Security Directory

N

Noyb - European Center for Digital Rights

noyb.eu

76

Noyb - European Center for Digital Rights is a Vienna-based non-profit organization dedicated to enforcing digital privacy rights under GDPR. The website serves as a platform for advocacy, legal case updates, and public education, positioning Noyb as a leading European privacy watchdog. Their business model centers on legal enforcement, supported by memberships and donations. Technically, the site is built on Drupal 10 with the Thunder distribution, hosted by hosttech GmbH, reflecting a modern and secure infrastructure. The website is well-designed, mobile-optimized, and accessible, with strong SEO and content quality. Security posture is solid with HTTPS and secure forms, though explicit security policies and vulnerability disclosures are absent. Privacy compliance is good, with a clear privacy policy but lacking a cookie consent mechanism. Overall, the site is trustworthy, professional, and focused on privacy advocacy.

P

Patrick Breyer

patrick-breyer.de

42

Patrick Breyer's website serves as a professional platform for his political advocacy focused on digital rights, privacy, and transparency within the European context. The site targets citizens interested in civil liberties and digital freedoms, providing rich content, including news, videos, and detailed information about his work and political positions. The website is well-branded, consistent, and maintains a high level of professionalism with clear contact channels and active social media integration. Technically, the site is built on WordPress with modern libraries and plugins, offering good mobile optimization and accessibility. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements are recommended in security headers and cookie consent mechanisms. Overall, the site is trustworthy and aligns well with the business purpose of political advocacy and public engagement.

O

O'Reilly Media, Inc.

oreillynet.com

81

O'Reilly Media, Inc. is a well-established technology and business training company founded in 1978. It offers a comprehensive online learning platform that empowers professionals, teams, enterprises, academic institutions, and government organizations to acquire in-demand skills in technology and business domains. The company leverages AI and machine learning to personalize learning experiences and maintains a strong market position with a broad content offering and expert community. Technically, the website employs modern web technologies including Google Tag Manager, Visual Website Optimizer, and jQuery, and supports mobile platforms via dedicated iOS and Android apps. Security posture is strong with HTTPS enforcement and security headers, though explicit security policy and incident response information are not publicly detailed. Overall, the website is professional, well-branded, and trustworthy, with no signs of blocking or suspicious activity.

AsiaBSDCon is a well-established technical conference focused on BSD-based operating systems, serving developers and users primarily in Asia. The 2025 conference was cancelled due to financial and logistical challenges, with a transition committee formed to ensure continuity. The website provides information about the conference history, community involvement, and contact emails but lacks privacy and cookie policies. Technically, the site uses older web technologies such as Bootstrap 3 and jQuery 1.x, with basic mobile optimization and accessibility. Security posture is limited due to missing HTTPS enforcement and security headers, and WHOIS data is unavailable, which reduces domain trustworthiness. Overall, the site is functional and informative but requires improvements in security, privacy compliance, and technical modernization.

S

STOVA

eiseverywhere.com

72

STOVA operates a professional event management platform with a client login portal hosted at na-admin.eventscloud.com. The platform targets event organizers and attendees, providing services such as client login and mobile attendee check-in. The website demonstrates a moderate level of digital maturity, utilizing modern JavaScript libraries like jQuery and integrating Google Analytics and Tag Manager for tracking and analytics. The design is consistent and user-friendly, optimized for mobile devices with clear navigation and branding. From a security perspective, the site enforces HTTPS and includes CSRF tokens in its login forms, indicating attention to secure authentication practices. However, the absence of explicit security headers and detailed security or incident response policies suggests room for improvement. Privacy compliance is partially addressed with a privacy policy and cookie consent mechanism, but lacks comprehensive GDPR indicators or terms of service documentation. Overall, the website is trustworthy and functional with no signs of malicious content or blocking by WAFs. The lack of WHOIS data for the subdomain is typical for internal or delegated subdomains and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing detailed security and incident response policies, and improving accessibility features to strengthen compliance and user trust.

F

FOSSCON

fosscon.us

52

FOSSCON is a small, volunteer-run annual conference focused on Free and Open Source Software held in Philadelphia, Pennsylvania. The organization has been active since 2013 and serves a diverse audience including students, developers, and IT professionals. The website provides information about the event, its history, and team, but lacks formal privacy and cookie policies. Technically, the site is built on Drupal 8 with Bootstrap and uses Google Analytics for visitor tracking. While HTTPS is enabled and IP anonymization is configured for analytics, the site lacks DNSSEC and security headers, which are recommended for enhanced security. The WHOIS data aligns well with the website's claims, showing a consistent and legitimate registration. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

