Security Directory

4

4evac

4evac.com

46

4evac presents itself as a provider of advanced voice evacuation and alarm control solutions compliant with EN54-16 and EN54-4 standards, targeting commercial and industrial safety projects. The website is professionally designed using the Wix platform, featuring relevant business content and a clear focus on voice alarm technology. However, the absence of WHOIS registration data for the domain www.4evac.com raises concerns about domain legitimacy and ownership, which impacts overall trust. Technically, the site uses modern web technologies and polyfills to ensure compatibility and performance, but lacks visible security headers and privacy compliance documentation. The security posture is moderate with HTTPS usage and some script hardening, but could be improved with better policy disclosures and contact information. Overall, the site is accessible and safe, but the domain registration ambiguity and missing compliance policies suggest caution and further verification.

C

Carmody Groarke

carmodygroarke.com

68

Carmody Groarke is a London-based architecture practice established in 2006, specializing in cultural, heritage, and innovative architectural projects. The website serves as a professional portfolio showcasing their key projects, publications, and news updates, targeting clients and stakeholders in the architecture and real estate sectors. The firm positions itself as an established player with a focus on research, innovation, and urban heritage. Technically, the website is built using modern web technologies including React and Next.js, with content managed via Sanity CMS. The site demonstrates good mobile optimization and user experience, though some SEO and accessibility features could be enhanced. Performance is moderate with a well-structured layout and clear navigation. From a security perspective, the site uses HTTPS with a valid SSL certificate but lacks DNSSEC and security headers, which are recommended to improve security posture. No explicit security policies or incident response information is provided, indicating room for improvement in transparency and compliance. Overall, the website is professional and trustworthy with no signs of malicious content or blocking mechanisms. Privacy and cookie policies are present but basic, and no contact emails or phone numbers are explicitly listed on the homepage. Strategic recommendations include enhancing security headers, adding detailed security and incident response policies, and improving privacy compliance disclosures.

C

Caruso St John Architects

carusostjohn.com

54

Caruso St John Architects is an internationally recognized architecture firm specializing in well-crafted architectural projects, renovations, and exhibition designs. The firm has a strong market position with numerous awards, lectures, and publications highlighting their expertise and influence in the architecture sector. Their website reflects a professional and consistent brand image targeting clients and stakeholders interested in high-quality architectural services. The business operates primarily in the real estate and architectural design industry, based in the United Kingdom, with a domain age consistent with a mature and established practice. Technically, the website employs standard web technologies such as HTML5, CSS3, and JavaScript, hosted by GoDaddy.com, LLC. The site is moderately performant with good mobile optimization and accessibility features. However, there is room for improvement in security configurations, including enabling DNSSEC and implementing security headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies, and no incident response or vulnerability disclosure information is provided. The security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. No critical vulnerabilities or exposed sensitive data were detected. The website content is safe for general audiences, with no adult or questionable content. Overall, the site demonstrates high professionalism and trustworthiness but would benefit from enhanced privacy and security practices to align with best practices and regulatory requirements. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear incident response and vulnerability disclosure channels to strengthen trust and compliance.

The website adamarchitecture.com currently serves a security challenge page that blocks direct access to its main content. This challenge includes a CAPTCHA and a JavaScript-based proof-of-work mechanism, indicating the presence of a Web Application Firewall (WAF) or similar security protection. Due to this blocking, no substantive business content, contact information, or policies are accessible for analysis. The domain is mature, registered since 2008 with Tucows Domains Inc., and has domain transfer protections enabled, suggesting legitimate domain management. However, DNSSEC is not enabled, and no security headers or HTTPS enforcement details are visible in the provided data. The website's technical infrastructure includes modern JavaScript features and uses AWS Cloudfront CDN for content delivery. Overall, the site’s security posture is limited by the lack of visible security headers and policies, and the content quality is poor due to the blocking mechanism. Privacy compliance and business credibility cannot be assessed due to lack of accessible information.

A

ACME

acme.ac

70

ACME is a London-based architecture and design firm established in 2007, specializing in contemporary architecture, urban planning, interior design, and product design. The company serves private, corporate, and public clients and has a portfolio of notable projects such as Liverpool Street Station and developments in Berlin and Earls Court. The website is professionally designed and hosted on Shopify, leveraging modern web technologies and integrations such as Vimeo for video content and Google Analytics for tracking. The site demonstrates good digital maturity with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though there is room for improvement in DNSSEC and security headers. Privacy compliance is well addressed with cookie consent and GDPR-aligned privacy policy. Overall, the business presents a credible and trustworthy online presence.

