Security Directory

C

CookieHub ehf.

cookiehub.com

70

CookieHub ehf. operates a leading Cookie Consent Management Platform (CMP) designed to help websites comply with global privacy regulations such as GDPR, CCPA, and others. The company offers a comprehensive suite of features including automatic cookie scanning, consent logging, geo-targeting, and integrations with popular platforms like WordPress, Shopify, and Google Tag Manager. Positioned as a trusted solution used by over 25,000 websites worldwide, CookieHub emphasizes ease of use and regulatory compliance. Technically, the website is built on modern frameworks such as React and Next.js, leveraging Prismic CMS for content management and integrating analytics and support tools like Google Analytics and Helpscout Beacon. Security posture is strong with HTTPS enforcement, security headers, and certifications including ISO 27001 and Google Certified CMP status. However, the lack of publicly available WHOIS data introduces some uncertainty about domain registration transparency. Overall, CookieHub presents a mature, professional, and secure platform with a solid market position in the privacy compliance sector.

S

Singapore Network Information Centre (SGNIC) Pte Ltd

sgnic.sg

75

Singapore Network Information Centre (SGNIC) Pte Ltd operates as the official registry for Singapore's .SG domain namespace, providing domain registration and related internet infrastructure services. Established in 2005, SGNIC plays a critical role in maintaining the security, stability, and growth of Singapore's internet presence. The website reflects a professional and consistent brand image, targeting businesses and individuals seeking domain registration and related services within Singapore. The content is relevant, well-structured, and supported by active announcements and FAQs, indicating ongoing engagement with its audience. Technically, the website is built on the Telerik Sitefinity CMS platform with ASP.NET backend, utilizing modern JavaScript libraries such as jQuery and Bootstrap for responsive design. The site employs HTTPS with a valid SSL certificate, Google reCAPTCHA for form security, and a cookie consent mechanism to comply with basic privacy standards. However, DNSSEC is not enabled, which is a recommended security enhancement for domain registries. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site demonstrates good practices including HTTPS enforcement and bot protection, but lacks advanced security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious content were detected. WHOIS data confirms the domain's legitimacy, showing consistent registration details aligned with the business's operational history and purpose. Overall, SGNIC's website presents a trustworthy and professional front for its essential internet registry services. Strategic improvements in DNSSEC deployment, enhanced security headers, and transparent security policies would further strengthen its security posture and compliance standing.

The Communications Regulatory Authority (CRA) of Qatar operates as the official government body responsible for telecommunications regulation and domain management within Qatar. The website focuses on promoting Qatar domain registrations (.qa and قطر.) and provides comprehensive information about domain services, accredited registrars, and registrants. The CRA positions itself as a trusted authority with a strong emphasis on security, professionalism, and local market visibility. The site targets businesses and individuals seeking domain registration services in Qatar, leveraging its government status to establish market leadership. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, and analytics tools such as Google Analytics and Facebook Pixel. The CMS identified is Sitecore, indicating a robust enterprise-grade content management system. The site is mobile optimized, accessible, and SEO friendly, with good performance and consistent branding. Security headers like Content-Security-Policy are implemented, and HTTPS is enforced, reflecting a strong security posture. Security-wise, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. However, it lacks visible cookie consent mechanisms and published security or incident response policies, which are important for compliance and user trust. The WHOIS data aligns well with the website content, confirming legitimacy as a government entity with consistent registration details. Overall, the CRA website is a professional, secure, and credible platform serving its regulatory and domain management functions effectively. Strategic improvements in privacy compliance and transparency around security policies would further enhance trust and compliance.

R

Radix FZC

registry.pw

57

Registry.pw operates as the official registry for the .PW top-level domain, targeting professionals and businesses seeking a dedicated online namespace. Established in 2012 and managed by Radix FZC, the website offers domain registration services, registrar accreditation, and policy information. The site positions itself as a registrar-friendly TLD operator with a global reach, emphasizing professional identity online. The business model revolves around domain registry operations and partnerships with registrars worldwide. Technically, the website is built on WordPress 5.8.12, utilizing common plugins such as Contact Form 7 and Cookie Law Info for forms and compliance. The site employs Cloudflare for DNS services and integrates Google Analytics and AdRoll for tracking and advertising. The technical infrastructure is moderately optimized with basic mobile responsiveness and accessibility features. SEO practices are good, with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and includes a cookie consent banner with granular controls, indicating good privacy compliance. However, DNSSEC is not enabled, representing a minor security gap. No critical vulnerabilities or exposed sensitive data were detected. The site lacks explicit security certifications and a vulnerability disclosure policy, which could enhance trust. Incident response is facilitated via an abuse reporting page. Overall, registry.pw demonstrates a solid security posture and business credibility with professional content and clear policies. Recommendations include enabling DNSSEC, adding security headers, improving accessibility and mobile optimization, and establishing a formal vulnerability disclosure process to further strengthen security and compliance.

