Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
6,701–6,750 of 14,261
Hotelpartner YM GmbHhotelpartner.com
Hospitality · Austria
78Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
HotelPartner is a specialized service provider in the hospitality industry focusing on revenue and profit management for hotels. They offer expert-led revenue management, strategic advisory services, and a proprietary technology platform to optimize hotel revenue and operational efficiency. With over 20 years of experience and a client base of 500+ hotels, they position themselves as a leading partner for both independent hotels and hotel chains. Their business model combines managed services with technology integration and advisory support, targeting hoteliers seeking to maximize profitability and streamline operations. Technically, the website is built on WordPress with a modern tech stack including HubSpot for marketing and analytics, Usercentrics for cookie consent, and various JavaScript libraries for enhanced user experience. The site is well-optimized for SEO and mobile devices, with fast loading times and clear navigation. However, some security best practices such as enabling DNSSEC and publishing security policies are missing. From a security perspective, the site uses HTTPS with strong domain registration protections but lacks some security headers and formal security documentation. No vulnerabilities or suspicious content were detected. Privacy compliance is partially addressed through cookie consent but lacks explicit privacy and terms of service pages. Overall, HotelPartner's website reflects a mature, professional business with strong market credibility and a solid technical foundation. Strategic improvements in privacy transparency and security hardening would enhance trust and compliance.
- SERV – Swiss Export Risk Insurance
serv-ch.com
Government · Switzerland
76Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
SERV is a Swiss government-backed export risk insurance provider that supports Swiss companies in managing risks associated with export transactions and expanding into new markets. The website presents a professional and comprehensive digital presence, leveraging TYPO3 CMS and modern web technologies to deliver a user-friendly experience. The site is well-optimized for SEO, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and use of Google Tag Manager for controlled script loading. No critical vulnerabilities or exposed sensitive data were detected. However, the WHOIS data for the domain is unavailable, which is inconsistent with the active and professional website presence and warrants further investigation. Overall, the website demonstrates a high level of trustworthiness and compliance with privacy regulations, making it a reliable resource for its target audience.
Yieldifyyieldify.com
E-commerce · United Kingdom
81Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Yieldify is a medium-sized ecommerce personalization SaaS company, now part of Epsilon Accelerate, serving over 1000 global brands with AI-powered marketing and customer journey optimization solutions. Their platform offers lead capture, promotions, email remarketing, and advanced audience segmentation, supported by expert client services. The website demonstrates a mature digital presence with modern technologies, strong SEO, and comprehensive privacy compliance including GDPR. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, but the site’s professionalism and parent company association support legitimacy. Overall, Yieldify presents a trustworthy and well-established business in the ecommerce personalization market.
Zürcher Kantonalbankzkb.ch
Finance · Switzerland
83Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Zürcher Kantonalbank is a well-established Swiss universal bank with over 150 years of history, offering a broad range of financial services including private banking, retail banking, mortgages, investment, and digital banking solutions. The website reflects a mature digital presence with comprehensive service information targeting private clients in Switzerland. The bank positions itself as a secure and trusted financial institution with strong local roots. Technically, the site uses Adobe Experience Manager as its CMS, integrates OneTrust for cookie consent, and employs Adobe Analytics for user tracking. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS enforced and consent mechanisms in place, though explicit security policies and incident response contacts are not found. Overall, the domain registration and WHOIS data align well with the bank's identity, supporting legitimacy and trust.
- ti&m AG
ti8m.com
Technology · Switzerland
80Low
NIS2 47 · GDPR 100
NIS2 47 · GDPR 100
ti&m AG is a Swiss-based technology company specializing in digital solutions and security products, serving clients primarily in Switzerland and the European Union. Positioned as a market leader, the company focuses on innovation projects and digital transformation services. Their website reflects a professional and modern digital presence, emphasizing their expertise and leadership in the technology sector. The company targets business clients seeking advanced digital and security solutions, leveraging certifications such as ISO 27001 to reinforce trust and credibility. The technical infrastructure of the website includes modern web technologies and multiple analytics tools such as Google Analytics, Microsoft Clarity, Hotjar, and LinkedIn Insight Tag, integrated with a consent management platform (OneTrust) to ensure GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital strategy. However, the absence of explicit CMS or hosting provider details limits full infrastructure transparency. From a security perspective, the website enforces HTTPS with strong SSL configuration and employs privacy-conscious tracking practices like IP anonymization. While security headers are implied, explicit implementation details are not fully visible. The presence of ISO 27001 certification suggests a robust internal security framework, though the lack of a dedicated security policy or incident response page indicates room for improvement in transparency and readiness. Overall, the website presents a trustworthy and professional image with good privacy compliance and security posture. The main risk factor is the lack of WHOIS data, which raises questions about domain registration transparency. Strategic recommendations include enhancing security header implementation, publishing detailed security policies, and establishing clear incident response contacts to further strengthen trust and compliance.
