Security Directory

H

Heureka Group a. s.

dendopravyzdarma.sk

67

Heureka Group a. s. operates a comprehensive e-commerce service platform primarily serving Slovakia and the Czech Republic. The company offers advertising solutions, data analytics, affiliate programs, and marketplace services tailored for e-shops and brands. Their blog and webinar content demonstrate active engagement with their target audience, focusing on e-commerce growth and marketing strategies. Technically, the website employs modern tracking and consent management tools such as Google Tag Manager, Visual Website Optimizer, and Didomi, indicating a mature digital infrastructure. The site is well-structured, mobile-optimized, and maintains good SEO practices. Security-wise, the site enforces HTTPS and uses consent management but lacks explicit security headers and incident response contacts, which are recommended for improvement. The WHOIS data is privacy protected, a common practice for commercial entities, and the domain appears legitimate based on content and business consistency. Overall, the website presents a professional, trustworthy, and compliant digital presence with room for enhanced security transparency.

R

Radionix

radionix.com

64

Radionix is a security systems provider specializing in integrated intrusion detection, access control, fire alarm, and video monitoring solutions. Positioned as part of the KEENFINITY Group, Radionix targets commercial, educational, financial, and retail sectors with a focus on delivering mission-critical security technology. The website presents a professional and comprehensive digital presence with multimedia content and clear navigation, supporting a medium-sized enterprise profile. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript libraries such as Swiper.js for interactive content. The site is mobile-optimized and accessible, with good SEO practices evident. HTTPS is enforced, and embedded content uses privacy-conscious YouTube no-cookie domains. However, the absence of explicit security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. From a security posture perspective, the site shows good practices such as no exposed sensitive data and secure iframe usage. The lack of a published security policy, incident response contacts, or vulnerability disclosure reduces transparency and preparedness. The missing WHOIS data for the domain is a notable concern, impacting trust and legitimacy assessments despite the professional site content. Overall, Radionix's website is well-designed and functional, but the domain registration opacity and limited direct contact information suggest the need for enhanced transparency and security governance to strengthen trust and compliance.

Telex, a brand under Bosch Global, specializes in communication solutions for radio dispatch and aviation sectors, offering hardware and software products designed for high-pressure environments. The company has a strong market presence with over 50 years of legacy, targeting professional users in telecommunications and transportation industries. The website reflects a mature digital infrastructure with modern technologies, consent management, and comprehensive legal compliance. Security posture is solid with HTTPS enforcement and domain protection, though improvements like DNSSEC and explicit security headers could enhance it further. Overall, the site is professional, trustworthy, and well-structured, supporting Telex's reputation as a reliable communication solutions provider.

D

Dynacord

dynacord.com

67

Dynacord is a well-established professional audio company specializing in high-quality amplifiers, system controllers, and sound system software for commercial and fixed installations. The company benefits from a strong brand presence, supported by its parent company Bosch, and targets professional audio engineers and commercial integrators. The website reflects a mature digital presence with excellent content quality, clear navigation, and mobile optimization. Technically, the site uses modern web technologies including Google Tag Manager and a consent management platform, integrated with a CMS API. Security posture is solid with HTTPS enforced and domain registration consistent with the business history, though some improvements in security headers and explicit security policies could be made. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

D

Deutscher Tennis Bund

dtb-tennis.de

72

The Deutscher Tennis Bund (DTB) operates the official tennis federation website for Germany, providing comprehensive information on national teams, training programs, membership offers, and tennis events. The site targets tennis enthusiasts, players, coaches, and fans within Germany, positioning itself as the authoritative source for tennis-related content in the country. The business model is non-profit and focused on sports promotion and community engagement. Technically, the website leverages Adobe Experience Manager (AEM) as its CMS, hosted on Adobe's cloud infrastructure, and integrates modern technologies such as Cookiebot for consent management, Google Tag Manager for analytics, and Smart AdServer for advertising. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses secure cookies, and implements consent mechanisms aligned with GDPR. While explicit security headers are not fully visible in the HTML, the use of reputable third-party services and secure hosting suggests a strong security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and compliance with privacy regulations. Strategic recommendations include enhancing visible security policies, publishing incident response contacts, and verifying security headers to further strengthen trust and security culture.

B

Basler Kantonalbank

bkb.ch

76

Basler Kantonalbank is a well-established Swiss cantonal bank providing a broad range of financial services to private customers, including banking accounts, investment advisory, mortgages, and pension planning. The website reflects a professional and consistent brand presence targeting private banking clients primarily in Switzerland. The technical infrastructure uses modern web technologies with a cookie consent mechanism implemented via OneTrust, ensuring basic privacy compliance. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and published security policies. No blocking or WAF interference was detected, allowing full content access. Overall, the website demonstrates a mature digital presence suitable for a large financial institution.

