Security Directory

S

SRG Schweizerische Revisionsgesellschaft AG

srgch.ch

48

SRG Schweizerische Revisionsgesellschaft AG is a Swiss-based consortium of revision experts providing auditing and financial revision services across multiple regional offices in Switzerland. The company is registered with the Swiss revision supervisory authority, indicating regulatory compliance and professional standing. Their website targets small and medium-sized enterprises (KMU) seeking expert revision and auditing services with industry-specific knowledge. Technically, the website is built on WordPress using the Divi theme, incorporating modern analytics tools such as Google Analytics and Google Tag Manager with IP anonymization, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and some privacy compliance measures in place, though there is room for improvement in security headers and explicit security policies. Overall, the website is professional, trustworthy, and well-structured, supporting the company's market position as a regional leader in revision services.

I

ISL Online

islonline.net

71

ISL Online is a technology company specializing in remote desktop and remote support software solutions. The company has a mature online presence with a domain registered since 2007 and offers services primarily targeting IT professionals and businesses requiring remote support capabilities. The website provides a professional and user-friendly interface for joining remote sessions, supported by modern web technologies such as Bootstrap and jQuery. Legal compliance is evident through the presence of privacy, cookie, and terms of service pages, with GDPR compliance indicated. Security posture is solid with HTTPS enforced and domain status protections enabled, though improvements could be made by enabling DNSSEC and adding explicit security headers. Overall, the website demonstrates a good balance of usability, security, and compliance, supporting the company's credibility in the remote support market.

I

Infoniqa Holding GmbH

infoniqa.com

68

Infoniqa Holding GmbH is a well-established provider of HR, payroll, and finance software solutions primarily targeting the Mittelstand and SMEs in the DACH region. The company offers cloud-based software and outsourcing services, supported by a large team of experts across multiple locations in Austria, Germany, and Switzerland. Their market position is strong, with over 40,000 customers and a reputation for quality and compliance, including ISO/IEC 27001 certification. The website reflects a professional and modern digital presence, leveraging Webflow CMS, Cloudflare CDN, and various marketing and analytics tools such as Google Tag Manager and HubSpot Forms. Security measures include HTTPS, cookie consent management, and bot protection via Cloudflare Turnstile captcha. However, the WHOIS data is unavailable, which slightly reduces trust but is likely due to privacy protection. Overall, the site demonstrates a mature security posture and compliance with GDPR, making it a trustworthy platform for its target audience.

V

Vale Treuhand GmbH

valetreuhand.ch

65

Vale Treuhand GmbH is a Swiss fiduciary company specializing in fully digital bookkeeping and tax services. The company targets small to medium-sized businesses and individuals seeking efficient, paperless financial administration solutions. Their service model emphasizes online document uploads, remote consultations via Microsoft Teams, and professional fiduciary expertise. The website reflects a modern digital infrastructure with partnerships such as TREUHAND | SUISSE and Bexio Silver-Partner status, positioning them as a niche player in the Swiss finance sector. Technically, the website is built on the Webnode CMS platform, leveraging AWS Cloudfront for content delivery and integrating Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good SEO practices and uses secure HTTPS connections. However, there is room for improvement in security headers and incident response transparency. From a security perspective, the site demonstrates good baseline practices including HTTPS enforcement and cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The absence of a published security policy, incident response contacts, or vulnerability disclosure mechanisms suggests moderate maturity in security governance. Overall, the website is professional, trustworthy, and well-aligned with its business objectives. Strategic enhancements in security policy transparency and incident response readiness would further strengthen its risk posture and client trust.

B

Büro im Flow

bueroimflow.ch

52

Büro im Flow is a Swiss-based fiduciary and financial consulting firm specializing in digital and personal services for private individuals and companies. The business emphasizes combining modern digital processes with personalized support to deliver efficient, reliable financial solutions including tax consulting, bookkeeping, and financial planning. The company operates under Buchhaltung WECHSLER and holds membership in SwissAccounting, enhancing its credibility in the Swiss market. The website is professionally designed using modern React and Next.js technologies, providing a good user experience with clear navigation and mobile optimization. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy and cookie information present but no active consent mechanism. Overall, the website and business present a trustworthy and professional image suitable for their target Swiss clientele.

Z

Z83

z83.ch

52

Z83 is a Swiss-based fiduciary and CFO partner specializing in supporting digital companies, startups, and SMEs with financial and HR processes. Their service offerings include accounting, CFO-as-a-Service, tax consulting, and audits, positioning them as a niche financial services provider in the Swiss market. The website is built on WordPress with Elementor and integrates modern technologies such as GSAP and Google Analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements can be made by adding security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-structured, supporting the company's credibility and market positioning.

T

TF Financial Services

tf-fs.com

59

TF Financial Services is a newly established financial services company founded in 2023, specializing in technology-infused CFO partnership and financial consulting aimed at business growth and transformation. The company targets businesses seeking expert financial leadership and transformation support. The website is built on WordPress using Elementor and Weglot for multilingual capabilities, indicating a modern and flexible technical infrastructure. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and explicit security policies on the site. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website presents a professional and trustworthy image suitable for its niche market.

