Security Directory

H

Hager Ukraine

hager.ua

62

Hager Ukraine operates as a localized branch of the international Hager Group, specializing in electrical distribution systems, modular equipment, and related electrical products tailored for the Ukrainian market. The website serves primarily as a product catalog and resource portal for electrical professionals and customers, offering product information, downloads, and training resources. The business model is B2B focused, targeting installers, distributors, and industry professionals. The site demonstrates consistent branding aligned with the global Hager identity and maintains a professional online presence. From a technical perspective, the website employs standard modern web technologies including HTML5, CSS3, and JavaScript, with some use of libraries such as Modernizr and Material Icons. The site appears to be custom-built or uses a proprietary CMS tailored for Hager's needs. Performance and mobile optimization are adequate, though accessibility features are basic. SEO is implemented at a basic level with meta tags and canonical links. Security posture is moderate; HTTPS is enforced as indicated by canonical URLs, and a cookie consent mechanism is implemented, reflecting some GDPR awareness. However, no privacy policy or terms of service are found, and no advanced security headers are detected in the provided data. Forms exist for user login and registration but lack visible anti-CSRF tokens or advanced protections in the snippet. No incident response or vulnerability disclosure information is published. Overall, the website is safe, professional, and trustworthy with no adult or questionable content. The domain registration data aligns well with the business claims, supporting legitimacy. Key recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and improving accessibility and compliance documentation to strengthen trust and regulatory adherence.

Ford Motor Company operates a comprehensive and professionally designed website showcasing its extensive lineup of vehicles including hybrid, electric, SUVs, trucks, and commercial vehicles. The site targets consumers and commercial buyers in the automotive sector, providing detailed product information, pricing, and dealer location services. The company is a major player in the global automotive market with a strong brand presence and consistent messaging. Technically, the website leverages modern web technologies including Adobe Experience Manager, Adobe Target, and Akamai CDN, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities. Privacy and cookie policies are comprehensive and GDPR compliant, though explicit security policy and incident response information are not prominently published. WHOIS data for the domain is unavailable, likely due to registry restrictions, but the website's legitimacy is supported by strong brand signals and professional content. Overall, the site reflects a mature digital presence with good security and privacy practices, suitable for a large enterprise in the transportation industry.

Ford Motor Company is a globally recognized American multinational automaker with a significant presence in Europe, as evidenced by the ford.eu website. The site serves as a country selection portal directing users to localized Ford websites across many European countries. The business model focuses on manufacturing and selling automobiles, supported by localized digital experiences tailored to regional markets. The company is well-established, founded in 1903, and operates at an enterprise scale with a strong brand identity and consistent digital branding across its European web presence. Technically, the website leverages modern web technologies including JavaScript frameworks, Adobe Experience Manager CMS, and Akamai CDN services to ensure fast, reliable, and scalable delivery. The site is mobile optimized and incorporates performance monitoring tools such as Adobe DTM and Akamai Boomerang. SEO and accessibility are adequately addressed, though accessibility could be improved further. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers are not evident, and no public security or incident response policies are published. The absence of WHOIS data is due to EURid privacy policies for .eu domains, but the domain usage and content strongly indicate legitimacy. No vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a mature digital presence with good privacy compliance and security posture. Strategic improvements could include publishing security policies, adding security headers, and providing direct contact information for security incidents to enhance trust and compliance.

The website www.ford.ch serves as the official localized landing page for Ford in Switzerland, primarily offering language selection options for German, French, and Italian users. It represents a major global automotive brand with a strong market presence and consistent branding. The site is built on modern web technologies including Adobe Experience Manager CMS and integrates advanced performance and analytics tools such as Akamai service workers and Adobe Analytics. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security headers and privacy policies are absent on this landing page. The absence of privacy and cookie policies, as well as contact information, limits compliance and user trust aspects. Overall, the site is professional and trustworthy but could improve transparency and compliance documentation.

H

Hager Group

hager.com

65

Hager Group operates a professional corporate website serving as a global platform for their electrical installation solutions targeted primarily at B2B customers. The company is positioned as a leading provider in the energy sector with a strong international presence, supported by multi-language and regional site versions. The website is built on a modern technical stack including Sitecore CMS, Akamai CDN, and integrates Google Analytics and CookieHub for analytics and privacy compliance respectively. Security posture is adequate with HTTPS and domain transfer protections, though lacks visible security headers and published security policies. Privacy compliance is partial, with cookie consent implemented but no explicit privacy or terms of service documents found in the provided content. Overall, the site is professional, well-branded, and trustworthy with a domain age consistent with an established enterprise. Recommendations include enhancing transparency with published privacy and security policies, enabling DNSSEC, and improving security headers.

