Security Directory

A

Albrecht JUNG GmbH & Co. KG

jung.de

72

Albrecht JUNG GmbH & Co. KG operates a professional website focused on manufacturing and selling high-quality electrical switches, smart home technology, and building automation systems. The company positions itself as a leader in innovative building technology with a strong emphasis on design and sustainability. The website targets architects, electrical installers, and end customers interested in smart home solutions. Technically, the site is built on the Shopware 6 platform, leveraging modern JavaScript libraries and performance monitoring tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and content security policies, though additional headers could enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies and consent management. However, WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy, though the website content and branding strongly suggest a legitimate business presence. Overall, the site is professional, secure, and user-friendly, serving as a credible digital front for the company.

Z

Zwischengas AG

zwischengas.com

64

Zwischengas AG operates zwischengas.com, the largest German-language online platform dedicated to classic automobiles, including oldtimers, youngtimers, and historic motorsport. The website offers detailed reports, news, event coverage, a marketplace for buying and selling vehicles and parts, and premium subscription services for an ad-free experience. The company targets classic car enthusiasts and collectors primarily in the German-speaking region, with a strong presence in Switzerland. The business model combines advertising, premium subscriptions, and marketplace services, positioning Zwischengas as a leading media and community platform in its niche. Technically, the website employs a mature technology stack including jQuery, Bootstrap, Google Tag Manager, and various consent management tools to ensure GDPR compliance. The site is mobile-optimized with good SEO and accessibility features, though some improvements could be made in accessibility and security headers. The integration of social login options via Google and Facebook enhances user experience and security. From a security perspective, the site enforces HTTPS and uses consent management for cookies and tracking. While no critical vulnerabilities were detected in the provided content, the absence of some security headers and the lack of visible incident response or security policy pages suggest areas for improvement. The WHOIS data is missing or unavailable, which is unusual but does not detract significantly from the site's legitimacy given the professional presentation and business information. Overall, Zwischengas.com is a professional, content-rich platform with strong privacy compliance and a solid security posture. Strategic recommendations include enhancing security headers, conducting regular security audits, and improving accessibility to further strengthen trust and compliance.

Bikes, Music & More is a German niche media website focused on the biker and music scenes, providing event coverage, party reports, and lifestyle content. Founded in 2013, it serves a small but dedicated audience interested in biker culture and music events. The website operates on WordPress with common plugins for SEO and advertising, and it maintains a consistent brand presence with regular content updates and social media engagement, primarily via Facebook. The business model centers on media content and advertising partnerships with local and regional businesses.

H

Höhenpass

hoehenpass.de

48

Höhenpass operates a specialized e-commerce platform focused on providing fall protection equipment, inspection services, and employee training. The company positions itself as an expert in safety solutions, targeting businesses and professionals requiring personal protective equipment against falls. The website is well-structured with clear navigation and a comprehensive product catalog, supported by a Shopware CMS platform and Cloudflare DNS services. Technical infrastructure includes modern JavaScript libraries and Google Analytics for tracking, indicating a mature digital presence. Security posture is solid with HTTPS enforced and Cloudflare integration, though the absence of explicit security policies and security headers suggests room for improvement. Privacy compliance is basic, with cookie consent mechanisms present but no visible privacy or cookie policies. Overall, the website is professional, trustworthy, and safe for general audiences.

D

Done Sweden AB

doneservices.se

56

Done Sweden AB operates a digital platform connecting private consumers in Sweden with certified and insured installers specializing in electrical, plumbing, kitchen, and bathroom home installations. The company positions itself as a trusted intermediary offering fixed-price and express services with a strong emphasis on customer satisfaction, evidenced by high Trustpilot ratings and app store reviews. Their business model leverages a mobile app and web presence to streamline booking, quoting, and project management, targeting homeowners in major Swedish cities. Technically, the website is built on Webflow CMS with integrations including Google Analytics, Google Tag Manager, Cookiebot for consent management, Intercom for customer support, and Trustpilot for social proof. The site is well-optimized for mobile and SEO, with fast performance and modern JavaScript libraries.