S

SoHa Treuhand AG

soha-treuhand.ch

61

SoHa Treuhand AG is a Swiss fiduciary and consulting firm based in Zurich, specializing in personalized accounting, payroll, tax consulting, and CFO as-a-Service offerings. The company emphasizes a blend of digital solutions and personal client relationships to optimize efficiency without sacrificing service quality. Their market position targets SMEs and business owners seeking modern yet personal fiduciary services. Technically, the website is built on Webflow with modern animation libraries like GSAP and uses Cloudflare Turnstile for spam protection on contact forms, indicating a good level of digital maturity. Security posture is solid with HTTPS and captcha integration, though security headers and formal policies are absent. Overall, the site is professional, trustworthy, and well-structured, but could improve privacy compliance and security transparency.

P

Pling

pling.ch

67

Pling is a Swiss-based service provider specializing in tailored, digitalized solutions for fiduciary services, administration, human resources, payroll accounting, and C-level consulting. The company targets businesses in Switzerland seeking efficient backoffice and personnel management services. The website is built on the Wix platform, leveraging Wix Thunderbolt framework and standard web technologies, indicating a moderate level of digital maturity. The site is mobile-optimized and presents a professional design with good user experience, although some navigation clarity and accessibility features could be improved. Security posture is strong with HTTPS enforced and security headers present, but lacks published security policies or incident response information. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy or terms of service pages. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

D

Digitron GmbH

digi-tron.ch

66

Digitron GmbH operates as a digital bookkeeping and accounting service provider based in Switzerland, targeting businesses seeking online financial management solutions. The website is built on the Wix platform, leveraging standard Wix technologies and scripts, and presents content primarily in German. The business model focuses on delivering complete bookkeeping services digitally, positioning itself as a niche player in the Swiss finance sector. Technically, the website demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled and a cookie consent mechanism in place; however, the absence of security headers and privacy policy pages indicates room for improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic enhancements in privacy compliance, contact transparency, and security best practices would strengthen trust and compliance.

K

Kell Outsourcing GmbH

runmyaccounts.de

68

Kell Outsourcing GmbH is a German-based company specializing in outsourcing accounting and financial bookkeeping services. Established in 2004, the company positions itself as a leading provider in the field, emphasizing ISO 9001:2015 certification and GDPR compliance. Their services cover the full spectrum of classical bookkeeping, including accounts receivable, payment processing, and digitalization of accounting processes. The website targets medium-sized enterprises with significant transaction volumes and revenues, offering tailored outsourcing solutions to alleviate internal resource constraints and improve operational efficiency. Technically, the website is built on WordPress using modern plugins and libraries such as WPBakery Page Builder, jQuery, and Slick Slider. It integrates multiple marketing and analytics tools including Google Analytics, Microsoft Clarity, HubSpot, and Facebook Pixel, all managed with a robust cookie consent mechanism via Borlabs Cookie. The site is hosted on servers associated with kasserver.com, with HTTPS enforced and a generally good security posture, although some security headers could be enhanced. From a security perspective, Kell Outsourcing demonstrates strong compliance with quality and data protection standards, notably ISO 9001:2015 and GDPR. The site employs secure forms and encrypted data portals for client interactions. No critical vulnerabilities or suspicious activities were detected. However, the absence of explicit incident response contacts and vulnerability disclosure policies suggests room for improvement in transparency and readiness. Overall, the website reflects a professional, trustworthy, and mature business entity with a clear market focus and solid technical infrastructure. Strategic recommendations include enhancing security headers, publishing incident response information, and continuous monitoring of third-party plugins to maintain security and compliance standards.

M

Mediaflow Europe AB

mediaflow.com

60

Mediaflow Europe AB operates a cloud-based digital asset management platform designed to streamline workflows involving images, video, and branding. The company targets businesses and organizations seeking efficient management and sharing of digital assets, offering modules such as DAM, Web Share, Brand Portal, and Video Manager. The website reflects a professional and consistent brand image, supporting multiple languages and providing clear contact information. Technically, the site employs modern web technologies including JavaScript frameworks, Google Tag Manager, and Cookiebot for privacy compliance. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, though some security headers and explicit incident response contacts are absent. The domain WHOIS data is privacy protected, which is common and justified for SaaS companies. Overall, the website demonstrates a mature digital presence with good privacy compliance and marketing transparency.

T

The Walt Disney Company

twdc.com

68

The Walt Disney Company website serves as the official corporate presence for one of the world's leading entertainment and media conglomerates. The site highlights the company's mission to be a top producer and provider of entertainment and information globally. The website is well-branded, professionally designed, and targets a general audience interested in corporate information and media content. The business model is centered on entertainment production and media distribution, with a strong market position as a global leader in the media industry. Technically, the website is built on WordPress CMS, enhanced with Yoast SEO for search optimization, and integrates Adobe Launch for analytics and tracking. The site employs OneTrust for cookie consent management, demonstrating awareness of privacy compliance requirements. The technical infrastructure is modern and supports good mobile optimization and accessibility, although some accessibility features could be improved. From a security perspective, the website enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data confirms the domain's legitimacy and consistency with the company's identity, supporting a high trust level. Overall, the website is a secure, professional, and credible corporate site with room for improvement in privacy policy visibility, security policy publication, and accessibility enhancements. The risk level is low, but strategic improvements in security transparency and compliance documentation are recommended.

