Security Directory

E

Exactag GmbH

exactag.com

66

Exactag GmbH operates a specialized marketing performance platform focused on Multi-Touch Attribution (MTA), Marketing Mix Modeling (MMM), and advanced tracking technologies. Founded in 2010 and based in Germany, Exactag targets marketing professionals and advertisers seeking data-driven insights to optimize marketing spend and effectiveness. The company positions itself as a technology provider offering future-proof tracking and best-of-breed algorithms to deliver flexible data solutions. Technically, the website is built on WordPress with WPBakery Page Builder, hosted likely on AWS infrastructure, and integrates Cookiebot for GDPR-compliant cookie management alongside Google Tag Manager and analytics services. The site demonstrates good digital maturity with structured data, responsive design, and SEO optimization. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed via Cookiebot consent mechanisms and a comprehensive privacy policy in German. However, explicit terms of service, security policies, incident response contacts, and vulnerability disclosure mechanisms are not present. Overall, the website is professional, trustworthy, and aligned with its business objectives, with recommendations to enhance security headers and publish formal security and incident response policies.

Fort Awesome is a technology company specializing in web icon sets and CSS toolkits designed to enhance website performance and customization. The company offers a range of icon sets, including custom vector icons, and delivers these assets via a global CDN to ensure fast and reliable loading. Although currently not accepting new sign-ups, Fort Awesome maintains a close relationship with the Font Awesome brand, directing users to their primary site for expanded services. The target audience primarily includes web developers, designers, and businesses seeking high-quality iconography solutions.

A

ARMSTARK® Zubehörshop

armstark-shop.de

55

ARMSTARK® Zubehörshop is a German e-commerce platform specializing in wellness products including whirlpools, swim spas, saunas, and infrared cabins. The website targets consumers and businesses interested in wellness and spa accessories, offering a range of products with a focus on quality and customer service. The business claims 30 years of experience and provides nationwide customer support in Germany. The site is built on the Shopware CMS platform and uses modern web technologies including JavaScript frameworks, Google Tag Manager, and FriendlyCaptcha for bot protection. The website is mobile optimized and accessible with clear navigation and professional design. Security posture is good with HTTPS enabled and IP anonymization in analytics, but lacks explicit security headers and published privacy or cookie policies. No direct contact information or incident response channels are visible in the provided content. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security transparency.

W

Web Site Advantage

websiteadvantage.com.au

63

Web Site Advantage is a small Australian SaaS company specializing in technical SEO solutions for BigCommerce online stores, primarily through their proprietary apps Tag Rocket and SEO Rich Snippets. Founded in 2010 by Tony McCreath, the company leverages deep expertise in BigCommerce SEO to serve e-commerce businesses seeking improved tag management and structured data implementation. The website reflects a focused niche market position with clear branding and consistent messaging. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, Google Analytics, and Cloudflare DNS services. The site is well-structured with good SEO practices and mobile optimization, though it lacks some advanced accessibility features. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS with strong SSL configuration and implements error and network monitoring scripts. However, it lacks explicit security headers, a published security policy, and incident response contact information. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific disclosures. No vulnerabilities or suspicious content were found. Overall, the website is professional, trustworthy, and well-aligned with its business goals. Strategic improvements in privacy compliance, security headers, and transparency around security policies would enhance its security posture and regulatory adherence.

R

REVIEWS.io

reviews.co.uk

71

REVIEWS.io is a technology-driven SaaS platform specializing in company and product review collection, management, and display. The platform targets e-commerce businesses and brands seeking to leverage customer feedback to build trust and increase conversions. It offers a subscription-based model with flexible plans and integrates with various e-commerce, marketing, and loyalty platforms. The website demonstrates a mature digital presence with modern design, responsive layout, and comprehensive content that clearly communicates its value proposition. Technically, the site is built on Webflow CMS and employs industry-standard tools such as Google Tag Manager, Google Ads, and Termly for cookie consent management. The infrastructure supports fast performance, mobile optimization, and accessibility best practices. Analytics and tracking are implemented with user privacy in mind, including consent mechanisms and GDPR compliance indicators. From a security perspective, the website enforces HTTPS, uses appropriate security headers, and avoids exposing sensitive data. However, explicit security policies, incident response plans, and vulnerability disclosure mechanisms are not publicly documented, representing an area for improvement. The WHOIS data is privacy protected, which is typical for commercial SaaS providers, and no suspicious patterns were detected. Overall, REVIEWS.io presents a professional, trustworthy, and technically sound online presence with strong business credibility. Strategic recommendations include enhancing transparency around security policies and incident response, and publishing vulnerability disclosure information to further strengthen trust and compliance.

A

ActiveMedia, Digital Designers

activemedia.pt

61

ActiveMedia is a well-established digital agency based in Portugal, specializing in web design, UX/UI, content creation, and digital signage. With over 22 years of experience, the company positions itself as a trusted partner for brands seeking authentic and effective digital solutions. The website reflects a mature digital presence with professional design, clear branding, and comprehensive service offerings tailored to businesses and brands. Technically, the site is built on WordPress with modern integrations such as Weglot for multilingual support, Sendinblue for marketing automation, and Hotjar for user behavior analytics, indicating a good level of digital maturity. Security posture is strong with HTTPS enforced and appropriate security headers, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is professional, secure, and compliant with privacy regulations, making it a credible digital agency in its market.