N

NEUCO

neuco.ch

59

NEUCO is a specialized Swiss company focused on architectural lighting solutions for interior and exterior spaces such as offices, museums, shops, and public buildings. The website presents a professional and well-structured digital presence, leveraging TYPO3 CMS and modern web technologies including Cloudflare for security and Cookiebot for privacy compliance. The company targets architects, businesses, and public institutions seeking high-quality lighting solutions. Their service portfolio includes lighting concepts, renovations, digital light control, repairs, and replacement parts. The website content is relevant and professionally presented, with clear navigation and mobile optimization. From a technical perspective, the site uses a modern tech stack with TYPO3 CMS, Google Tag Manager, and Cloudflare CDN/security. Performance and accessibility are good, and SEO best practices are observed. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, including GDPR compliance indicators. However, the site lacks explicit terms of service, security policy, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced trust and compliance. No direct contact emails or phone numbers were found; contact is primarily via forms. WHOIS data is consistent with the business claims, showing a trustworthy domain registration. Overall, NEUCO's website demonstrates a solid digital maturity and security posture suitable for its business scope, with room for improvement in transparency around security policies and incident response.

A

audienzz AG

audienzz.ch

61

audienzz AG is a Swiss-based digital advertising technology company specializing in providing premium advertising solutions for advertisers and publishers. The company leverages a combination of advanced technology platforms and marketing expertise to deliver effective digital advertising campaigns across multiple formats including branding, display, video, and programmatic advertising. Their market position is strong within Switzerland, supported by partnerships with premium publishers and a comprehensive suite of advertising products and services. Technically, the website is built on modern frameworks such as Next.js and React, with integration of major analytics and marketing tools, ensuring a robust digital presence. Security posture is solid with HTTPS enforcement and standard security headers, though there is room for improvement in explicit CSP implementation and vulnerability disclosure mechanisms. Overall, the website and business demonstrate a professional and trustworthy presence, though the absence of WHOIS data introduces a moderate legitimacy concern that should be monitored.

A

AB Syna

syna.se

63

AB Syna is a well-established Swedish company specializing in credit reporting and market information services since 1947. Their website, upplysningar.syna.se, targets Swedish businesses and government entities, offering credit reports, register maintenance, market analysis, and subscription-based services. The company emphasizes professional service, personal support, and compliance with GDPR regulations. Technically, the website uses modern frameworks like Bootstrap and integrates Google Tag Manager and reCAPTCHA for analytics and security. Security posture is strong with HTTPS, anti-forgery tokens, and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data for the subdomain is noted but does not detract significantly from the overall trustworthiness given the company's established presence and consistent branding. Overall, the site is professional, secure, and compliant, serving a clear B2B finance sector niche.

A

Avantia

avantia.com.br

46

Avantia is a Brazilian technology company specializing in AI-driven security solutions that extract information from images to improve processes, enhance security, and reduce costs. Founded around 2020, Avantia positions itself as an innovator in the AI security technology sector within Brazil, targeting enterprises and organizations seeking advanced security technologies. The company leverages a modern digital infrastructure including WordPress CMS, Google Tag Manager, Facebook Pixel, Hotjar, and LinkedIn Insight Tag to support its online presence and marketing efforts. Hosting is managed via Microsoft Azure DNS, indicating a reliable cloud infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data, although formal security policies and incident response contacts are not published on the site. Privacy compliance is basic, with a cookie consent mechanism and a privacy policy available, but no explicit GDPR compliance statements or data protection officer contacts. Overall, Avantia's website reflects a professional, trustworthy, and technically competent organization with room to improve transparency in security and privacy policies.

P

ProfitShield

profitshield.com.br

61

ProfitShield is a specialized platform dedicated to reducing inventory losses in the retail sector, leveraging over 25 years of experience through its parent company ICTS. The platform offers data-driven tools to identify, monitor, and reduce stock losses, improving profitability and operational efficiency for retail businesses primarily in Brazil. The website is professionally designed, mobile-optimized, and provides clear navigation and detailed service descriptions. Technically, it is built on WordPress with Elementor, hosted on AWS infrastructure, and employs modern web technologies including Google Tag Manager and reCAPTCHA for security. Security posture is solid with HTTPS and input validation, though it lacks some advanced security headers and a cookie consent mechanism, which are recommended for GDPR compliance. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate business with a strong market position in retail loss prevention.

S

Safecompany

safecompany.com.br

10

Safecompany is a Brazilian technology company specializing in integrated security management solutions that combine patrimonial, occupational, and cybersecurity with intelligence tools. The company targets medium to large enterprises seeking to enhance their security posture through AI-driven CCTV threat detection and a fully digital platform that supports mobile risk reporting and operational efficiency. Their market position is strengthened by notable clients such as Colgate-Palmolive and CPFL Energia, supported by strong branding and customer testimonials. Technically, the website is built on WordPress with modern plugins like Yoast SEO, Google reCAPTCHA, and Microsoft Clarity for analytics and user behavior tracking. Hosting is via AWS infrastructure, ensuring reliable performance and scalability. The site is mobile-optimized with good SEO and accessibility features, although some accessibility improvements could be made. From a security perspective, the site enforces HTTPS, uses a Content Security Policy header, and implements cookie consent mechanisms. However, additional security headers could enhance protection. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with comprehensive policies and GDPR alignment. Overall, Safecompany presents a professional, trustworthy online presence with a solid security posture and compliance framework. The risk level is low, but improvements in security headers and incident response transparency are recommended to further strengthen trust and resilience.