E

EUROPEAN AWARENESS

awareu.eu

51

The website awareu.eu represents the European Awareness (AwarEU) project, an educational initiative funded by the Erasmus+ program aimed at promoting social inclusion and European Union awareness through free online courses and cultural events. The project collaborates with multiple European partners and targets citizens interested in EU education and policy. The site is built on Joomla CMS and uses standard web technologies including MooTools and jQuery, but suffers from some technical issues such as a disabled multilingual driver and lack of advanced SEO or accessibility features. Security posture is basic with no visible security headers or privacy policies, and no contact information is provided, which limits transparency and compliance. The domain WHOIS data is privacy protected, which is common for .eu domains, and no suspicious patterns were detected. Overall, the site is functional and content-rich but requires improvements in security, privacy compliance, and technical robustness.

A

Avaaz

avaaz.org

75

Avaaz is a large, globally recognized non-profit organization focused on empowering people worldwide to engage in social and political activism through online petitions and campaigns. The website serves as a hub for community mobilization, offering multilingual support and interactive features such as live activity feeds and community maps. Technically, the site employs modern JavaScript libraries including jQuery, Leaflet, and GrowthBook, and integrates tracking and social media SDKs from Google and Facebook. The site is secured with HTTPS and demonstrates good privacy compliance with clear privacy and cookie policies aligned with GDPR standards. Security posture is solid with secure forms and encrypted connections, though explicit security headers could be improved. The WHOIS data is unavailable due to privacy protection and a malformed WHOIS query, which is typical for non-profits seeking to protect registrant privacy. Overall, Avaaz's website is professional, trustworthy, and well-optimized for user engagement and global outreach.

C

Consiglio Italiano Movimento Europeo

movimentoeuropeo.it

42

The Consiglio Italiano Movimento Europeo is a well-established Italian non-profit organization dedicated to promoting European unity and democratic integration since 1948. The website serves as an information hub, providing news, event calendars, thematic documents, and advocacy resources targeted at Italian citizens and organizations interested in European affairs. The organization maintains an active presence on major social media platforms and offers newsletters and petitions to engage its audience. Technically, the website is built on Joomla CMS using the Helix3 template framework, incorporating modern web technologies such as jQuery, Font Awesome, and Google Fonts. It is secured with HTTPS and DNSSEC, and includes cookie consent mechanisms aligned with GDPR requirements. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. From a security perspective, the site employs standard best practices like HTTPS and DNSSEC but lacks advanced headers such as Content Security Policy and a security.txt file for vulnerability disclosure. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the organization's identity. Overall, the website presents a professional and trustworthy digital presence for a non-profit advocacy group, with room for improvement in security policies and accessibility to enhance user trust and compliance.

A

Associazione Luca Coscioni

formyrights.eu

40

The website www.formyrights.eu represents a non-profit advocacy initiative led by Associazione Luca Coscioni, focused on promoting respect for the rule of law within the European Union through a European Citizens' Initiative. The platform facilitates citizen engagement by providing information, partner support, and petition signing capabilities. The target audience includes EU citizens, human rights organizations, and civil rights advocates. The business model relies on donations and partnerships, positioning itself as a niche player in the government and non-profit sector. Technically, the website is built on ASP.NET WebForms with modern front-end libraries such as Bootstrap, jQuery, and FontAwesome. It employs Google Analytics for visitor tracking and uses responsive design techniques for mobile optimization. While the site is functional and well-structured, it lacks some advanced security headers and accessibility features, which could be improved to enhance security and user experience. From a security perspective, the site uses HTTPS and implements basic form validation, but no advanced security policies or incident response contacts are visible. The WHOIS data is unavailable due to EURid privacy policies, which is typical for .eu domains, but the website provides consistent contact information and partner references that support its legitimacy. Privacy and cookie policies are present with consent mechanisms, indicating a basic level of GDPR compliance. Overall, the website is trustworthy and professionally presented, with a clear mission and active engagement channels. However, improvements in security headers, incident response transparency, and accessibility would strengthen its security posture and compliance standing.

L

Link Campus University

unilink.it

61

Link Campus University is a medium-sized private university based in Rome, Italy, established in 1999. It offers a wide range of academic programs including undergraduate, graduate, doctoral, and master courses, with a strong emphasis on internationalization and research. The university operates from a historic campus and integrates traditional and innovative teaching methods. Technically, the website is built on TYPO3 CMS with modern front-end frameworks and includes compliance tools such as Cookiebot and Google Tag Manager. Security posture is solid with HTTPS and DNSSEC enabled, though explicit security policies and vulnerability disclosures are absent. Overall, the site is professional, well-branded, and trustworthy, serving a general audience of students and academics.