Puzzle ITCpuzzle.ch
Technology · Switzerland
80Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Puzzle ITC is a Swiss-based technology company specializing in open source software and sustainable IT solutions. They offer a broad range of services including digital transformation, software development, platform engineering, cloud infrastructure, AI, IT security, and mobility IT services. Their market presence is focused on Switzerland and parts of Germany, targeting businesses and organizations seeking innovative and sustainable IT solutions. The company demonstrates a solid market position with reputable client partnerships and a professional online presence. Technically, the website is built on WordPress with modern technologies such as Yoast SEO, Matomo analytics, and Google reCAPTCHA, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features could be improved. Performance is moderate, and the site uses structured data for enhanced search engine understanding. From a security perspective, the site enforces HTTPS and uses privacy-conscious analytics (Matomo). However, it lacks explicit security policies, incident response contacts, and security headers, which are areas for improvement. Privacy compliance is partial, with no visible privacy or cookie policies and no consent mechanisms, which could pose compliance risks. Overall, Puzzle ITC presents a trustworthy and professional business with a good security posture but should enhance privacy and security transparency to meet higher compliance standards and user trust expectations.
PRODYNAprodyna.com
Technology · Germany
81Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
PRODYNA is a large, established technology consulting and software development company specializing in digital transformation, cloud services, data and AI, and managed IT services. Their website demonstrates a high level of digital maturity with a professional design, multi-language support, and comprehensive cookie consent mechanisms. The company targets enterprise clients seeking holistic digital business solutions. Technically, the site is built on modern web technologies including Webflow CMS, Weglot for translations, and CookieYes for consent management, hosted likely via Cloudflare for performance and security. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response information are not publicly available. WHOIS data is unavailable, indicating privacy protection, which slightly reduces transparency but is common for professional firms. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements, supporting PRODYNA's market position as a credible technology partner.
Inventage AGinventage.com
Technology · Switzerland
77Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Inventage AG is a Swiss-based technology company specializing in custom software solutions leveraging modern web technologies and open-source components. Established in 2000, the company targets businesses and organizations seeking tailored digital solutions. Their market position is that of a trusted, established provider with a focus on quality and innovation. The website reflects a professional and consistent brand image with clear contact information and social media presence, supporting credibility and trust. Technically, the website uses modern web standards with JavaScript and CSS, and integrates Matomo Analytics for privacy-conscious user tracking. Hosting is provided by Cloud DNS Ltd, and the domain is well-maintained with a long history. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured data. From a security perspective, HTTPS is enforced, and domain status includes clientTransferProhibited, indicating domain transfer protection. However, DNSSEC is not enabled, and no security headers were detected, which could be improved. No explicit security policies or incident response contacts are published, representing an area for enhancement. Privacy compliance is good with a comprehensive privacy policy, but no cookie consent mechanism was found. Overall, the website and business demonstrate a solid risk posture with no critical vulnerabilities or suspicious indicators. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security policies, and implementing cookie consent to enhance compliance and trust.
- INNOQ
innoq.com
Technology · Germany
80Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
INNOQ is a professional technology consulting firm specializing in software architecture, digital product development, AI, and training services. The company operates primarily in Germany and Switzerland with multiple office locations, serving technology-focused clients seeking innovative and pragmatic software solutions. Their market position is that of an established medium-sized consultancy with a strong emphasis on future-proofing technology and delivering effective digital infrastructures. Technically, the website demonstrates a mature digital infrastructure with modern web technologies, including optimized performance, mobile responsiveness, and accessibility features. The use of Cloudflare for hosting and analytics, Cloudinary for media delivery, and FriendlyCaptcha for form protection indicates a well-architected and secure technical environment. From a security perspective, the site enforces HTTPS, uses CAPTCHA to prevent spam, and offers S/MIME certificates for encrypted email communication, reflecting a strong security posture. However, the absence of explicit security headers and a public security policy or vulnerability disclosure program suggests areas for improvement. The lack of WHOIS data reduces transparency but does not detract significantly from the overall trustworthiness given the professional presentation and contact information. Overall, INNOQ presents a low-risk profile with a solid business and technical foundation. Strategic recommendations include enhancing security headers, publishing security policies, and implementing cookie consent mechanisms to further improve compliance and trust.
- FFincons Group AG
finconsgroup.com
Technology · Switzerland
78Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Fincons Group AG is a well-established IT business consulting and system integration company with over 40 years of experience. The company operates internationally with offices across Europe and the US, serving industries such as media, financial services, energy, transportation, manufacturing, public administration, and international institutions. Their business model focuses on providing consulting, system integration, proprietary solutions, and smart-shore services, supported by a strong partnership ecosystem. The website reflects a professional and consistent brand image targeting enterprise clients and organizations seeking digital transformation solutions. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Slick Carousel, with integration of Google Analytics and Tag Manager for analytics and marketing. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility enhancements could be made. The CMS used is Kali, a custom solution, indicating a tailored digital infrastructure. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, showing transparent and consistent registration information, supporting the legitimacy of the business. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Recommendations include enhancing security headers, publishing a security policy or incident response contact, and improving accessibility features to further strengthen compliance and trust.