W

Wright & Wright Architects LLP

wrightandwright.co.uk

68

Wright & Wright Architects LLP is a London-based award-winning architectural practice specializing in sustainable, contextual, and innovative design primarily for the culture and education sectors. Their portfolio includes Passivhaus-certified projects and a strong commitment to carbon reduction and energy efficiency. The website reflects a professional and well-established firm with a clear focus on quality and sustainability. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Vimeo video integration, Google Tag Manager, and Typekit fonts. It is well-optimized for performance, mobile responsiveness, and accessibility, providing a seamless user experience. The presence of cookie consent management and privacy policies indicates good digital maturity and compliance with privacy regulations. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a public security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS lookup failed due to querying a subdomain rather than the domain itself, but the website's professionalism and trust indicators suggest legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving accessibility features to further strengthen security posture and user trust.

W

Walters & Cohen Architects

waltersandcohen.com

65

Walters & Cohen Architects is a London-based architectural practice specializing in education, community, and cultural projects. The firm is recognized for its award-winning portfolio and serves clients primarily in the education sector. The website reflects a professional and consistent brand image with a clear focus on showcasing their projects and expertise. The target audience includes educational institutions and community organizations seeking architectural services. Technically, the website employs modern web technologies including Google Analytics and Google Tag Manager for tracking, and uses a CDN for asset delivery. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some technical improvements could be made, such as implementing security headers and expanding accessibility features. From a security perspective, the site uses HTTPS and has a cookie consent mechanism indicating basic privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data is a concern and lowers the domain trustworthiness score, though the active and professional nature of the website suggests legitimacy. No explicit contact or security incident response information is provided, which could be improved. Overall, the website presents a solid digital presence for a small architectural firm with room for enhancements in security posture and transparency. Strategic recommendations include improving WHOIS transparency, adding security headers, and providing clearer contact and privacy information to strengthen trust and compliance.

J

Jamie Fobert Architects

jamiefobertarchitects.com

47

Jamie Fobert Architects is a reputable architectural firm specializing in innovative design across residential, retail, and arts sectors. The company has a strong market presence with a portfolio of completed and ongoing projects internationally, including high-profile cultural and retail spaces. The website serves as a professional portfolio showcasing their work and expertise. Technically, the website is built on WordPress with Yoast SEO for optimization and uses modern JavaScript libraries for interactive elements. Google Analytics is implemented for user tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and security transparency. Overall, the domain is well-established and trustworthy, supporting the firm's credibility.

H

Hawkins\Brown

hawkinsbrown.com

51

Hawkins\Brown is a UK-based architecture firm focused on societal impact and human-centered design. The website presents a professional and modern digital presence with rich content including conversations, projects, and thought leadership. The firm holds a B Corp certification, indicating commitment to social and environmental performance. Technically, the site is built on WordPress with modern JavaScript and analytics integrations, optimized for performance and accessibility. Security posture is good with HTTPS enforced and secure forms, though explicit security policies and incident response details are absent. The lack of WHOIS data for the domain is a notable anomaly, reducing trust slightly despite the professional site content. Overall, the website reflects a mature business with strong branding and digital maturity.

D

David Chipperfield Architects

davidchipperfield.com

63

David Chipperfield Architects is a well-established international architectural practice founded in 1985, with offices in multiple global cities. The company provides architectural design and related cultural and research services, targeting clients interested in high-quality architectural projects. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content about projects and news. Technically, the site uses modern web standards, is mobile optimized, and employs privacy-focused analytics. Security posture is good with HTTPS and domain protection measures, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with a clear privacy policy, but lacks a cookie consent mechanism. Overall, the website is trustworthy and professionally managed, supporting the company's market position as a leading architectural firm.

Eric Parry Architects Ltd is a well-established architectural practice founded in 2000, with studios in London and Singapore. The company specializes in sustainable and creative architectural design, serving clients in commercial, cultural, healthcare, and hospitality sectors. Their website reflects a professional and consistent brand image, showcasing a portfolio of projects and providing clear contact information. The business targets clients seeking high-quality architectural services and maintains a reputable market position with an international presence. Technically, the website is built on WordPress with modern JavaScript libraries such as Glide.js and LazySizes, offering good mobile optimization and user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and published security policies. Overall, the website is trustworthy, compliant with GDPR, and free from suspicious content or vulnerabilities.

D

Derwent London

derwentlondon.com

67

Derwent London is a prominent British property investment and development company headquartered in London, recognized as the largest London office-focused Real Estate Investment Trust (REIT) and a constituent of the FTSE 250 Index. The company manages a substantial portfolio of commercial real estate valued at £5.2 billion as of mid-2025, focusing on long-term value creation through property regeneration. Their services include office and retail space leasing, flexible furnished workspaces, and community-focused DL/Members lounges. The website reflects a mature digital presence with comprehensive content targeting investors, tenants, and partners. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and cookie consent management, ensuring compliance with privacy regulations such as GDPR. The site is mobile-optimized, accessible, and SEO-friendly, although no CMS or hosting provider details are explicitly identified. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms with granular controls. However, no explicit security headers were detected in the HTML source, and there is no published security policy or vulnerability disclosure program. The absence of WHOIS data limits domain trust verification, but the professional presentation and multiple industry certifications support legitimacy. Overall, Derwent London’s website demonstrates strong business credibility and privacy compliance, with room for improvement in security best practices and transparency. The domain’s WHOIS data absence warrants monitoring but does not currently undermine the site’s trustworthiness.