S

Sveriges Radio

sverigesradio.se

69

Sveriges Radio operates as Sweden's national public service radio broadcaster, providing continuous news updates, cultural programming, sports, and scientific content primarily targeting Swedish-speaking audiences. The website demonstrates a strong market position as a trusted media source with a comprehensive offering of live radio, podcasts, and news articles. Technically, the site leverages modern web technologies such as Next.js and React, ensuring fast performance and excellent mobile optimization. Security posture is adequate with HTTPS usage and no exposed sensitive data, though improvements are recommended in security headers and formal security policies. Privacy compliance is limited based on the available data, with no explicit privacy or cookie policies detected. Overall, the site is professional, trustworthy, and content-rich, serving a large audience with high-quality media content.

B

Business Sweden

business-sweden.se

71

Business Sweden is a government-affiliated organization dedicated to helping Swedish companies expand their global sales and assisting international companies to invest and grow in Sweden. The website is professionally designed with comprehensive content covering markets, industries, insights, and business support services. The technical infrastructure includes modern web technologies such as Adobe Typekit for fonts, Google Tag Manager and Analytics for tracking, Cookiebot for consent management, and Microsoft Application Insights for telemetry. Security posture is strong with HTTPS enforced and privacy mechanisms in place, though explicit security headers and incident response information are not prominently published. The absence of WHOIS data for the domain is unusual and warrants further verification, but the website's branding and content strongly support its legitimacy. Overall, the site demonstrates a mature digital presence suitable for its role as a trade and investment promotion entity.

I

International Aid Transparency Initiative

iatistandard.org

54

The International Aid Transparency Initiative (IATI) operates as a global non-profit initiative focused on improving transparency in development and humanitarian aid. It provides a standardized framework and tools for publishing and accessing data on aid activities worldwide. The website reflects a mature and well-established organization with a clear mission to enhance accountability and decision-making through open data. The target audience includes development agencies, governments, civil society, and researchers. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and uses analytics platforms such as Matomo and Plausible for minimal user tracking. It is hosted with Cloudflare DNS services, ensuring good performance and security. The site is mobile-optimized, accessible, and well-structured, providing a professional user experience. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers in the HTML. There is no publicly available security policy or incident response information, and no vulnerability disclosure mechanism is evident. The WHOIS data indicates a consistent and legitimate domain registration dating back to 2010, supporting the organization's credibility. Overall, the website is trustworthy, professional, and technically sound but would benefit from enhanced privacy compliance measures and explicit security documentation to improve user trust and regulatory adherence.

Q

Quantum Metric, Inc.

continuousproductdesign.com

50

Continuous Product Design is a professional educational platform offering the CPD Foundations Certification, aimed at digital leaders and product teams to enhance their skills in customer-centric product development. The website is affiliated with Quantum Metric, a recognized enterprise technology company, positioning it strongly in the technology education sector. The platform targets enterprise-level digital executives, UX, product, and analytics leaders, providing a free certification to foster leadership in continuous product design. Technically, the website is built on WordPress, hosted likely on WPEngine, and uses modern JavaScript libraries and SEO best practices. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS with domain locking features but lacks DNSSEC and explicit security headers. Privacy compliance is good with a comprehensive privacy policy and terms of use, though no cookie consent mechanism was detected. Overall, the site is trustworthy and professionally maintained, with room for improvement in security headers and incident response transparency.

R

rampmetrics

rampmetrics.com

66

Rampmetrics is a technology company offering a SaaS platform that automates marketing attribution and campaign tracking for B2B marketing teams. Their solution provides end-to-end analytics across the full marketing funnel, integrating online and offline touchpoints to deliver actionable insights. The company positions itself as a robust alternative to fragmented homegrown solutions, serving clients in the B2B SaaS space with a focus on Demand Generation, Digital Marketing, and Content teams. The website demonstrates a professional and consistent brand presence with strong customer testimonials and integration with major marketing and CRM platforms. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, and multiple marketing analytics tools, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS and secure form handling, though explicit security headers and formal security policies are absent. Privacy compliance is basic with a privacy policy and cookie consent mechanism, but lacks detailed GDPR compliance statements. The absence of WHOIS data for the domain is a notable concern, potentially indicating recent registration or privacy protection, which slightly reduces trustworthiness. Overall, rampmetrics presents a credible and professional marketing analytics platform with room for improvement in security transparency and privacy compliance.

T

The New York Times

thewirecutter.com

80

Wirecutter, a subsidiary of The New York Times, is a leading product review and recommendation website that provides consumers with trusted buying advice across a wide range of categories including technology, appliances, and gear. The site leverages veteran journalists and experts to deliver high-quality, well-researched content that supports affiliate marketing revenue streams. The website is professionally designed, mobile-optimized, and features a modern technology stack including React and Next.js, ensuring fast performance and good user experience. Security posture is strong with HTTPS enforcement, comprehensive security headers, and privacy compliance mechanisms such as cookie consent banners. However, explicit security policies and vulnerability disclosure mechanisms are not publicly available, representing an area for improvement. Overall, Wirecutter demonstrates a mature digital presence with high trustworthiness and business credibility.

W

Wirecutter

wirecutter.com

79

Wirecutter is a prominent product review and buying advice website owned by The New York Times, targeting consumers seeking trusted recommendations on technology, appliances, home goods, and more. The site leverages veteran journalists and experts to provide comprehensive, well-researched content, positioning itself as a leader in the consumer media space. Technically, the website employs modern web technologies including React with Next.js, uses a CDN (Fastly) for performance, and integrates advanced analytics and privacy consent frameworks, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and privacy consent managed via Fides, though explicit security headers should be confirmed. Overall, the site is professional, trustworthy, and compliant with privacy regulations, with no signs of blocking or WAF interference.