T

Thurgauer Kantonalbank

tkb.ch

70

Thurgauer Kantonalbank (TKB) is a well-established Swiss universal bank serving primarily the canton of Thurgau. Founded in 1871, it offers a broad range of financial services including retail banking, investment products, mortgage financing, and digital banking through its OLIVIA platform. The website reflects a mature digital presence with comprehensive product information, clear navigation, and strong branding consistency. The bank positions itself as a trusted regional financial institution with a focus on personalized advisory and modern digital services. Technically, the site employs modern analytics and consent management tools, ensuring GDPR compliance and user privacy. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

R

RaiseNow

raisenow.ch

72

RaiseNow operates a professional SaaS platform focused on enabling nonprofits, associations, and changemakers to efficiently collect donations and manage payments both locally and globally. The website demonstrates a strong market position with over 54,000 organizations trusting their technology, including well-known NGOs such as UNICEF and Amnesty International. The platform offers a comprehensive suite of fundraising tools, payment acceptance solutions, community engagement features, and integration capabilities, positioning itself as a key player in the nonprofit technology sector. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies including Google Analytics 4, Google Tag Manager, and FontAwesome. The site is mobile-optimized, well-structured, and includes SEO best practices. Cookie consent mechanisms and privacy policies indicate a good level of GDPR compliance. However, explicit security headers are not clearly visible in the provided data, suggesting room for improvement in security hardening. From a security perspective, the site uses HTTPS and implements cookie consent, but lacks publicly visible security policies or incident response contacts. The absence of WHOIS registrant data is a concern but does not currently undermine the site's legitimacy given the professional presentation and reputable client base. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, RaiseNow's website reflects a mature digital presence with solid business credibility and moderate technical sophistication. Strategic recommendations include enhancing security header implementation, publishing security policies, and improving transparency around incident response. Monitoring the WHOIS data situation is advised to ensure ongoing trustworthiness.

S

simple & co gmbh

pokus.ch

55

Pokus is a small Zürich-based digital agency operating under the legal name simple & co gmbh. The company specializes in UX design, web development, CMS solutions, creative coding, and digital concepts including WebApps, SPA, IoT, and interactive installations. Their market position is that of a niche local agency focused on delivering tailored digital solutions to businesses and organizations. The website presents a professional image with clear contact information and a skilled team, but lacks formal privacy and cookie policies, which are important for compliance. Technically, the website uses a modern technology stack including Python/Django backend and frontend frameworks like Vue and React. The presence of technologies for mobile platforms and IoT indicates a diverse technical capability. The website is moderately performant and mobile optimized, though accessibility and SEO optimizations are basic. No analytics or tracking scripts were detected, suggesting minimal user tracking. From a security perspective, the site lacks visible security headers and formal security or incident response policies. The domain uses privacy protection in WHOIS, which is common and justified for small agencies. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the security posture is moderate but could be improved by implementing security headers, HTTPS enforcement, and formal policies. The overall risk is moderate with no critical issues detected. Strategic recommendations include adding privacy and cookie policies, enhancing security headers, implementing vulnerability disclosure and incident response information, and conducting a security audit to strengthen the security posture and compliance.

Bänziger Hug is a Swiss-based design agency founded in 2011 by Samuel Bänziger and Olivier Hug. The agency specializes in print and interactive design, offering services such as book design, exhibitions, publications, identities, and website design primarily for cultural institutions, businesses, and individuals. The company has a strong market position within its niche, supported by numerous prestigious design awards, indicating a high level of professional recognition and trust. Technically, the website is built using modern web standards including HTML5, CSS3, and JavaScript, with the use of Modernizr for feature detection and Google Analytics for visitor tracking. The site is mobile optimized and performs moderately well, though accessibility features are basic. The absence of a CMS or hosting provider information limits deeper infrastructure insights. From a security perspective, the website benefits from HTTPS with excellent SSL configuration, but lacks important security headers such as Content-Security-Policy and X-Frame-Options. No forms or input fields are present, reducing attack surface, but the absence of privacy and cookie policies indicates compliance gaps. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website content. Overall, the website is professional and trustworthy in appearance and content, but the lack of WHOIS transparency and privacy compliance policies present moderate risks. Strategic improvements in security headers, privacy documentation, and domain registration transparency are recommended to enhance trust and compliance.

N

Nora Vögeli Grafik Design

noravoegeli.com

60

Nora Vögeli Grafik Design is a small, professional design atelier based in Zürich, Switzerland, specializing in art direction, graphic design, branding, and spatial design. The website showcases a comprehensive portfolio of projects including corporate design, event branding, publications, and digital applications, targeting clients seeking creative design services primarily in the Zürich region. Technically, the site is built on the Squarespace platform, leveraging modern web technologies such as HTTPS with HSTS, Google Fonts, and YouTube embeds, providing a moderate performance and good mobile optimization. Security posture is solid with HTTPS and HSTS, but lacks additional security headers and formal privacy or cookie policies. The absence of WHOIS data limits domain legitimacy verification, though the professional presentation and content quality suggest a legitimate business. Overall, the site is well-designed and functional but would benefit from enhanced privacy compliance and clearer contact information to improve trust and security.