Evideneviden.com
Technology · France
79Low
NIS2 60 · GDPR 53
NIS2 60 · GDPR 53
Eviden is a technology enterprise and a subsidiary of the Atos Group, specializing in AI-enabled technologies across advanced computing, cybersecurity, mission-critical systems, and quantum computing. The company targets enterprise clients, public sector organizations, and defense agencies, offering a broad portfolio of digital solutions and infrastructure products. Eviden positions itself as a leader in innovation with a strong emphasis on sustainability and security. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation. Technically, Eviden leverages WordPress CMS with modern analytics and marketing tools, including Matomo and Marketo, while implementing a robust cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforcement and bot protection, though some security headers could be improved. The domain eviden.com is well-established since 2003, registered transparently, and consistent with the business identity. Overall, Eviden demonstrates a high level of digital maturity and business credibility.
- ELCA Informatique SA
elca.ch
Technology · Switzerland
82Low
NIS2 60 · GDPR 68
NIS2 60 · GDPR 68
ELCA Informatique SA is a leading independent Swiss IT company specializing in business and technology solutions, including IT consulting, software development, and systems integration. With over 2300 employees and a turnover of CHF 339 million in 2024, ELCA holds a strong market position in Switzerland and Europe, serving diverse sectors such as energy, transportation, finance, and public administration. The company emphasizes tailored digital transformation solutions and maintains a broad portfolio of subsidiaries and partner companies. Technically, ELCA employs modern web technologies including Next.js and React, integrates advanced analytics tools like Matomo and Hotjar, and uses robust consent management via Cookiebot. The website is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and secure form handling, although a dedicated security policy and incident response contact channels are not explicitly published. Overall, ELCA demonstrates a professional, trustworthy online presence aligned with its business stature.
CSScss.ch
Healthcare · Switzerland
88Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
CSS is a large, established Swiss health insurance company providing a broad range of insurance products including basic, supplementary, and additional insurances. The company emphasizes its role as a health partner, offering digital services such as the myCSS client portal and mobile app, as well as health promotion programs. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content tailored to private customers in Switzerland. Technically, the site leverages modern technologies including Adobe Experience Manager, Vue.js, and integrates advanced analytics and consent management tools. Security posture is strong with HTTPS enforcement, secure cookies, and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is robust with GDPR-aligned policies and cookie consent mechanisms. Overall, CSS presents a trustworthy, professional online presence consistent with its market position as a leading Swiss health insurer.
Abacus Research AGabacus.ch
Technology · Switzerland
88Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Abacus Research AG is a well-established Swiss company specializing in ERP and business software solutions, serving over 65,000 companies with a broad partner network. Their website reflects a mature digital presence built on TYPO3 CMS, incorporating modern web technologies and a clear focus on user experience and accessibility. The company demonstrates strong compliance with privacy regulations, including GDPR, through comprehensive privacy and cookie policies with active consent mechanisms. Security posture is robust with HTTPS enforcement and no visible vulnerabilities, though incident response details and vulnerability disclosure mechanisms could be improved. Overall, the website and business presence indicate a trustworthy and professional organization with a strong market position in the Swiss technology sector.
- Orange Business
orange-business.com
Technology · France
79Low
NIS2 60 · GDPR 85
NIS2 60 · GDPR 85
Orange Business is a leading global provider of digital transformation services, specializing in end-to-end intelligent solutions, hybrid and public cloud services, cybersecurity, AI, and IoT. The company targets enterprise clients seeking to modernize their IT infrastructure and enhance operational efficiency. Their market position is strong, supported by partnerships with major technology firms and a comprehensive portfolio of services. Technically, the website is built on Drupal CMS with modern JavaScript frameworks and includes personalization and privacy management tools, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and privacy compliance mechanisms in place, though explicit security policies and incident response contacts are not publicly detailed. Overall, the website reflects a professional and trustworthy enterprise presence with moderate to high technical and security maturity.
- Mimacom AG
mimacom.com
Technology · Switzerland
85Low
NIS2 22 · GDPR 88
NIS2 22 · GDPR 88
Mimacom AG is a Swiss-based software engineering and consulting company specializing in digital transformation services including cloud, data, automation, and AI. The company targets enterprise clients across multiple industries such as banking, insurance, manufacturing, retail, and life sciences. Mimacom positions itself as a trusted partner with a comprehensive portfolio of services and a strong customer base. Technically, the website is built on modern frameworks like Next.js and React, with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not prominently published. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for companies of this nature. Overall, Mimacom demonstrates a mature digital presence with professional branding and compliance practices.