L

Lefimatik

lefimatik.ch

10

Lefimatik is a Swiss-based IT service and web design company operated by apprentices under the parent company Bögli ICT AG. The company focuses on providing PC services, smartphone support, and modern web design with SEO optimization primarily targeting small and medium enterprises (KMU), associations, and private individuals. Their business model emphasizes hands-on learning and professional service delivery by young IT professionals. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, Slider Revolution, and Contact Form 7, indicating a mature digital infrastructure. The site is mobile-optimized and includes a cookie consent mechanism, reflecting good privacy compliance. Security posture is adequate with HTTPS and reCAPTCHA usage, though there is room for improvement in security headers and incident response transparency. Overall, the website presents a trustworthy and professional image with clear contact channels and positive customer testimonials.

T

Typonym

typonym.xyz

73

Typonym is a specialized font foundry launched in 2024 by veteran brand and editorial art director Evan Deterling. The company offers a curated collection of modern and sophisticated typefaces for retail licensing and bespoke commissions, targeting designers and brands seeking distinctive typography. The website reflects a professional and consistent brand identity with comprehensive licensing information and a user-friendly interface. Technically, the site employs modern JavaScript libraries, integrates Stripe for secure payments, and is hosted with Cloudflare DNS services, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is moderate with a comprehensive privacy policy but lacking cookie consent mechanisms. Overall, the site is trustworthy, well-designed, and serves its niche market effectively.

A

Aftonbladet AB

aftonbladet.se

77

Aftonbladet AB operates one of Sweden's largest and most engaging news websites, providing comprehensive news coverage, video journalism, and podcasts. The company has a long history dating back to 1830 and is a major player in the Swedish media landscape, owned by the Schibsted group. The website demonstrates a mature digital infrastructure with modern web technologies and a strong focus on user experience and mobile optimization. Security posture is solid with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. Privacy policies and cookie consent mechanisms are present and indicate GDPR compliance. The absence of WHOIS data for the queried subdomain suggests a need for further domain registration verification but does not detract from the site's legitimacy given its established brand presence. Overall, the site is professional, trustworthy, and well-positioned in its market.

The website at freshly.com/lander currently serves a minimal placeholder or parking page with no substantive content related to the Freshly meal delivery business. The domain WHOIS data is consistent with the expected registrant information for Freshly, indicating legitimacy. However, the lack of accessible content, privacy policies, contact information, and security headers severely limits the ability to assess the website's security posture and compliance. The technical infrastructure appears to rely on basic JavaScript and external scripts from a parking service and Google Adsense, with no visible CMS or advanced frameworks. Overall, the site is currently not serving its intended business content, resulting in a low AI score and limited trustworthiness.

S

Scentbird, Inc.

scentbird.com

65

Scentbird, Inc. operates a subscription-based e-commerce platform specializing in monthly perfume and fragrance deliveries, offering consumers access to over 600 designer scents. The company targets fragrance enthusiasts who prefer to sample perfumes before purchasing full bottles, positioning itself as a niche leader in the fragrance subscription market. Founded in 2013 and headquartered in New York, Scentbird provides personalized fragrance recommendations and flexible subscription management, enhancing customer experience. Technically, the website leverages modern web technologies including React, Apollo GraphQL, and Strapi CMS, supported by robust analytics and tracking tools such as Mixpanel, Google Tag Manager, and RudderStack. The site demonstrates excellent performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs multiple security headers, and integrates security tools like Jscrambler. Consent management mechanisms are in place to comply with privacy regulations, including GDPR. However, the absence of a public security policy, vulnerability disclosure, and incident response contacts suggests areas for improvement in transparency and readiness. Overall, Scentbird presents a professional, trustworthy online presence with strong business credibility and technical maturity. The lack of WHOIS transparency slightly reduces trust but does not detract significantly from the legitimacy of the business. Strategic enhancements in security policy publication and incident response communication would further strengthen its security posture.

C

Current

current.com

71

Current is a well-established fintech company founded in 1997, providing innovative mobile banking solutions to over 6 million members. Their services include paycheck advances, fee-free overdraft, credit building cards, savings with competitive interest rates, crypto trading without fees, and teen banking debit cards. The company partners with FDIC member banks Choice Financial Group and Cross River Bank to deliver banking services, ensuring regulatory compliance and customer trust. The website is professionally designed, mobile-optimized, and rich in content, targeting consumers seeking modern, app-based financial products.

B

Boll & Branch

bollandbranch.com

73

Boll & Branch is a premium e-commerce retailer specializing in luxury organic bedding, sheets, towels, and home textiles. The company emphasizes ethical sourcing, sustainability, and Fair Trade certification, targeting consumers who value high-quality, toxin-free organic cotton products. Their market position is that of a trusted, upscale brand in the organic bedding sector, with a direct-to-consumer business model leveraging Shopify's platform for online sales. Technically, the website is built on Shopify with modern frameworks and technologies such as React and Oxygen, ensuring fast performance, mobile responsiveness, and good SEO practices. The site includes comprehensive privacy and cookie policies with GDPR compliance and uses marketing and analytics tools like AB Tasty and OneTrust for consent management and user experience optimization. From a security perspective, the site enforces HTTPS, employs strong security headers, and avoids exposing sensitive data. However, it lacks publicly available incident response or vulnerability disclosure information, which could be improved to enhance trust. The absence of WHOIS registration data is a concern but does not detract significantly from the overall legitimacy given the professional presentation and trust signals. Overall, Boll & Branch presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing security policies and incident response contacts and addressing the WHOIS data gap to improve transparency and trust.