E

EBSCO Information Services, Inc.

ebsco.com

76

EBSCO Information Services, Inc. is a leading global provider of research databases, e-journals, ebooks, and discovery services primarily serving academic libraries, public libraries, corporations, schools, government, and medical institutions. The company offers a comprehensive suite of authoritative information resources that support scholarly research and evidence-based clinical decision-making. Their market position is strong, with a focus on institutional subscription models and partnerships with educational and healthcare organizations worldwide. Technically, the website is built on modern web technologies including React and Next.js, ensuring fast performance, mobile responsiveness, and good accessibility. The site employs Google Tag Manager for analytics and a cookie consent mechanism, reflecting a mature digital infrastructure. The design is professional and content-rich, supporting a high-quality user experience. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks explicit security policies, incident response information, and security headers. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is unavailable, likely due to privacy protection, which is common for enterprises but reduces transparency. Overall, the security posture is good but could be improved with more explicit security disclosures. The overall risk assessment is low, with the main recommendation being to enhance transparency around security policies and incident response. The site is trustworthy, professional, and compliant with privacy regulations, making it suitable for its target audience of academic and professional institutions.

F

FCCN, Unidade FCT

fccn.pt

68

FCCN, Unidade FCT is a Portuguese digital services unit under the Fundação para Ciência e Tecnologia (FCT), providing technological infrastructure and services to the scientific and academic community in Portugal. The organization manages the national research and education network (Rede RCTS) and offers key services such as online learning platforms, secure file sharing, and digital content publication. The website reflects a strong market position with strategic partnerships and a clear focus on supporting research and education through technology. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates analytics and user experience tools such as Google Analytics, Hotjar, and Cookie Script for compliance and tracking. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are not publicly detailed. Overall, the site is professional, accessible, and trustworthy, serving a specialized audience effectively.

M

Mantle

heymantle.com

58

Mantle is a SaaS platform focused on providing revenue operations and analytics tools tailored for Shopify app developers and businesses. The platform offers a comprehensive suite of services including revenue tracking, subscription management, customer management, AI-enhanced analytics, and marketing automation features. Positioned as a niche player in the Shopify ecosystem, Mantle aims to empower app developers to grow their businesses through data-driven insights and streamlined billing solutions. The website demonstrates a professional and modern design, with clear navigation and detailed product descriptions, targeting a specialized audience of Shopify app businesses. Technically, the website is built using modern frameworks such as Astro and leverages Cloudflare for DNS and likely CDN services. It integrates Google Tag Manager for analytics and uses Google Fonts for typography. The site is mobile-optimized, fast-loading, and SEO-friendly, reflecting a mature digital infrastructure for a startup launched in 2023. However, there is room for improvement in security practices, such as enabling DNSSEC and implementing security headers. From a security perspective, the site enforces HTTPS and has domain status protections to prevent unauthorized changes. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent mechanism and security headers indicates partial compliance with privacy and security best practices. No explicit incident response or security policies are published, which could be enhanced to build greater trust. Overall, Mantle presents a credible and professional online presence with a strong focus on Shopify app business growth. The risk profile is low, with minor recommendations to improve privacy compliance and security posture. Strategic enhancements in these areas would further solidify Mantle's market position and customer trust.

O

Omnisend

omnisend.com

76

Omnisend is a specialized ecommerce-focused email and SMS marketing automation platform designed to help ecommerce brands increase revenue efficiently through automation, segmentation, and multi-channel campaigns. The company positions itself as a nimble and user-friendly SaaS solution with strong integrations to major ecommerce platforms such as Shopify, WooCommerce, and BigCommerce. The website demonstrates a mature digital presence with professional design, comprehensive content, and strong branding consistency. Technically, the site leverages WordPress CMS with modern JavaScript libraries, analytics, and consent management tools, indicating a well-maintained infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and a public security policy are absent. WHOIS data is not publicly available, likely due to privacy protection, which slightly reduces trust but is common for SaaS businesses. Overall, the site is professional, secure, and compliant with privacy regulations, targeting ecommerce marketers and businesses seeking marketing automation solutions.

S

Skenzo ltd

skenzo.com

64

Skenzo ltd operates as a global leader in the domain parking and traffic monetization industry, providing specialized services to domain portfolio holders, registrars, and web hosts. Founded in 2005, the company leverages proprietary technology and expert account management to maximize revenue opportunities for its clients. The website reflects a professional business model focused on monetization programs, custom parked pages, and traffic optimization solutions. Technically, the site employs standard web technologies including HTML5, CSS, JavaScript, and jQuery, with integration of ConsentManager for privacy compliance. Hosting is supported by Akamai CDN infrastructure, ensuring reliable performance and availability. Security posture is solid with HTTPS enforced and domain transfer protections in place, though improvements could be made by enabling DNSSEC and implementing additional security headers. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site presents a trustworthy and professional digital presence aligned with its business objectives.