E

EuroBSDCon Foundation

eurobsdcon.org

70

EuroBSDCon 2026 is a niche technology conference organized by the EuroBSDCon Foundation, focusing on BSD operating systems and related open source technologies. The event is scheduled to take place in Brussels, Belgium, targeting developers, users, and enthusiasts within the BSD community. The website serves as an informational portal providing event dates, committee members, sponsorship information, and travel grant details. The business model is non-profit and community-driven, emphasizing collaboration and knowledge sharing within a specialized technology sector. Technically, the website is a static site generated using ssg6, employing standard HTML and CSS without dynamic content or complex frameworks. The site is moderately optimized for mobile devices and offers clear navigation and relevant content. However, there is no evidence of advanced SEO or accessibility features, and no hosting or CMS details are discernible. Performance is expected to be moderate given the static nature. From a security perspective, the site lacks visible security headers and privacy or cookie policies, which are important for compliance and user trust. The WHOIS data is unavailable due to a malformed query response, limiting domain registration transparency. No HTTPS status or SSL configuration details were provided, which is a critical gap. No tracking or advertising scripts were detected, indicating minimal user data collection. Overall, the security posture is basic and could be improved with standard best practices. The overall risk is moderate; the site is legitimate and professional but lacks some compliance and security features expected for modern web presence. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and improving WHOIS transparency. These steps will enhance trust, compliance, and security culture for the EuroBSDCon community website.

SouthEast LinuxFest is a well-established, community-driven annual conference focused on Linux and open source software, held in Charlotte, North Carolina. The event offers free attendance, educational sessions, ham radio exams, LAN parties, and a swapfest, targeting Linux enthusiasts and open source advocates. The website supports event registration, remote attendance, and sponsorship engagement, positioning itself as a key regional event in the open source community. Technically, the site is built on WordPress with WooCommerce, hosted on Linode, and uses Cloudflare DNS. It employs modern web technologies and is mobile optimized, though performance is moderate. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced security and privacy practices.

F

FreeBSD Foundation

freebsdfoundation.org

55

The FreeBSD Foundation is a well-established non-profit organization founded in 2001, dedicated to supporting and advancing the FreeBSD Project, a major open source operating system. The foundation operates through donations, partnerships, and grants, providing funding, infrastructure support, education, advocacy, and publishing the FreeBSD Journal. Their target audience includes FreeBSD users, developers, open source contributors, and technology professionals. The website reflects a mature and professional presence with comprehensive content and clear navigation. Technically, the site is built on WordPress using Elementor and several modern web technologies including Google reCAPTCHA for form security and Plausible Analytics for privacy-conscious tracking. The site is mobile optimized and SEO friendly, though performance is moderate. Hosting details are partially known, with domain registration through Gandi SAS. Security practices include HTTPS enforcement and form protection, but could be improved by enabling DNSSEC and adding security headers. From a security perspective, the site shows good maturity with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong with a clear privacy policy and GDPR indicators, though no explicit cookie consent mechanism was found. Contact information is transparent and complete, enhancing trust. No WAF or blocking mechanisms interfere with content access. Overall, the FreeBSD Foundation website scores highly for content quality, technical implementation, security posture, privacy compliance, and business credibility. It is a trustworthy and professional resource for the FreeBSD community and stakeholders.

O

O'Reilly Media Inc.

onlamp.com

73

O'Reilly Media Inc. operates the Radar site as a platform for tracking technology and business trends, targeting technology professionals and business leaders. The site provides content such as articles, podcasts, and reports focused on emerging technologies and industry insights. The company is a recognized leader in technology media and education, with a strong brand presence and consistent professional content. Technically, the site is built on WordPress and utilizes modern marketing and analytics tools including Google Tag Manager and Visual Website Optimizer, indicating a mature digital infrastructure. However, some security best practices such as security headers and explicit privacy policies are not evident on the analyzed page, suggesting room for improvement in security posture. The WHOIS data is not publicly available, which is unusual for a major brand but may be due to registry policies or privacy protections. Overall, the site is professional and trustworthy, with moderate technical and privacy compliance scores.

O

O'Reilly Media

oreilly.com

81

O'Reilly Media is a well-established technology and business training company founded in 1978, offering a comprehensive online learning platform that serves professionals, teams, enterprises, academic institutions, and government organizations globally. The company leverages a rich community of expert practitioners and nearly 200 content providers to deliver diverse, high-quality educational resources across technology and business domains. Their platform integrates AI and machine learning to personalize learning experiences, supporting career growth and productivity. Technically, the website employs modern web technologies including Google Tag Manager and Visual Website Optimizer for analytics and marketing optimization, with mobile apps available on major platforms. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. WHOIS data is unavailable, which slightly reduces domain trustworthiness despite strong branding and contact information. Overall, the site is professional, content-rich, and trustworthy, with room for improvement in privacy compliance and security transparency.

The website sourceforge.net is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to the actual content. SourceForge is a well-known software development platform with a long-established domain registered since 1999. The provided HTML content contains no business information, contact details, or policy documents, limiting the ability to perform a full security and compliance analysis. The technical infrastructure includes Cloudflare security services, but no further technology stack details or CMS information are available. Security posture cannot be fully assessed due to the blocked content, but the domain registration data indicates a legitimate and well-managed domain. Overall, the site is rated low in content quality and user experience due to inaccessibility, but the domain trustworthiness is high.