Lay Theme is a specialized WordPress theme provider focused on creative professionals and portfolio websites. Established in 2015, the company offers a customizable theme with a unique layout tool called the Gridder, extensive customization options, WooCommerce shop support, and various addons to enhance website functionality. The website demonstrates a professional market position within the niche WordPress theme industry, targeting creatives who want visually appealing and customizable portfolio sites. Technically, the site leverages modern JavaScript libraries, video integration, and multiple marketing pixels, hosted on DreamHost. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the site is trustworthy and professional but could improve transparency and security practices.

The SYJMB Foundation website represents a small non-profit entity established around 2019, likely based in Switzerland. The site is built using modern web technologies such as Gatsby and React, indicating a moderate level of technical maturity. However, the content is minimal and lacks detailed business descriptions, contact information, or compliance documentation. Security posture is basic with no advanced headers or policies detected, and no privacy or cookie policies are published, which may expose the organization to compliance risks. Overall, the site is accessible and free from blocking mechanisms but would benefit from enhanced transparency and security measures.

M

Mirabella–Morganti

mirabella-morganti.ch

58

Mirabella–Morganti is a Swiss design studio founded in 2013 specializing in art, culture, and education projects. The company offers a range of creative services including visual identities, campaigns, posters, books, and digital media, with a strong emphasis on print design and typography. They also contribute to education through lecturing roles at the Zurich University of the Arts. The website reflects a professional portfolio with rich content and a consistent brand image targeting cultural and educational organizations. Technically, the site is built using Vue.js with deferred JavaScript loading, providing good mobile optimization and SEO. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact emails or phone numbers, which are areas for improvement. No WAF or blocking mechanisms were detected, and the WHOIS data aligns well with the business claims, indicating legitimacy.

A

Astrom / Zimmer & Tereszkiewicz

azt.ch

62

Astrom / Zimmer & Tereszkiewicz is a small, specialized design and development studio based in Zurich, Switzerland. They focus on creating digital and analogue tools, interfaces, and data modeling solutions aimed at transforming information into knowledge. Their market position is niche, serving clients interested in archives, research, and data visualization projects. The website showcases a professional portfolio with multiple client projects and external references, indicating a credible and established presence in their field. Technically, the site uses modern web technologies including JavaScript and React, hosted likely on DigitalOcean, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and public security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

G

GEOTEST Ltd.

geotest.ch

53

GEOTEST Ltd. is a Swiss-based leader in geosciences, offering a broad range of services including site development, geoinformatics, natural hazard assessment, and environmental consulting. The company employs over 200 professionals across seven locations in Switzerland, emphasizing innovation, quality, and customer focus. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to business and governmental clients. Technically, the site uses modern web technologies including Cmsbox CMS, Google reCAPTCHA, and analytics tools such as Google Analytics and Matomo, ensuring a secure and performant user experience. Security posture is strong with HTTPS enforcement and appropriate security headers, though the absence of visible cookie consent and incident response policies suggests room for compliance improvement. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score.

L

Leipziger Messe GmbH

leipziger-buchmesse.de

60

Leipziger Buchmesse is a major cultural and media event organizer based in Germany, hosting the prominent Leipzig Book Fair which connects readers, authors, publishers, and media companies. The website reflects a well-established event with a strong market position in the German-speaking book and media industry. The site offers comprehensive information for exhibitors, visitors, and media professionals, supported by a professional design and consistent branding. Technically, the site uses modern JavaScript libraries, consent management tools, and Google Tag Manager for analytics, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site is trustworthy, professional, and serves its audience effectively.

F

Frontify

brandmanual.ch

65

Frontify is a technology company specializing in brand management and digital asset management solutions. Their platform targets brand managers and marketing teams in enterprises, offering SaaS tools to maintain branding consistency and facilitate collaboration. The website analyzed is a login page for their platform, reflecting a professional and consistent brand image. Technically, the site uses modern web technologies including React and integrates third-party services such as Amplitude for analytics and Sentry for error tracking. The site is well optimized for performance and mobile devices, with a good user experience and clear navigation. Security posture is strong with HTTPS enforced, CSRF tokens, and password policies, though some security headers are missing and no public security or privacy policies are visible on this page. Overall, the site is trustworthy and professional but could improve transparency around privacy and security policies. The domain registration data aligns well with the business, showing legitimacy and consistency. No blocking or WAF mechanisms were detected, and no adult or questionable content is present.

B

Bündnis StrukturWandeln

struktur-wandeln.de

57

Bündnis StrukturWandeln is a small non-profit civil society alliance focused on structural change in the Central German mining region. The website serves as an informational and advocacy platform targeting regional stakeholders and activists. Technically, the site is built on WordPress using modern block editor technologies and includes Matomo analytics for visitor tracking. The site is accessible, mobile-optimized, and uses HTTPS, but lacks visible privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure mechanisms. WHOIS data is minimal and domain status is unusual, which reduces trustworthiness. Overall, the site is functional but could improve in privacy compliance and security best practices.