D

Discord

discordstatus.com

59

Discordstatus.com serves as the official status page for Discord, a leading communication platform primarily targeting gamers and online communities. The site provides real-time and historical data on system performance, including uptime metrics and incident reports for various core services such as API, Media Proxy, Gateway, Push Notifications, Search, Voice, and Client components. The platform is built on Atlassian's Statuspage infrastructure, ensuring reliable and professional status communication. The target audience includes Discord users, developers, and administrators who require transparency on service availability and issues. From a technical perspective, the website demonstrates a mature digital infrastructure leveraging modern web technologies including jQuery, Google reCAPTCHA Enterprise for bot protection, and AWS Cloudfront CDN for fast content delivery. The site is mobile-optimized, accessible, and SEO-friendly with proper meta tags and structured content. Security best practices are evident with HTTPS enforcement, multiple security headers, and secure subscription forms with OTP verification mechanisms. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, DNSSEC is not enabled, which could be considered for enhanced DNS security. Privacy compliance is supported through links to Atlassian's comprehensive privacy policy and terms of service, though no explicit cookie consent mechanism is present on this status page. Contact information is limited to subscription forms and a link to Discord's support site, with no direct emails or phone numbers disclosed. Overall, discordstatus.com is a professional, secure, and trustworthy platform that effectively communicates service status to its users. It aligns well with Discord's brand and operational transparency goals, supporting enterprise-scale service delivery and user engagement.

Delius Klasing Corporate Publishers operates as a specialized corporate publishing company focused on producing high-quality magazines, books, and videos for premium automotive and industrial clients such as Porsche, Mercedes-AMG, Bugatti, and Volkswagen. The company holds a solid market position within the niche of corporate publishing, targeting corporate clients and automotive enthusiasts. The website is built on TYPO3 CMS with a modern but basic technical infrastructure, utilizing common JavaScript libraries and frameworks. While the site is professionally designed and content-rich, it lacks advanced privacy compliance features such as cookie consent and GDPR-specific disclosures on the portfolio page. Security posture is moderate with no visible security headers or incident response policies, and no analytics or tracking scripts detected, indicating minimal user tracking. Contact information is clearly presented with named contacts and physical addresses in Germany, enhancing business credibility. Overall, the website is functional, trustworthy, and well-branded but could improve in privacy compliance and security best practices.

S

Särnmark Assistans AB

sarnmark.se

69

Särnmark Assistans AB is a pioneering Swedish company specializing in personal assistance and rehabilitation services, with over 30 years of experience. The company operates nationwide with multiple local offices and emphasizes personalized, safe, and transparent assistance tailored to individual needs. Their services include legal advisory support, customer models for assistance, and rehabilitation programs, including a facility in Spain. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong accessibility features. Technically, the site leverages modern web technologies such as Webflow CMS, Google Tag Manager, Microsoft Clarity, and Cloudflare for performance and security. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be explicitly confirmed. The absence of WHOIS data for the exact queried domain is a minor concern but likely due to querying the subdomain rather than the root domain. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

SPREADING APPS SAS

static-sb.com

67

SPREADING APPS SAS operates the SPREAD platform, a comprehensive marketing solution focused on customer lifecycle management including acquisition, conversion, and loyalty. The platform integrates marketing automation, CRM, loyalty and referral programs, and multichannel communication tools tailored for e-commerce merchants, retailers, and tourism professionals. With over 900 marketers and 300+ e-commerce clients, SPREAD holds a solid position in the French marketing SaaS market. The website is professionally designed, content-rich, and well-branded, reflecting a mature digital presence. Technically, the website leverages modern web technologies including Webflow CMS, Google Tag Manager, Crisp chat, and Calendly for demos. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility basics in place. Security posture is good with HTTPS enforced and some security best practices observed, though explicit security headers could be improved. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. No WHOIS data is available due to privacy protection, which is common for SaaS businesses. The lack of exposed registrant data does not detract from the overall trustworthiness given the professional presentation and trust signals such as client testimonials and industry memberships. No critical security vulnerabilities or suspicious patterns were detected. Overall, SPREAD presents a trustworthy, professional SaaS marketing platform with a solid technical foundation and good privacy practices. Strategic improvements in security headers and incident response transparency could further enhance its security posture.

