Yoast SEO plugin, enhancing search visibility. From a security perspective, the site uses HTTPS with a good SSL configuration and employs reCAPTCHA to mitigate automated abuse. However, it lacks several security headers and does not publish a security policy or incident response contacts. No vulnerability disclosure or security.txt file is present, which are areas for improvement. Privacy compliance is limited, with no visible privacy or cookie policies, which could pose regulatory risks. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust. Strategic recommendations include implementing privacy and cookie policies, adding security headers, enabling DNSSEC, and publishing vulnerability disclosure information.

T

Taberg Media Group

tabergmediagroup.se

44

Taberg Media Group is a well-established Swedish media and communication company founded in 2005, offering a broad range of services including print production, expo solutions, profile products, creative marketing, and digital solutions. The company operates across multiple Swedish cities, positioning itself as a full-service communication partner for businesses seeking integrated marketing and print services. Their website reflects a mature digital presence with professional design, clear service segmentation, and active marketing integrations. Technically, the site is built on WordPress with the Divi theme and leverages modern JavaScript libraries and marketing tools such as HubSpot, Google Tag Manager, and Facebook Pixel. Security posture is generally good with HTTPS enabled and no critical vulnerabilities detected, though some security headers like Content-Security-Policy are missing, and DNSSEC is not enabled. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism in place, aligned with GDPR requirements. Contact information is primarily via web forms, with no explicit emails or phone numbers visible on the homepage. Overall, the site is trustworthy, professional, and well-suited for its business purpose.

S

Stockholm Waterfront

stockholmwaterfront.com

45

Stockholm Waterfront is a well-established event venue located in central Stockholm, offering flexible spaces for conferences, congresses, corporate events, exhibitions, concerts, and banquets. The venue caters to a diverse audience including event organizers and corporate clients, with capacity for up to 3,000 participants. The website reflects a professional and consistent brand presence with detailed information about services and event spaces. Technically, the site is built on WordPress using Elementor and includes common plugins for SEO and cookie management. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR principles, although no explicit privacy policy or terms of service were found in the provided content. Security posture is moderate with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and security headers. No contact emails or phone numbers were found in the analyzed content, which limits direct contact transparency. Overall, the domain registration data is consistent and supports the legitimacy of the business.

B

Bauer Media Outdoor

clearchannel.se

68

Bauer Media Outdoor is a leading outdoor advertising company in Sweden, operating under the Bauer Media Group umbrella. The company offers extensive outdoor advertising solutions including digital and classic billboards, programmatic advertising, and campaign planning services. Their market position is strong, with a wide geographic reach and a focus on impactful brand communication. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, and OneTrust for privacy compliance, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in publishing explicit security policies and vulnerability disclosures. Overall, the website is professional, user-friendly, and compliant with GDPR, but the absence of WHOIS data for the domain raises some concerns about domain registration legitimacy that should be addressed.

C

Citypaketet

citypaketet.se

53

Citypaketet is a collaborative advertising platform formed by three of Sweden's largest morning newspapers: Dagens Nyheter, Göteborgs-Posten, and Sydsvenskan. Established in 1994, it targets urban audiences in Sweden's three largest cities by offering combined media advertising solutions across print and digital channels. The website presents a professional image with clear business information and a focus on delivering impactful advertising campaigns. Technically, the site is built on WordPress using the Avada theme and several plugins, including Yoast SEO and Download Manager, indicating a modern and maintainable infrastructure. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks advanced security headers and formal privacy or cookie policies. Overall, the site is trustworthy and well-positioned in the media sector, though improvements in privacy compliance and security best practices are recommended.