T

The Sill

thesill.com

70

The Sill is a specialized e-commerce retailer focused on indoor and outdoor plants, offering nationwide delivery across the United States. The company targets plant enthusiasts and beginners seeking easy-care and pet-friendly plants. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Klaviyo for marketing, Recharge for subscriptions, and Gorgias for customer support. The site demonstrates good technical maturity with fast performance, mobile optimization, and solid SEO practices. Security posture is strong with HTTPS enforcement, security headers, and consent management, though it lacks a publicly available security policy or incident response information. Overall, The Sill presents a trustworthy and professional online presence with room for improvement in transparency around security and incident handling.

The website thinkheyday.com is currently non-functional due to a missing ionCube PHP Loader required by a plugin, resulting in an error page with no accessible content. The domain is registered since 2014 with GoDaddy and uses Cloudflare nameservers, indicating a legitimate registration and hosting setup. However, the lack of accessible content prevents a full assessment of the business, its services, or compliance posture. No privacy, cookie, or terms of service policies are present, and no contact information or social media links are available. The technical infrastructure appears to rely on WordPress, but the missing PHP loader indicates a critical operational issue. Security posture is weak due to missing security headers and lack of DNSSEC, though no active security threats are detected from the data provided. Overall, the site scores low on content quality, technical implementation, and privacy compliance, with a moderate score on business credibility based on domain legitimacy.

N

Native

nativecos.com

51

Native is a direct-to-consumer e-commerce brand specializing in clean, aluminum and paraben-free deodorants, hair care, and body care products. The company positions itself as a vegan and cruelty-free brand with a strong customer base evidenced by over 150,000 five-star reviews. The website is built on the Shopify platform using the Cornerstone theme, integrating multiple marketing and analytics tools such as Google Tag Manager, Klaviyo, Postscript, and Bazaarvoice. The technical infrastructure is modern, performant, and mobile-optimized, providing a good user experience. Security posture is solid with HTTPS enforced and standard security headers present, though the site lacks a published security policy and incident response information. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. The absence of WHOIS data for the domain www.nativecos.com suggests privacy protection or an unregistered domain, which slightly impacts trust but is common for Shopify stores using custom domains. Overall, the site is professional, trustworthy, and well-positioned in the natural personal care market.

B

Bloom & Wild

bloomandwild.com

71

Bloom & Wild is a prominent UK-based e-commerce company specializing in flower delivery services, including letterbox flowers, plants, and gifts. The company targets consumers seeking convenient and reliable floral gifting solutions, positioning itself as a leading online flower delivery brand in the UK market. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency, supporting a positive user experience and high trustworthiness. Technically, the website leverages modern web technologies such as Angular, integrates advanced monitoring tools like Datadog RUM, and employs A/B testing via Optimizely. It demonstrates good mobile optimization, accessibility, and SEO practices, contributing to fast performance and broad user reach. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. From a security perspective, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data. However, it lacks a dedicated security policy page, incident response contact details, and a vulnerability disclosure program, which are areas for improvement. The absence of WHOIS registration data slightly reduces trust but does not significantly impact the overall legitimacy given the professional site presentation and security posture. Overall, Bloom & Wild presents a secure, compliant, and user-friendly platform with minor gaps in transparency around security policies and domain registration. Strategic enhancements in these areas would further strengthen its risk profile and stakeholder confidence.

B

Birchbox

birchbox.com

53

Birchbox is a well-established e-commerce company specializing in customizable monthly subscription boxes for beauty products. The website presents a professional and polished digital presence, leveraging modern web technologies such as React and Next.js, integrated with a headless CMS (Prismic) and various marketing and analytics tools. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Security posture is strong with HTTPS enforced and use of reputable third-party scripts, though explicit security headers could be more visible. Privacy and cookie policies are comprehensive and include consent mechanisms, indicating good compliance with GDPR. However, the absence of publicly available WHOIS data for the domain raises concerns about domain registration transparency, which slightly impacts business credibility. Overall, the website is trustworthy and professionally managed, but domain registration details should be clarified to enhance trust.

P

Paperless Post

paperlesspost.com

73

Paperless Post operates as an online platform specializing in customizable digital invitations, greeting cards, and flyer event pages for a variety of occasions including weddings, birthdays, holidays, and professional events. The website demonstrates a strong market position with a broad design collection and user-friendly customization tools, targeting both consumers and professionals. The platform emphasizes ease of event management with features such as RSVP tracking and messaging. Technically, the site is built using modern web technologies including React and Next.js, with responsive design and multimedia content optimized for performance and mobile devices. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place; however, the absence of explicit security headers and WHOIS data transparency are areas for improvement. Privacy compliance is partially addressed through cookie consent but lacks visible privacy policy documentation in the analyzed content. Overall, the site presents a professional and trustworthy front but would benefit from enhanced transparency and security documentation.