- AAMSOIL, Inc.
amsoil.com
Energy · United States
81Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
AMSOIL, Inc. operates a professional e-commerce website specializing in premium synthetic lubricants and motor oils. The company positions itself as a leader in the synthetic lubrication industry with a history of over 40 years. The website targets vehicle owners, commercial customers, and enthusiasts seeking high-quality synthetic oils and related products. The business model focuses on direct online sales, supported by product guides and vehicle fitment tools. Technically, the website employs a modern tech stack including Google Tag Manager, Coveo search, Hotjar, and other marketing and analytics tools, indicating a mature digital infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS, CSRF protections, and reputable third-party scripts, though some security headers could be improved. Privacy compliance is basic with cookie consent but no explicit privacy policy page found. WHOIS data is unavailable or redacted, which is inconsistent with the active and professional website presence, suggesting privacy protection or data redaction. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced transparency in privacy and security policies.
Government · Germany
81Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
The Bundesministerium für wirtschaftliche Zusammenarbeit und Entwicklung (BMZ) is the German Federal Ministry responsible for planning and implementing Germany's development policy. The website serves as an official government platform providing information on development cooperation, policy updates, press releases, and international collaboration efforts. It targets citizens, partner organizations, and international development stakeholders. The site is professionally designed with consistent branding and offers content primarily in German with an English option.
- skyguide
skybriefing.com
Transportation · Switzerland
78Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Skybriefing.com is a professional aviation service website operated under the brand skyguide, providing essential services such as flight plan filing, NOTAM briefings, weather briefings, and access to aviation publications primarily for the Swiss aviation community. The website is well-structured, uses modern web technologies including Vaadin and Liferay, and maintains a consistent brand identity aligned with its parent organization. The domain is well-established since 2012, with registration details consistent with the business profile. Privacy and cookie policies are implemented with GDPR compliance in mind, and user tracking is conducted via Google Analytics with event tracking for downloads and form interactions. However, direct contact information such as emails or phone numbers is not prominently displayed, and no explicit security or incident response policies are published on the site.
- Bank Cler
cler.ch
Finance · Switzerland
85Low
NIS2 10 · GDPR 88
NIS2 10 · GDPR 88
Bank Cler is a Swiss financial institution focused on providing comprehensive banking services to private customers, including investment strategies and mobile banking solutions. The website reflects a mature digital presence with multilingual support and clear navigation tailored to its target audience. Technically, the site employs modern tracking and consent management tools such as Google Tag Manager and OneTrust, ensuring compliance with privacy regulations. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response information are not publicly detailed. Overall, the site demonstrates professionalism and trustworthiness consistent with a reputable banking entity.
- Gglobal office GmbH
global-office.na
Telecommunications · Germany
77Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
global office GmbH is a German-based service provider specializing in telephone answering, office, and secretarial services. The company targets businesses requiring professional and empathetic customer communication, serving sectors such as public authorities, hospitality, and automotive dealerships. Their market position is supported by a sizable team of over 450 telephone agents and multiple locations, emphasizing personalized service and customer satisfaction. The website content is well-structured, professional, and includes multimedia testimonials to reinforce trust. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery, Swiper, and Tiny Slider to enhance user experience. The site is mobile-optimized with good navigation clarity and basic accessibility features. Performance is moderate, with no critical technical issues detected. SEO is basic but functional. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks published security policies, incident response information, and a cookie consent mechanism, which are important for GDPR compliance and user trust. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website presents a professional and trustworthy business front with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen the company's digital maturity and customer confidence.
- Eventfrog
eventfrog.ch
Other · Switzerland
88Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Eventfrog is a Switzerland-based event calendar and ticket sales platform, positioning itself as the largest event calendar in the country with over 25,000 published events. The platform enables users to discover events and sell tickets easily and free of charge, targeting a broad general audience interested in events and parties. The website is professionally designed with consistent branding and clear business contact information, enhancing its credibility and trustworthiness. Technically, the website employs standard web technologies including JavaScript and CSS, with moderate performance and good mobile optimization. SEO practices are well implemented with comprehensive meta tags and Open Graph data, although accessibility features are basic. The site uses tracking pixels from Meta and Google Tag Manager for marketing and analytics purposes but lacks a visible cookie consent mechanism, which may impact privacy compliance. From a security perspective, the site enforces HTTPS and includes domain verification meta tags for Google, Facebook, and Microsoft, indicating some level of security awareness. However, no explicit security headers or vulnerability disclosure information are present, and privacy and cookie policies are not found in the provided content. The WHOIS data is consistent with the website's claims, showing legitimate registration and no privacy protection, which supports the domain's trustworthiness. Overall, Eventfrog presents a solid business and technical foundation with room for improvement in privacy compliance and security best practices. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, implementing security headers, and providing vulnerability disclosure and incident response information to enhance user trust and regulatory compliance.
Pinterest, Inc.pinterest.ch
Technology · United States
82Low
NIS2 10 · GDPR 53
NIS2 10 · GDPR 53
Pinterest, Inc. operates a leading visual discovery platform that enables users to find and curate ideas such as recipes, home decor, and style inspiration. The company holds a strong market position as a major social media and e-commerce platform, leveraging advertising and content curation as its primary business model. The website demonstrates a high level of digital maturity, employing modern web technologies including React, advanced bot mitigation via ReCAPTCHA Enterprise, Arkose Labs, and fraud detection through Sardine.ai. Hosting is managed through Amazon AWS infrastructure, ensuring scalability and performance. Security posture is robust with HTTPS enforcement, comprehensive Content Security Policy, and multiple security integrations, reflecting a mature security culture. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations and user consent mechanisms. Overall, the website is professional, trustworthy, and optimized for performance and accessibility.