DRMA AS is a Norwegian architecture and planning firm established in 2006, specializing in community-focused architectural design, planning, placemaking, and landscape architecture. The company positions itself as a local expert with a global outlook, demonstrated by participation in international exhibitions and collaborations. Their website showcases multimedia content highlighting their projects and approach, targeting clients interested in innovative and community-driven architectural solutions. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Mapbox GL JS for mapping features. The site is mobile-optimized with good design quality and user experience, though some accessibility and SEO optimizations could be improved. No CMS or hosting provider details were identified. From a security perspective, the site uses HTTPS with good SSL configuration but lacks security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No forms or analytics scripts were detected, indicating minimal data collection and tracking. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, DRMA's website is professional and trustworthy but would benefit from enhanced privacy compliance, security headers, and accessibility improvements to strengthen its security posture and regulatory adherence.

L

Lundhagem

lundhagem.no

57

Lundhagem is a small, award-winning architecture and urban design practice based in Oslo, Norway. The website presents a professional image focused on showcasing their design work and company identity. The business targets clients seeking architectural and urban design services, positioning itself as a specialized and reputable firm in its sector. The website uses modern web technologies such as Nuxt.js and Imgix for image optimization, indicating a moderate level of digital maturity. However, the site lacks visible contact information, privacy policies, and security headers, which impacts its overall security posture and compliance stance. No WHOIS data is publicly available, suggesting privacy protection for the domain registration, which is typical for small professional firms. Overall, the website is functional and professional but could improve in security and compliance transparency.

A

Arkitektur- og designhøgskolen i Oslo (AHO)

aho.no

72

Arkitektur- og designhøgskolen i Oslo (AHO) is a leading international scientific college specializing in education and research in architecture, design, and landscape architecture. The institution targets students, researchers, and professionals in these fields, offering a range of study programs and fostering collaboration with industry and public sectors. The website reflects a well-established educational entity with a strong market position in Norway and internationally. Technically, the site is built on the Vortex CMS platform, hosted on infrastructure associated with the University of Oslo, and employs modern web technologies with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are absent. Privacy compliance is well addressed with comprehensive policies and GDPR adherence. Overall, the site is professional, trustworthy, and content-rich, supporting the institution's credibility and reputation.

N

Norske arkitekters landsforbund

arkitektur.no

67

Arkitektur.no is a well-established Norwegian architecture media portal operated by Norske arkitekters landsforbund. It provides comprehensive news, project showcases, opinion pieces, and job listings targeted at architects and design professionals in Norway. The website demonstrates a strong market position within the Norwegian architecture sector, supported by consistent branding and professional content. Technically, the site employs modern web technologies including Vue.js, hCaptcha for form security, and integrates advertising via Adnuntius. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a positive user experience. Security posture is solid with HTTPS enforcement and CAPTCHA protection, although explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant with GDPR, and maintains good privacy practices.

Transborder Studio is a small architecture practice founded in 2013, specializing in architecture, urbanism, and interior design with a focus on sustainable and cultural projects. The website serves as a portfolio showcasing key projects primarily located in Norway and Venice. The business targets clients interested in green living and cultural spaces, positioning itself as a niche player in the architecture sector. Technically, the website uses modern web standards with HTML5, CSS3, and JavaScript, and images are delivered via the imgix CDN. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, and no contact information or incident response details are provided, which impacts trust and compliance. Overall, the site is professional and functional but could improve in transparency and security best practices.

S

Snøhetta

snohetta.com

58

Snøhetta is a globally recognized transdisciplinary architecture and design firm focused on creating meaningful places that connect societies and the environment. Their website showcases a broad portfolio of projects across architecture, landscape, interior, product, and brand experience disciplines, targeting clients and partners in the design and real estate sectors. The digital infrastructure is modern, leveraging lazy loading, video loops, and a likely Craft CMS backend, hosted on a CDN for performance. Security posture is moderate with HTTPS and CSRF tokens present but lacking explicit security headers and formal privacy or cookie policies. The absence of WHOIS data reduces domain trustworthiness, though the professional content and social media presence support legitimacy. Overall, the site is well-designed and user-friendly but would benefit from enhanced privacy compliance and security transparency.

N

Norges teknisk-naturvitenskapelige universitet

ntnu.no

64

NTNU (Norges teknisk-naturvitenskapelige universitet) is Norway's leading technical and natural sciences university with campuses in Trondheim, Gjøvik, and Ålesund. The institution serves approximately 40,000 students and holds primary responsibility for higher technology education in Norway. The website reflects a mature digital presence with comprehensive educational content, research information, and student life resources. It is built on a modern technology stack including Liferay CMS, Bootstrap, and various analytics tools, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response details are not publicly disclosed. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site demonstrates high professionalism, trustworthiness, and alignment with the institution's mission.