P

Podcastics

podcastics.com

66

Podcastics is a specialized podcast hosting and management platform offering a comprehensive suite of services including unlimited hosting, detailed analytics, customizable audio players, and monetization tools. The platform targets podcasters seeking an all-in-one solution with flexible subscription plans and a free trial. Technically, the website is built on a modern stack using IPS Community Suite CMS, integrates Google Tag Manager for analytics, and leverages Amazon Web Services for hosting audio files, ensuring reliable performance and global distribution. Security posture is solid with HTTPS enforced and secure form handling, though explicit security headers and incident response policies are not publicly documented. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, but the professional presentation and detailed content suggest a trustworthy business. Privacy and cookie policies are present and GDPR compliant, enhancing user trust.

U

Upsun

platform.sh

72

Upsun is a technology company specializing in providing a highly flexible Platform as a Service (PaaS) designed for developers and organizations seeking customizable cloud application hosting. The platform emphasizes developer flexibility, self-service capabilities, and predictable pricing, supporting multiple frameworks and languages such as Django, Next.js, Drupal, and more. The company has a strong market position as a modern, developer-friendly cloud platform, with a focus on eliminating staging drift and accelerating release confidence. Founded in 2010, Upsun has evolved from its former identity as Platform.sh and maintains a consistent brand presence with a professional and well-structured website. Technically, the website is built using modern web technologies including Gatsby and React, optimized for performance, mobile responsiveness, and SEO. The platform integrates with major cloud providers like AWS, Azure, and Google Cloud Platform, indicating a mature and scalable infrastructure. The site employs extensive analytics and marketing tools with appropriate consent mechanisms, reflecting digital maturity and compliance awareness. From a security perspective, Upsun enforces HTTPS, implements a strict Content-Security-Policy, and maintains domain transfer protections. However, DNSSEC is not enabled, and there is no public security.txt or explicit incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, Upsun presents a trustworthy and professional online presence with strong business credibility and technical implementation. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing incident response transparency to further strengthen security posture and compliance.

T

Thryv

thryv.com

63

Thryv is a leading marketing and sales platform specializing in small business software solutions. The company offers a comprehensive suite of services including CRM, reputation management, scheduling, invoicing, marketing automation, and AI-powered tools. Positioned as a market leader, Thryv targets small businesses seeking to streamline operations and grow their customer base. The website reflects a mature digital presence with strong branding, clear navigation, and extensive content tailored to its audience. Technically, the site is built on WordPress with modern JavaScript libraries and performance optimizations, ensuring fast load times and mobile responsiveness. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly detailed. Overall, the site demonstrates high professionalism and trustworthiness, supporting Thryv's market position.

K

Keap Community

keap.community

68

Keap Community is an online platform designed to unite small business owners and marketers who use Keap software, providing a space for collaboration, education, and networking. The community emphasizes sharing knowledge about small business automation and improving sales and marketing strategies. The platform is built on Mighty Networks, leveraging modern web technologies and analytics tools to deliver a responsive and engaging user experience. Security is enhanced through Single-Sign-On integration and the use of reCAPTCHA to mitigate automated abuse. However, the site lacks visible privacy and cookie policies, which impacts its privacy compliance score. The domain WHOIS data is privacy protected, which is typical for community platforms, and no suspicious registration patterns were detected. Overall, the website presents a professional and focused community resource for its target audience.

K

Keap

infusionsoft.com

61

Keap is a well-established SaaS company specializing in CRM and marketing automation solutions tailored for small businesses. With over 20 years in the market and a customer base exceeding 200,000, Keap positions itself as a leading platform helping small businesses streamline sales, marketing, and customer management. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service offerings. Technically, the site leverages modern JavaScript libraries, marketing automation tools like Marketo, and analytics services including Google Analytics and Crazy Egg, hosted behind Cloudflare DNS for performance and security. Security posture is solid with HTTPS enforced and domain transfer protections in place, though improvements such as enabling DNSSEC and publishing a security.txt file could enhance trust further. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, Keap's website demonstrates strong business credibility, technical maturity, and a secure environment suitable for its target audience of small businesses.