C

Conversion Flow

conversionflow.co

51

Conversion Flow is a specialized Webflow development agency targeting SaaS companies and startups. They offer services including Webflow website development, migration from WordPress, SEO optimization, and integration with client tech stacks. The company emphasizes fast, reliable, and transparent service with a focus on helping SaaS businesses scale their marketing websites. Their market position is that of a niche agency with 4 years of experience and a portfolio of reputable SaaS clients. Technically, the website is built on Webflow with modern technologies such as Google Fonts, jQuery, and Plausible Analytics. The site is well-optimized for performance, mobile responsiveness, and SEO. Hosting is provided by Webflow's CDN, ensuring fast load times and reliable uptime. The site uses minimal tracking and integrates a third-party booking system via iframe. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security or incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. The domain uses privacy protection in WHOIS, which is justified for this business type. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe. Overall, Conversion Flow presents a professional and trustworthy front with strong business credibility and technical implementation. The main areas for improvement include enhancing privacy compliance, publishing security policies, and adding cookie consent mechanisms to align with best practices and regulatory requirements.

M

Maldonado Digital LTDA

mdndigital.co

65

MDN Digital, operated by Maldonado Digital LTDA, is a Brazilian-based marketing and technology consultancy specializing in supporting startups, scale-ups, and enterprises to plan, develop, and monetize digital products efficiently. The company positions itself as an extension of clients' marketing and technology departments, offering a comprehensive suite of services from strategic planning to product development and performance marketing. Their market presence is reinforced by global client experience and a proprietary methodology focused on innovation and results. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Tag Manager, Calendly integration, and Finsweet Cookie Consent for privacy compliance. The site demonstrates excellent design quality, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. Hosting is managed by Webflow, ensuring reliable performance and security. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes standard security headers. Cookie consent mechanisms are implemented, supporting GDPR compliance. However, the site lacks a dedicated security policy and incident response contact information, which are recommended for enhanced transparency and readiness. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, MDN Digital presents a professional, trustworthy, and well-structured online presence aligned with its business objectives. The risk profile is low, with recommendations focusing on improving security policy disclosures and incident response readiness to further strengthen trust and compliance.

B

Berlingo Media

berlingomedia.se

53

Berlingo Media is a creative advertising agency based in Stockholm, Sweden, specializing in disruptive and alternative outdoor marketing solutions. Founded in 2020, the company offers a range of unique advertising formats including large-scale outdoor billboards, facade projections, mobile street TV advertising, and guerrilla marketing campaigns. Their market position is that of a niche player focused on innovative out-of-home advertising in the Nordic region. The website reflects a modern and professional digital presence built on Webflow, leveraging advanced animation libraries and Google Tag Manager for analytics. Security measures include HTTPS, CAPTCHA protection on contact forms, and a comprehensive cookie consent mechanism, although some security headers could be improved. Privacy compliance is strong with detailed policies and GDPR-aligned consent. Overall, the website and domain registration data indicate a legitimate, small-sized business with a clear focus and good technical maturity.

C

Channel Factory

channelfactory.com

72

Channel Factory is a media technology company specializing in AI-powered video advertising solutions primarily for YouTube and social media platforms. Their platform focuses on brand suitability, contextual targeting, and media optimization to deliver superior ROI for advertisers. The company holds recognized certifications such as the YouTube Measurement Program badge and kidSAFE Seal Program, reinforcing its credibility in the digital advertising space. The website demonstrates a mature digital presence with advanced technical infrastructure including modern JavaScript libraries, HubSpot integration, and comprehensive cookie consent management. Security posture is strong with HTTPS enforced and bot management via Cloudflare, though explicit security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. Overall, the company presents a professional, trustworthy image with extensive business and technical maturity.

I

INTE BARA POST AB

intebarapost.se

70

Inte Bara Post AB is a Swedish full-service office management and logistics company offering a range of services including courier (Bud), event management, facility maintenance (Allt-i-allo), staffing (Bemanning), and food and beverage services (Skafferi). The company positions itself as an environmentally conscious leader in its sector, emphasizing sustainability with commitments like Net Zero 2040 and ISO certifications. Their target audience includes businesses of various sizes seeking flexible office management solutions. The website reflects a professional and consistent brand image with clear service offerings and a strong focus on customer satisfaction and environmental responsibility. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Typekit fonts, Swiper.js for sliders, and Google Tag Manager for analytics and marketing tags. The site is well-optimized for mobile devices, loads quickly, and includes accessibility features. Cookie consent management is implemented via CookieTractor, ensuring GDPR compliance. The site integrates multiple tracking and advertising services including Google Analytics, Facebook Pixel, Google Ads, and LinkedIn Insight Tag. From a security perspective, the site enforces HTTPS and uses Cloudflare for CDN and WAF services, although explicit security headers like Content-Security-Policy and X-Frame-Options are not detected. No vulnerabilities or exposed sensitive data were found in the HTML content. However, the absence of a published security policy or incident response contact information is noted. The WHOIS lookup for the domain www.intebarapost.se failed, indicating a possible domain registration anomaly or subdomain usage, which slightly reduces trustworthiness. Overall, the website presents a credible and professional business with good technical implementation and privacy compliance. The main risk lies in the unclear domain registration status, which should be investigated further. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and clarifying domain registration details to improve trust and compliance.