B

Dein City-Guide & Stadt-Magazin mit Aktivitäten für Basel | BaselLive

basellive.ch

57

BaselLive.ch is a local media platform serving as a city guide and lifestyle magazine for Basel, Switzerland. It provides curated content including event listings, cultural stories, shopping guides, and culinary tips targeting residents and visitors interested in exploring Basel. The platform leverages social media channels and newsletters to engage its audience and promote city activities. Technically, the website uses modern web technologies with JavaScript modules, CSS, and integrates advertising via AdButler and analytics through Plausible and Google Tag Manager. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the site enforces HTTPS and uses asynchronous script loading but lacks explicit security headers and formal privacy or cookie policies. No contact emails or phone numbers are explicitly provided, and no vulnerability disclosure or incident response information is found. Overall, the website is safe, trustworthy, and well-positioned as a local media outlet but would benefit from enhanced privacy compliance and security transparency.

R

Ringier Magazine AG

boleromagazin.ch

63

Bolero is a Swiss online magazine operated by Ringier Magazine AG, focusing on fashion, culture, beauty, and premium lifestyle content targeted primarily at women with style. The website is professionally designed with consistent branding and good content quality, serving as a reputable media outlet within the Swiss market. The technical infrastructure leverages modern web technologies including Ring Publishing CMS, Google Tag Manager, and OneTrust for cookie compliance, ensuring a moderate to good performance and user experience across devices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are not publicly available. Overall, the website demonstrates a solid digital maturity with good SEO and advertising transparency. The domain registration is privacy protected but consistent with the brand's legitimacy. No adult or questionable content is present, making it safe for general audiences.

K

Konnektiv Kollektiv GmbH

konnektiv.de

44

Konnektiv Kollektiv GmbH is a Berlin-based agency specializing in sustainable and ethical digital transformation primarily in the public sector and international development contexts. Their services include developing privacy-friendly open-source software, consulting on digital sovereignty, and providing training and moderation on inclusive digital transformation. The company collaborates globally with NGOs, foundations, local innovators, and government institutions, focusing on Africa, Asia, and Latin America. Technically, the website is built on WordPress with modern plugins and themes, hosted via Schlund Technologies, and uses Matomo analytics with privacy-conscious settings. Security posture is good with HTTPS and no visible vulnerabilities, though security headers and formal policies could be improved. Privacy compliance is partial with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-structured, reflecting a credible small non-profit entity.

I

IG Rottaler Ernte

erntefest.ch

47

The website erntefest.ch represents the IG Rottaler Ernte, a small regional organization dedicated to organizing the annual Rottaler Erntefest, a cultural and culinary event celebrating the Rottaler region in Switzerland. The site provides information about the event, its history, partners, and sponsors, targeting local audiences interested in regional traditions and products. The business model is community and non-profit focused, emphasizing regional culture and local product promotion. Technically, the website is built with basic HTML, CSS, and JavaScript without a detected CMS or advanced frameworks. It offers moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is minimal with no detected HTTPS enforcement or security headers, and no incident response or vulnerability disclosure information is provided. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism or terms of service. Overall, the site is trustworthy and consistent with its regional cultural mission but would benefit from improved security and privacy practices.

A

Aargauische Kantonalbank

akb.ch

29

Aargauische Kantonalbank is a leading financial services provider operating primarily in the Canton of Aargau and the Olten-Gösgen-Gäu region in Switzerland. The website reflects a professional banking institution offering a range of financial products and customer support services. The company maintains a strong market position as a regional bank with a clear focus on its local clientele. The digital presence is built on a modern technical infrastructure leveraging Liferay CMS, React, and Clay UI components, ensuring a responsive and user-friendly experience. Integration with Google Tag Manager and Jentis Analytics indicates a mature approach to user behavior tracking and marketing analytics. Security posture is robust with HTTPS enforcement, script nonce usage, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly visible. Overall, the website demonstrates a high level of professionalism and trustworthiness suitable for a financial institution.

PostBus Ltd operates a comprehensive regional and local bus transportation network throughout Switzerland, providing essential public transit services, special trips, and leisure excursions. The company maintains a professional and user-friendly website that supports multiple languages and offers extensive customer service resources, including ticket purchases and lost property services. The website reflects a mature digital infrastructure with modern technologies such as Google Tag Manager, Coveo search integration, and Usercentrics consent management, indicating a high level of digital maturity and compliance with privacy regulations. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, though explicit security policies and incident response details are not published. Overall, the website and domain registration data align well, confirming the legitimacy and trustworthiness of the business.