Loterie Romandeloro.ch
Other · Switzerland
80Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Loterie Romande operates as the legal and responsible lottery and sports betting provider in the Suisse romande region of Switzerland. The organization offers multiple lottery games including EuroDreams, Euromillions, Swiss Loto, and sports betting services through PMU and other platforms. The website is professionally designed with a focus on responsible gaming and public utility benefit distribution. Technically, the site is built on Drupal CMS with modern front-end technologies and video content hosted on Infomaniak. Security posture is good with HTTPS enforced, but lacks some security headers and explicit incident response contacts. Privacy compliance is partially met with a comprehensive privacy policy but no visible cookie consent mechanism. Overall, the site is trustworthy and well-positioned in its market segment.
Non-profit · Germany
83Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
The Deutsches Zentralinstitut für soziale Fragen (DZI) is a well-established German non-profit organization specializing in social issues, donation advice, and certification of charitable organizations. It holds a strong market position as a trusted authority for donors and non-profits, offering key services such as the DZI Spenden-Siegel, donation consulting, and a specialized social literature database. The website reflects a mature digital presence built on WordPress with modern plugins and privacy-respecting analytics (Matomo). The site is well-structured, mobile-optimized, and SEO-friendly, providing excellent user experience and content relevance. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the domain and WHOIS data align well with the organization's identity, confirming legitimacy and trustworthiness.
CS2 AGzweiblog.com
Technology · Switzerland
80Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
CS2 AG is a well-established Swiss digital and web agency founded in 1997, specializing in digital strategy, consulting, web development, and hosting services primarily for SMEs and large enterprises. Their website, Zweiblog, serves as a knowledge hub offering expert insights on CMS, e-commerce, AI, and web technologies tailored for the Swiss market. The company demonstrates a mature digital infrastructure using TYPO3 CMS and integrates modern analytics and marketing tools with GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and reCAPTCHA usage, though explicit security headers and privacy policy pages could be improved. The absence of public WHOIS data slightly reduces domain transparency but does not detract significantly from the company's legitimacy. Overall, the website is professional, well-branded, and trustworthy, serving its target audience effectively.
Prospective Media Services PMS AGprospective.ch
Technology · Switzerland
77Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Prospective Media Services PMS AG is a Swiss-based company specializing in digital recruiting solutions, offering tools such as JobBooster for multiposting job ads, access to a wide range of recruiting channels, and expert consulting services. The company targets HR professionals and recruiters aiming to optimize their hiring processes. The website is well-structured, professionally designed, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins for SEO, analytics, and GDPR compliance, ensuring a robust infrastructure. Security measures include HTTPS, reCAPTCHA, and cookie consent management, though some security headers could be improved. Overall, the site demonstrates a strong security posture with no evident vulnerabilities or suspicious content. The WHOIS data confirms the legitimacy and consistency of the business registration, enhancing trust. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security and compliance.
Pictetgroup.pictet
Finance · Switzerland
76Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Pictet is a well-established independent investment partnership specializing in wealth management, asset management, and asset servicing with over 200 years of global investment leadership. The website reflects a mature and professional financial services firm targeting high-net-worth individuals and institutional clients. The digital infrastructure is built on Adobe Experience Manager, leveraging modern web technologies and consent management tools to ensure compliance and user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.
Anouk Foundationanouk.org
Healthcare · Switzerland
78Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Anouk Foundation is a small non-profit organization based in Geneva, Switzerland, focused on enhancing healthcare environments through art. Their mission is to create positive, healing spaces by designing murals that improve the well-being of patients and residents in social and medical institutions. The website reflects a professional and consistent brand image, targeting healthcare providers and institutions seeking to improve patient experience through art. Technically, the website is built on a modern platform with JavaScript, CSS, and HTML5 technologies, including service workers for progressive web app capabilities and Cookiebot for GDPR-compliant cookie management. The site is mobile-optimized, accessible, and performs moderately well, hosted likely on a CDN associated with multiscreensite.com. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident and could be improved. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is typical for non-profits, and no suspicious patterns were found. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing incident response policies, and adding a terms of service page to improve transparency and trust.
Recruiticsrecruitics.com
Technology
79Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Recruitics is a professional AI-powered recruitment marketing platform designed to help modern talent acquisition teams attract, convert, and analyze hiring efforts. The company offers a comprehensive SaaS platform alongside agency services, targeting specialized roles and improving recruitment efficiency. The website demonstrates a mature digital presence with integrated marketing and analytics tools, including HubSpot CMS, Google Tag Manager, and AdRoll retargeting. Security posture is solid with HTTPS and reCAPTCHA usage, though some security headers and incident response disclosures are missing. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. The absence of WHOIS data reduces domain trustworthiness, but the overall business credibility and website professionalism remain high.