T

Thryv, Inc.

keap.app

66

Keap, operated by Thryv, Inc., is a well-established SaaS provider specializing in CRM and marketing automation solutions tailored for small businesses. The login portal analyzed is professionally designed, offering secure authentication options including Google and Okta single sign-on integrations. The platform targets small business users seeking to scale their operations through automated marketing and customer management tools. The website demonstrates consistent branding and a clear business focus, reinforcing its market position as a trusted technology provider in this niche. From a technical perspective, the site employs a modern technology stack including jQuery, Bootstrap, and Lodash, ensuring responsive design and usability across devices. The presence of secure form validation and HTTPS encryption indicates a mature digital infrastructure. However, some areas such as accessibility and SEO could be enhanced to improve overall user experience and discoverability. Security posture is strong with enforced HTTPS, secure cookie settings, and integration of trusted third-party authentication providers. The absence of explicit security headers and cookie consent mechanisms suggests room for improvement in compliance and defense-in-depth strategies. No vulnerabilities or suspicious activities were detected in the analyzed content, supporting a high trust level. Overall, the website presents a low-risk profile with robust business credibility and technical implementation. Strategic recommendations include implementing comprehensive security headers, adding cookie consent for GDPR compliance, and enhancing accessibility features to further strengthen security and user trust.

G

Google

yourprimer.com

78

The website grow.google/intl/de/ is a German localized portal of Google's Grow with Google initiative, focusing on providing digital skills training, AI education, and business growth tools to individuals and companies. It is positioned as a leading educational platform backed by Google, targeting a broad audience including professionals, startups, small and medium enterprises, and educators. The site leverages Google's extensive brand recognition and partnerships with reputable organizations to enhance credibility and reach. Technically, the website employs modern web technologies including Material Design Components, Google Tag Manager, Google Analytics, and GSAP for animations, hosted on Google Cloud infrastructure. It is optimized for mobile devices, accessibility, and SEO, delivering a fast and professional user experience. The site integrates multiple Google services and APIs, ensuring a seamless and interactive experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements standard security headers. It includes a cookie consent mechanism compliant with GDPR, though explicit security policies and incident response contacts are not prominently displayed. No vulnerabilities or security issues were detected in the content or scripts. The WHOIS data confirms the domain's legitimacy and consistency with Google's corporate identity. Overall, the website demonstrates a high level of professionalism, security, and compliance, making it a trustworthy platform for digital education and business support. Strategic recommendations include enhancing visibility of security policies and incident response contacts, and considering a vulnerability disclosure policy publication to further strengthen security posture.

G

Google

blog.google

69

The Keyword is Google's official blog providing the latest news and stories about Google products, technology, and innovation. As a key communication channel for Google, it serves a broad audience interested in technology updates and company announcements. The website is professionally designed with excellent content quality and consistent branding, reflecting Google's market leadership in the technology sector. Technically, the site leverages Google Tag Manager and Google Analytics, hosted on Google Cloud infrastructure, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced and asynchronous script loading, though explicit security headers and public security policies are not visible. Privacy compliance is limited on the analyzed page, with no visible privacy or cookie policies, which could be improved. Overall, the domain registration and WHOIS data confirm the site's legitimacy as an official Google property.

P

Prismic

prismic.io

60

Prismic is a well-established technology company founded in 2013, specializing in headless CMS and page builder solutions that empower both developers and marketers. Their platform integrates seamlessly with modern frameworks such as Next.js, Nuxt, and SvelteKit, enabling rapid content creation and deployment. The company targets developers, marketers, and agencies, positioning itself as a scalable and flexible SaaS provider in the content management space. The website reflects a professional and consistent brand image with excellent content quality and user experience.

A

Audi Schweiz

audi.ch

74

Audi Schweiz operates as the official Swiss branch of Audi AG, providing comprehensive information and services related to new Audi vehicles, including electric and hybrid models. The website targets prospective car buyers and existing customers in Switzerland, offering vehicle configurators, promotions, and electric mobility solutions. The digital infrastructure is modern and robust, leveraging Audi's Falcon CMS platform, proprietary scripts, and integrations such as Google Tag Manager and LivePerson chat for enhanced user engagement and analytics. Security measures are well implemented, with HTTPS enforced and multiple security headers present, ensuring a secure browsing experience. However, the absence of explicit privacy policy, terms of service, and incident response information represents a compliance gap that should be addressed to enhance transparency and trust. Overall, the website demonstrates a high level of professionalism, technical maturity, and brand consistency, positioning Audi Schweiz strongly in the premium automotive market.