T

Tarifverbund A-Welle

a-welle.ch

10

Tarifverbund A-Welle operates as a regional public transportation tariff association in Switzerland, providing ticketing, subscriptions, zone plans, and travel information services primarily for the A-Welle region. The website is professionally designed and targets general public users including commuters and travelers within the region. The business model focuses on facilitating public transport access through digital and physical ticketing solutions, supported by partnerships such as SwissPass. Technically, the website is built on TYPO3 CMS, employs modern web technologies, and integrates Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a moderate to good performance profile. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. Strategic recommendations include enhancing security transparency and incident response readiness to further strengthen trust and compliance.

P

planval AG

planval.ch

57

Planval AG is a Swiss consultancy specializing in sustainable development, policy design, and knowledge management for municipalities, regions, and businesses. Their website presents a professional and consistent brand image with clear contact information and multiple office locations in Switzerland. The company targets stakeholders involved in societal, ecological, and economic challenges, offering services that guide complex projects to successful outcomes. Technically, the website uses modern JavaScript frameworks (Vue.js), service workers, and responsive design, providing a moderate performance and good mobile optimization. SEO and accessibility are basic but adequate. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking formal security policies and headers. Overall, the site is trustworthy, safe, and compliant with GDPR, with no detected vulnerabilities or suspicious content. The WHOIS data aligns well with the business claims, reinforcing legitimacy. Strategic improvements could focus on enhancing security policies, incident response transparency, and accessibility features.

M

Maison de la Tourbière

mdt-ne.ch

60

Maison de la Tourbière is a small Swiss ecotourism establishment focused on scientific, cultural, and hospitality services dedicated to the study, promotion, and protection of peatlands. The website is professionally designed using the Wix platform, providing a good user experience with clear content relevant to its target audience interested in environmental conservation and ecotourism. The technical infrastructure is modern and leverages Wix's Thunderbolt framework, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though explicit security headers and privacy policies are missing, representing areas for improvement. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

E

EKZ

energiefranken.ch

60

Energiefranken is a Swiss online platform operated by EKZ that provides a comprehensive database of funding programs related to energy and mobility. It serves Swiss companies and private individuals seeking financial support for energy efficiency and mobility projects, supporting the national Energy Strategy 2050. The platform is supported by reputable partners including Faktor Journalisten AG, EnergieSchweiz, and Energie-Experten, enhancing its credibility and data accuracy. Technically, the website uses modern JavaScript and privacy-focused analytics (Plausible), with good mobile optimization and accessibility features. Security posture is solid with HTTPS and CSRF protections, though additional security headers and explicit security policies could improve it. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

E

EnergieSchweiz

local-energy.swiss

66

The website local-energy.swiss represents EnergieSchweiz, a Swiss federal government program aimed at promoting energy efficiency and renewable energy through voluntary measures targeted at cities, municipalities, and regions. The site provides information on various programs such as project funding, energy regions, smart city initiatives, and mobility solutions. The content is professionally presented, consistent with Swiss government branding, and designed to serve a public sector audience. Technically, the website employs modern web standards with responsive design and uses MailerLite for email marketing. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and privacy compliance mechanisms such as cookie consent and privacy policies. WHOIS data is privacy protected, which is typical for government-related domains, and the domain appears legitimate and consistent with its stated purpose. Overall, the site is trustworthy and serves as an authoritative resource for energy-related programs in Switzerland.

B

Bundesamt für Umwelt BAFU

onlinetool-klimaanpassung.ch

65

The website www.onlinetool-klimaanpassung.ch is an official Swiss government platform operated by the Bundesamt für Umwelt (BAFU) under the Eidgenössisches Departement für Umwelt, Verkehr, Energie und Kommunikation (UVEK). It provides an online tool aimed at Swiss municipalities to help them understand and adapt to local climate change risks. The platform offers localized hazard information and practical measures based on experiences from comparable communities, positioning itself as a trusted resource for public sector climate adaptation efforts. Technically, the site is built using modern web technologies including Angular 17.3.8 and Kendo UI components, ensuring a contemporary user experience. The site is multilingual (German, French, Italian) and includes video content to engage users. While the site is moderately optimized for performance and mobile use, there is room for improvement in accessibility and SEO. No major technical issues or vulnerabilities were detected in the provided HTML content. From a security perspective, the site uses HTTPS and employs some best practices such as disabling video downloads. However, explicit security headers are not visible in the HTML content, and no vulnerability disclosure or incident response information is provided. Privacy compliance is partially addressed with a privacy and contact page, but no cookie consent mechanism is evident. Overall, the security posture is adequate but could be enhanced with additional headers and transparency. The overall risk assessment is low given the official nature of the site, absence of suspicious content, and consistent WHOIS data confirming legitimacy. Strategic recommendations include implementing security headers, adding cookie consent, improving accessibility, and publishing a vulnerability disclosure policy to strengthen trust and compliance.