H

HLTHY

hlthy.se

53

HLTHY is a Swedish SaaS provider offering a comprehensive journalsystem tailored for rapidly growing clinics in Sweden. Their platform integrates clinical record keeping, marketing, and financial management into a single user-friendly interface. The website demonstrates a professional design with clear messaging targeting healthcare providers seeking to streamline operations and grow their patient base. Technically, the site is built on Webflow with modern integrations such as Intercom for support and Calendly for scheduling, indicating a mature digital infrastructure. Security posture is generally strong with HTTPS and no visible vulnerabilities, though the absence of security headers and privacy policies suggests room for improvement. The lack of WHOIS data for the domain raises concerns about domain legitimacy and registration status, impacting overall trust. Strategic recommendations include enhancing privacy compliance, adding security headers, and clarifying domain registration details to improve credibility and compliance.

S

Shoplazza

shoplazzastatus.com

61

Shoplazza Status is a dedicated status page for the Shoplazza e-commerce platform, providing real-time and historical system performance data. The website is professionally designed, mobile-optimized, and leverages Atlassian Statuspage technology to deliver transparent operational status updates. The platform targets e-commerce merchants and users who rely on Shoplazza's services for storefront, checkout, API, reporting, and third-party integrations. The business model is SaaS-based, focusing on providing reliable e-commerce infrastructure and transparency to its customers. Technically, the site uses modern web technologies including jQuery, Google reCAPTCHA Enterprise for form security, and is hosted on Amazon Cloudfront CDN ensuring fast performance and global availability. The site is well-structured with good SEO and accessibility features, though it lacks some advanced security headers. The forms for subscription to incident updates are secured with reCAPTCHA, indicating a focus on preventing abuse. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks visible security headers such as CSP or HSTS. No exposed sensitive data or vulnerabilities were detected in the HTML content. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness. The privacy policy is present and indicates GDPR compliance, but cookie policy and terms of service are missing. Contact information and incident response details are not provided, limiting transparency in security and compliance. Overall, the website presents a professional and secure front for status reporting but would benefit from enhanced transparency in domain registration, security policies, and contact information. Strategic improvements in security headers, cookie consent, and incident response contact details would strengthen trust and compliance posture.

W

Web Site Advantage

websiteadvantage.com.au

63

Web Site Advantage is a small Australian SaaS company specializing in technical SEO solutions for BigCommerce online stores, primarily through their proprietary apps Tag Rocket and SEO Rich Snippets. Founded in 2010 by Tony McCreath, the company leverages deep expertise in BigCommerce SEO to serve e-commerce businesses seeking improved tag management and structured data implementation. The website reflects a focused niche market position with clear branding and consistent messaging. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, Google Analytics, and Cloudflare DNS services. The site is well-structured with good SEO practices and mobile optimization, though it lacks some advanced accessibility features. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS with strong SSL configuration and implements error and network monitoring scripts. However, it lacks explicit security headers, a published security policy, and incident response contact information. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific disclosures. No vulnerabilities or suspicious content were found. Overall, the website is professional, trustworthy, and well-aligned with its business goals. Strategic improvements in privacy compliance, security headers, and transparency around security policies would enhance its security posture and regulatory adherence.

S

Swiss Data Science Center

datascience.ch

69

The Swiss Data Science Center (SDSC) is a reputable joint venture between EPFL and ETH Zurich, established in 2017 to advance data science and machine learning applications across academic and industrial sectors in Switzerland. The center offers a broad range of services including research projects, publications, open research initiatives, educational courses, workshops, and industry collaborations. Their website reflects a high level of professionalism, with clear navigation, comprehensive content, and strong branding consistent with their academic affiliations. Technically, the site is built on Webflow CMS, leveraging modern JavaScript libraries and privacy-respecting analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforcement and use of reCAPTCHA, though some security headers and explicit policies could be improved. Overall, the SDSC website demonstrates a mature digital presence aligned with its mission and audience.