- ERNE Gruppe
erne-gruppe.ch
Real Estate · Switzerland
77Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
ERNE Gruppe is a Swiss construction and real estate group offering innovative building solutions and comprehensive services in construction, wood construction, system construction, and real estate management. The company targets both B2B and B2C audiences within Switzerland, positioning itself as an established medium-sized player in the Swiss construction sector. The website is built on TYPO3 CMS and integrates modern technologies including Google Tag Manager, Google Analytics, reCAPTCHA, and various marketing pixels, all managed with a GDPR-compliant consent mechanism. The site is multilingual, supporting German and French, and demonstrates good design quality and user experience. Security posture is strong with HTTPS enforced and bot protection via reCAPTCHA, though some security headers could be improved. Overall, the website reflects a professional and trustworthy business presence with good privacy compliance and marketing transparency.
CS2 AGcs2.ch
Technology · Switzerland
87Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
CS2 AG is a well-established Swiss digital and web agency founded in 1997, specializing in full-service digital solutions including corporate websites, e-commerce platforms, and custom applications primarily based on open-source technologies such as TYPO3, Magento, and Laravel. The company targets small to medium enterprises and large corporations within Switzerland, positioning itself as a trusted partner with over 800 successful projects. The website reflects a mature digital infrastructure with modern technologies, comprehensive GDPR compliance, and a strong focus on user experience and accessibility. Security posture is solid with HTTPS enforcement and consent management, though there is room for improvement in explicit security headers and incident response transparency. Overall, CS2 AG demonstrates a high level of professionalism, trustworthiness, and technical competence, making it a credible and reliable digital agency in its market.
Bundeskanzlei BKbundeskanzlei.ch
Government · Switzerland
78Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The Bundeskanzlei BK website serves as the official digital presence of the Swiss Federal Chancellery, providing comprehensive information about its role in supporting the Federal Council, managing political rights, and driving digital transformation within the Swiss federal administration. The site is well-structured, multilingual, and rich in authoritative content, targeting Swiss citizens, government officials, and political stakeholders. It maintains a strong market position as a central government entity with clear branding and trust signals. Technically, the website leverages Adobe Experience Manager as its CMS, uses modern JavaScript libraries like jQuery and Granite UI, and employs Matomo for privacy-conscious analytics. The site is hosted on Swiss government infrastructure, optimized for mobile devices, and demonstrates good SEO and accessibility practices. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, includes anti-clickjacking measures, and uses CSRF protection scripts. However, it lacks explicit cookie consent mechanisms and published security policies or incident response contacts, which are recommended for enhanced compliance and transparency. No vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy, professional, and secure, reflecting the high standards expected of a federal government portal. Strategic improvements in privacy compliance and security transparency would further strengthen its posture.
Heli GmbHhelikopterflug.ch
Transportation · Switzerland
76Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Heli GmbH operates a specialized e-commerce platform offering helicopter flight experiences, including sightseeing tours, pilot experiences, and VIP taxi flights primarily in Switzerland. The company targets general consumers interested in unique aerial experiences and gifts. The website is built on the Shopify platform, leveraging modern web technologies and third-party marketing and analytics tools to provide a professional and user-friendly experience. The site includes comprehensive privacy and cookie policies with active consent mechanisms, reflecting good compliance with GDPR standards. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although formal security policies and incident response information are absent. Overall, the website is trustworthy, well-maintained, and suitable for its niche market.
Université de Genèveunige.ch
Education · Switzerland
76Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Université de Genève is a prominent public university in Switzerland offering a wide range of academic programs and research activities. The website serves students, researchers, collaborators, and the public with information about faculties, courses, research, and services. The institution maintains a professional online presence with consistent branding and multilingual support. Technically, the website is built on the concrete5 CMS platform and utilizes modern JavaScript libraries such as jQuery, Isotope, and Nivo Slider. It employs Matomo for analytics and OneTrust for cookie consent management, indicating a moderate level of digital maturity and privacy awareness. The site is mobile optimized and provides a good user experience with clear navigation. From a security perspective, the website enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data confirms the domain's legitimacy and consistency with the university's identity. Overall, the website is trustworthy and professionally maintained, with room for improvement in security policy transparency and contact information availability.
Loomlyloomly.com
Technology
79Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Loomly is a well-established SaaS social media management platform designed to empower marketing teams, agencies, brands, and creators to efficiently plan, schedule, collaborate, and analyze social media content. The platform integrates with major social networks and offers a comprehensive suite of tools including content calendars, approvals, campaign tracking, and analytics. The website is professionally designed, mobile-optimized, and provides rich content resources such as blogs, tutorials, and webinars, positioning Loomly as a trusted player in the social media management market. Technically, the site leverages modern marketing and analytics technologies including HubSpot CMS, Google Tag Manager, Intercom, and Osano for consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly detailed. WHOIS data is not publicly available, likely due to privacy protection, which is common for SaaS businesses. Overall, Loomly presents a credible, secure, and user-friendly platform with good privacy compliance and marketing transparency.