T

The New York Times

nytimes.com

79

The New York Times is a globally recognized media organization providing comprehensive news coverage, opinion, and multimedia content. Founded in 1851, it operates a subscription and advertising-based business model with a strong market position as a leading news provider. The website offers a rich user experience with excellent content quality and consistent branding. Technically, the site employs modern web technologies including React, GraphQL APIs, and advanced monitoring tools such as Datadog and Sentry, ensuring high performance and reliability. Security practices are robust, with HTTPS enforcement, privacy compliance mechanisms, and extensive use of tracking and analytics tools balanced with user consent frameworks. Overall, the site demonstrates a mature digital infrastructure and strong business credibility.

D

Das Trauerportal für den deutschsprachigen Raum

trauer.de

52

Trauer.de is a well-established German-language online portal specializing in obituary announcements, mourning support, and funeral-related services. It aggregates obituary notices from various regional newspapers and provides additional resources such as expert directories and live chat support for mourners. The platform targets German-speaking individuals seeking to find or place obituary notices and access related services. The website demonstrates a solid market position as a leading media portal in its niche within Germany.

R

Riot Games

riotgames.com

70

Riot Games is a leading global developer and publisher of popular video games such as League of Legends and VALORANT, with a strong presence in esports and digital entertainment. The company operates a professional and well-branded website that serves gamers and esports enthusiasts worldwide. The technical infrastructure leverages modern web technologies, including JavaScript frameworks, Google Tag Manager for analytics, and Osano for consent management, ensuring a performant and privacy-conscious user experience. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not prominently published. Overall, the website reflects a mature digital presence aligned with industry best practices, supporting Riot Games' market position and business model.

The website www.pfizer.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) protection mechanism employing a Turnstile CAPTCHA challenge. This security measure prevents automated access and scraping of the site content, resulting in minimal visible content for analysis. Pfizer is a globally recognized pharmaceutical company specializing in healthcare products including medicines and vaccines. The domain is protected by Cloudflare, indicating a strong security posture, but the lack of accessible content limits the ability to assess the website's technical maturity and compliance fully. WHOIS data for the domain is unavailable, which is unusual but may be due to privacy protection or registry policies. Overall, the site demonstrates a high level of security protection but lacks publicly accessible information in this snapshot, impacting content quality and privacy compliance assessments.

R

Run my Accounts AG

runmyaccounts.ch

69

Run my Accounts AG is a Swiss-based company specializing in outsourced online bookkeeping services tailored for SMEs and startups. The company offers a blend of proprietary online bookkeeping software combined with personal fiduciary consulting, positioning itself as a visionary and digital-forward service provider. With a founding year of 2011 and multiple industry awards, the company holds a strong market position in the digital accounting sector in Switzerland and Germany through its subsidiary. Technically, the website is built on a modern WordPress platform with WooCommerce integration, enhanced by premium SEO and GDPR compliance plugins. The infrastructure includes Cloudflare for CDN and bot management, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security posture is robust with HTTPS enforced, cookie consent mechanisms, and standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, recommendations include implementing a Content-Security-Policy header and publishing a security.txt file to enhance transparency and incident response readiness. Overall, the website and business demonstrate high professionalism, trustworthiness, and compliance with GDPR. The risk profile is low, with strategic recommendations focusing on continuous security improvements and enhanced transparency in security policies.

R

Refina Treuhand AG

refina.ch

51

Refina Treuhand AG is a Swiss fiduciary company with over 30 years of experience, specializing in tax, auditing, fiduciary consulting, payroll administration, and accounting services. The website presents a professional image targeting businesses and individuals in Switzerland seeking trusted fiduciary services. The content is well-structured, primarily in German, and includes essential contact information and a cookie consent mechanism compliant with GDPR requirements. Technically, the site uses legacy jQuery 1.8.3, Google Analytics, and custom CSS, with basic mobile responsiveness and SEO optimization. Security posture is moderate, with no visible security headers and use of an outdated JavaScript library, but no critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is trustworthy and professionally maintained but could benefit from technical and security improvements.

H

Hugentobler & Bühler AG für Treuhand und Unternehmensberatung

hubtreuhand.ch

59

Hugentobler & Bühler AG is a Swiss-based medium-sized company specializing in fiduciary and business consulting services, including financial accounting, tax consulting, corporate consulting, succession planning, financial management, and personnel administration. With over 30 years of professional experience and a team of more than 20 specialists, the company holds a reputable position in the Swiss finance sector and is a member of the Swiss fiduciary association TREUHAND | SUISSE. The website reflects a professional and consistent brand image targeting Swiss businesses and private clients seeking trusted fiduciary services. Technically, the website is built on the Contao CMS platform and employs modern web technologies such as jQuery, Google Analytics, and Google Tag Manager. The site is mobile-optimized, SEO-friendly, and performs moderately well. However, it lacks a cookie consent mechanism despite using tracking scripts, which is a privacy compliance gap. Security-wise, the site uses HTTPS with anonymized IP tracking for analytics, but lacks explicit security headers and incident response information. Overall, the security posture is solid but could be improved by implementing cookie consent, security headers, and publishing security policies. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. No suspicious or malicious content was detected, and the site is safe for general audiences.