T

The PostgreSQL Global Development Group

postgresql.org

66

The PostgreSQL website represents the official online presence of The PostgreSQL Global Development Group, a large and well-established open source community focused on developing and maintaining one of the world's most advanced open source relational database systems. The site provides comprehensive resources including downloads, documentation, community engagement, and event information, targeting developers, database administrators, and organizations seeking robust database solutions. The business model centers on open source software development supported by a global community, with a strong market position as a leading database technology. Technically, the website employs modern web technologies such as Bootstrap, FontAwesome, and Google Analytics, ensuring a responsive and user-friendly experience. The site is well-structured with good SEO and accessibility practices, and it loads quickly. Security is robust with HTTPS enforced and secure form handling, although explicit security headers are not visible in the HTML content. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but lacks a visible cookie consent mechanism. From a security perspective, the site demonstrates good practices including encrypted connections and no exposed sensitive data. However, the absence of explicit security headers and incident response contact details are areas for improvement. The WHOIS data is unavailable due to a malformed query response, limiting domain registration insights, but the website's content and branding strongly support its legitimacy. Overall, the website is professional, trustworthy, and well-maintained, with minor areas for enhancement in privacy compliance and security transparency. The risk level is low, and the site effectively supports its community and business objectives.

P

Phorum

phorum.org

51

Phorum is an established open source PHP and MySQL forum software project founded in 1998. It targets webmasters and developers seeking flexible, high-performance forum solutions. The website provides downloads, documentation, community forums, and development resources via GitHub. The business model is centered on open source software distribution with a niche market position as one of the original PHP forum software providers. Technically, the site uses PHP, MySQL, JavaScript, and Google Analytics, hosted on A2 Hosting. The site design is basic but functional, with moderate SEO and accessibility. Security posture is moderate; domain registration is consistent and long-standing, but the site lacks DNSSEC, visible security headers, and privacy or cookie policies. Incident response contact is provided via a security email. Overall, the site is trustworthy but could improve privacy compliance and security best practices.

B

Bacula Community

bacula.org

55

Bacula.org is the community home for Bacula, an advanced open source backup software solution designed for Linux, Windows, and Mac platforms. The website serves developers, contributors, and enterprises by providing access to the latest releases, comprehensive documentation, and community resources. Bacula Systems, a partner organization, offers commercial support and training, positioning Bacula as a scalable and enterprise-ready backup solution with a strong market presence evidenced by millions of downloads and global contributors. The website demonstrates good digital maturity with a modern WordPress CMS, SEO optimization, and integration of analytics tools. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of security headers and explicit security policies suggests room for improvement. The WHOIS data is malformed and incomplete, limiting domain trust verification, but the website content and external references support its legitimacy. Overall, Bacula.org is a professional and trustworthy resource for backup software users and developers.

B

BSD Network

bsd.network

66

BSD Network operates a niche Mastodon instance focused on the *BSD community and adjacent users. The platform emphasizes a supportive, inclusive, and well-moderated social environment, currently operating in invite-only mode due to capacity constraints. The website provides clear information about its community goals, code of conduct, and administrative contacts, fostering trust and transparency within its user base. Technically, the site leverages Mastodon software with modern web technologies, including HTTPS and CSRF protections, ensuring a secure user experience. However, some security best practices such as explicit security headers and cookie consent mechanisms are absent, representing areas for improvement. Overall, the platform presents a trustworthy and community-oriented social network with a strong focus on privacy and moderation.

B

BSDCan

bsdcan.org

51

BSDCan is a well-established technical conference focused on BSD Unix systems, held annually in Ottawa, Canada. It serves a niche but important community of BSD developers, administrators, and users, positioning itself as North America's largest BSD conference. The website provides comprehensive information about the upcoming 2026 event, including dates, location, social events, call for papers, and sponsorship opportunities. The business model revolves around event organization, sponsorship, and community engagement. Technically, the website uses standard HTML5, CSS, and JavaScript with a clean and accessible design. It is mobile-optimized and provides good navigation and content relevance. However, there is no evidence of advanced frameworks or CMS usage, and hosting details are not disclosed. Performance is moderate with no detected tracking or advertising scripts, indicating a privacy-conscious approach. From a security perspective, the site lacks visible security headers and explicit HTTPS confirmation in the provided data, which suggests room for improvement. The WHOIS data is unavailable due to a malformed query response, limiting domain registration transparency. No forms collect sensitive data, and no vulnerabilities were detected in the content. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, BSDCan's website is professional, trustworthy, and safe for general audiences. The main risks relate to incomplete WHOIS data and limited visible security controls. Strategic improvements in security headers, HTTPS enforcement, and privacy compliance would enhance trust and resilience.

P

PGCon

pgcon.org

59

PGCon is a specialized annual conference focused on PostgreSQL users and developers, providing a platform for community engagement, education, and networking within the open source database ecosystem. The website serves as an informational hub for the conference, highlighting its history and related events. The technical infrastructure is basic, relying on static HTML and CSS without advanced frameworks or CMS, indicating a straightforward digital presence. Security posture is minimal with no visible HTTPS verification or security headers in the provided data, and no privacy or cookie consent mechanisms are evident. The absence of WHOIS data limits domain trust verification, but the long-standing history and community focus suggest legitimacy. Overall, the site is functional and informative but would benefit from enhanced security and privacy features to improve trust and compliance.