SENSIC is a service platform operated by GfK SE, a well-established German market research company founded in 2007. The website serves as a help center providing implementation guides for stream measurement and site tracking services, targeting business clients requiring data measurement and tracking solutions. The platform is supported by recognized certifications such as Google Ads, IAB, and AMP, reinforcing its credibility in the advertising and technology sectors. Technically, the website is hosted on Amazon Web Services and utilizes MaxMind GeoLite2 data for geolocation services. The site demonstrates moderate performance and basic mobile optimization, with a clean and professional design. However, it lacks advanced security headers and cookie consent mechanisms, which are important for compliance and security best practices. From a security perspective, the domain is well-registered with a long history and appropriate domain status flags to prevent unauthorized changes. No WAF or blocking mechanisms are detected, and no vulnerabilities are apparent from the provided data. Privacy compliance is partial, with a privacy policy present but no cookie policy or GDPR consent mechanisms visible. Contact information is clearly provided, enhancing trustworthiness. Overall, the website presents a professional and trustworthy front for GfK SE's SENSIC services but would benefit from enhanced security headers, cookie consent implementation, and clearer privacy compliance measures to improve its security posture and regulatory adherence.

S

SINDYK

sindyk.com

59

Sindyk is a Colombian technology startup specializing in digital media solutions, focusing on audience growth, content monetization, and mobile site optimization for media companies across Latin America. With over 15 years of domain registration and 8+ years of active business presence, Sindyk offers a suite of products including Smart, Conecta, Speed, Turbo, and Codea to help clients manage subscriptions, optimize content delivery, and enhance user engagement. The company maintains a professional web presence with clear branding, client testimonials, and a dedicated team showcased with LinkedIn profiles. Technically, the website uses modern frameworks like Bootstrap and integrates Google Analytics and Adsense for marketing and tracking purposes. Security posture is adequate with HTTPS and Cloudflare DNS but lacks advanced security headers and published privacy policies, which are areas for improvement. Overall, the website is well-designed, mobile-optimized, and trustworthy, though privacy compliance needs enhancement.

S

SmartBear

cucumberstudio.com

63

SmartBear is an established enterprise technology company specializing in software development and testing tools, including the CucumberStudio BDD collaboration platform. The company holds a strong market position with a comprehensive suite of products targeting developers, testers, and agile teams. Their website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to their audience. Technically, the site uses a mix of modern JavaScript libraries and analytics tools, hosted on AWS infrastructure, with a custom CMS backend. Security posture is solid with HTTPS, CSRF protections, and cookie consent mechanisms, though some security headers could be improved. The domain registration data supports the company's legitimacy and long-term presence in the market.

S

SmartBear

swaggerhub.com

57

SmartBear is a recognized leader in API lifecycle management, offering a comprehensive SaaS platform known as API Hub powered by Swagger. The company provides tools for API design, testing, documentation, and portal creation, targeting software development teams and enterprises. The website demonstrates strong market positioning with Gartner recognition and notable customer logos, reflecting a mature and trusted brand. Technically, the site uses modern frameworks like Astro and integrates Google Tag Manager for analytics, hosted on AWS infrastructure, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and domain protection, though lacks visible security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

S

SmartBear Software

loadninja.com

66

LoadNinja, a product of SmartBear Software, offers a sophisticated load and performance testing tool that leverages real browsers to provide accurate and actionable testing data. The company targets software development and QA teams seeking efficient, code-free load testing solutions integrated with modern CI/CD pipelines. The website reflects a mature enterprise-grade SaaS offering with strong branding, customer trust signals, and comprehensive service descriptions. Technically, the site employs a modern tech stack including jQuery, Google Analytics, Google Tag Manager, and Wistia for video content, hosted on AWS infrastructure with ASP.NET WebForms CMS. Security posture is solid with HTTPS, CSRF protections, and error monitoring via Sentry, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for performance and user experience.

S

SmartBear

bitbar.com

65

SmartBear's BitBar product offers a comprehensive cloud-based testing platform for browser and mobile app testing, targeting software development and QA teams. The company is well-established with a domain age of over 20 years and a strong market presence supported by notable customers and partners. The website demonstrates a mature digital infrastructure with modern technologies, good performance, and mobile optimization. Security posture is strong with HTTPS, security headers, and secure form handling, though explicit security policies and incident response information are limited. Overall, the site is professional, trustworthy, and aligned with enterprise software standards.

S

SmartBear

smartbear.com

66

SmartBear is a well-established enterprise technology company specializing in software testing, API lifecycle management, and observability tools. The company offers a comprehensive suite of products designed for developers, testers, and software teams to build, test, monitor, and optimize APIs and applications. With a strong market position and a portfolio of subsidiaries including Bugsnag, PactFlow, and Zephyr, SmartBear serves a global audience with enterprise-grade solutions. The website reflects a mature digital presence with excellent content quality, clear navigation, and professional branding. Technically, the website leverages modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Bugsnag for error monitoring. It is hosted on AWS infrastructure with a CMS platform identified as Kentico. The site is mobile-optimized, fast-loading, and SEO-friendly, with structured data enhancing search engine visibility. Privacy and cookie policies are present with consent mechanisms, indicating good compliance practices. From a security perspective, the site enforces HTTPS with strong SSL configuration and uses security headers, although explicit security policy and incident response contacts are not publicly disclosed. The domain WHOIS data is transparent and consistent with the company's business claims, showing a long registration history without privacy protection, which supports legitimacy. Overall, SmartBear's website demonstrates a high level of professionalism, security, and compliance suitable for an enterprise technology provider. Strategic recommendations include enabling DNSSEC, publishing a dedicated security policy, and adding a vulnerability disclosure program to further enhance trust and security posture.