Leeads AB is a leading Swedish partner specializing in online and outdoor advertising services, serving publishers and advertisers to create successful digital business outcomes. Established in 2010, the company holds a strong market position with a comprehensive portfolio including programmatic advertising, digital out-of-home, transit, and creative outdoor solutions. Their website reflects a professional and modern digital presence, leveraging Webflow CMS and integrating key marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Security posture is robust with HTTPS enforcement and standard security headers, though there is room for improvement in privacy compliance and incident response transparency. Overall, Leeads demonstrates a mature digital infrastructure and trustworthy business credibility.

S

Sawayo by Infoniqa

sawayo.de

67

Sawayo by Infoniqa offers a comprehensive digital HR management platform focused on simplifying employer obligations such as time tracking, absence management, digital personnel files, and compliance documentation. The company targets HR teams and employers primarily in Germany and the DACH region, positioning itself as a trusted and GDPR-compliant SaaS provider with a strong emphasis on ease of use and legal security. The website reflects a mature digital presence with multi-language support and integration with mobile and web apps. Technically, the site is built on Webflow with modern analytics and consent management tools, ensuring good performance and privacy compliance. Security posture is solid with HTTPS, secure cookie flags, and privacy-friendly analytics, though it lacks explicit security policy and incident response information. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility, with room for improvement in publishing dedicated security and incident response documentation.

I

Infoniqa Holding GmbH

infoniqa.com

68

Infoniqa Holding GmbH is a well-established provider of HR, payroll, and finance software solutions primarily targeting the Mittelstand and SMEs in the DACH region. The company offers cloud-based software and outsourcing services, supported by a large team of experts across multiple locations in Austria, Germany, and Switzerland. Their market position is strong, with over 40,000 customers and a reputation for quality and compliance, including ISO/IEC 27001 certification. The website reflects a professional and modern digital presence, leveraging Webflow CMS, Cloudflare CDN, and various marketing and analytics tools such as Google Tag Manager and HubSpot Forms. Security measures include HTTPS, cookie consent management, and bot protection via Cloudflare Turnstile captcha. However, the WHOIS data is unavailable, which slightly reduces trust but is likely due to privacy protection. Overall, the site demonstrates a mature security posture and compliance with GDPR, making it a trustworthy platform for its target audience.

S

SoHa Treuhand AG

soha-treuhand.ch

61

SoHa Treuhand AG is a Swiss fiduciary and consulting firm based in Zurich, specializing in personalized accounting, payroll, tax consulting, and CFO as-a-Service offerings. The company emphasizes a blend of digital solutions and personal client relationships to optimize efficiency without sacrificing service quality. Their market position targets SMEs and business owners seeking modern yet personal fiduciary services. Technically, the website is built on Webflow with modern animation libraries like GSAP and uses Cloudflare Turnstile for spam protection on contact forms, indicating a good level of digital maturity. Security posture is solid with HTTPS and captcha integration, though security headers and formal policies are absent. Overall, the site is professional, trustworthy, and well-structured, but could improve privacy compliance and security transparency.

A

Avaaz

avaaz.org

75

Avaaz is a large, globally recognized non-profit organization focused on empowering people worldwide to engage in social and political activism through online petitions and campaigns. The website serves as a hub for community mobilization, offering multilingual support and interactive features such as live activity feeds and community maps. Technically, the site employs modern JavaScript libraries including jQuery, Leaflet, and GrowthBook, and integrates tracking and social media SDKs from Google and Facebook. The site is secured with HTTPS and demonstrates good privacy compliance with clear privacy and cookie policies aligned with GDPR standards. Security posture is solid with secure forms and encrypted connections, though explicit security headers could be improved. The WHOIS data is unavailable due to privacy protection and a malformed WHOIS query, which is typical for non-profits seeking to protect registrant privacy. Overall, Avaaz's website is professional, trustworthy, and well-optimized for user engagement and global outreach.