S

SEAT Schweiz AG

seat.ch

71

SEAT Schweiz AG operates a professional and comprehensive automotive website targeting the Swiss market. The site offers detailed information on SEAT vehicle models, leasing options, test drives, and after-sales services. The company is positioned as a key player in the transportation sector in Switzerland, supported by its parent company Volkswagen Group. The website leverages modern technologies including Adobe Experience Manager, Google Tag Manager, and Adobe Analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and standard tracking tools, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with clear cookie and privacy policies. Overall, the website is trustworthy, well-branded, and user-friendly, serving its target audience effectively.

O

OPTEN AG

opten.ch

56

OPTEN AG is a Swiss-based professional .NET internet agency specializing in the development of custom web applications, eCommerce platforms, corporate websites, and digital business solutions. The company holds a recognized position in the market as an Umbraco Silver Partner, reflecting its technical expertise and commitment to quality. Their services encompass strategy, design, and development, targeting businesses seeking tailored digital transformation and software solutions. The website is well-structured, professionally designed, and optimized for mobile devices, providing a seamless user experience. Technically, the site leverages modern JavaScript libraries, Google reCAPTCHA for security, and the Umbraco CMS platform, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR through clear privacy and cookie policies.

G

Gymnase de Renens

gyre.ch

54

Gymnase de Renens is a Swiss educational institution providing secondary education including commerce, general culture, and bilingual maturity programs. The website serves as an official portal offering resources and information for students, staff, and administration. The site is well-structured with clear navigation and professional design, targeting primarily French-speaking users in Switzerland. Technically, the site is built on Joomla CMS with Bootstrap and jQuery, providing a responsive and moderately performant experience. Security posture is adequate with HTTPS enabled, but lacks important security headers and privacy compliance elements such as privacy and cookie policies. No forms or analytics scripts are detected, indicating minimal data collection. Overall, the domain registration aligns well with the institution's identity, supporting legitimacy and trustworthiness.

L

La Case à Chocs

case-a-chocs.ch

65

La Case à Chocs is a small cultural organization based in Neuchâtel, Switzerland, specializing in electronic music events, artist residencies, and community engagement. The website serves as a hub for event information, artist support programs, and venue details, targeting local and regional audiences interested in cultural and musical experiences. The organization operates with a non-profit model, emphasizing cultural enrichment and artist development. Technically, the website is built on WordPress using the Divi theme and builder, integrating modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for GDPR compliance. The site demonstrates good mobile optimization and user experience, with clear navigation and consistent branding. Security posture is solid with HTTPS, security headers, and reCAPTCHA implementation, though formal security and incident response policies are not publicly documented. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations, supporting the organization's cultural mission effectively.

G

G&F CHÂTELAIN, succursale de CHANEL SARL

chatelain.ch

63

G&F CHÂTELAIN is a Swiss-based manufacturer specializing in horology and jewelry, operating since 1947 and currently a subsidiary of CHANEL SARL. The company maintains a strong heritage and regional presence in La Chaux-de-Fonds, Switzerland, offering a range of manufacturing services in watchmaking and jewelry crafts. The website reflects a professional and consistent brand image aligned with its luxury market positioning. Technically, the site is built on Drupal 11, leveraging modern JavaScript libraries and Google Analytics for user insights, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, well-maintained, and compliant with GDPR through its linkage to Chanel's privacy policies.

G

gibb Berufsschule Bern

gibb.ch

72

The gibb Berufsschule Bern is the largest vocational school in Switzerland, offering over 60 professions and diverse further education programs. The website reflects a professional educational institution targeting students and apprentices seeking vocational training and general education. The technical infrastructure is modern, leveraging Vue.js, Nuxt.js, Tailwind CSS, and Swiper.js, with analytics provided by Fathom Analytics, indicating a focus on privacy-conscious minimal tracking. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and well-positioned but would benefit from enhanced privacy and security disclosures.

U

Université de Lausanne

unil.ch

72

Université de Lausanne (UNIL) is a prominent Swiss academic institution offering a wide range of educational programs and conducting cutting-edge research. The website serves students, researchers, and academic staff with comprehensive information about faculties, research centers, study programs, and campus life. It positions itself as a leading university with a strong emphasis on interdisciplinary teaching and international research excellence. Technically, the website is built on the Jahia CMS platform, utilizing modern web technologies including jQuery, Google Tag Manager, Google Analytics, Hotjar, and OneTrust for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation structure. From a security perspective, the site enforces HTTPS, employs CSRF protection, and integrates a cookie consent mechanism compliant with GDPR. However, explicit security headers and a published security policy or vulnerability disclosure program are absent, representing areas for improvement. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It poses low risk and effectively supports the university's mission. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and providing clearer contact information for privacy and security inquiries.