A

Airbnb

airbnb.cl

68

Airbnb.cl is the Chilean localized version of Airbnb, a leading global online marketplace for vacation rentals, experiences, and hosting services. The website targets travelers and hosts in Chile and offers access to millions of listings worldwide. The platform is well-branded and consistent with Airbnb's global identity, providing a professional and user-friendly experience. Technically, the site leverages modern web technologies including React and integrates mapping services such as Google Maps and Mapbox. Security is robust with HTTPS enforced and CSRF tokens indicated, though some security headers are not explicitly detected in the provided content. Privacy and cookie policies are not clearly found in the analyzed HTML, indicating a potential compliance gap. WHOIS data for the domain is unavailable, limiting domain registration trust assessment, but the website content and branding strongly suggest legitimacy. Overall, the site demonstrates a mature digital presence with room for improvement in privacy compliance and security header implementation.

A

Alibaba Group (implied via registrar and ecosystem)

amap.com

63

The website amap.com is the official portal for 高德地图 (Amap), a leading Chinese mapping and navigation service owned by Alibaba Group. It offers comprehensive nationwide map browsing, location search, public transit and driving route queries, and integrates local commerce features such as group buying and discount information. The site targets general users in China seeking reliable navigation and local information services. Technically, the site is built with a heavy JavaScript frontend, leveraging Alibaba Cloud infrastructure and proprietary analytics frameworks. The site is mobile-optimized and professionally designed, though it lacks explicit privacy and cookie policies in the accessible HTML content. Security posture is moderate with domain protections in place but missing visible security headers and incident response information. Overall, the domain registration data aligns well with the business, indicating a mature and legitimate operation.

Midvox is a German-based company specializing in modern book marketing and social media solutions aimed at promoting printed books. Their services include digital previews ('Blick ins Buch'), flippable covers, social media widgets, and virtual book shelves, targeting publishers and book retailers. The company has established a significant network with over 1,400 publishers and thousands of online and physical retailers, positioning itself as a key player in the German book marketing industry. Technically, the website employs a variety of older JavaScript libraries such as jQuery, MooTools, and Fancybox, indicating some technical debt and potential security risks. The site lacks visible privacy and cookie policies, and no HTTPS enforcement or security headers were detected, which weakens its security posture. Overall, the website is functional with moderate content quality but requires improvements in security and privacy compliance to enhance trust and user safety.

Facebook, operated by Meta Platforms, Inc., is a leading global social networking platform that enables users to connect, share content, and communicate. It holds a dominant market position with a broad user base and offers key services including social networking, messaging, video sharing, and advertising. The website is professionally designed with excellent content quality and consistent branding, targeting a general audience worldwide. Technically, Facebook employs a modern JavaScript stack with React and asynchronous loading techniques, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and secure cookie practices, though explicit security headers could be enhanced. Privacy compliance is robust, featuring comprehensive privacy and cookie policies aligned with GDPR requirements. Overall, Facebook demonstrates high business credibility and trustworthiness.

N

Nendaz Tourisme

nendaz.ch

72

Nendaz.ch is a professionally maintained tourism website representing the Nendaz region in Switzerland, a key area within the 4 Vallées ski domain. The site provides comprehensive information about mountain experiences, skiing, and local events, targeting tourists and outdoor enthusiasts. The business model focuses on destination promotion and visitor engagement, positioning itself as a leading regional tourism portal. Technically, the website employs modern technologies including Mapbox for mapping, Google Tag Manager for analytics, and Cookiebot for privacy compliance, indicating a mature digital infrastructure. The site is mobile optimized and uses a specialized tourism CMS, ensuring good performance and user experience. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. However, the absence of explicit terms of service and security incident response information suggests areas for improvement. Overall, the website is trustworthy, professionally designed, and compliant with relevant privacy regulations, making it a reliable source for tourism information in the region.

T

TECNOLUMEN GmbH & Co.KG

tecnolumen.de

44

TECNOLUMEN GmbH & Co.KG is a German company specializing in the manufacture and retail of Bauhaus and design classic lighting, fittings, and design objects. The company targets design enthusiasts, retailers, and businesses with a focus on high-quality, timeless design products. Their market position is that of a niche leader in Bauhaus lighting and design classics, supported by a dealer network and an online shop. The website reflects a mature digital presence with WordPress CMS, SEO optimization via Yoast, and privacy-conscious analytics using Matomo. The technical infrastructure is solid, hosted via kunde24.de, and includes modern web technologies such as jQuery and Bootstrap. Security posture is good with HTTPS enforced and secure data collection forms, though some security headers and explicit security policies are missing. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-structured, supporting the company’s business credibility and customer engagement.

T

Top Light GmbH & Co.KG

top-light.de

43

Top Light GmbH & Co.KG is a well-established German manufacturer and retailer specializing in premium bathroom lighting and illuminated mirrors. The company holds a strong market position as a leader in its niche, supported by multiple industry awards and a professional online presence. Their business model includes both B2B and B2C channels, with a dedicated online shop and comprehensive customer support. The website reflects a mature digital infrastructure utilizing modern web technologies and integrates Google Analytics for performance insights. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. Security posture is adequate but could benefit from explicit security headers and incident response information. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

P

Prandina Srl

prandina.it

62

Prandina Srl is an established Italian lighting design company with over 40 years of experience, specializing in the design and manufacture of high-quality lighting products for residential and contract markets. The company emphasizes simplicity, formal rigor, functionality, and durable quality, leveraging glass as a key material in its contemporary lighting solutions. Their market position is that of a recognized niche brand with a consistent and professional online presence targeting both professionals and consumers interested in design lighting. Technically, the website employs a traditional but functional technology stack including jQuery, SVG conversion, and Cookiebot for consent management, alongside Matomo for privacy-respecting analytics. The site is mobile-optimized with good SEO practices and clear navigation, though some technologies like jQuery are outdated, suggesting room for modernization. From a security perspective, the site enforces HTTPS and integrates cookie consent mechanisms properly, with analytics loading only after user consent. However, it lacks explicit security policies, incident response contacts, and modern security headers, which are recommended for enhanced security posture. No vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with a strong business credibility score. Strategic improvements in security policy transparency and technology updates would further strengthen its security and compliance stance.