D

Duss Treuhand GmbH

dusstreuhand.ch

61

Duss Treuhand GmbH is a small Swiss finance services company based in Zug, specializing in fiduciary services, tax consulting, auditing, and accounting. The company targets private individuals, SMEs, and larger enterprises, emphasizing personalized and reliable service. Their website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on Webflow, leveraging modern web technologies and providing a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and a cookie consent mechanism, but lacks advanced security headers and formal privacy or incident response policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

L

Lanebeacon

lanebeacon.com

55

Lanebeacon is a small technology company founded in 2016 that offers a machine learning-driven SaaS platform focused on customer success and conversion optimization. Their platform analyzes user behavior patterns to suggest actions that improve product adoption through real-time monitoring and in-app messaging. The website is professionally designed using Webflow CMS and hosting, featuring modern web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site is mobile optimized and provides a clear user experience, though it lacks comprehensive privacy and cookie policies. From a security perspective, the website uses HTTPS but lacks important security headers and DNSSEC is not enabled, which are areas for improvement. No vulnerability disclosures or incident response information are provided, and contact information is limited to a single email address. There are no signs of tracking or analytics services beyond basic scripts, indicating minimal user tracking. The domain registration data is consistent with the business age and shows no suspicious patterns, supporting the legitimacy of the website. Overall, the website scores moderately well in content quality, technical implementation, and business credibility but scores low on privacy compliance and security posture due to missing policies and security headers. Strategic improvements in these areas would enhance trust and compliance. There are no indications of adult or unsafe content, making the site appropriate for a general business audience.

O

Onboarding Pro - Handcrafted user onboarding experience for your web application

onboarding.pro

56

Onboarding Pro is a specialized professional service focused on designing handcrafted user onboarding experiences for web applications. The website positions itself as an expert resource with over 400 products helped, offering onboarding reviews, case studies, and educational toolkits. The business targets web app product owners and developers seeking to improve user conversion and retention through effective onboarding. Technically, the site is built and hosted on Webflow, utilizing jQuery for some scripting. The site is mobile-optimized with a clean, professional design and clear navigation, reflecting a mature digital presence. Security posture is moderate; HTTPS is implied via Webflow hosting, but explicit security headers and privacy policies are absent, indicating room for improvement in compliance and security best practices. The WHOIS data is privacy protected, which is common for small professional services, and no suspicious patterns were detected. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

A

Adalyser

adalyser.com

66

Adalyser is a specialized SaaS platform focused on simplifying and automating the TV advertising lifecycle, including research, planning, measurement, optimization, and management. The platform integrates industry data sources such as CARIA and BARB to provide up-to-date campaign insights. The website is professionally designed with modern technologies like Vue.js and Element UI, offering a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies are missing. The domain is well-established since 2011, indicating business maturity and legitimacy. Overall, Adalyser presents a trustworthy and professional digital presence in the media technology sector.

S

SmartSurvey

smartsurvey.io

67

SmartSurvey is a UK-based technology company specializing in advanced online survey software and feedback solutions. Positioned as the UK's leading feedback platform, it serves a broad range of sectors including government, healthcare, education, and non-profits. Their SaaS business model offers tiered plans from free to enterprise, emphasizing GDPR compliance, UK data hosting, and enterprise-grade security. The company is trusted by over 600,000 customers and holds certifications such as ISO27001 and FSQS accreditation. Technically, the website is built on the Webflow platform, leveraging modern JavaScript libraries like GSAP for animations and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is well-optimized for performance, mobile responsiveness, and accessibility, with a comprehensive cookie consent mechanism ensuring privacy compliance. From a security perspective, SmartSurvey demonstrates strong practices including HTTPS enforcement, ISO27001 certification, and GDPR compliance. However, explicit security headers and a public vulnerability disclosure policy are not evident. The WHOIS data for the domain is unavailable due to a query on the subdomain rather than the registered domain, but the website's professionalism and trust signals strongly support its legitimacy. Overall, SmartSurvey presents a mature, secure, and compliant digital presence with a strong market position in the survey software industry. Strategic recommendations include enhancing security header implementation, publishing vulnerability disclosure information, and providing incident response contacts to further strengthen trust and security posture.

O

Onpro Team

onpro.team

55

Onpro Team is a small, specialized product team offering services in product management, UX design, and full-stack development to startups and businesses looking to build and scale web products. The team highlights their experience with multiple startup accelerators and successful product builds, positioning themselves as a nimble and experienced partner for MVP development and ongoing product tasks. Technically, the website is built on Webflow with jQuery, indicating a modern but straightforward infrastructure optimized for good mobile experience and basic SEO. However, the site lacks advanced analytics, tracking, and security headers, which limits its technical maturity. Security posture is minimal with no published policies or security best practices visible, and WHOIS data is unavailable due to TLD restrictions and privacy protections, which slightly reduces trust. Overall, the website is professional and content-rich but would benefit from enhanced security and privacy compliance measures.