J

Julian Humm Gestaltung und Entwicklung

julianhumm.com

60

Julian Humm Gestaltung und Entwicklung is a small design and development office based in Basel, Switzerland, specializing in visual communication and publication solutions for both digital and analog spaces. The company offers services including branding, web design, poster creation, and identity development, targeting clients who require professional visual communication systems. The website showcases a portfolio of projects and client references, indicating a solid market presence within its niche. Technically, the website is built using modern technologies such as Svelte and Swiper.js, with good mobile optimization and a clean, professional design. However, there is a lack of privacy and cookie policies, and no security headers were detected, which are areas for improvement. The WHOIS data for the domain is missing or indicates the domain may not be registered, which is unusual but the website content and contact information suggest a legitimate business. Overall, the site is safe, professional, and trustworthy, but would benefit from enhanced security and privacy compliance measures.

P

PC CADDIE AG

pccaddie.de

56

PC CADDIE AG is a specialized software provider focused on golf club and golf course management solutions. The company positions itself as a market leader in the golf IT sector, offering a comprehensive suite of products including customer management, reception and proshop integration, golf course and school management, online booking and tournament management, and hosting services. Their target audience includes golf clubs, commercial golf facilities, golf associations, and tournament agencies primarily in German-speaking countries and Switzerland. The website is professionally designed, content-rich, and provides extensive customer references and testimonials, reinforcing its credibility and market position. Technically, the website is built on TYPO3 CMS and employs modern web technologies including JavaScript, CSS, and Google reCAPTCHA for form security. The presence of mobile app links for Android and iOS indicates a mature digital infrastructure. Hosting is managed via agenturserver nameservers, and the site uses HTTPS with good SSL configuration. Performance and mobile optimization are rated as moderate to good, with room for improvement in accessibility features. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, use of CAPTCHA, and no visible exposure of sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms like a security.txt file. Additional security headers could enhance protection. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, PC CADDIE AG presents a trustworthy and professional online presence with a solid business model and technical foundation. Strategic improvements in security transparency and accessibility could further strengthen their posture.

S

Spider AF

spideraf.com

77

Spider AF is a specialized digital marketing security company focused on combating ad fraud, click fraud, and invalid leads. The company offers a SaaS platform trusted by over 500 companies to protect marketing budgets by detecting and preventing fraudulent activities. Their key services include ad fraud detection, invalid click filtering, fake lead detection, and website risk monitoring. The website is professionally designed, targeting digital marketers and advertisers concerned with marketing security. Technically, the site is built on Webflow and leverages modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, PostHog, and Visual Website Optimizer, hosted on AWS infrastructure. The site is mobile optimized and performs moderately well.

Stiftung Behindertensport Lenzerheide is a small Swiss non-profit foundation dedicated to supporting and promoting disabled sports in the Lenzerheide holiday region. The foundation organizes sporting and social events for people with disabilities and maintains a partnership with PluSport Behindertensport Schweiz, a national umbrella organization for disabled sports. The website is built on the Jimdo Creator CMS platform, hosted by Jimdo, and presents content primarily in German. It features a clean design with clear navigation and mobile responsiveness, though it lacks some compliance documents such as a privacy policy and terms of service. Security posture is moderate with HTTPS enforced and cookie consent implemented, but missing security headers and explicit contact information reduce the overall security and compliance score. The website content is safe and appropriate for a general audience, with no adult or questionable material detected.

S

Stiftung Denk an mich

denkanmich.ch

62

Stiftung Denk an mich is a Swiss non-profit organization dedicated to supporting people with disabilities by providing financial assistance for holidays and leisure activities. The foundation fills a social gap by enabling those who cannot afford recreational time to enjoy improved quality of life. The website reflects a focused mission with clear messaging, targeting individuals with disabilities and their supporters within Switzerland. The organization maintains a credible market position as a niche non-profit with recognized certifications such as ZEWO. Technically, the website is built on modern frameworks including Vue.js and Nuxt.js, with integrations for analytics and media content. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be enhanced. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, but lacks a public security policy or vulnerability disclosure. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for the foundation.

B

Beisheim Stiftung

beisheim-stiftung.com

62

Beisheim Stiftung is a non-profit foundation operating primarily in Germany and Switzerland, providing funding and support for various projects. The website serves as an informational portal offering downloadable resources such as funding criteria and application guidelines. The foundation targets applicants and partners interested in its funding programs. Technically, the website is built using the Nuxt.js framework and integrates Cookiebot for cookie consent management, ensuring compliance with privacy regulations. The site employs HTTPS and uses Piwik Analytics for visitor statistics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks visible security headers and explicit security policies. The absence of WHOIS data and contact information slightly reduces trustworthiness. Overall, the website is professional and functional but could improve transparency and security documentation.