O

Oligo

oligo.de

56

Oligo is a German company specializing in modular lighting systems and elegant individual lamps, offering LED and halogen lighting solutions primarily for private customers. The website presents a professional and consistent brand image with good content quality and clear navigation. The technical infrastructure includes modern web technologies, Cookiebot for consent management, and Google Analytics for visitor insights, indicating a mature digital presence. Security posture is solid with HTTPS enforced and CSRF protections in place, though explicit security policies and incident response contacts are not published. Privacy compliance is strong, leveraging Cookiebot's comprehensive cookie declaration and consent mechanisms, aligning with GDPR requirements. Overall, the site is trustworthy and safe for general audiences, with no adult or questionable content detected.

L

Less'n'more

less-n-more.com

68

Less'n'more is a well-established German e-commerce business specializing in designer lighting products and custom lighting plans. The website is built on Shopify, leveraging modern e-commerce technologies and third-party integrations such as Judge.me for customer reviews and Google/Facebook for marketing and analytics. The business targets consumers and professionals seeking high-quality, tasteful lighting solutions. The domain age and WHOIS data support the legitimacy and longevity of the business. Privacy and cookie policies are implemented with consent mechanisms, reflecting GDPR compliance. However, direct contact information and explicit security policies are not prominently published, which could be improved to enhance trust and transparency. The technical infrastructure is modern and performant, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and domain protections, but could benefit from enabling DNSSEC and publishing vulnerability disclosure and incident response information.

N

Nimbus Group GmbH

nimbus-lighting.com

52

Nimbus-lighting.com is the official website of Nimbus Group GmbH, a German company specializing in manufacturing and selling innovative LED lighting products for private and commercial sectors. The company has a strong market position with a focus on LED.next technology and offers a broad product portfolio including lighting families and project references. The website supports both German and English languages and provides comprehensive product and service information, including dealer support and downloadable resources. The business model centers on manufacturing and direct sales with a medium-sized company footprint founded in 2013. Technically, the website employs modern JavaScript libraries such as jQuery, Moment.js, and Pikaday, alongside marketing and analytics tools like Google Tag Manager and HubSpot. The site is mobile optimized with good navigation and content quality, though some SEO and accessibility features are basic. Hosting details are not explicit, but the domain is registered with COREhub, S.R.L. The site uses HTTPS with a good SSL configuration but lacks DNSSEC and some security headers. From a security perspective, the site demonstrates good practices including HTTPS enforcement, cookie consent via OneTrust, and opt-out functions for Google Analytics and Facebook tracking. However, it lacks a published security policy, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, Nimbus-lighting.com presents a professional and trustworthy online presence with moderate technical maturity and good business credibility. Strategic improvements in security headers, DNSSEC, and published security policies would enhance its security posture and compliance standing.

I

IP44 Schmalhorst GmbH & Co KG

ip44.de

47

IP44 Schmalhorst GmbH & Co KG operates the website ip44.de, offering a comprehensive portfolio of outdoor lighting products including wall, ceiling, portable, movable, ground, and solar lighting solutions. The company emphasizes sustainability and design, targeting architects, designers, retailers, and end customers. The website is professionally designed, multilingual, and provides extensive product information, catalogs, and service options such as repair and storefinder. Technically, the site is built on Drupal CMS with modern JavaScript libraries, video integration, and cookie consent mechanisms, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and privacy compliance evident through GDPR-aligned policies and cookie consent. No critical vulnerabilities or suspicious content were detected, and the WHOIS data aligns with a legitimate business entity. Overall, the site demonstrates a mature digital presence with strong business credibility and user experience.

The domain holtkoetter.com is currently a parked domain with no active website content beyond a Sedo parking iframe and advertising scripts. The website lacks any business-related information, contact details, or policies, indicating it is not currently used for an operational business. The domain is registered with Network Solutions, LLC since 1998, which suggests it has been held for a long time but is not actively developed or maintained as a business site. Technically, the site uses basic HTML and JavaScript to display the parking page and ads, with no modern frameworks or CMS detected. Security posture is weak due to lack of HTTPS enforcement, absence of security headers, and no privacy or cookie policies. There are no forms or data collection mechanisms, and no analytics services are detected beyond advertising scripts. Overall, the site presents a low trust profile and minimal business credibility.