F

Fuchs + Partner Treuhand

fuchspartner.ch

55

Fuchs + Partner Treuhand is a Swiss-based professional services firm specializing in consulting and fiduciary services primarily for medical and dental practices, as well as SMEs across various industries. The company positions itself as a modern and experienced partner, offering timely and high-quality services with a focus on individual employee development. Their market position is that of a trusted, specialized fiduciary service provider in the healthcare and SME sectors in Switzerland, with offices in Interlaken and Bern. Technically, the website is built using modern JavaScript frameworks (likely Vue.js/Nuxt.js) and hosted on Netlify, indicating a contemporary digital infrastructure. The site is mobile-optimized and performs moderately well, with good SEO practices and structured data enhancing discoverability. Security-wise, the site uses HTTPS and Google Tag Manager for analytics but lacks some recommended security headers and does not provide explicit privacy or cookie policies, which are compliance gaps. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website reflects a professional and credible business presence with room for improvement in privacy compliance and security hardening.

D

Duss Treuhand GmbH

dusstreuhand.ch

61

Duss Treuhand GmbH is a small Swiss finance services company based in Zug, specializing in fiduciary services, tax consulting, auditing, and accounting. The company targets private individuals, SMEs, and larger enterprises, emphasizing personalized and reliable service. Their website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on Webflow, leveraging modern web technologies and providing a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and a cookie consent mechanism, but lacks advanced security headers and formal privacy or incident response policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

B

Bolleter GmbH

bolleter-gmbh.ch

45

Bolleter GmbH is a Swiss fiduciary company specializing in accounting, tax, payroll, personnel management, and company formation services primarily targeting small and medium-sized enterprises (KMU) and private clients in the Zürcher Unterland region. The website presents a professional image with clear service offerings and contact information, positioning the company as a regional service provider in fiduciary and related business services. Technically, the website is built on WordPress using the Divi theme, incorporating Google Analytics and Tag Manager for user tracking. The site is mobile-optimized and has good SEO practices but lacks some advanced accessibility features. Security-wise, the site uses HTTPS and avoids exposing sensitive data but does not implement important security headers or publish security policies, which could be improved. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and functional but would benefit from enhanced compliance and security measures.

A

Aebin Treuhand AG

aebin-treuhand.ch

57

Aebin Treuhand AG is a Swiss-based small finance and business consulting firm specializing in administration and advisory services for companies and private individuals. The company positions itself as a local trusted advisor in Pratteln, Switzerland, offering core services in financial and economic matters. The website reflects a professional and consistent brand image with clear contact details and affiliations to Swiss professional organizations, enhancing trustworthiness. Technically, the website is built using modern web technologies including Statamic CMS and Tailwind CSS, with a focus on performance and accessibility. The site is mobile-optimized and SEO-friendly, with no detected tracking or cookies, indicating a strong privacy posture. The absence of forms on the main page reduces attack surface, and the use of HTTPS ensures secure communications. From a security perspective, the site demonstrates good practices such as disabling automatic detection of emails and phone numbers to prevent scraping. However, explicit security headers are not visible in the HTML content and could be improved. No vulnerability disclosure or incident response information is provided, which could be enhanced to improve security transparency. Overall, the website is safe, professional, and trustworthy with a strong privacy focus. Strategic recommendations include adding explicit security headers, publishing a security policy and incident response contacts, and implementing a cookie consent mechanism if cookies are introduced in the future.

A

adminster ag

adminster.ch

51

adminster ag is a Swiss-based professional services firm specializing in accounting, tax, payroll, and consulting solutions tailored for small and medium-sized enterprises (KMUs) primarily in Zürich and Zug. The company positions itself as a trusted local partner offering comprehensive financial and administrative outsourcing services, including external CFO support and company formation assistance. Their market approach emphasizes personal, uncomplicated service with a strong focus on digital processes and client collaboration. The website reflects a mature digital presence with modern technologies such as WordPress, Breakdance builder, and SEO optimization tools, ensuring excellent user experience and mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent implemented, although explicit security headers and incident response policies are not publicly detailed. Overall, the domain registration and website content are consistent and legitimate, supporting a high trustworthiness rating.

S

Stockholm International Water Institute

siwi.org

64

Stockholm International Water Institute (SIWI) is a well-established non-profit organization focused on water governance and sustainable water management. Founded in 1997, SIWI operates globally to influence policy and decision-making in water-related sustainable development. The website reflects a professional and consistent brand presence targeting policymakers, researchers, and water sector professionals. Technically, the site is built on WordPress with modern frameworks like Bootstrap and hosted on Microsoft Azure DNS infrastructure, indicating a moderate to good level of digital maturity. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and content-rich but would benefit from enhanced privacy and security disclosures.