P

PING PLD

pingpld.com

56

PING PLD operates as a niche golf equipment brand specializing in PLD putters, which are currently restricted in availability by region as indicated on the analyzed page. The website serves primarily as an informational and redirect page to the parent brand PING's main site. The technical infrastructure is modern, leveraging React and Next.js frameworks with Material-UI for styling, indicating a contemporary digital maturity level. However, the content on this particular page is minimal, focused on access restriction messaging without additional business or contact information. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is minimal with cookie consent implemented but no visible privacy or terms policies. Overall, the site is legitimate and consistent with the business domain registration and branding but would benefit from enhanced security and compliance documentation.

LAFRENTZ Baugesellschaft mbH is a specialized construction company based in Hannover, Germany, focusing on park deck renovation, building waterproofing, flood protection, and road marking services. The company targets commercial, public, and private clients with comprehensive services from planning to maintenance. Their market position is that of a niche specialist in construction waterproofing and related services within Germany. The website is professionally designed, mobile-optimized, and provides clear navigation and detailed service descriptions, supporting their business credibility. Technically, the site is built on the 1&1 IONOS Website Editor platform, using modern JavaScript libraries and CDN services, with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enforced but lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of a privacy policy and terms of service pages, though a cookie consent mechanism is present. Contact information is limited to a phone number with no email or social media links. WHOIS data lacks detailed registrant information, slightly reducing trust but not contradicting the business claims. Overall, the website is a good representation of a small specialized construction business with room for improvement in privacy and security transparency.

Ü

ÜSTRA

uestra.de

62

ÜSTRA operates as a regional public transportation provider in Hannover, Germany, offering bus and tram services along with timetable and ticketing information. The website is built on TYPO3 CMS and integrates specialized public transport widgets, reflecting a mature digital infrastructure. The site is well-designed, mobile-optimized, and provides a good user experience for its target audience of local commuters and visitors. Security posture is adequate with HTTPS and nonce usage, but lacks explicit security headers and published security policies. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the domain registration and WHOIS data align with the business claims, indicating legitimacy and trustworthiness.

D

DB SCHENKER

dbschenker.de

67

DB SCHENKER is a global leader in logistics, transport, and supply chain management, offering a broad range of services including digital services, land, air, and sea transport, contract logistics, packaging systems, and customs services. The company recently merged with DSV, enhancing its market position as a worldwide leading logistics provider. The website reflects a mature, enterprise-level business with a strong focus on professional service delivery and sustainability. Technically, the website employs modern JavaScript frameworks and integrates with Adobe Experience Platform and other marketing and analytics tools, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement and Content-Security-Policy headers, though additional headers and a security.txt file could improve security transparency. Overall, the site is well-designed, mobile-optimized, and provides comprehensive business and career information, supporting a high trustworthiness rating.

D

Dextro Energy

dextro-energy.com

47

Dextro Energy is a well-established German company specializing in sports nutrition products, particularly dextrose-based energy supplements for endurance and fitness athletes. The company operates a professional e-commerce platform built on Shopify, offering a range of products alongside content such as a magazine and a sports team sponsorship. Their market position is solid with a history dating back to 2005, targeting primarily German-speaking customers interested in sports and fitness nutrition. The website demonstrates good branding consistency and trust signals including customer ratings and GDPR compliance. Technically, the site leverages modern Shopify infrastructure, integrates multiple marketing and analytics tools, and employs Cloudflare for security and performance. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS enforced and GDPR-compliant cookie consent mechanisms, although explicit security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the site presents a trustworthy and professional digital presence aligned with its business goals.

The website www.rossmann.de is currently inaccessible beyond a security challenge page that verifies the browser before granting access. Rossmann is a well-known retail company operating primarily in Germany, specializing in consumer goods and drugstore products. The site content is blocked by a Web Application Firewall or similar security mechanism, preventing full content and policy analysis. The technical infrastructure shows use of JavaScript and strict Content-Security-Policy headers, with hosting likely managed via netnames.net nameservers. Security posture is moderate due to the presence of CSP but limited by lack of accessible content and policies. Overall, the site is protected but lacks publicly accessible privacy, cookie, or contact information in the analyzed content.

B

BWT

bwt.com

58

BWT is a large, established European company specializing in water treatment technologies and sustainable water solutions for various sectors including residential, hospitality, industry, pharma, and pools. Their website reflects a mature digital presence with comprehensive content, multimedia integration, and multi-language support. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and performance optimizations like Baqend SpeedKit, indicating a high level of digital maturity. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit incident response and vulnerability disclosure information are not publicly available. Overall, the site is professional, trustworthy, and well-optimized, but the lack of WHOIS data and direct contact details slightly reduce business credibility scores.

E

enercity AG

enercity.de

71

enercity AG is a large, established German energy provider with a history dating back to 1825. The company offers a broad portfolio of energy-related services including electricity, gas, solar solutions, heating, water supply, telecommunications, and electromobility. It serves a wide audience including private customers, businesses, and municipalities primarily in Germany, with a strong regional focus on Hannover. The website reflects a mature digital presence with modern technologies such as React and Next.js, and implements GDPR-compliant consent management. Multiple industry awards and high customer ratings reinforce its market position and trustworthiness. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the website is professional, user-friendly, and compliant with privacy regulations, supporting enercity's reputation as a reliable energy partner.