D

Das Gebäudeprogramm

dasgebaeudeprogramm.ch

68

Das Gebäudeprogramm is a Swiss government-supported initiative focused on promoting energy efficiency in buildings through subsidies and consulting. The website serves as an information hub for private homeowners and builders in Switzerland, providing detailed guidance on energy-saving measures, subsidy applications, and success stories. The program is positioned as a key pillar in Swiss energy and climate policy, backed by federal and cantonal authorities. Technically, the website employs modern web standards with HTTPS, security headers, and Matomo analytics, reflecting a mature digital infrastructure. The security posture is strong with no evident vulnerabilities, though privacy compliance could be enhanced by adding cookie consent mechanisms and explicit data retention policies. Overall, the site is professional, trustworthy, and well-aligned with its governmental mission.

O

okaj zürich

okaj.ch

47

okaj zürich is a well-established non-profit umbrella organization dedicated to coordinating and supporting open, associative, and church-based child and youth work in the canton of Zürich, Switzerland. With a history spanning 100 years, it serves approximately 600 member organizations and operates under a mandate from the canton government. The website effectively communicates its mission, projects, and events, targeting professionals in youth work, government officials, and member organizations. The organization emphasizes education, networking, and advocacy through various projects and publications.

W

Werkstatt F

werkstatt-fischenthal.ch

59

Werkstatt F is a community development project operated by the Gemeinde Fischenthal, focusing on local initiatives such as biodiversity, community engagement, and educational projects. The website serves as an informational platform for residents and stakeholders, providing updates on projects, events, and results. The site is hosted on Squarespace, leveraging modern web technologies and providing a responsive user experience. While the site is well-structured and visually consistent, it lacks formal privacy and cookie policies, which are important for compliance with data protection regulations. Security posture is adequate with HTTPS enabled, but could be improved by adding security headers and incident response information. Overall, the website is trustworthy and serves its community purpose effectively.

B

Bundesamt für Statistik (BFS)

dashboard-agglomeration.ch

43

The website dashboard-agglomeration.ch is an official Swiss government portal managed by the Bundesamt für Statistik (BFS), providing detailed statistical data and visualizations about the 52 agglomerations in Switzerland. It serves researchers, policymakers, urban planners, and the general public interested in Swiss urban development and demographic statistics. The site uses modern web technologies including JavaScript, TailwindCSS, and a specialized visualization library (dynvis.js) to deliver interactive content. The technical infrastructure appears solid with good mobile optimization and accessibility, though performance is moderate and SEO optimization is basic. Security posture is moderate with HTTPS likely enabled but lacking explicit security headers and published security policies. Privacy compliance is low due to absence of privacy and cookie policies or consent mechanisms. Business credibility is high given the official government affiliation and consistent domain registration data. Overall, the site is trustworthy and safe for general audiences but could improve in privacy and security transparency.

2

2038 | Home

2038.xyz

9

2038.xyz is a cultural and artistic project presenting a vision of a future society through multimedia storytelling and expert collaboration across various disciplines including architecture, ecology, and technology. The website serves as a platform to showcase films, publications, and expert insights related to the project, which is positioned as a niche cultural initiative with international exhibition presence. Technically, the site is built on modern web technologies such as Gatsby and React, hosted likely via GoDaddy, and optimized for mobile with good SEO practices. However, it lacks advanced security configurations such as DNSSEC and security headers, and does not provide privacy or cookie policies, which impacts compliance and trust. No contact information or incident response channels are provided, limiting user engagement and transparency. Overall, the site is professionally designed and content-rich but could improve in security and privacy compliance to enhance trustworthiness.

FAR frohn&rojas is a small, networked architectural design and research practice operating internationally with locations in Berlin, Santiago de Chile, and Los Angeles. The website presents basic information about the firm and its services but lacks detailed business or contact information. The technical infrastructure is based on WordPress CMS with common JavaScript libraries, providing moderate performance and basic mobile optimization. Security posture is limited, with no evident security headers or privacy policies, and the absence of WHOIS registration data raises concerns about domain legitimacy. Overall, the site is professional in content but requires improvements in security, compliance, and transparency to enhance trust and credibility.

station.plus is an online TV station dedicated to communicating architecture as a discipline that impacts society and everyday life. The platform uses video content to explore architectural themes beyond traditional plans and models, emphasizing societal and political implications. The website presents a rich catalog of documentary series and thematic content aimed at a broad audience interested in architecture and its broader context. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and embeds YouTube videos for content delivery. The site is mobile optimized with good navigation and content relevance. However, there is a lack of visible privacy, cookie, or terms of service policies, and no contact or business registration information is provided, which impacts trust and compliance. Security headers and explicit security policies are not detected, suggesting room for improvement in security posture. WHOIS data is not publicly available due to privacy protections, which is common for media platforms but reduces transparency. Overall, the site is professional and content-rich but would benefit from enhanced privacy, security, and contact transparency.