M

Misfits Market

misfitsmarket.com

65

Misfits Market operates as an online grocery delivery service focused on providing fresh, organic, and sustainable food options while combating food waste. The company targets consumers interested in affordable, quality groceries sourced from smaller farms and producers. Their flexible subscription model and wide delivery coverage position them as a competitive alternative to traditional grocery stores. Technically, the website leverages modern frameworks like Next.js and React, integrates multiple analytics and marketing tools, and demonstrates strong mobile optimization and SEO practices. Security posture is solid with HTTPS and privacy compliance scripts, though explicit security policies and incident response contacts are absent. The missing WHOIS data for the domain is a notable anomaly that slightly impacts trust but does not detract from the professional presentation and operational maturity of the site. Overall, the site is well-designed, user-friendly, and aligned with current e-commerce and sustainability trends.

D

Drugs and Alcohol - pha | NI

drugsandalcoholni.info

58

The website drugsandalcoholni.info serves as an informational platform focused on drugs and alcohol awareness in Northern Ireland, likely affiliated with the Public Health Agency (PHA). It provides public health information targeting the general population in Northern Ireland. The site uses WordPress CMS with the Divi theme and Slider Revolution plugin, indicating a modern and flexible technical infrastructure. Google Analytics and MonsterInsights are integrated for visitor tracking, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and visible privacy or cookie policies, which are areas for improvement. The absence of contact information and formal policies reduces privacy compliance and business credibility scores. Overall, the site is safe, professional, and serves its informational purpose well but would benefit from enhanced privacy and security practices.

L

La Mobiliare

mobiliare.ch

71

La Mobiliare is a historic and leading Swiss insurance and pension company serving both private individuals and businesses. The website presents a professional digital presence with clear service offerings including premium calculation, claims notification, and online policy management. The technical infrastructure is modern, leveraging Angular framework and optimized image delivery via Rokka.io, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy policies are missing. The site uses common analytics and advertising tools such as Google Analytics and Tealium, indicating moderate user tracking without clear privacy compliance disclosures. Overall, the website reflects a credible and trustworthy business entity with room for improvement in privacy and security transparency.

S

Schweizerischer Treuhänderverband

treuhand-talente.ch

58

The website www.treuhand-talente.ch serves as a professional job matching platform operated by the Schweizerischer Treuhänderverband, the Swiss fiduciary association. It targets fiduciary professionals, trainees, and career changers within Switzerland, offering a specialized service to connect job seekers and employers in the fiduciary sector. The platform supports multilingual content and provides detailed job listings and matching functionalities, reinforcing its niche market position. The business model includes free usage for members and paid job postings for non-members, indicating a membership-driven revenue stream. Technically, the website employs a modern technology stack including Bootstrap 5.2.2, jQuery, and Open Web Analytics for tracking. The site is mobile-optimized with good SEO practices and a custom CMS backend. Performance is moderate, with room for improvement in accessibility features. Security is robust with HTTPS enforced, CSRF tokens, and standard security headers, though the absence of a visible cookie consent mechanism and a dedicated security policy page are notable gaps. From a security perspective, the site demonstrates good practices but lacks published incident response or vulnerability disclosure information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website’s claims, confirming legitimacy and consistent registration details. Overall, the site is trustworthy and professionally maintained, with minor recommendations to enhance privacy compliance and security transparency. The overall risk assessment is low, with strategic recommendations focusing on improving GDPR cookie consent mechanisms, publishing security policies, and adding incident response contacts to strengthen user trust and compliance.

V

Vi-skogen

viskogen.se

60

Vi-skogen is a Swedish non-profit organization dedicated to planting trees and promoting agroforestry in East Africa to combat poverty and climate change. The website is professionally designed, content-rich, and targets donors, companies, and the general public interested in environmental and social causes. The organization offers donation options, educational content, and impact stories to engage supporters. Technically, the site is built on WordPress with WooCommerce and Gravity Forms, integrating modern analytics and tracking tools such as Google Tag Manager and Facebook Pixel. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although no explicit security policy or incident response information is published. Privacy compliance is well addressed with cookie consent and a comprehensive privacy policy. WHOIS data for the exact queried subdomain is unavailable, but the main domain is presumed legitimate. Overall, the site demonstrates a mature digital presence with good security and privacy practices, supporting its mission effectively.

V

Vi Läser

vilaser.se

43

Vi Läser is a well-established Swedish literature magazine founded in 2008, serving the Nordic region with curated book recommendations, articles, and digital magazine subscriptions. The website reflects a mature digital presence with a WordPress CMS, integrated marketing and analytics tools, and a clear focus on user engagement through newsletters and social media. The business model centers on subscriptions and advertising, positioning Vi Läser as a leading literature media outlet in its market. Technically, the site employs modern web technologies and complies with GDPR through a comprehensive cookie consent mechanism. Security posture is adequate with HTTPS and privacy plugins, though improvements could be made by enabling DNSSEC and adding security headers. Overall, the site is professional, trustworthy, and safe for general audiences.