Naturskyddsföreningen is Sweden's largest environmental non-profit organization dedicated to spreading knowledge, shaping public opinion, and influencing decision-makers at local, national, and global levels. The website reflects a mature digital presence with comprehensive content, including news, campaigns, educational materials, and event calendars. The organization leverages modern web technologies such as Next.js and React, hosted on Vercel, ensuring fast performance and mobile optimization. Security measures include HTTPS enforcement, security headers, and bot protection via reCAPTCHA, complemented by GDPR-compliant privacy and cookie policies. However, the absence of WHOIS domain registration data introduces a minor trust concern, though the website's certifications and transparent policies mitigate this risk. Overall, the site demonstrates high professionalism, trustworthiness, and user engagement.

C

CIFOR-ICRAF

worldagroforestry.org

69

CIFOR-ICRAF is a globally recognized non-profit research organization focused on forestry, agroforestry, and environmental sustainability. It operates under the CGIAR consortium and provides extensive research outputs, knowledge sharing, and policy advocacy to address global challenges such as climate change and biodiversity loss. The website reflects a mature digital presence with comprehensive content and strong branding consistency. Technically, the site is built on WordPress with modern frameworks and integrates multiple analytics and marketing tools while maintaining GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and bot management cookies, though some security headers and incident response disclosures could be improved. Overall, the site is professional, trustworthy, and well-optimized for users and search engines.

Stockholm Resilience Centre is a prominent international research and education institution focused on advancing transdisciplinary research for governance of social-ecological systems. It operates as a collaboration between Stockholm University and the Beijer Institute of Ecological Economics at the Royal Swedish Academy of Sciences, positioning itself as a leader in sustainability science and resilience research. The website reflects a mature digital presence with comprehensive content aimed at researchers, policymakers, and students interested in sustainability challenges such as climate change and biodiversity loss. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Analytics, and Piwik PRO for analytics, hosted on a SiteVision CMS platform. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with a professional design and clear navigation. Privacy and cookie consent mechanisms are implemented in compliance with GDPR, enhancing user trust. From a security perspective, the site uses HTTPS with strong SSL configuration and security headers, and no vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests areas for improvement. The WHOIS data is unavailable due to query failure or privacy protection, but the website's institutional affiliations and content quality support its legitimacy. Overall, the site demonstrates a strong security posture, good privacy compliance, and high business credibility, making it a trustworthy platform for its audience.

B

Bravoauto

bravoauto.lt

64

Bravoauto is a Lithuanian-based used car dealership offering a wide selection of used vehicles with warranty, alongside services such as car purchase, leasing, insurance, and ordering. The company operates multiple physical locations in major Lithuanian cities including Vilnius, Kaunas, and Klaipėda, positioning itself as a regional player in the transportation sector. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience for its target audience of used car buyers in Lithuania. Technically, the site employs modern tracking and advertising technologies such as Google Analytics, Facebook Pixel, TikTok Pixel, and Criteo, and is hosted with Azure DNS services, indicating a solid digital infrastructure. Security measures include HTTPS enforcement, Google reCAPTCHA integration, and cookie consent management via Cookiebot, although there are gaps in published privacy and security policies. Overall, the website is functional and credible but would benefit from enhanced compliance documentation and security disclosures.

Ford Tillbehör is an official Ford Motor Company website dedicated to providing a comprehensive catalog of Ford vehicle accessories tailored for the Swedish market. The site offers a wide range of products including eMobility solutions, protection, safety, comfort, infotainment, wheels, performance parts, styling, and outdoor lifestyle accessories. The business model focuses on e-commerce and brand product presentation, targeting Ford vehicle owners and enthusiasts in Sweden. The website is well-branded, professionally designed, and provides clear navigation and product information.

C

cyber-Wear Heidelberg GmbH

fordlifestylecollection.com

51

The Ford Lifestyle Collection website is an official e-commerce platform operated by cyber-Wear Heidelberg GmbH, offering a broad range of Ford branded lifestyle products including apparel, accessories, and collectibles. The site targets Ford enthusiasts primarily in Germany and Europe, providing a multilingual shopping experience with clear navigation and professional branding. The business model focuses on retail sales of licensed merchandise, supported by customer account management and newsletter subscriptions. The domain age and DNS configuration align well with the brand's legitimacy and market presence. Technically, the website is built on a modern e-commerce platform (Shopware) with standard web technologies such as JavaScript, CSS, and HTML5. It integrates PayPal for payments and employs a cookie consent mechanism compliant with GDPR. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement in loading speed and additional security headers. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, reflecting good security hygiene. However, DNSSEC is not enabled, and no explicit security policy or incident response contacts are published, which could be improved. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is strong with clear cookie consent and comprehensive privacy and terms documents hosted on a partner domain. Overall, the website presents a low-risk profile with high trustworthiness and professional presentation. Strategic recommendations include enabling DNSSEC, publishing a security policy, and enhancing security headers to further strengthen the security posture and customer trust.