The website piedmont.com currently serves as a domain landing page indicating the domain may be for sale. It lacks substantive business content, company information, or branding beyond the domain name itself. The site uses common web technologies such as Bootstrap, jQuery, Font Awesome, and Google Analytics for tracking. However, no privacy, cookie, or terms of service policies are present, and no direct contact emails or phone numbers are provided, only a contact form. WHOIS data is unavailable, suggesting the domain may be unregistered, parked, or held for sale, which impacts trust and legitimacy assessments. From a technical perspective, the site is moderately optimized with responsive design and standard libraries but lacks advanced SEO and accessibility features. Security posture is minimal with no detected security headers and unknown SSL configuration. The contact form is secured with required fields but no additional security measures are evident. Tracking scripts indicate moderate user tracking without clear privacy compliance. Overall, the security posture is basic with no critical vulnerabilities detected but also no advanced protections. The absence of privacy and cookie policies, combined with missing WHOIS data, lowers the trustworthiness and compliance standing. The site is safe in terms of content, containing no adult or explicit material, but provides minimal business or user engagement value. Strategic recommendations include implementing privacy and cookie policies, improving security headers and SSL configuration, adding direct verified contact information, and clarifying domain registration status to enhance trust and compliance.

P

PartnerPage

partnerpage.io

67

PartnerPage is a SaaS platform specializing in partner directory solutions for SaaS companies, enabling easy promotion and discoverability of service and technology partners. The company positions itself as a leading provider in this niche, offering automated and branded partner directory management with minimal technical overhead. The website demonstrates a professional and modern digital presence, leveraging Webflow CMS, Google Tag Manager, HubSpot analytics, and Hotjar for user insights and marketing. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data due to privacy protection is typical for SaaS businesses and does not detract from the site's legitimacy. Overall, PartnerPage presents a trustworthy and well-executed online platform with room for enhanced security transparency.

T

TREUHAND|SUISSE

traumberuf-treuhand.ch

59

TREUHAND|SUISSE is a reputable Swiss fiduciary association dedicated to promoting the fiduciary profession through education, career support, and industry partnerships. The website serves as a comprehensive resource for students, career changers, and professionals interested in fiduciary careers, offering detailed information on career paths, internships, and educational programs. The association maintains strong partnerships with educational institutions and fiduciary firms, reinforcing its market position as a key player in the Swiss fiduciary sector. Technically, the website is built on Webflow CMS with modern JavaScript libraries and integrates analytics tools like Google Tag Manager and Hotjar, indicating a mature digital infrastructure. Security posture is solid with HTTPS and security headers implemented, though there is room for improvement in privacy compliance and published security policies. Overall, the site is professional, trustworthy, and well-structured, supporting its business goals effectively.

C

Cross River

crossriverbank.com

62

Cross River is a prominent financial services organization specializing in API-driven banking infrastructure that enables businesses and fintechs to embed financial services seamlessly. The company positions itself as a hybrid between a traditional bank and a technology innovator, offering a broad suite of products including payment rails, card issuing, digital lending, and capital solutions. Their market presence is reinforced by partnerships with major players such as Plaid, Visa, Mastercard, and Stripe, highlighting their integral role in the fintech ecosystem. Technically, the website demonstrates a mature digital infrastructure leveraging modern web technologies such as Webflow CMS, jQuery, Swiper.js, and analytics tools like Google Tag Manager and Hotjar. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing a professional and user-friendly experience. The presence of cookie consent mechanisms and privacy policies indicates attention to privacy compliance. From a security perspective, the site enforces HTTPS and uses secure login portals, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data is a notable anomaly for a financial institution, warranting further verification of domain ownership and registration. Overall, Cross River's website reflects a high level of professionalism, technical sophistication, and business credibility. However, improvements in transparency around security policies and domain registration details would enhance trust and compliance posture.