S

Syz Group

syzgroup.com

68

Syz Group is a Swiss family-owned private banking and asset management group established in 1996, managing CHF 25.8 billion in assets. The company offers a range of wealth management services including discretionary portfolio management, advisory, digital asset services, and alternative investments. The website is professionally designed using Drupal 10, with good mobile optimization and accessibility. It integrates modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are absent. WHOIS data is missing, which raises transparency concerns but the overall business credibility remains high based on content and branding. Contact is primarily via web forms, with no direct emails or phone numbers published. The site is safe for general audiences with no adult content detected.

Kontenvergleich.li is the official payment account comparison website operated by the Liechtensteiner Bankenverband, serving as a trusted platform for consumers in Liechtenstein to compare banking products and fees. The site provides structured access to information about payment accounts, associated services, and pricing from major Liechtenstein banks, positioning itself as a key resource for financial decision-making within the country. The business model centers on transparency and consumer empowerment in the banking sector, supported by the official banking association. Technically, the website employs a straightforward stack including jQuery, Bootstrap Grid, and Select2 for enhanced UI elements. The site is mobile-optimized with good navigation and user experience, though some SEO and accessibility features are basic. No advanced CMS or hosting details are evident, suggesting a custom or lightweight implementation. Performance is moderate with no blocking or WAF detected, indicating reliable accessibility. From a security perspective, the site uses HTTPS and secure form controls but lacks visible security headers and explicit security policies. Privacy compliance is partially addressed via a linked privacy policy on the parent domain, but cookie consent mechanisms are absent. No incident response or vulnerability disclosure information is provided. Overall, the security posture is adequate but could be improved with standard headers and transparency. The overall risk is low given the official nature and limited attack surface, but enhancements in security headers, privacy notices, and incident response readiness are recommended to strengthen trust and compliance. The site is safe for general audiences with no adult or questionable content detected.

L

Lunchgate AG

foratable.com

59

Lunchgate AG operates the foratable platform, a leading restaurant reservation system focused on enhancing guest experience and operational efficiency for restaurants and hotels primarily in German-speaking regions. The company offers a SaaS model with tiered subscription plans, integrating AI features and multiple system integrations to optimize table management and reduce no-shows. The website reflects a mature digital presence with modern technologies, responsive design, and comprehensive content tailored to hospitality professionals. Security posture is solid with HTTPS and privacy compliance mechanisms, though explicit security policies and incident response contacts are absent. Overall, the platform presents a trustworthy and professional service with strong market positioning.

L

Lunchgate AG

lunchgate.ch

47

Lunchgate AG operates a Swiss-focused online platform for discovering restaurants, cafés, and bars, offering users the ability to search by location, cuisine, and make online reservations. The website is professionally designed, primarily in German, and targets a general audience interested in dining options within Switzerland. The platform integrates partner services such as Foratable for reservation management and uses a consent management platform to comply with privacy regulations. Technically, the site uses modern web technologies including AngularJS and JavaScript, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and consent mechanisms in place, though security headers and explicit security policies are absent. WHOIS data confirms the legitimacy and consistency of the domain registration with the business profile. Overall, the site is trustworthy and well-positioned in the hospitality sector.

R

REYL Intesa Sanpaolo

reyl.com

63

REYL Intesa Sanpaolo is a Swiss-based banking group established in 1973, offering wealth management, asset management, and asset services to high net worth individuals and institutional clients. The company positions itself as a partner delivering innovative financial solutions with a strong international presence including subsidiaries such as REYL Overseas. The website is professionally designed using Drupal CMS and modern web technologies, featuring multimedia content and clear navigation. Privacy and cookie policies are implemented with consent mechanisms, reflecting good compliance practices. Security posture is solid with HTTPS and cookie consent but lacks explicit security policies and incident response information. WHOIS data is missing, which reduces transparency but the overall website and business presence appear legitimate and professional.

Bank CIC (Schweiz) AG is a Swiss banking institution serving entrepreneurs and private individuals with complex financial needs. The website presents a professional image with a clear focus on investment, financing, corporate finance, and private banking services. The bank positions itself as a trusted partner offering tailored financial solutions supported by Swiss tradition and corporate governance. The digital infrastructure is modern, leveraging Magnolia CMS and JavaScript frameworks, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly disclosed. Overall, the website reflects a credible and trustworthy financial institution with a strong market presence in Switzerland.

B

BancaStato

bancastato.ch

58

BancaStato is a regional universal bank serving the Canton Ticino in Switzerland, offering a full range of banking services including credit, payment traffic, and asset management to private individuals, commercial clients, and private banking customers. The website reflects a mature digital presence with clear navigation and comprehensive service information. Technically, the site uses modern JavaScript libraries such as jQuery, integrates Matomo for analytics, and employs OneTrust for cookie consent management, indicating a good level of digital maturity. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear cookie consent and privacy policies in Italian. Overall, the website is professional, trustworthy, and well-aligned with the business's regional banking focus.