The website sportscheck.com is a retail and event promotion platform focused on running events, specifically the SportScheck RUN Hannover 2025. It targets a general audience interested in sports and running, offering event participation options and related sports equipment. The site uses modern web technologies including React and various JavaScript tracking libraries, indicating a moderate level of digital maturity. However, the absence of visible privacy and cookie policies, as well as missing WHOIS registration data, suggests gaps in compliance and transparency. Security posture appears average with no explicit security headers detected in the provided data, and no evidence of vulnerabilities or exposed sensitive data. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

The Deutsche Stiftung für Engagement und Ehrenamt operates the DSEE Lernportal, a dedicated educational platform aimed at supporting volunteers and engaged individuals in non-profit organizations. The portal offers a variety of learning resources including courses, webinars, and video content focused on topics such as digitalization, financing, member recruitment, and organizational management. The platform is positioned as a trusted resource within the German volunteer sector, providing free access to educational materials and fostering community growth. Technically, the website is built on the Totara LMS platform, which is based on Moodle, utilizing modern JavaScript libraries such as YUI and jQuery, and includes accessibility and mobile optimization features. The infrastructure supports a good user experience with moderate performance and solid SEO practices. The site enforces HTTPS and employs secure session management, though it lacks some advanced security headers and a formal security policy page. From a security perspective, the site demonstrates a good posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. However, there is no explicit incident response or vulnerability disclosure information available. The domain registration aligns well with the organization's identity, enhancing trustworthiness. Overall, the DSEE Lernportal is a professionally maintained, secure, and privacy-conscious platform serving the non-profit volunteer community in Germany. Strategic improvements in security policy transparency and incident response readiness could further strengthen its security posture and user trust.

K

Kanzlei Dr. Peter Unmüßig

kanzlei-unmuessig.de

55

Kanzlei Dr. Peter Unmüßig is a small, regionally established German law firm specializing in traffic law, labor law, inheritance law, tenancy law, administrative offenses, insurance law, and civil law. The firm operates from a main office in Gundelfingen with multiple branch offices, and is a member of the Apraxa cooperative network of law firms. The website provides comprehensive legal service information, attorney biographies, and detailed privacy and legal disclaimers, targeting private clients and businesses seeking legal representation. Technically, the website uses legacy jQuery and standard HTML/CSS with moderate performance and basic mobile optimization. Security posture is moderate with no HTTPS or security headers explicitly confirmed, and an outdated jQuery version poses a potential risk. Privacy compliance is strong with a detailed GDPR-compliant privacy policy, though no cookie consent mechanism is present. Overall, the site is professional and trustworthy but would benefit from technical and security updates.

F

Funkhaus Freiburg

baden.fm

63

baden.fm is a regional media broadcaster serving Freiburg and the Südbaden region in Germany, offering radio streaming, news, event tips, and ticket sales. The website is professionally designed with consistent branding and targets local residents and listeners. Technically, the site uses a modern tech stack including WordPress CMS, JavaScript libraries such as Swiper.js and Video.js, and analytics tools like Matomo and Google Tag Manager. Security posture is adequate with HTTPS enforced and bot protection via hCaptcha, but lacks explicit security headers and documented security policies. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the site is trustworthy and legitimate, with domain registration data consistent with the business identity.

R

Robinson Club GmbH

robinson.com

63

Robinson Club GmbH operates a hospitality business focused on resort holidays catering to families, couples, and singles. Their offerings include sports, childcare, wellness, and entertainment events, positioning them as a well-established player in the holiday resort market primarily in Germany. The website is built on TYPO3 CMS with modern web technologies including PWA support and uses third-party marketing tools such as Optimizely for optimization and Gigya for user engagement. Social media presence is strong and verified, enhancing brand trust. From a technical perspective, the website demonstrates moderate to good performance with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms, which is a notable gap given GDPR requirements. WHOIS data is missing or unavailable, which reduces domain trustworthiness and raises questions about domain registration transparency. However, the website content and official social media links support legitimacy. Overall, the site is professionally designed and functional but requires improvements in privacy compliance and security transparency to enhance trust and regulatory adherence.