Victorinoxvictorinox.com
Retail · Switzerland
79Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Victorinox is a well-established Swiss brand known globally for its Original Swiss Army Knife and a broad range of quality products including cutlery, watches, travel gear, and fragrances. The website reflects a mature e-commerce platform with a strong brand presence and comprehensive product offerings targeting general consumers seeking premium Swiss quality. Technically, the site leverages modern web technologies such as React and Next.js, hosted on SAP cloud infrastructure, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS, security headers, and monitoring scripts in place, although the absence of public WHOIS data slightly impacts trust assessment. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and user-friendly, supporting Victorinox's market position as a premium retail brand.
Medeco Cleantecchemiefrei.com
Retail · Germany
77Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Medeco Cleantec operates a German-language e-commerce website specializing in chemical-free, sustainable cleaning products under the green cleaning concept. The company targets environmentally conscious consumers seeking effective hygiene solutions without harmful chemicals. The website is built on the Shopify platform using the Debut theme, integrating multiple marketing and review tools to enhance customer engagement and trust. The business appears to be a small-sized retailer founded in 2018, with a consistent domain registration history and a clear focus on green cleaning innovation. Technically, the site is well-structured, mobile-optimized, and employs secure payment methods including Apple Pay and Shop Pay. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. However, explicit security policies and incident response information are not published, representing an area for improvement. Overall, the site demonstrates a good security posture with HTTPS enforcement and domain transfer lock, though enabling DNSSEC would further enhance DNS security. The website content is safe for general audiences, with no adult or questionable material detected.
- Bazar
bazar.at
Real Estate · Austria
77Low
NIS2 17 · GDPR 45
NIS2 17 · GDPR 45
Bazar.at is a well-established Austrian online classifieds platform operating since 1983, offering a broad range of classified ads including real estate, vehicles, clothing, and services. The platform targets the general Austrian public seeking to buy or sell goods locally. The website demonstrates a mature digital presence with modern Angular framework usage and integration of consent management tools to comply with GDPR requirements. Advertising is managed through Google GPT and privacy-conscious SDKs, reflecting a balanced approach to monetization and user privacy. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security policies and incident response contacts suggests room for improvement. The lack of WHOIS data limits domain ownership verification but does not detract significantly from the site's legitimacy given its operational history and content quality. Overall, bazar.at presents a professional, trustworthy, and user-friendly classifieds marketplace with good privacy compliance and moderate technical sophistication.
Hospitality · Switzerland
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Gastrojob.ch operates as a specialized job platform serving the hospitality, gastronomy, and tourism sectors primarily in Switzerland. It is affiliated with the Hotellerie Gastronomie Verlag and the Hotel & Gastro Union, providing a trusted channel for employers and job seekers within these industries. The platform offers categorized job listings, direct access to applicant profiles, and subscription-based job alerts, positioning itself as a key resource in the Swiss hospitality employment market. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies including Google Tag Manager and reCAPTCHA for analytics and security. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. Security posture is solid with HTTPS enforced and form protections in place, though explicit security headers and policies could be improved. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy aligned with GDPR. Overall, Gastrojob.ch presents a professional, trustworthy, and functional online presence with room for enhancement in security transparency and direct contact information.
SV Restaurantsv-restaurant.ch
Hospitality · Switzerland
80Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
SV Restaurant is a hospitality business operating a restaurant chain in Switzerland, offering menu plans and multiple store locations. The website is built using modern Angular framework and includes cookie consent mechanisms with default denial of ad and analytics storage, reflecting a basic level of privacy compliance. However, the site lacks explicit privacy policy, terms of service, and contact information, which are important for user trust and regulatory compliance. The technical infrastructure is modern but could benefit from enhanced security headers and accessibility improvements. Overall, the security posture is moderate with room for improvement in transparency and incident response readiness. Strategic recommendations include implementing comprehensive privacy and security policies, adding contact details, and enhancing security headers to improve trust and compliance.
- Kanton Zug
zg.ch
Government · Switzerland
82Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website zg.ch is the official online portal for the Canton of Zug, Switzerland, serving as a comprehensive resource for residents, businesses, and visitors. It provides extensive information on public services including education, health, economy, social services, mobility, environment, politics, and security. The site is well-structured with clear navigation and a professional design consistent with government standards. Technically, it employs modern web technologies such as Bootstrap and Matomo analytics, ensuring a responsive and moderately performant user experience. Security posture is adequate with HTTPS enforced and asynchronous script loading, but lacks explicit security headers and published security policies. Privacy compliance is limited due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the domain registration and WHOIS data confirm the site's legitimacy as a government entity, with no suspicious indicators detected.