The Racing System website offers a niche software solution focused on race timing and results production, targeting race organizers and volunteers. The business appears small and specialized, with a simple product emphasizing ease of use and error checking. The website content is minimal and dated, last updated in 2000, with no modern web technologies or interactive features detected. The absence of privacy, cookie, or terms of service policies and lack of contact information limits user trust and compliance with modern standards. Security posture is weak due to missing HTTPS and security headers, and no incident response or vulnerability disclosure information is provided. The WHOIS data is missing or indicates the domain is not registered, which raises legitimacy concerns despite the website being accessible. Overall, the site reflects a legacy web presence with significant modernization and security improvements needed.

DVL Software Limited is a small software company specializing in custom software development, including database design and client/server applications, with a niche focus on race timing software. The website content is minimal and dated, last updated in 2000, indicating a legacy or low-maintenance online presence. The company targets software developers and race organizers, offering specialized software solutions primarily in the technology sector. The business model appears to be centered on custom software services and product sales related to race timing. Technically, the website lacks modern infrastructure elements such as HTTPS, security headers, and mobile optimization. The site uses basic HTML without detectable modern frameworks or CMS, and no analytics or tracking technologies are present. Performance and accessibility are basic, with no evident SEO optimization beyond meta tags. From a security perspective, the absence of HTTPS and security headers, combined with missing privacy and cookie policies, indicates a low security posture. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and trustworthiness. No contact emails or phone numbers are explicitly provided, limiting communication channels. Overall, the site shows minimal compliance with modern security and privacy standards. The overall risk assessment is moderate to high due to the lack of domain registration transparency and security best practices. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving contact information availability, and enhancing mobile and accessibility features to improve trust and compliance.

D

Dan Langille

unixathome.org

52

The website unixathome.org is a personal advocacy and community site run by Dan Langille, focused on promoting the use of Unix operating systems in home environments. It serves as a neutral platform for various Unix flavors and hosts mailing list archives and infrastructure for related sites. The site has a niche market position targeting Unix enthusiasts and small office users. Technically, the site is simple, built with basic HTML, hosted by NYI, and lacks modern web technologies or CMS frameworks. The performance is moderate but mobile optimization and accessibility are minimal. Security posture is weak due to the absence of HTTPS, security headers, and privacy policies. The WHOIS data is incomplete, but the domain age aligns with the site's stated history, supporting legitimacy. Overall, the site is functional but requires significant improvements in security, privacy compliance, and technical modernization.

FreshSource is a specialized project focused on tracking source code changes, primarily for the FreeBSD operating system. It offers features such as watch lists and notifications for source tree changes, targeting developers and users interested in FreeBSD ports and source updates. The website is maintained by Dan Langille and includes affiliate marketing through Amazon Associates. The site content is technical and niche, serving a small but dedicated community.

D

Dan Langille

freebsddiary.org

54

The FreeBSD Diary is a specialized website providing extensive how-to guides and tutorials for the FreeBSD operating system, targeting users and administrators of Unix-like systems. It positions itself as the largest collection of FreeBSD practical examples since 1998, leveraging affiliate marketing through Amazon and donations via PayPal to support its operations. The site is maintained by Dan Langille and offers a rich archive of technical content, though it is built on a basic, static HTML infrastructure without modern CMS or frameworks. Technically, the website uses simple HTML and CSS with Google Custom Search integration. Hosting is provided by New York Internet, SuperNews, and RootBSD. The site lacks HTTPS in the provided content, which is a significant security shortfall. There are no advanced security headers or privacy compliance mechanisms such as cookie consent banners. The site’s performance and mobile optimization are basic, reflecting an older design approach. From a security perspective, the absence of HTTPS and security headers lowers the security posture. No incident response or vulnerability disclosure information is present. The WHOIS data is malformed and incomplete, limiting domain trust verification. However, the site shows trust indicators such as child-safe certifications and a long operational history claim. Overall, the site is safe for general audiences but requires modernization and security improvements. Strategically, the site should prioritize implementing HTTPS, enhancing privacy compliance, and improving security headers. Adding clear contact information and updating WHOIS records would improve trust and business credibility. These steps will help maintain its niche authority while aligning with modern security and privacy standards.

BRWZR appears to be a technology-focused service platform with a login portal as its primary public-facing page. The website is minimalistic, focusing on user authentication without providing extensive business or product information. The technical infrastructure relies on common web technologies such as jQuery, Bootstrap, and Font Awesome, served via reputable CDNs. The domain is registered with INWX GmbH since 2020, indicating a relatively young but legitimate business presence. From a security perspective, the site uses HTTPS and includes a CSRF token in its login form, which is a positive security practice. However, the absence of DNSSEC, security headers, and privacy or cookie policies suggests room for improvement in security posture and compliance. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website is functional but basic, lacking comprehensive business information, privacy compliance documentation, and advanced security measures. The risk level is moderate due to these gaps, and strategic improvements are recommended to enhance trust and compliance.