O

Oslo Architecture Triennale

oslotriennale.no

50

Oslo Architecture Triennale is a cultural institution organizing architecture-related exhibitions, journals, films, and urban labs primarily targeting architects, urban planners, cultural institutions, and the general public interested in architecture and urbanism. The website presents a professional and consistent brand image with rich content and partnerships with reputable organizations. Technically, the site uses modern web technologies including Google Analytics and Imgix for image optimization, though it still relies partially on deprecated Universal Analytics. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy and cookie policies. No WHOIS data is publicly available due to privacy protection, which is common for Norwegian domains and does not raise immediate concerns. Overall, the website is trustworthy and professionally maintained but would benefit from improved privacy compliance and security best practices.

A

ARCH+ Verlag GmbH

archplus.net

57

ARCH+ Verlag GmbH operates a well-established German architecture and urbanism magazine with a strong digital presence. The website serves as a platform for magazine sales, event promotion, and architectural discourse, targeting professionals, students, and enthusiasts in the architecture sector. The business model centers on publishing quarterly issues in print and digital formats, supplemented by events and advertising. The company holds a leading position in its niche market in Germany with international outreach through English content and social media engagement. Technically, the website employs modern web standards, including HTML5, CSS3, and JavaScript, with embedded video content and Google Tag Manager for analytics and marketing. The site is hosted on Namespace4You infrastructure and shows moderate performance with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though improvements are recommended such as enabling DNSSEC and adding security headers. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and aligns well with the company's business objectives.

N

New Generations

newgenerationsweb.com

36

New Generations is a European media and cultural platform focused on emerging architectural practices since 2013. It provides a space for knowledge exchange, events, publications, and networking for architects across Europe. The website is built on SilverStripe CMS, uses modern web technologies including Bootstrap and jQuery, and integrates Google Analytics and reCAPTCHA for user interaction and spam protection. The security posture is moderate with HTTPS enabled and reCAPTCHA implemented, but lacks some security headers and DNSSEC. Privacy and cookie policies are absent, which impacts compliance. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

R

Reka

reka.ch

70

Reka operates as a Swiss-based company specializing in family-friendly holiday and leisure services, primarily through its Reka-Card discount payment system and holiday offerings in Switzerland and Europe. The website reflects a professional and consistent brand presence targeting families and leisure travelers. Technically, the site employs modern web standards including HTML5, CSS3, and Bootstrap grid, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks visible security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance and security transparency are recommended to enhance trust and compliance.

B

Burgergemeinde Bern

bgbern.ch

48

Burgergemeinde Bern is a municipal government entity serving the city and canton of Bern, Switzerland. It provides a broad range of community services including social welfare, environmental stewardship, cultural activities, urban development, sports, education, and scientific engagement. The website reflects its role as a public sector organization with clear communication and community outreach. Technically, the site is built on the Plone CMS platform, leveraging modern JavaScript libraries and frameworks to deliver a responsive and user-friendly experience. The presence of Matomo analytics indicates a privacy-conscious approach to user data collection. Security posture is solid with HTTPS enforced and CSRF protections in place, though there is room for improvement in implementing security headers and explicit cookie consent mechanisms. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's identity. Overall, the website is professional, trustworthy, and well-aligned with its governmental mission.

V

Vee24

vee24.com

64

Vee24 operates as an enterprise-focused technology company specializing in video chat and virtual consultation platforms designed to enhance digital customer experiences. Their services target luxury retail, beauty, home furnishing, automotive, and financial services sectors, positioning them as a key player in video commerce and virtual appointments. The website reflects a mature digital presence with professional branding, clear messaging, and a focus on increasing sales and customer satisfaction through innovative digital engagement tools. Technically, the website leverages modern web technologies including React, JSON-LD structured data, and custom scripts hosted on dedicated CDNs. The site is mobile-optimized, accessible, and SEO-friendly, with fast loading times and a clean user interface. Privacy and cookie compliance are well implemented, with clear policies and consent mechanisms in place. From a security perspective, the site uses HTTPS and secure form inputs but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or malicious content were detected, and trust is bolstered by certifications such as AICPA SOC and reputable client logos. The absence of WHOIS data is a minor concern but does not significantly detract from the overall trustworthiness. Overall, Vee24 presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security transparency and header implementation would further enhance their security posture and trust.

F

Feratel Medien Technologien AG

feratel.ch

67

Feratel Medien Technologien AG is a Swiss-based technology company specializing in tourism and media solutions. The company offers a range of B2B services including marketing, upselling, service platforms, data strategies, communication, and interface development. Positioned as an established player in the DACH region, Feratel targets tourism industry professionals and media companies with a comprehensive suite of technology-driven services. The website reflects a professional and consistent brand image with clear navigation and good content quality. Technically, the website is built on TYPO3 CMS and integrates modern tools such as Cookiebot for consent management and Google Tag Manager for analytics. The site is mobile optimized and employs standard web technologies including JavaScript and CSS. Performance is moderate with good SEO and basic accessibility features. Security is well addressed with HTTPS enforcement and multiple security headers, though explicit security and incident response policies are not publicly documented. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. The site uses extensive tracking and marketing tools but manages user consent effectively. Overall, the website demonstrates a high level of trustworthiness and professionalism. Strategically, Feratel should consider publishing explicit security and incident response policies to enhance transparency and trust. Accessibility improvements and regular audits of third-party scripts would further strengthen the security and user experience. The domain registration data aligns well with the business claims, supporting legitimacy and credibility.