—
81Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Amazon.com, Inc.primevideo.com
Media · United States
81Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Amazon Prime Video is a leading global streaming service offering a wide range of movies, TV shows, and exclusive Amazon Originals. It operates as part of Amazon.com, Inc., leveraging Amazon's extensive cloud infrastructure and proprietary UI frameworks to deliver a high-quality user experience. The platform targets general consumers worldwide with subscription-based and transactional video offerings. The website demonstrates strong technical maturity with fast performance, mobile optimization, and comprehensive accessibility features. Security posture is robust, with HTTPS enforcement, security headers, and secure form handling. Privacy compliance is evident through detailed policies and consent mechanisms, aligned with GDPR requirements. Overall, the site reflects a professional, trustworthy, and well-maintained digital presence.
- Microsoft Corporation
dynamics.com
Technology · Finland
81Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Microsoft's Dynamics 365 website presents a comprehensive portfolio of AI-powered CRM and ERP business applications designed to unify teams, processes, and data for intelligent business operations. The site targets enterprise customers and businesses seeking advanced cloud-based business solutions. Microsoft maintains a strong market position as a leader in enterprise software and cloud services, leveraging its extensive ecosystem and brand recognition. Technically, the site is built on Adobe Experience Manager with modern JavaScript frameworks and integrates multimedia content effectively, demonstrating high digital maturity. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, reflecting Microsoft's commitment to secure cloud services. Privacy compliance is well addressed with clear policies and consent mechanisms, aligning with GDPR requirements. Overall, the website is professional, trustworthy, and well-optimized for performance and accessibility.
- KLAFS
klafs.de
Manufacturing · Germany
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
KLAFS is a leading global manufacturer specializing in saunas, steam baths, infrared products, and wellness solutions. The company positions itself as a market leader with a comprehensive product range targeting both residential and commercial customers. Their website reflects a mature digital presence with detailed product information, consulting services, and customer support options. Technically, the site is built on TYPO3 CMS, incorporates modern JavaScript frameworks, and uses a consent management platform to comply with privacy regulations. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though explicit security headers could be improved. The absence of WHOIS registration data is a concern but is mitigated by the professional site and consistent branding. Overall, KLAFS demonstrates a strong business and digital maturity with room for minor security enhancements.
Kreuzer Internationalkreuzer-gmbh.com
Hospitality · Germany
79Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Kreuzer International is a German-based company specializing in hotel furniture and equipment, including energy-saving minibars and design safes, serving hotels across Europe. The company has an established market presence since 2001, positioning itself as a reliable supplier in the hospitality sector. The website reflects a professional and consistent brand image with a focus on B2B customers in the hotel industry. Technically, the site uses modern web technologies such as Bootstrap and JavaScript, with a custom or unknown CMS. The site is mobile-optimized and provides a good user experience with clear navigation and search functionality. Security-wise, the website enforces HTTPS with good SSL configuration and employs Cookiebot for GDPR-compliant cookie consent management. Minor security improvements are recommended, such as enabling DNSSEC and publishing a security.txt file. Overall, the site demonstrates a solid security posture and privacy compliance, though explicit contact information and terms of service are not readily found on the homepage. Strategic recommendations include enhancing security headers, improving transparency with a security policy, and adding clear contact channels for incident response.
—
76Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Infomaniak Network SAinfomaniak.ch
Technology · Switzerland
76Low
NIS2 73 · GDPR 70
NIS2 73 · GDPR 70
Infomaniak Network SA is a Swiss-based sovereign cloud service provider specializing in hosting, domain registration, and collaborative tools. Positioned as a leading independent cloud provider in Europe, Infomaniak emphasizes data sovereignty, privacy, and security, hosting its solutions in the heart of Europe. The company targets businesses and professionals seeking secure and compliant cloud services. The website reflects a mature digital presence with excellent design, clear navigation, and comprehensive content that aligns with its business objectives. Technically, the website is built using modern frameworks such as React and Gatsby, ensuring fast performance and mobile optimization. The infrastructure appears robust, likely self-hosted, with strong SEO and accessibility features. Security posture is strong, with HTTPS enforced, multiple security headers, and no visible vulnerabilities. The company holds ISO 27001 certification and maintains transparent security and privacy policies, including GDPR compliance and a dedicated data protection officer. Overall, Infomaniak demonstrates a high level of professionalism and trustworthiness. The absence of WHOIS data is a limitation but does not detract significantly from the site's credibility given the strong business and security indicators. Strategic recommendations include maintaining up-to-date security audits, enhancing incident response transparency, and continuing user education on security best practices.
- Amazon
amazonservices.de
E-commerce · Germany
78Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
The website sell.amazon.de is a professional e-commerce platform operated by Amazon, targeting sellers in Germany and Europe. It provides comprehensive resources for sellers including account creation, product listing, fulfilment services, advertising, and brand registry. The site is well-branded, consistent with Amazon's global presence, and offers extensive educational content to support seller success. Technically, the site uses Amazon's proprietary JavaScript frameworks, Cloudfront CDN, and advanced performance monitoring tools, ensuring fast and responsive user experience. Security posture is strong with HTTPS, security headers, and secure login mechanisms, although explicit privacy and cookie policies are not directly found in the provided content. Overall, the site is trustworthy and highly credible, serving a large enterprise audience with a mature digital infrastructure.