É

École polytechnique fédérale de Lausanne

epfl.ch

73

École polytechnique fédérale de Lausanne (EPFL) is a prestigious Swiss university focused on education, research, and innovation. The website serves a broad audience including students, researchers, and the general public interested in science and technology. EPFL holds a strong market position as a leading European science and technology institution, offering comprehensive educational programs and fostering innovation through its research activities. The site reflects the institution's commitment to academic excellence and community engagement. Technically, the website is built on WordPress with modern libraries such as jQuery and Google Tag Manager for analytics and marketing. It demonstrates good digital maturity with responsive design, accessibility features, and SEO optimization. The infrastructure supports a rich content experience with multimedia and event information. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms, and follows best practices in data protection. While explicit security headers are not fully visible, the overall posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, EPFL's website is a professional, trustworthy, and secure platform that effectively supports its educational and research missions. Strategic improvements could include publishing a vulnerability disclosure policy and enhancing security header implementation to further strengthen its security posture.

D

DUKOMETAL S.A.

dukometal.ch

38

DUKOMETAL S.A. is a Swiss-based specialist in industrial sheet metal work and thermopowder coating, offering a comprehensive range of manufacturing services including laser cutting, locksmithing, bending, and tank fabrication. The company targets industrial clients requiring high-quality sheet metal solutions and operates from modern facilities equipped with advanced machinery. The website is professionally designed using Joomla CMS and Bootstrap, providing a good user experience with clear navigation and relevant content. However, the site lacks visible privacy and cookie policies, which impacts compliance with GDPR and related regulations. Security posture is moderate with HTTPS usage but missing security headers and no visible incident response information. Overall, the website presents a credible and trustworthy business presence but would benefit from enhanced privacy and security practices.

M

Marcy Sàrl

marcy-sarl.ch

55

Marcy Sàrl is a small Swiss company specializing in the creation of innovative products, particularly distributors for sanitary towels and tampons, as well as Swiss ergonomic design products. The website serves as a basic informational platform highlighting their product offerings and contact details, targeting businesses and consumers interested in sanitary and ergonomic solutions. The company positions itself in a niche market with a focus on product innovation and Swiss design quality. Technically, the website employs standard web technologies such as Bootstrap 4, jQuery, and Font Awesome, delivered via reputable CDNs, indicating a moderate level of digital maturity. However, the site lacks advanced features such as a CMS, analytics, or interactive forms, reflecting a simple infrastructure. Security posture is minimal with no detected security headers or privacy policies, and no HTTPS status was verifiable from the provided data. The absence of privacy and cookie policies indicates non-compliance with GDPR and related regulations, which is a significant gap for a business operating in Switzerland and the EU region. Overall, the website is functional but basic, with room for improvement in security, privacy compliance, and user experience.

K

Klaviyo

klaviyo.com

71

Klaviyo is a leading AI-first B2C CRM and marketing platform that unifies marketing and service channels such as email, SMS, and WhatsApp to deliver personalized customer experiences. The company targets B2C businesses and e-commerce companies with a SaaS subscription model, positioning itself strongly in the technology and marketing automation sectors. The website reflects a mature digital presence with modern frameworks like Gatsby and uses cloud CDN services for performance optimization. Security posture is solid with HTTPS enforced and standard security headers implied, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and technically sound, though the lack of WHOIS data and explicit security disclosures slightly reduce domain trustworthiness from a registration perspective.

Y

Yottaa

yottaa.com

73

Yottaa, Inc. is a technology company specializing in web performance optimization and security solutions tailored primarily for e-commerce businesses and online retailers. Their platform focuses on enhancing shopper journey speed, stability, and security by optimizing third-party scripts, CDN delivery, and security performance. The company positions itself as a key player in the web performance optimization market with a medium-sized enterprise footprint and a professional digital presence. Technically, the website is built on WordPress using Elementor, supported by a modern tech stack including Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and HubSpot for marketing and analytics. The site demonstrates excellent mobile optimization, fast performance, and good SEO practices. Security is robust with HTTPS enforced and multiple security headers present, though a dedicated security policy and incident response information are not publicly available. The WHOIS data is not publicly available, which is common for technology companies but slightly reduces transparency. The website maintains comprehensive privacy and cookie policies with GDPR compliance indicators. Overall, the site is professional, trustworthy, and secure, with moderate user tracking and advertising transparency. Strategically, Yottaa should enhance its security posture by publishing explicit security and incident response policies and consider establishing a vulnerability disclosure program to further build trust and compliance.