Ford Money is a UK-based financial services provider specializing in savings products such as flexible savers, fixed savers, and cash ISAs. The company leverages the trusted Ford brand and offers FSCS protection, positioning itself as a reliable and customer-focused savings provider. The website is professionally designed, mobile-optimized, and built on Adobe Experience Manager, indicating a mature digital infrastructure. It employs modern web technologies and integrates analytics and marketing tools such as Adobe Launch and Google Tag Manager. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and vulnerability disclosure policies could be improved. Overall, the site demonstrates good privacy compliance and business credibility, though WHOIS data for the www subdomain is unavailable due to domain naming rules, which does not detract from the legitimacy of the main domain fordmoney.co.uk. Strategic recommendations include enhancing security header implementation, publishing a security policy, and providing clearer contact information for data protection and incident response.

М

Мото-Пфое ЕООД

motopfohe.bg

61

Мото-Пфое ЕООД е водещ автомобилен дилър в България, официален представител на марки като Ford, Volvo, Jaguar и Land Rover. Компанията предлага широка гама от услуги, включително продажба на нови и употребявани автомобили, сервизни услуги, лизинг, застраховки и коли под наем. Със силна пазарна позиция и дългогодишна история, Мото-Пфое е част от международната корпорация Sumitomo, което допълнително засилва доверието в бранда. Таргет аудиторията включва както индивидуални, така и корпоративни клиенти в България, търсещи качествени автомобилни решения и услуги. Техническата инфраструктура на сайта е модерна, използваща Google Tag Manager, Google Analytics, Facebook Pixel и други съвременни инструменти за анализ и маркетинг. Сайтът е мобилно оптимизиран, с добра SEO структура и бързо зареждане, което осигурява отлично потребителско изживяване. Въпреки липсата на явен CMS, сайтът демонстрира професионална реализация и стабилна техническа основа. От гледна точка на сигурността, сайтът използва HTTPS и има основни мерки за защита, включително cookie consent механизъм с възможност за персонализиране. Липсват видими уязвимости или изтичане на чувствителна информация. Препоръчва се добавяне на допълнителни security headers и публикуване на политика за сигурност и контакт за инциденти. Общата оценка за сигурността е добра, като сайтът показва зрялост и отговорност към защитата на потребителските данни. Общата оценка на сайта е висока, с отлична съдържателна и техническа реализация, добра съвместимост с GDPR и силна бизнес достоверност. Препоръчва се фокус върху допълнителни мерки за сигурност и прозрачност, за да се повиши още повече доверието и защитата на потребителите.

R

Richard Creative Agency

richard-creative.com

57

Richard Creative Agency is a small, established marketing and communications design firm founded in 2012, specializing in website development, branding, and print collateral design. The company targets businesses seeking strategic marketing solutions and creative design services, positioning itself as a practical and personal service provider in the media sector. The website reflects a professional and consistent brand image with a clear portfolio and service descriptions. Technically, the site is built on WordPress using modern plugins and themes, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled and domain registration transparency, but lacks security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and credible but would benefit from enhanced security and compliance documentation.

Mississippi Behavioral Health Services is a regional healthcare provider specializing in behavioral health rehabilitation services for children and adults with serious mental illness and behavioral disturbances. Established in 2016, the organization operates multiple offices throughout Mississippi, offering a comprehensive range of therapeutic and support services tailored to individual and family needs. The website reflects a professional and consistent brand presence with clear contact information and service descriptions, targeting residents of Mississippi seeking mental health support. Technically, the website is built on WordPress using the X Theme framework, incorporating modern web technologies such as jQuery and Google Analytics for tracking. The site is mobile-optimized and provides a moderate performance experience. However, it lacks advanced SEO and accessibility features and does not implement security headers beyond HTTPS. From a security perspective, the site benefits from HTTPS encryption and domain transfer protection but lacks DNSSEC and security headers that could enhance protection against common web threats. There is no visible privacy policy, cookie consent mechanism, or incident response information, which are critical for compliance and user trust, especially in healthcare. Analytics usage is moderate, with Google Analytics and Jetpack Stats employed without clear privacy disclosures. Overall, the website is functional and professional but would benefit from improved privacy compliance, enhanced security practices, and more transparent user data handling policies to strengthen trust and regulatory adherence.

Bravoauto, operated by Inchcape, is a prominent used car dealership in Estonia, offering the largest indoor selection of used vehicles. The website targets Estonian customers interested in buying, selling, or ordering cars, providing multiple physical locations and contact options. The business model focuses on retail sales and buyback services, positioning itself as a market leader in the local automotive sector. Technically, the website is built on Umbraco CMS with modern frontend libraries such as jQuery, SwiperJS, and TailwindCSS, ensuring a responsive and user-friendly experience. The site integrates key marketing and analytics tools including Google Tag Manager and Facebook Pixel, alongside a GDPR-compliant cookie consent mechanism via Usercentrics. Security posture is solid with HTTPS and standard security headers, although explicit privacy and terms policies are missing, which could impact compliance. Overall, the website is professional and trustworthy but would benefit from enhanced privacy documentation and SEO improvements.

MINI EE is the official website for MINI automotive brand in Estonia, offering new and used cars, financial services, and test drive scheduling. The site reflects a strong brand presence aligned with BMW Group, targeting car buyers and enthusiasts in Estonia. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS, lazy loading, and proprietary BMW frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and security headers, though privacy compliance is lacking due to missing explicit privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and contact transparency.