B

bexio AG

bexio.ch

74

bexio AG is a Swiss-based company founded in 2013, providing comprehensive business software solutions tailored for small businesses, startups, and self-employed individuals. Their SaaS platform offers a wide range of services including contact management, sales process automation, expense and accounting management, payroll, and integrated e-banking. Positioned as a trusted Swiss SME software provider, bexio serves over 90,000 customers and benefits from strong partnerships with reputable organizations such as Mobiliar and UBS. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website employs modern web technologies including Alpine.js, Google Tag Manager, and Usercentrics for consent management, ensuring a fast, mobile-optimized, and SEO-friendly platform. Security best practices are observed with HTTPS enforcement, security headers, and secure form handling. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The absence of WHOIS domain registration details is a notable concern, slightly impacting business credibility, but the overall digital presence and trust signals mitigate this risk. Overall, bexio demonstrates a mature digital infrastructure and a secure, privacy-conscious environment suitable for its target SME audience. Strategic recommendations include publishing detailed security policies, incident response plans, and vulnerability disclosure information to enhance transparency and trust further.

Davos Klosters is a prominent tourism organization promoting holidays and outdoor activities in the Swiss Alps, specifically in the Graubünden region. The website offers comprehensive information and booking options for skiing, hiking, biking, and cultural events, targeting tourists seeking alpine experiences. The company holds a strong market position as a leading alpine destination with a professional online presence and integrated e-commerce capabilities. Technically, the site is built on modern frameworks like Nuxt.js and Vue.js, ensuring fast performance, mobile optimization, and good SEO practices. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although dedicated security and incident response policies are not explicitly found on the site. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, professional, and well-aligned with its business goals.

M

Musik Basel

musik.bs

56

Musik Basel is a regional media platform focused on providing news, event information, and venue details related to the music scene in Basel, Switzerland. The website targets music enthusiasts and residents interested in cultural events and music news within the Basel region. It operates primarily as a content publishing platform with a focus on local music culture and events. Technically, the website is built using modern web technologies including the Nuxt.js framework and Vue.js, with integrations such as Google Tag Manager and Google Maps API for enhanced user experience and analytics. The site demonstrates good mobile optimization, SEO practices, and a professional design consistent with its regional media focus. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers, indicating a solid security posture. However, it lacks a cookie consent mechanism despite using tracking scripts, and there is no publicly available security policy or incident response information. No vulnerabilities or suspicious content were detected. Overall, Musik Basel presents a trustworthy and professional online presence for its niche audience. Strategic improvements in privacy compliance and transparency around security policies would further enhance its credibility and user trust.

BURGUNDER is a small Swiss-based e-commerce retailer specializing in semi-professional outdoor gear. The website is built on the Shopify platform, leveraging its e-commerce capabilities and integrations. The product catalog includes various outdoor gear items, targeting outdoor enthusiasts seeking quality equipment. The business appears to be relatively young, founded around 2020, consistent with the domain registration date. The website presents a professional design with clear navigation and product presentation, although direct contact details such as emails or phone numbers are not provided, relying instead on a contact form. Privacy and cookie policies are minimal, with only a terms page detected that may contain some privacy information. The site uses common marketing and analytics tools including Meta pixel and Mailchimp, indicating moderate user tracking.

K

kühne wicki GmbH

kuehnewicki.com

57

kühne wicki GmbH is a Swiss-based interdisciplinary futures research and consulting firm specializing in Futures Research, Development, Implementation, and Futures Literacy. Founded in 2017, the company serves organizations and individuals interested in strategic foresight, scenario planning, and transformative future-oriented processes. Their market position is that of a specialized boutique consultancy with a strong focus on innovation and future competencies, supported by a professional team and reputable clients. The website reflects a high level of professionalism, with detailed project case studies and team profiles, indicating a mature business presence. Technically, the website is built using modern JavaScript frameworks (Nuxt.js/Vue.js) and integrates Google Analytics and Tag Manager for tracking. Hosting is provided by Hostpoint AG, a reputable Swiss hosting provider. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. SEO practices are good with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS but lacks important security headers and DNSSEC is not enabled. No privacy or cookie policies are present, which is a compliance gap especially under GDPR. No incident response or security contact information is provided. The site does not show signs of vulnerabilities or malicious content but could improve its security posture by implementing recommended headers and policies. Overall, the website is trustworthy and professional with minor gaps in privacy compliance and security hardening. Strategic recommendations include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and publishing incident response information to enhance trust and compliance.