A

ats Elektronik GmbH

atsonline.de

48

ats Elektronik GmbH is a German technology company specializing in secure communication and safety technology solutions. Their website presents a professional image with detailed service offerings in areas such as 5G, TETRA, MOTOTRBO/DMR radio technology, security systems, system solutions for energy, transport, public safety, and military sectors, as well as research projects and training. The company targets security professionals and enterprises requiring advanced communication and safety solutions. The website is well-structured, multilingual (German and English), and includes comprehensive contact information and policies, reflecting a mature digital presence. Technically, the website uses a proprietary CMS (sethora.de Synapsis CMS), integrates modern JavaScript libraries including jQuery and MediaElement.js, and leverages Google Maps API for location services. Hosting is provided by Hetzner Online GmbH, a reputable German hosting provider. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequate with proper meta tags and structured navigation. Security posture is decent with HTTPS enforced and cookie consent implemented. However, no explicit security policy or incident response information is published, and security headers are absent. The WHOIS data shows an anomalous future domain creation date, which is likely an error but reduces trustworthiness. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional and trustworthy with minor security and compliance gaps. Strategic improvements in security transparency and WHOIS data accuracy are recommended to enhance credibility and risk posture.

Vereinshelden is a well-established non-profit organization focused on supporting volunteer engagement in sports within Niedersachsen, Germany. The website serves as a comprehensive platform offering funding, consulting, training, and recognition services to sports clubs and volunteers. It holds a strong regional market position supported by partnerships with key sports organizations and government entities. The digital infrastructure is based on WordPress with modern plugins and themes, ensuring good SEO, accessibility, and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and incident response policies are recommended. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

S

Stiftung Nationale Anti Doping Agentur Deutschland

gemeinsam-gegen-doping.de

39

GEMEINSAM GEGEN DOPING is a German government-supported non-profit network focused on anti-doping education and prevention in sports. It operates under the Stiftung Nationale Anti Doping Agentur Deutschland and collaborates with national and international partners such as NADA, WADA, and the German Olympic Sports Confederation. The website serves as an information hub offering workshops, e-learning, quizzes, and community engagement to promote clean sports. Technically, the site is built on TYPO3 CMS with modern JavaScript integrations, uses hCaptcha for form security, and employs Matomo for analytics with a strong emphasis on privacy compliance via Cookiebot. Security posture is solid with HTTPS and spam protection, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for accessibility and SEO.

The Meldestelle Sportmanipulation website serves as an official German government-related platform dedicated to combating manipulation in sports competitions and betting fraud. It provides a secure and anonymous whistleblower system, supported by a reputable law firm, to encourage fair play and integrity in sports. The site targets sports enthusiasts, athletes, and the general public interested in maintaining fairness in sports. The business model is a state-mandated reporting and advisory service, positioning itself as a trusted authority in the niche of sports integrity. Technically, the website is built using the Government Site Builder CMS, employs modern web standards including HTML5, CSS3, and JavaScript, and integrates Matomo for web analytics with a clear cookie consent mechanism. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a moderate to good digital maturity. Hosting details are not explicit, but HTTPS is enforced, ensuring secure communications. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent with opt-out options. However, no explicit security headers were detected in the provided data, and there is no published security or incident response policy. No vulnerabilities or exposed sensitive data were found. The absence of a vulnerability disclosure policy or security.txt file suggests room for improvement in transparency and incident handling readiness. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and official branding. The WHOIS data is minimal but does not raise significant concerns given the governmental nature of the site. Recommendations include publishing formal security policies, adding security headers, and establishing a vulnerability disclosure mechanism to enhance security posture and user trust.

TuS Glarum is a local German sports club offering a wide range of sports and fitness activities for all age groups, including gymnastics, ball sports, dance, and rehabilitation programs. The website serves as an information portal for members and the local community, providing schedules, news, and contact details. The club maintains an active presence on social media platforms such as Facebook and Instagram, enhancing community engagement. Technically, the website is built on the Clansphere CMS platform, utilizing standard web technologies including HTML, CSS, and JavaScript. It employs legacy components such as FCKeditor and Ajax scripts. The site is hosted via INWX nameservers, indicating a German hosting provider. Performance and mobile optimization are moderate, with basic accessibility and SEO features implemented. From a security perspective, the website lacks visible security headers and modern security policies. The use of an outdated editor and absence of cookie consent mechanisms highlight areas for improvement. The email address is obfuscated to reduce spam, but no explicit incident response or security policy pages are present. The domain WHOIS data is consistent and transparent, supporting the legitimacy of the site. Overall, the website is functional and trustworthy for its community sports purpose but would benefit from enhanced security measures, privacy compliance improvements, and modernization of technical components to reduce risk and improve user trust.

J

Jazzcampus / Hochschule für Musik Basel

jazzcampus.com

64

Jazzcampus is an educational institution specializing in jazz music education located in Basel, Switzerland. It operates as part of the Hochschule für Musik Basel under the Fachhochschule Nordwestschweiz FHNW umbrella. The website presents a professional and comprehensive digital presence, offering detailed information about study programs, music courses, events, and affiliated organizations. The site is well-structured, mobile-optimized, and integrates multimedia content such as Vimeo videos to enhance user engagement. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements in cookie consent and security headers are recommended. The absence of WHOIS data for the domain raises concerns about domain registration transparency, but the strong institutional affiliation and content quality support legitimacy. Overall, the site serves its educational mission effectively with a trustworthy and professional online presence.