T

tronic5

tronic5.de

46

tronic5 is a German-based technology company specializing in browser-based interactive 3D marketing solutions aimed at enhancing product presentation and customer engagement via smartphones and social media platforms. Their offerings focus on replacing traditional marketing materials with interactive digital content that integrates online and offline retail experiences. The website is built on WordPress using modern themes and plugins, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. No explicit contact information or detailed business credentials are present on the homepage, which slightly impacts trustworthiness. Overall, the site is professional and functional but could improve in privacy compliance and security best practices.

L

legal web GmbH

legalweb.io

73

legal web GmbH operates the website legalweb.io, providing specialized GDPR and privacy compliance solutions including a Privacy Cloud Consent Manager, Cookie Popup, AGB Generator, and employee microlearning training. The company targets businesses and agencies requiring legal compliance tools, positioning itself as a niche provider in the European privacy technology market. The website is professionally designed, mobile-optimized, and integrates modern analytics and SEO tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements such as enabling DNSSEC and security headers are recommended. Overall, the domain registration and business information are consistent and trustworthy, supporting a low-risk profile for users and partners.

N

NAVEX

navex.com

74

NAVEX is a well-established provider of governance, risk, and compliance (GRC) solutions, serving over 13,000 organizations globally. Their offerings include a comprehensive GRC platform (NAVEX One), whistleblowing and incident management software, ethics and compliance training, policy and procedure management, and risk governance services. The company targets enterprises and organizations seeking to streamline compliance and risk management processes. The website demonstrates a high level of professionalism, with clear navigation, rich content, and multiple engagement points such as demo request forms protected by reCAPTCHA. Technically, the site employs a modern technology stack including JavaScript frameworks, marketing automation tools like Marketo, analytics platforms such as Microsoft Clarity and Google Tag Manager, and consent management via TrustArc. The site is mobile-optimized, accessible, and SEO-friendly, contributing to a positive user experience. Security best practices are observed with HTTPS enforcement, security headers, and no visible sensitive data exposure. However, the WHOIS data for the domain www.navex.com is unavailable or missing, which is inconsistent with the active and professional website presence. This lack of domain registration transparency slightly impacts the overall trust assessment. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Overall, NAVEX presents a strong market position in the GRC space with a secure and user-friendly digital presence. Addressing the WHOIS data gap and publishing explicit security and incident response policies would further enhance trust and compliance posture.

N

NAVEX

navexglobal.com

75

NAVEX is a leading provider of governance, risk, and compliance (GRC) solutions, serving over 13,000 organizations worldwide. Their offerings include a comprehensive GRC platform (NAVEX One), whistleblowing and incident management software, ethics and compliance training, policy and procedure management, and risk and governance tools. The company targets enterprises and organizations seeking to simplify compliance and manage risk effectively. NAVEX demonstrates a strong market position with extensive customer trust and a broad portfolio of integrated solutions. Technically, the website employs modern web technologies including React, Marketo forms, Google Tag Manager, Microsoft Clarity, and TrustArc for consent management. The site is well-optimized for mobile and accessibility, with good SEO practices and performance. The use of multiple analytics and marketing tools indicates a mature digital marketing strategy. From a security perspective, NAVEX enforces HTTPS, uses security headers, and integrates reCAPTCHA on forms to mitigate abuse. Consent management aligns with GDPR requirements, and no obvious vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain is unusual and should be monitored, though it does not currently detract from the site's legitimacy. Overall, NAVEX presents a professional, trustworthy, and secure online presence consistent with its enterprise-grade compliance solutions. Strategic recommendations include enhancing transparency around domain registration, maintaining rigorous third-party script audits, and establishing a public vulnerability disclosure policy to further strengthen trust.

I

Invesco

invesco.ch

78

Invesco is a global investment management firm with a strong market presence, offering a wide range of financial services primarily targeting investors and financial professionals. The website reflects a professional and enterprise-grade digital presence, leveraging Adobe Experience Manager as its CMS and integrating advanced analytics and marketing tools such as Adobe Target and New Relic. The site employs a robust cookie consent mechanism via OneTrust, demonstrating attention to privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security headers and a published security policy are absent. Overall, the site is trustworthy and professionally maintained, but could improve transparency by publishing privacy and security policies and providing clear contact information.

S

SCOR Investment Partners SE

scor-ip.com

65

SCOR Investment Partners SE operates as the asset management arm of the SCOR Group, a leading global reinsurer. The company specializes in investment strategies that emphasize risk diversification, recurring returns, and capital preservation, with a strong commitment to sustainable development financing. Their market presence spans Paris, London, and Zurich, targeting professional institutional investors. The website reflects a mature digital presence built on Drupal 10, incorporating modern web technologies and compliance with EU privacy regulations. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security policies and incident response details. The absence of WHOIS registration data is a notable risk factor, potentially indicating privacy protection or registration issues. Overall, the site is professional and trustworthy but would benefit from enhanced transparency in domain registration and security disclosures.