B

Bellevue Asset Management AG

bbentrepreneurprivate.ch

41

Bellevue Entrepreneur Private is a specialized investment fund managed by Bellevue Asset Management AG, focusing on providing growth capital to small and medium-sized enterprises (SMEs) in the DACH region, particularly Switzerland. The fund targets established, profitable companies with strong growth potential, acting as a co-investor alongside experienced investors and entrepreneurs. The website reflects a professional and consistent brand image, with clear investor-focused content and legal disclaimers. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, integrating modern web technologies such as Google Tag Manager and Vimeo embeds. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Security is well implemented with HTTPS, secure login forms, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies. The website maintains high business credibility with consistent WHOIS data and clear contact information. Strategic recommendations include publishing a dedicated security policy, incident response details, and vulnerability disclosure information to enhance trust and compliance.

A

adbodmer AG

adbodmer.ch

52

adbodmer AG is a Swiss investment group specializing in providing private capital and strategic support to medium-sized companies with growth ambitions, primarily in the DACH region. With approximately 20 years of experience, the company positions itself as a supportive and future-oriented partner for entrepreneurial ventures. The website reflects a professional and consistent brand image, targeting medium-sized enterprises seeking growth capital and expertise. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, leveraging modern web technologies including JavaScript and CSS. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. Cookie consent mechanisms are implemented, ensuring compliance with privacy regulations. From a security perspective, the website enforces HTTPS and employs cookie consent for user privacy. However, it lacks visible security policies, incident response contacts, and advanced security headers, which could be improved to enhance trust and compliance. No vulnerabilities or suspicious elements were detected in the content or scripts. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements in security transparency and incident response readiness are recommended to further strengthen the security posture and user trust.

B

BB Biotech AG

bbbiotech.ch

51

BB Biotech AG is a leading investment company specializing in the biotechnology sector, with over 30 years of experience and a strong market presence on the SIX Swiss Exchange and Frankfurt Stock Exchange. The company focuses on investing in listed biotech companies developing innovative drugs addressing unmet medical needs. The website reflects a mature digital infrastructure built on the Neos CMS and Flow PHP framework, employing modern JavaScript libraries and analytics tools to deliver a responsive and user-friendly experience. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site demonstrates high professionalism, transparency, and compliance with privacy regulations, supporting BB Biotech's credibility as a trustworthy investment entity.

B

Banque de Luxembourg Investments

banquedeluxembourginvestments.com

67

Banque de Luxembourg Investments (BLI) is a specialist asset management company based in Luxembourg, focusing on equities, bonds, multi-asset strategies, and sustainable investing. The company targets both private and professional investors primarily in Europe, emphasizing active management and ESG principles. The website reflects a professional and consistent brand image with clear navigation and relevant content about their investment expertise and fund offerings. Technically, the site is built on the Liferay CMS platform, utilizing modern JavaScript libraries and analytics tools such as Matomo, ensuring a moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The absence of WHOIS registration data is a notable anomaly, reducing domain trustworthiness despite the professional presentation. Overall, the site is credible and well-maintained but would benefit from enhanced transparency in privacy and security policies.

C

Crédit Mutuel Impact

creditmutuelimpact.fr

66

Crédit Mutuel Impact is a specialized asset management company operating under Crédit Mutuel Alliance Fédérale, focusing on sustainable and impact investments primarily in infrastructure and private equity sectors. The company targets investors interested in long-term environmental and societal impact, managing funds that support renewable energy, electric mobility, and decarbonization projects. The website reflects a professional and consistent brand image aligned with its parent company, offering clear information about its investment philosophy and regulatory compliance. Technically, the site uses modern web technologies including jQuery and YouTube API, with a responsive design and good accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data is a minor concern but is offset by the strong brand presence and regulatory adherence. Overall, the site is trustworthy, well-structured, and compliant with privacy regulations.

N

NewAlpha Asset Management

newalpha.com

71

NewAlpha Asset Management is a French asset management firm specializing in research, advisory, and portfolio management of investment funds. The company targets both professional and non-professional investors, offering a broad range of investment strategies including traditional asset classes, alternative investments, and private assets. The website is professionally designed, multilingual (French and English), and provides comprehensive information about the firm's expertise and services. Technically, the site is built on WordPress with modern SEO and privacy tools such as Yoast SEO and Cookiebot, and uses Matomo for analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and headers are lacking. The absence of WHOIS data reduces transparency and trust somewhat, but the overall presentation and regulatory references support legitimacy. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to improve trust and compliance.

C

CIC Private Debt

cic-privatedebt.eu

70

CIC Private Debt is a specialized financial services firm focused on providing private debt financing solutions to European SMEs and mid-sized companies. Established in 2003, it manages a significant portfolio of 3.5 billion euros for institutional and private investors. The company operates under French financial regulations, including AMF oversight and AIFM authorization, and emphasizes responsible investment practices aligned with ESG principles. The website reflects a professional and consistent brand image, targeting investors and corporate clients seeking alternative financing options. Technically, the site employs modern JavaScript libraries and analytics tools, is mobile-optimized, and includes a comprehensive cookie consent mechanism, demonstrating digital maturity. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though improvements in security headers and incident response transparency are recommended. Overall, the website and business present a trustworthy and credible profile with moderate risk.