L

leeadsdooh

leeadsdooh.com

58

Leeads Dooh is a Swedish media and advertising company specializing in digital out-of-home (DOOH) advertising solutions. The company offers a variety of advertising packages including programmatic DOOH, large city center screens, supermarket-based advertising, roadside digital signage, and electric vehicle charging station ads. Positioned as one of Sweden's leading DOOH providers, Leeads Dooh targets businesses seeking nationwide outdoor advertising coverage through a single sales contact. The website is professionally designed, mobile-optimized, and provides clear service descriptions and contact information. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, leveraging CDN services and Google reCAPTCHA for form security. However, the absence of privacy and cookie policies indicates compliance gaps with GDPR requirements. Security posture is generally good with HTTPS enforced, but lacks explicit security headers and incident response disclosures. WHOIS data is missing, which raises some concerns about domain registration legitimacy, though the active and professional website presence mitigates this risk. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security transparency.

A

Arbeiter-Samariter-Jugend Deutschland

asj.de

57

Arbeiter-Samariter-Jugend Deutschland (ASJ) is a well-established non-profit youth organization affiliated with the Arbeiter-Samariter-Bund (ASB). The website serves as an information hub for youth engagement, educational projects, and community services across Germany. It targets young people and members interested in social and democratic participation. The organization maintains a consistent brand presence and provides relevant content such as campaigns, publications, and event information. Technically, the site is built on Drupal 10, uses Matomo for privacy-conscious analytics, and Klaro! for cookie consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and privacy compliance evident, although explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for users.

A

ASB Deutschland e.V.

wuenschewagen.de

43

Der Wünschewagen is a non-profit project operated by ASB Deutschland e.V. that fulfills last wishes of terminally ill people by providing free transportation to their desired locations. Established in 2014, it operates 23 regional vehicles across Germany, supported by nearly 2,000 volunteers and funded exclusively through donations. The website is professionally designed, mobile-optimized, and provides comprehensive information about the project, donation options, volunteer opportunities, and regional contacts. Technically, the site uses Concrete CMS with modern libraries like jQuery, Bootstrap, and Vue.js, and implements cookie consent and third-party content blocking mechanisms. Security posture is good with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Overall, the site demonstrates high trustworthiness and strong alignment between domain registration and business claims.

I

Immobilienverband Deutschland IVD

ivd.net

62

The Immobilienverband Deutschland (IVD) is a well-established real estate association in Germany, founded in 2000, serving over 6,200 members including brokers, property managers, and experts. The website acts as a professional portal offering political representation, legal advice, networking opportunities, exclusive information, contract templates, and continuing education. It holds a strong market position as a national association with multiple regional sub-associations. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, WPBakery, and Slider Revolution, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility could be improved. Security posture is good with HTTPS and CAPTCHA protections, but lacks DNSSEC and explicit security headers. Privacy compliance is partial, with cookie consent implemented but no visible privacy or terms pages in the provided content. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

W

Wollenhaupt GmbH

wollenhaupt.de

64

Wollenhaupt GmbH is a well-established regional company based in Nordhessen, Germany, specializing in print media and web services. Celebrating 100 years in business, the company offers a comprehensive range of services including print production, web design, and an e-commerce shop focused on labels and container cards. Their market position is that of a trusted medium-sized service provider with a strong local presence and a commitment to sustainable production practices. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to business clients in the region. Technically, the website is built on a modern WordPress platform using the Enfold theme and WooCommerce for e-commerce functionality. It integrates several third-party tools such as Google Analytics, Google Tag Manager, and Rapidmail for newsletter management. The site is mobile optimized and demonstrates good SEO practices including structured data and meta tags. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. While explicit security headers are not visible in the provided data, the overall posture is good with no exposed sensitive data or obvious vulnerabilities. The use of standard WordPress plugins and regular updates is recommended to maintain security. Privacy compliance is well addressed with comprehensive policies and user consent options. Overall, the website presents a low risk profile with strong business credibility and compliance. Strategic recommendations include enhancing security headers, conducting regular security audits especially for WooCommerce and contact forms, and continuous monitoring of third-party scripts for privacy risks.