Carmignac is an independent asset management company targeting professional and private investors primarily in Switzerland and Europe. The company offers a broad range of investment funds including equity, fixed income, diversified, alternative, and private asset strategies. The website is professionally designed with comprehensive content, clear navigation, and a focus on investment insights and sustainable investment. Technically, the site uses modern web technologies such as Next.js and React, with Google Tag Manager for analytics and marketing. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are lacking. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency but does not detract from the professional presentation of the site. Overall, the website is trustworthy and well-suited for its target audience.

L

La Française

la-francaise.com

74

La Française is a large, professional asset management group based in France, offering a broad range of investment solutions including equity, fixed income, diversified, alternative, and real estate management. The company operates multiple subsidiaries and is part of the Crédit Mutuel Alliance Fédérale asset management division. The website reflects a mature digital presence with comprehensive content, structured data, and clear navigation targeting institutional investors, distributors, and individual clients. Technically, the site uses modern web technologies and provides a responsive experience, though accessibility compliance is basic. Security posture is good with HTTPS and cookie consent mechanisms, but lacks explicit security headers and detailed incident response contacts. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the site is trustworthy and professional, though the absence of WHOIS data slightly reduces domain trustworthiness.

L

Lindemann Law

lindemannlaw.ch

58

Lindemann Law is a specialized law firm focusing on asset management and international funds, with expertise in jurisdictions such as Luxemburg, Malta, Liechtenstein, and the Cayman Islands. The firm targets global financial institutions and asset managers, positioning itself as a premier legal advisor with a strong presence in Zurich and connections in the USA, Eastern Europe, CIS, and Russia. The website reflects a professional and consistent brand image, supported by recognized trust indicators such as The Legal 500 ranking. Technically, the website is built on WordPress using modern tools like Elementor and Yoast SEO, ensuring good SEO and mobile optimization. The presence of Google Tag Manager and Brevo indicates active marketing and analytics usage. Performance is moderate, with room for improvement in accessibility and explicit security headers. Security posture is solid with HTTPS enforced and use of reCAPTCHA on forms, but lacks published security policies and incident response information. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but could enhance compliance and security transparency. Strategic recommendations include publishing privacy and cookie policies, adding security headers, and providing incident response and vulnerability disclosure information to strengthen trust and compliance.

R

Riedweg & Hrovat AG

rh-finanz.ch

53

Riedweg & Hrovat AG is a Swiss independent asset management and financial advisory firm founded in 1997, serving private and professional clients with a focus on sustainable asset management and personalized service. The company holds a FINMA license as a collective investment manager and is a member of the Verband Schweizerischer Vermögensverwalter (VSV), underscoring its regulatory compliance and industry standing. The website reflects a professional and consistent brand image, with detailed information about the team and business principles. Technically, the site is built on WordPress with Elementor and Yoast SEO, offering good mobile optimization and SEO practices. Security posture is strong with HTTPS and security headers, but lacks explicit privacy and security policy documentation. Contact information is primarily via corporate email addresses listed for key personnel. Overall, the site is trustworthy and well-positioned in its niche, though improvements in privacy compliance and incident response transparency are recommended.

T

Tolomeo Capital AG

tolomeo-capital.com

59

Tolomeo Capital AG is a Swiss-based systematic asset management firm specializing in quantitative, technology-driven investing strategies. Founded in 2011, the company manages its own fund with a fully audited track record since 2012 and holds a license from the Swiss Financial Market Supervisory Authority (FINMA). Positioned uniquely between high-frequency and long-term asset managers, Tolomeo leverages scientific and technological expertise to deliver market-neutral, uncorrelated returns to professional and institutional investors. Their offerings include proprietary funds, systematic investment strategies, advisory services, and risk management tools.

B

Bellevue Group AG

bellevue.ch

54

Bellevue Group AG is a Swiss specialty asset manager focusing on healthcare investments, small and mid-cap companies, and growth strategies. The company offers a variety of investment products including ETFs and private equity solutions, targeting individual, professional, and institutional investors. The website reflects a strong market position in the finance and healthcare sectors with a clear, professional presentation and comprehensive investor relations content. Technically, the site is built on Neos CMS with the Flow PHP framework, leveraging modern JavaScript libraries and Google Tag Manager for analytics and marketing. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although no explicit security policy or incident response information is publicly available. Overall, the website is well-designed, trustworthy, and compliant with GDPR and cookie regulations, supporting a medium-sized enterprise with a consistent brand and clear business focus.

Z

Zurich Invest Ltd

zurichinvest.ch

52

Zurich Invest Ltd is a Swiss-based financial services company specializing in investment opportunities for pension funds, institutional investors, and private customers. The website presents a professional and consistent brand image, targeting a medium-sized market segment within the finance industry. The company offers a range of investment services tailored to institutional and private clients, positioning itself as a reputable player in the Swiss financial market. Technically, the website leverages modern technologies including JavaScript, CSS, Azure Application Insights for analytics, and Tealium for tag management. Hosting appears to be on Microsoft Azure, indicating a robust infrastructure. The site is mobile-optimized with good SEO practices, although accessibility features are basic. From a security perspective, the site uses HTTPS with strong SSL configuration and sets secure cookies for tracking scripts. However, it lacks explicit security headers and visible security policies such as privacy or cookie policies. No vulnerability disclosure or incident response information is provided, which could be improved to enhance trust and compliance. Overall, the website is safe, professional, and trustworthy with moderate technical maturity. The absence of explicit privacy and cookie policies and contact information slightly reduces privacy compliance and user trust. Strategic improvements in these areas would strengthen the security posture and regulatory adherence.