M

Musikschule Basel

musikschule-basel.ch

65

Musikschule Basel is a well-established music education institution based in Basel, Switzerland, offering a wide range of musical education services including individual and group instrumental and vocal lessons, ensembles, choirs, and music projects for children, youth, and adults. The website reflects a strong market position as a competence center for musical education with a comprehensive offering and clear target audience. Technically, the website employs modern JavaScript and Google Tag Manager for analytics, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policy and incident response information are not present. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

F

Filmexplorer

filmexplorer.ch

61

Filmexplorer is a Swiss non-profit association dedicated to providing a rich cultural media platform focused on film as an experiential art form rather than a commodity. The website offers curated film critiques, interviews, podcasts, and festival coverage, targeting film enthusiasts and cultural audiences primarily in Switzerland. The platform maintains a consistent and professional brand image with excellent content quality and user experience. Technically, the website employs modern web technologies including Swiper.js for interactive sliders, a consent manager for GDPR-compliant cookie handling, and Google Analytics for visitor insights. The site is mobile-optimized and SEO-friendly, though no specific CMS or hosting provider details are evident. Performance is moderate with good accessibility features. From a security perspective, the site uses HTTPS with an effective cookie consent mechanism and email obfuscation to reduce spam. However, it lacks explicit security policies, incident response contacts, and terms of service pages. No critical vulnerabilities or suspicious content were detected, and WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, Filmexplorer presents a trustworthy, well-maintained cultural media website with strong privacy compliance and a clear focus on its niche audience. Strategic improvements could include publishing security policies and incident response information to enhance transparency and trust.

M

Musik-Akademie Basel

musik-akademie.ch

11

Musik-Akademie Basel is a well-established educational institution specializing in musical education across all levels, including higher education, talent development, and cultural events. It holds a strong market position in Basel, Switzerland, with a history spanning over 150 years. The website reflects a professional and comprehensive digital presence, offering detailed information about courses, institutes, and events, targeting music students, educators, and cultural audiences. Technically, the site employs modern web technologies with good mobile optimization and accessibility, and integrates Google Tag Manager for analytics with user consent mechanisms. Security posture is solid with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates high trustworthiness and compliance with privacy regulations, making it a credible and reliable resource for its audience.

The website www.alinaguenter.ch is a professional portfolio site for an individual artist and illustrator based in Switzerland. It showcases various projects including illustrations, graphic design, book design, and exhibition design. The site targets art enthusiasts and potential clients in creative sectors. The business model is primarily service-based, focusing on creative commissions and client work. The website is built on WordPress using the Lay theme, indicating a moderate level of digital maturity with a focus on visual presentation and portfolio management. Mobile optimization is good, and the site loads with moderate performance. Security posture is basic with HTTPS enabled but lacks security headers and formal privacy or cookie policies, which are important for compliance and trust. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the site is safe for general audiences and professionally presented but would benefit from enhanced privacy compliance and security best practices.

G

Gebäudeversicherung Bern

gvb.ch

65

Gebäudeversicherung Bern (GVB) is a well-established regional insurance provider specializing in obligatory building insurance for the Canton of Bern, Switzerland. With over 200 years of history, GVB offers comprehensive insurance products including obligatory building and construction period insurance, as well as voluntary insurance products through its subsidiaries. The website targets property owners and residents in Bern, providing detailed information on insurance services, claims, fire prevention, and natural hazard protection. The company maintains a strong market position as a trusted insurer in the region.

W

wemakeit Ltd

wemakeit.com

69

wemakeit Ltd operates a well-established crowdfunding platform specializing in creative projects such as art, music, literature, and innovative ideas. Founded in 2014 and based in Switzerland, the platform has facilitated over 7,900 successful projects with a strong community of over 720,000 members. The business model centers on enabling project creators to raise funds through community engagement and offers additional services such as crowdfunding consultancy and webinars. The platform maintains a consistent brand presence and leverages partnerships with various specialized channels to expand its reach. Technically, wemakeit employs a modern web stack including Ruby on Rails with Turbo (Hotwire) for dynamic content delivery, Cloudinary for image hosting, and Matomo Tag Manager for analytics. The website is well-optimized for mobile devices, accessible, and SEO-friendly, though performance is moderate. Hosting details are partially known, with domain registration through EuroDNS S.A. The platform uses HTTPS with valid SSL but lacks DNSSEC and some security headers, which are recommended for enhanced security. From a security perspective, the platform demonstrates good practices such as HTTPS enforcement and CSRF protection in forms. However, the absence of DNSSEC, security headers, and explicit incident response contacts indicates areas for improvement. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but the lack of a cookie consent mechanism is a notable gap given GDPR requirements. No critical vulnerabilities or adult content were detected, and the website is fully accessible without WAF blocking. Overall, wemakeit presents a trustworthy and professional crowdfunding platform with strong business credibility and a solid technical foundation. Strategic enhancements in security headers, DNSSEC, and privacy consent mechanisms would further strengthen its security posture and compliance standing.