C

Catellani & Smith Srl

catellanismith.com

61

Catellani & Smith Srl is an established Italian artisanal lighting manufacturer founded in 1989, specializing in handcrafted lamps that redefine space illumination. The company targets design professionals and discerning consumers seeking high-quality, artisanal lighting solutions. Their market position is strong within the luxury and design manufacturing sector, supported by a professional multilingual website and international showroom presence. Technically, the website leverages modern frameworks such as Next.js and React, hosted on a premium provider (Kinsta), with good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The absence of WHOIS domain registration data is a notable concern, potentially indicating privacy protection or registration inconsistencies, which slightly impacts business credibility. Overall, the website is professional, secure, and compliant with privacy regulations, but domain registration transparency should be improved.

A

Artimeta BV

artimeta.nl

36

Artimeta BV is a Netherlands-based B2B company specializing in the distribution of design lighting products. Their clientele includes light, design, and furniture stores as well as project designers in sectors such as yachting and hotel interiors. The company has an established online presence with a domain registered since 1998, reflecting a mature business. The website showcases a curated collection of lighting products from various brands, targeting professional partners rather than end consumers. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, indicating a modern and flexible infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and professional design. However, some technical improvements are recommended, including enabling DNSSEC, adding security headers, and properly configuring analytics tools. From a security perspective, the site uses HTTPS but lacks advanced security headers and DNSSEC, which are important for enhancing protection against common web threats. The absence of a cookie consent mechanism and incomplete privacy compliance features indicate potential regulatory gaps, especially under GDPR. No incident response or security policy information is publicly available, which could be improved to enhance trust. Overall, Artimeta presents as a credible and professional business with a solid market position in the lighting distribution sector. Strategic improvements in security and privacy compliance would strengthen their digital maturity and reduce potential risks.

A

Artemide S.p.A.

artemide.de

61

Artemide S.p.A. is a well-established Italian company specializing in the design and manufacturing of high-end lighting products. The website showcases a broad range of collections including design and architectural lighting solutions, emphasizing innovation, sustainability, and collaboration with renowned designers and architects. The company targets architects, designers, retailers, and consumers seeking premium lighting solutions. The digital presence is mature, featuring modern technologies such as Bootstrap, jQuery, Owl Carousel, and Google Analytics, with good mobile optimization and accessibility features. Security practices include cookie consent management and anonymized analytics data, though explicit security headers and incident response information are not published. The WHOIS data is unavailable, which raises some concerns but the website's professional presentation and consistent branding support its legitimacy. Overall, the site is secure, compliant with privacy regulations, and professionally maintained.

The Fachverband Raumbegrünung und Hydrokultur im Zentralverband Gartenbau (ZVG) e.V. is a small German industry association focused on promoting indoor greening and hydroponics to improve human wellbeing in indoor environments. The website serves as an informational platform offering educational content, quality certifications, and industry networking opportunities. It targets professionals and enthusiasts in the indoor plant cultivation sector. Technically, the site is built on the Contao CMS platform and uses common JavaScript libraries for UI enhancements. While the site is functional and well-structured with good content relevance and navigation, it lacks advanced SEO optimization and mobile responsiveness is basic. Security posture is moderate with HTTPS enabled but missing important security headers and no cookie consent mechanism, which impacts GDPR compliance. No explicit contact emails or phone numbers are present on the homepage, but a contact form and privacy policy page exist. Overall, the site is trustworthy but could improve in security and privacy compliance to better serve its audience and meet regulatory requirements.

E

Element Green

element-green.com

58

Element Green operates as a network of 17 owner-managed companies specializing in interior and exterior greening solutions across Germany, Austria, and Switzerland. Their services include office greening, object greening, vertical and horizontal plantings, and professional plant care, positioning them as a collaborative and experienced player in the real estate and hospitality sectors. The website is professionally designed with comprehensive content, clear navigation, and good mobile optimization, reflecting a mature digital presence. Technically, the site is built on WordPress with Elementor and Yoast SEO, employing modern libraries and security best practices such as HTTPS and security headers. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and contact information suggest a legitimate business. Privacy compliance is strong with a detailed privacy policy, but the lack of a cookie consent mechanism and security incident response policy are areas for improvement. Overall, the site scores well on content quality and technical implementation but should address compliance and domain legitimacy issues to enhance trust and security posture.

J

Jungfreisinnige Stadt Bern

jfstadtbern.ch

51

The website jfstadtbern.ch represents the Jungfreisinnige Stadt Bern, a local youth political organization in Bern, Switzerland. The site focuses on political advocacy, membership engagement, and event organization targeted at residents and politically interested individuals in Bern. The business model is that of a small political organization with a local focus. Technically, the website is built on WordPress using the Avada theme and several event management plugins, indicating a moderate level of digital maturity. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. Security posture is weak, with no detected security headers, privacy policies, or incident response contacts. No analytics or tracking scripts were found, suggesting minimal user tracking. Overall, the site is safe for general audiences and does not contain adult or explicit content. The WHOIS data is consistent with the website's claims, supporting legitimacy. Strategic recommendations include implementing HTTPS with strong SSL, adding privacy and cookie policies with consent mechanisms, improving security headers, and providing clear contact information for security and data protection purposes.

FDP Frauen Stadt Bern is a small, non-profit political association of women based in Bern, Switzerland, with a long history dating back to 1935. The organization focuses on political advocacy and engagement for women in the local community. The website is built on WordPress using Elementor and Yoast SEO, providing a modern and moderately optimized digital presence. The site is well-structured with good navigation and mobile optimization but lacks comprehensive privacy and cookie policies. Security posture is adequate with HTTPS enabled but missing important security headers and incident response information. Contact information is limited to an email address and Facebook social media link, with no phone or physical address provided. Overall, the website is professional and trustworthy but could improve in privacy compliance and security best practices.