V

Vereon AG

swisspaymentforum.ch

49

Swiss Payment Forum is a specialized event platform organized by Vereon AG, focusing on payment industry trends and solutions primarily in Switzerland. The website serves as a hub for event information, partner engagement, and industry insights, targeting payment professionals and fintech stakeholders. The platform is well-positioned in the Swiss payment ecosystem with a growing reputation and strong partner network. Technically, the site uses a modern CMS (concrete5) with common web technologies such as jQuery, Bootstrap, and integrates multimedia content and social media feeds effectively. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong, with clear policies linked to the parent company’s domain. Overall, the website is professional, trustworthy, and provides a good user experience with clear navigation and relevant content.

T

Tareno AG

tareno.ch

54

Tareno AG is an established Swiss independent wealth management company with over 25 years of experience, operating primarily in Basel and Zürich. The company offers tailored asset management and financial advisory services to private clients and institutions, emphasizing transparency, sustainability, and personalized strategies. It holds a strong market position, evidenced by multiple awards including the BILANZ Vermögensverwalter des Jahres and a 5-star Morningstar rating for its water fund. The website reflects a mature digital presence with multilingual support, professional design, and comprehensive content aligned with its business model. Technically, the site is built on WordPress with modern SEO and performance optimizations, including Google Tag Manager for analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are absent. Overall, the site projects high trustworthiness and professionalism, supporting the company's credibility in the finance sector.

R

Richmond Events

richmondevents.ch

55

Richmond Events Switzerland is a small, specialized event organizer focusing on strategic business forums held at prestigious venues in Switzerland. Their services cater primarily to C-level executives and management professionals across sectors such as finance, healthcare, marketing, and IT. The company positions itself as a niche player offering cost-effective and time-efficient networking and learning opportunities through its forums. The website reflects a professional and modern digital presence, leveraging technologies like Vue.js, Nuxt.js, and Storyblok CMS, ensuring a good user experience and mobile optimization. Security-wise, the site employs HTTPS and standard security headers, with a cookie consent mechanism in place, but lacks explicit privacy policies and incident response information, which are areas for improvement. Overall, the website is trustworthy and well-structured, though enhancing compliance documentation and direct contact details would strengthen its credibility and security posture.

F

FINANZ

finanz-ch.ch

65

FINANZ is a leading B2B event organizer in the Swiss financial industry, hosting a major congress featuring around 100 expert lectures, panels, and roundtables on current financial topics. The event provides a platform for professional networking and knowledge exchange in an exclusive atmosphere. The website is built on the Wix platform, leveraging Wix Thunderbolt technology, and presents a professional and consistent brand image. Technical infrastructure is modern and supports mobile optimization, though SEO and accessibility could be improved. Security posture is adequate with HTTPS and some security best practices, but lacks explicit security policies and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and legitimate, with room for improvement in privacy and security transparency.

S

Swiss Fund Data AG

swissfunddata.ch

58

Swiss Fund Data AG operates a professional online platform providing comprehensive data, documents, and market insights related to investment funds approved for public distribution in Switzerland. The company targets Swiss residents interested in investment funds, including both qualified and private investors, and offers personalized services such as the MyFunds user account. The website is positioned as a trusted publication organ approved and supervised by FINMA, reinforcing its credibility in the Swiss financial market. Technically, the website employs a traditional but stable technology stack including jQuery, Bootstrap, and Google Analytics for tracking. The site is mobile-optimized with good navigation and content quality. However, some JavaScript libraries are outdated, and no explicit security headers are detected, which could be improved. The site uses HTTPS with good SSL configuration, but personalized data transmission is unencrypted, which is a notable security risk acknowledged in the legal disclaimers. From a security perspective, the website demonstrates moderate maturity with HTTPS enforcement and privacy-conscious analytics configurations such as IP anonymization. However, the lack of security headers and unencrypted personalized data exchange represent vulnerabilities. No explicit incident response or vulnerability disclosure mechanisms are present. Privacy policies are comprehensive and GDPR-compliant, with clear data protection officer contact information. Overall, the website is professional, trustworthy, and compliant with relevant privacy regulations, but it could benefit from enhanced security controls and clearer incident response provisions to strengthen its security posture and user trust.

C

Candriam

candriam.com

54

Candriam is a professional asset management firm offering investment solutions, funds, and market insights primarily targeting professional investors globally. The website is well-structured, multilingual, and designed to provide detailed regulatory and investor information. Technically, the site employs modern analytics tools such as Piwik PRO, Google Tag Manager, Microsoft Application Insights, and Optimizely, alongside a consent management platform (Usercentrics) and reCAPTCHA for security on login and registration forms. The security posture is strong with HTTPS enforced and secure form handling, though explicit security headers could not be fully verified from the provided data. The absence of WHOIS data for the domain is notable but may be due to privacy or registry policies. Overall, the site demonstrates a mature digital presence with good compliance and security practices.