C

Crédit Mutuel Asset Management

creditmutuel-am.eu

65

Crédit Mutuel Asset Management (CMAM) is a prominent asset management company operating primarily in France and Europe, offering a comprehensive range of investment funds focused on simplicity, transparency, performance, and risk management. The company emphasizes responsible and sustainable finance as part of its core business model. The website reflects a professional and consistent brand image aligned with its parent company, Crédit Mutuel. The target audience includes both professional and non-professional investors across multiple European countries. CMAM's market position is that of a significant player in the financial services sector, leveraging its parent group's reputation and resources. Technically, the website employs modern web technologies including jQuery and YouTube's widget API, with analytics powered by Piano Analytics. The site is served over HTTPS with cookie consent mechanisms that comply with GDPR requirements, offering users granular control over tracking preferences. While the site demonstrates good mobile optimization and SEO practices, accessibility compliance is partial, indicating room for improvement. No CMS or hosting provider details were explicitly identified. From a security perspective, the site benefits from HTTPS encryption and a cookie consent banner, alongside a published vulnerability disclosure policy, indicating a mature security posture. However, explicit security headers such as Content Security Policy or HSTS are not evident, and no direct incident response contacts are provided. The WHOIS data is privacy protected by EURid, which is common for European domains, and does not raise immediate concerns given the professional nature of the site and its alignment with a reputable financial institution. Overall, the security posture is solid but could be enhanced by adding more explicit security policies and headers.

F

fondationcarmignac.com

fondationcarmignac.com

44

The website www.fondationcarmignac.com presents minimal accessible content, primarily technical scaffolding generated by Gatsby and React frameworks. The absence of visible business information, contact details, or policies limits the ability to fully assess the organization's operations or market position. The technical infrastructure shows use of modern web technologies and tracking tools such as Google Tag Manager and Axeptio for cookie consent, indicating some level of digital maturity. However, the lack of substantive content and absence of WHOIS registration data raise concerns about the domain's legitimacy and transparency. Security posture is weak due to missing security headers and lack of visible SSL/TLS configuration details. Privacy compliance is minimal with no detected privacy or cookie policies on the homepage. Overall, the website appears incomplete or underdeveloped, with significant gaps in trust and compliance indicators.

S

SCOR

scor.com

71

SCOR is a leading global reinsurance company headquartered in France, offering a broad portfolio of innovative Property & Casualty, Life & Health, and Investment solutions. The company targets insurance firms and investors, positioning itself as a financially solid and innovative market leader. The website reflects a mature digital presence with comprehensive corporate, investor, and compliance information, supporting transparency and trust. Technically, the site is built on Drupal 10 with modern web technologies including Matomo analytics for privacy-respecting user tracking, lazy loading images, and embedded multimedia content. The site is mobile-optimized, accessible, and SEO-friendly, providing a fast and professional user experience. From a security perspective, the website enforces HTTPS, uses security cookies, and implements a robust cookie consent mechanism aligned with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers like Content-Security-Policy could be improved, and a security.txt file is absent. Overall, the domain WHOIS data is unavailable, likely due to privacy protection, but the website's professional content and compliance posture support legitimacy. The risk profile is low, with recommendations to enhance security transparency and incident response visibility.

N

Nexoria

nexoria.com.br

69

Nexoria is a Brazilian technology company specializing in comprehensive digital risk protection services, including cybersecurity, privacy, antifraud, and digital forensic solutions. Positioned as the largest hub for digital risk solutions in Brazil, Nexoria leverages partnerships with major market players to deliver advanced technology and expert implementation services. Their target audience primarily consists of enterprises and businesses seeking to strengthen operational and strategic resilience against digital threats. The website is professionally designed, multilingual, and optimized for modern web standards, reflecting a mature digital presence. Technically, the site is built on WordPress with Elementor, hosted on AWS infrastructure, and integrates Google Tag Manager and translation services, indicating a robust and scalable platform. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and published security policies, suggesting room for improvement in transparency and incident response readiness. Overall, Nexoria presents a credible and professional business front with strong market positioning in the cybersecurity sector.

I

ICTS Security

ictssecurity.com.br

69

ICTS Security is a Brazilian-based corporate security consultancy specializing in integrated security management and intelligence services. The company offers a range of services including corporate extortion containment, prevention of internal fraud, cargo theft prevention, counter-espionage, personal and executive protection, and fire risk management. The website demonstrates a solid market position with a portfolio of notable clients and a professional digital presence. Technically, the site is built on WordPress with Elementor, leveraging modern analytics and tracking tools, and hosted behind Cloudflare DNS services. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. Overall, the site is accessible, well-structured, and compliant with privacy regulations, targeting enterprise clients in sectors such as transportation, energy, banking, and telecommunications.