F

FDP.Die Liberalen Kanton Bern

bernwaehlt.ch

43

FDP.Die Liberalen Kanton Bern is a regional political organization representing liberal interests in the Canton of Bern, Switzerland. The website serves as an information hub for voters, providing details about the party's liberal compass, electoral districts, and candidates. It targets residents and voters in the region interested in liberal political representation. The business model is non-profit and focused on political engagement and information dissemination. Technically, the website is built on WordPress using the Elementor page builder, leveraging common web technologies such as jQuery and PHP. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. Hosting details are not explicitly identified. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is addressed with a privacy and cookie policy that includes consent mechanisms, aligning with GDPR requirements. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a professional and trustworthy front for the political party, with moderate technical sophistication and a solid security posture. Recommendations include implementing security headers, adding a vulnerability disclosure policy, and enhancing accessibility and incident response information to further strengthen trust and compliance.

F

FDP Stadt Zürich

mehblau.ch

60

FDP Stadt Zürich operates a political party website focused on promoting liberal political positions and candidates for local elections in Zürich. The site provides downloadable political agenda documents, blog posts, podcasts, and donation options, targeting residents and voters interested in liberal politics. The website uses a modern technical stack including ASP.NET WebForms, Bootstrap, jQuery, and integrates social media and tracking tools such as Facebook Pixel and Google Analytics. Security posture is moderate with HTTPS enforced and CAPTCHA on forms, but lacks some security headers and a vulnerability disclosure policy. Privacy compliance is limited due to absence of a privacy policy and terms of service, though a cookie consent banner is present. Overall, the site is professional, trustworthy, and well-branded, serving its political communication purpose effectively.

Andreabal AG is a Swiss pharmaceutical company established in 1988, specializing in products for women before, during, and after pregnancy. The company offers a range of health-related products and informational brochures, supported by an online webshop. Their market position is that of a trusted, niche healthcare provider focused on maternal and women's health within Switzerland. The website is well-structured, professionally designed, and targets expectant mothers and women in various life stages with relevant content and product offerings. Technically, the site uses standard web technologies such as JavaScript and CSS, with good mobile optimization and SEO practices, though no advanced frameworks or CMS were detected. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks some security headers and explicit security policies. Overall, the site demonstrates a high level of business credibility and privacy compliance, with clear contact information and legal documentation.

B

Bon Shop | StadtBonBasel

stadtbonbasel.ch

54

The website stadtbonbasel.ch operates as an e-commerce platform specializing in the sale of local gift vouchers (StadtBonBasel) accepted across various shops, cultural, leisure, and gastronomy businesses in Basel, Switzerland. It positions itself as the largest local gift voucher shop in the Basel region, targeting residents and visitors interested in supporting local commerce and gifting. The platform offers a range of products including gift vouchers of different denominations, gift boxes, booklets, and city guides. Technically, the website is built on the Shopware CMS platform, utilizing modern web technologies and integrating Google Analytics and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized with good navigation and professional design, although accessibility features are basic. Security-wise, the site enforces HTTPS and uses consent mode for analytics but lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the domain registration is consistent with the business claims, indicating legitimacy and trustworthiness. Strategic improvements in privacy compliance and security headers would enhance the site's security posture and regulatory adherence.

P

Primeo Energie

primeo-energie.ch

66

Primeo Energie is a Swiss regional energy provider focused on making homes smarter, promoting sustainable mobility, and enhancing quality of life. The company targets private customers with energy supply and related services. The website is professionally designed using modern Angular technology and integrates a consent management platform (Usercentrics) to comply with privacy regulations. However, explicit privacy policies and terms of service pages are not found in the analyzed content, which is a gap in compliance and transparency. Security posture is moderate with HTTPS usage and consent management but lacks visible security headers and incident response information. Overall, the website is trustworthy and consistent with the company's business sector and location, but improvements in privacy and security disclosures are recommended.

C

Confiserie Bachmann AG

confiserie-bachmann.ch

54

Confiserie Bachmann AG is a well-established Swiss confectionery company based in Basel, with a rich tradition dating back to 1942. The company specializes in handmade pralines, chocolates, and sweet specialties, offering both retail and catering services. Their business model includes multiple physical stores, an online shop with shipping options, and personalized gift offerings, targeting both individual consumers and corporate clients. The website reflects a strong regional market position with consistent branding and clear communication of services and contact information. From a technical perspective, the website employs modern web technologies including Google Tag Manager for analytics, responsive design, and SVG graphics for branding. While the site performs moderately well and is mobile-optimized, there is room for improvement in accessibility and the implementation of security headers. The absence of a cookie consent mechanism despite the use of tracking scripts indicates a gap in privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the lack of published security policies, incident response information, and vulnerability disclosure reduces transparency and preparedness perception. Overall, the site is professional, trustworthy, and secure but could enhance compliance and security maturity by adopting additional best practices. The overall risk assessment is low, with no critical issues detected. Strategic recommendations include implementing cookie consent, adding security headers, publishing security and incident response policies, and improving accessibility to strengthen compliance and user trust.