V

Verband Schweizerischer Vermögensverwalter (VSV)

vsv-asg.ch

41

The Verband Schweizerischer Vermögensverwalter (VSV) is a Swiss finance industry association focused on supporting wealth managers through legal support, training, events, and member services. The website is professionally designed using TYPO3 CMS and modern web technologies, providing multi-language support and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. The domain registration data aligns well with the organization's Swiss finance sector identity, supporting legitimacy. Overall, the site presents a trustworthy and professional digital presence suitable for its target audience of Swiss financial professionals.

The website at dimensa.com is currently inaccessible, returning a 403 Forbidden error page with no visible content or metadata. This prevents any meaningful analysis of the business, its services, or its digital presence. The domain is registered with GoDaddy.com, LLC since 2017 and appears legitimate based on WHOIS data, but the lack of accessible content severely limits assessment of the company's market position or technical maturity. No privacy, cookie, or security policies are published, and no contact information or social media links are available. The technical infrastructure appears to use Google Cloud DNS, but no further technology stack details can be determined. Security posture cannot be evaluated due to lack of data, but the absence of DNSSEC and security headers is noted as a minor concern. Overall, the site is currently non-functional or access-restricted, resulting in a low AI score and high uncertainty.

G

Grill-Restaurant BAULÜÜT

baulueuet.ch

50

Grill-Restaurant BAULÜÜT is a well-established hospitality business located in Oberkirch, Switzerland, specializing in grilled cuisine, bar services, and event hosting. The website reflects a strong market position supported by the Swiss Guest Award 2025 and positive customer reviews. Their key services include dining, bar and whisky lounge experiences, event hosting, and gift voucher sales. The target audience is general, including families, business clients, and event attendees. The business operates primarily as a small-sized restaurant entity founded in 2019. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience and SEO optimization. The site is mobile-optimized and uses structured data for improved search engine visibility. Privacy compliance is well addressed with a clear privacy and cookie policy, supported by a consent management platform (Usercentrics). From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA on forms, but lacks some advanced security headers. No critical vulnerabilities or exposed sensitive data were detected. The domain registration details are consistent with the business claims, indicating legitimacy and trustworthiness. Overall, the website presents a professional, secure, and user-friendly platform that effectively supports the business goals and customer engagement.

L

Liechtensteinischer Bankenverband

bankenverband.li

67

The Liechtensteinischer Bankenverband website serves as the official online presence of the Liechtenstein banking association, representing the rights and interests of the banking sector in Liechtenstein. It provides comprehensive information about the banking industry, sustainability initiatives, digitalization, and educational programs. The site targets banking professionals, customers, and stakeholders interested in the Liechtenstein financial market. The business model focuses on advocacy, information dissemination, and networking within the banking community. Technically, the website is built on the concrete5 CMS platform and leverages modern JavaScript libraries such as Vue.js and jQuery, along with UI frameworks like Foundation. It features responsive design, interactive elements like carousels and live search, and integrates third-party services for analytics and newsletter management. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and uses email obfuscation to protect contact information. However, it lacks explicit security headers and does not provide a vulnerability disclosure or incident response contact. Privacy compliance is partially addressed with a comprehensive privacy policy and newsletter consent but lacks a cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance its security posture and compliance standing.

F

Finews AG

finewsticino.ch

61

Finews AG operates finewsticino.ch, a regional financial news website focused on the Ticino region of Switzerland. The site provides news articles, sponsored content, and newsletters targeting Italian-speaking financial professionals and the general public interested in regional financial news. The business model relies on advertising revenue and sponsored advertorials, positioning itself as a reputable media outlet within the Swiss financial news market. Technically, the website is built on Joomla CMS, leveraging modern JavaScript libraries and integrating Google Tag Manager, Google Ad Manager, Matomo Analytics, and a GDPR-compliant consent management platform. The site demonstrates good mobile optimization and SEO practices, with structured data enhancing search visibility. Security-wise, the site enforces HTTPS, uses sandboxed iframes for ads, and manages user consent effectively, though it lacks explicit security policy and vulnerability disclosure pages. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable source for financial news in its target region.

K

Baukostenschätzung & Baukostenberechnung Schweiz | Für Architekten, Bauherren & Co.

keevalue.ch

64

The website www.keevalue.ch provides specialized services in construction cost estimation and calculation tailored for the Swiss market, targeting architects, builders, and construction professionals. The business operates in the real estate sector with a niche focus on cost estimation tools, positioning itself as a service platform for construction-related stakeholders in Switzerland. The website's content is professionally presented, with good design quality and clear navigation, optimized for mobile devices. Technically, the site leverages modern web technologies including Angular framework, Google Tag Manager, and LinkedIn Insight Tag for analytics and marketing purposes. However, the site lacks explicit privacy and cookie policies, which impacts its compliance posture. Security-wise, while HTTPS is implied, no security headers or explicit security policies are detected, indicating room for improvement in security best practices. Overall, the website is safe, professional, and trustworthy but would benefit from enhanced privacy compliance and security measures.