H

Hermann Klein

klein-vw-nutzfahrzeuge.de

70

Hermann Klein is an official Volkswagen Nutzfahrzeuge (commercial vehicles) dealership and service center located in Fuldatal, Germany. The company offers a comprehensive range of automotive services including new and used vehicle sales, servicing, workshop facilities, rental services, and customer consultation. The website reflects a professional and consistent brand presence aligned with Volkswagen's corporate identity, targeting commercial vehicle customers in the region. Technically, the website employs modern web technologies such as React and Adobe Helix RUM for performance monitoring. It is hosted on a platform likely powered by Adobe Experience Manager, ensuring a robust content management system. The site is mobile-optimized and SEO-friendly with proper metadata and structured data, although accessibility features are basic. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No WAF or blocking mechanisms were detected, indicating full accessibility. Overall, the website demonstrates a solid business credibility and technical foundation but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

H

Hermann Klein GmbH & Co. KG

klein-fuldatal.audi

68

Hermann Klein GmbH & Co. KG operates as an authorized Audi dealership located in Fuldatal, Germany, offering new and used Audi vehicles, customer service, and after-sales support. The website is well integrated into Audi's digital ecosystem, leveraging Adobe Experience Manager headless CMS and modern JavaScript frameworks to deliver a responsive and user-friendly experience. The site includes comprehensive cookie consent management aligned with GDPR requirements, reflecting a strong commitment to privacy compliance. Security posture is robust with HTTPS enforcement and privacy management tools, although explicit security policy and incident response contacts are not found. Overall, the domain appears legitimate and professionally maintained, though WHOIS data is not publicly available, likely due to privacy protection.

A

Autohaus Klein

volkswagen-klein-fuldatal.de

73

Autohaus Klein is a well-established family-run automotive dealership located in Fuldatal, Germany, specializing in Volkswagen and Volkswagen commercial vehicles. The business also serves as a service partner for Audi, Seat, and Škoda brands, offering a comprehensive range of services including new and certified used car sales, vehicle servicing, accident repair, and rental services. With over 60 years of experience, the company holds a strong regional market position and demonstrates consistent branding aligned with Volkswagen's corporate identity. Technically, the website employs modern web technologies such as React and Adobe Helix RUM for performance monitoring, along with custom Volkswagen CMS infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security measures include HTTPS enforcement and standard security headers, contributing to a robust security posture. The security evaluation reveals no critical vulnerabilities or exposed sensitive data. Privacy compliance is supported by comprehensive privacy and cookie policies with consent mechanisms, reflecting adherence to GDPR requirements. However, explicit security policy and incident response information are not publicly available, representing an area for improvement. Overall, the website and domain exhibit high legitimacy and trustworthiness, with no signs of blocking or WAF interference. Strategic recommendations include publishing a dedicated security policy, enhancing incident response transparency, and continuous monitoring of third-party scripts to maintain security and compliance standards.

S

SAGAFLOR AG

gruen-erleben.de

70

SAGAFLOR AG operates the website gruen-erleben.de, a well-established German retail platform focused on gardening products, tips, and services. The company emphasizes quality rooted in gardening tradition and offers a variety of services including product sales, gardening inspiration, a job board for the green sector, and gift vouchers. The website targets gardening enthusiasts and consumers interested in horticulture, positioning itself as a trusted and quality-focused brand in the German retail gardening market. Technically, the website employs modern web technologies such as Bootstrap for responsive design, jQuery, and Splide.js for interactive sliders. It integrates multiple analytics platforms including Google Analytics 4 and Matomo, and uses marketing tools like Elfsight widgets and UserWay for accessibility enhancements. Hosting appears to be managed via Deutsche Telekom infrastructure, ensuring reliable performance and security. The site is mobile-optimized and includes accessibility features, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism compliant with GDPR. While explicit security headers are not visible in the HTML, the overall security posture is good with no exposed sensitive data or vulnerable libraries detected. The site lacks a published security policy or incident response contact, which could be areas for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It provides a positive user experience with clear navigation and relevant content. The domain registration data aligns well with the business identity, supporting legitimacy. Strategic recommendations include enhancing security header implementation, publishing a security policy, and continuous monitoring of third-party scripts to maintain security and compliance.