F

Friedrich Reinhardt Verlag

reinhardt.ch

43

Friedrich Reinhardt Verlag is a regional Swiss publishing company specializing in books, periodicals, and eBooks focused on Basel and its surroundings. The website serves as an e-commerce platform for their products, showcasing a well-structured catalog with clear navigation and professional design. The company maintains a credible online presence with verified contact information and social media channels. Technically, the site is built on the PrestaShop platform, leveraging modern JavaScript libraries and responsive design to provide a good user experience across devices. Security posture is adequate with HTTPS enforced and CSRF tokens in forms, though some security headers are not visibly implemented. Privacy compliance is basic with cookie consent mechanisms and a terms of service page, but no dedicated privacy or security policies are published. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is trustworthy, professional, and suitable for its target audience.

B

Blumen Au Bouquet AG

aubouquet.ch

36

Blumen Au Bouquet AG is a well-established family-run florist business based in Basel, Switzerland, operating since 1953. The company offers a wide range of floristry services including flower subscriptions, orchids, cacti, succulents, green plants, creative workshops, and event floristry, supported by an online shop. Their market position is strong locally, recognized as a leading address for elevated floristry in Basel. The website reflects a professional retail business model targeting general consumers interested in quality floral products and services. Technically, the website is built on the Contao Open Source CMS platform and uses jQuery for interactive elements. The site is mobile optimized with good SEO practices and clear navigation, though performance is moderate. The absence of advanced security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. The site uses HTTPS with a good SSL configuration, and forms are secured via POST methods. From a security perspective, the website demonstrates a solid baseline with HTTPS and secure form handling but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent banner. Business credibility is high, supported by consistent WHOIS data, clear contact information, and a professional online presence. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced security headers, explicit cookie consent, and published security policies to improve compliance and user trust.

S

Swiss Safety Center

autosonic.ch

53

Swiss Safety Center operates as a specialized provider of industrial safety, certification, and testing services primarily in Switzerland. Their website highlights advanced ultrasound testing equipment for gas cylinders and a broad portfolio of safety-related services including work safety, fire protection, hazardous materials management, and certifications. The company targets industrial clients, manufacturers, and regulatory bodies, positioning itself as a trusted and established player in the safety and compliance sector. The website is professionally designed, multilingual, and provides comprehensive information about their offerings.

A

Agencia Estatal Boletín Oficial del Estado

boe.es

62

The Agencia Estatal Boletín Oficial del Estado (BOE) operates as the official Spanish government agency responsible for publishing the Boletín Oficial del Estado and other official journals. It serves a broad audience including legal professionals, government officials, businesses, and the general public requiring access to official legal publications. The agency holds a primary market position as the authoritative source for Spanish legal and governmental publications, offering key services such as the BOE, BORME, legal information libraries, notifications, judicial edicts, and open data services. Technically, the website employs standard web technologies including HTML5, CSS, and JavaScript, with a well-structured, accessible, and mobile-optimized design. The site demonstrates good SEO practices and clear navigation, although no advanced frameworks or CMS were detected. Performance is moderate, suitable for the content and audience served. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is restricted by Red.es policies typical for .es domains, which is standard and justified for government domains. Privacy and cookie policies are present but lack an explicit consent mechanism. No incident response or vulnerability disclosure policies are publicly available. Overall, the website is trustworthy, professional, and serves its governmental function effectively. Strategic improvements in security headers, cookie consent, and public security policies would enhance its security posture and compliance.

G

Gobierno de Aragón

aragon.es

61

Gobierno de Aragón operates the official regional government portal for Aragón, Spain, providing citizens and stakeholders with comprehensive information and digital services related to public administration, transparency, and electronic procedures. The website serves as a central hub for accessing government resources, official bulletins, and citizen services. Technically, the site is built on the Liferay platform, leveraging modern web technologies such as React, Google Tag Manager, and Microsoft Clarity for analytics and user experience enhancements. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforcement and use of security headers, though some headers could be more explicitly confirmed. Privacy compliance is evident with a comprehensive privacy policy, but the absence of a visible cookie consent mechanism and published security policies are areas for improvement. WHOIS data is unavailable due to query restrictions, limiting full trust assessment, but the official nature and domain usage strongly indicate legitimacy. Overall, the site is professional, trustworthy, and well-maintained, serving its government function effectively.

A

Aragón Investiga

aragoninvestiga.es

53

Aragón Investiga is a regional government initiative focused on promoting research, development, and innovation (R&D+i) through public funding instruments in the Aragón region of Spain. The website serves as an informational platform to showcase funding opportunities and support mechanisms for research activities. It targets researchers, public institutions, and innovation stakeholders within the region. The business model is primarily informational and promotional, aligned with public sector objectives to foster innovation. Technically, the website is built on WordPress with SEO optimization via Yoast and uses Google Analytics for visitor tracking. The site is mobile-optimized and presents a professional design with consistent branding. Performance is moderate, and accessibility features are basic but adequate for the target audience. From a security perspective, the site enforces HTTPS and includes an opt-out mechanism for Google Analytics tracking. However, it lacks visible security headers and explicit security or incident response policies. No sensitive data exposure or vulnerabilities were detected in the HTML content. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service pages found. Overall, the website appears legitimate and trustworthy as a government information portal. The lack of WHOIS data is due to Red.es restrictions common for .es domains, and the domain age aligns with the website's active content since 2021. Strategic recommendations include enhancing privacy disclosures, implementing security headers, and providing clear contact information for security and general inquiries.