L

Lunchgate AG

foratable.com

59

Lunchgate AG operates the foratable platform, a leading restaurant reservation system focused on enhancing guest experience and operational efficiency for restaurants and hotels primarily in German-speaking regions. The company offers a SaaS model with tiered subscription plans, integrating AI features and multiple system integrations to optimize table management and reduce no-shows. The website reflects a mature digital presence with modern technologies, responsive design, and comprehensive content tailored to hospitality professionals. Security posture is solid with HTTPS and privacy compliance mechanisms, though explicit security policies and incident response contacts are absent. Overall, the platform presents a trustworthy and professional service with strong market positioning.

A

Aliant

canaldedenuncias.com.br

65

Aliant is a well-established Brazilian company specializing in ethical reporting channels and compliance solutions, serving over 1000 organizations with a strong market presence for more than 25 years. Their website reflects a mature digital infrastructure built on WordPress, integrating modern analytics and marketing technologies such as HubSpot, Google Analytics, Facebook Pixel, and Microsoft Clarity. The site is well-optimized for SEO and mobile devices, providing a professional user experience with clear navigation and comprehensive content. Security measures include HTTPS enforcement, Google reCAPTCHA, and Cloudflare DNS, although additional security headers and a formal security policy could enhance their posture. Contact information and trust signals such as certifications and client testimonials are prominently displayed, supporting business credibility.

N

NetActuate

rootbsd.net

68

NetActuate is a technology company specializing in global edge infrastructure, cloud, networking, and AI services, with a strong emphasis on BSD-based hosting solutions. The company has integrated RootBSD since 2015, expanding its footprint and service capacity. Their market position is that of a medium-sized, reputable provider with a focus on high-performance, scalable infrastructure for enterprises and developers. The website reflects a professional and consistent brand with comprehensive service offerings including AI inference, GPU as a service, colocation, and advanced networking solutions. Technically, the website is built on Webflow CMS and leverages modern analytics and tag management tools such as Google Tag Manager, Matomo, and Plausible. The site is fast, mobile-optimized, and well-structured with good SEO and accessibility practices. Hosting appears to be on NetActuate's own infrastructure or via Cloudflare CDN. The cookie consent mechanism is robust and GDPR compliant, indicating a mature privacy posture. Security-wise, the site enforces HTTPS and employs layered consent management, but lacks explicit security headers and a published security.txt file. Certifications such as SOC 1, SOC 2, SOC 3, and PCI DSS are prominently displayed, enhancing trust. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include adding explicit security headers, publishing vulnerability disclosure information, and clarifying incident response contacts to further enhance security posture and trust.

C

carbon-connect AG

carbon-connect.ch

67

carbon-connect AG is a Swiss-based company specializing in ESG and sustainability consulting, focusing on CO2 footprint calculation, emissions reduction strategies, and climate protection projects. Established in 2013, it serves primarily SMEs, non-profits, and public sector clients in the DACH region. The company offers a comprehensive suite of services including corporate and product carbon footprinting, sustainability reporting, and verified climate compensation projects. Their market position is strengthened by ISO 9001 certification and a broad partner network. Technically, the website is built on Webflow CMS with integrations to HubSpot for forms and analytics, and Google Tag Manager for marketing and tracking. The site is well-optimized for performance, mobile responsiveness, and SEO, employing modern web technologies and consent management mechanisms to comply with GDPR. From a security perspective, the site enforces HTTPS and integrates cookie consent with Google Consent Mode and HubSpot. While no critical vulnerabilities or exposed sensitive data were found, the absence of explicit security headers and a published security policy or incident response contact are areas for improvement. No vulnerability disclosure or security.txt file is present. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. The business is legitimate, transparent, and well-positioned in its niche. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.

B

Biosyntia ApS

biosyntia.com

56

Biosyntia ApS is a Danish company specializing in the sustainable production of natural ingredients for nutrition, hair health, and skin health products. Their product portfolio includes BioB7, ForskoPro, CitriVive, and eraGlow, targeting manufacturers and partners in the health and beauty sectors. The company positions itself as a niche player focusing on sustainability and natural alternatives. The website is built on the Webflow platform, utilizing modern web technologies such as jQuery, Google Fonts, and Typekit, with moderate performance and good mobile optimization. Security measures include the use of Google reCAPTCHA to prevent automated abuse, but the site lacks visible security headers and formal privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS registration data for the domain is a significant concern, as it raises questions about domain legitimacy despite the professional appearance of the website. Overall, the website presents a good user experience and professional content but requires improvements in security posture and privacy compliance to enhance trust and regulatory adherence.

A

Aliant

canalconfidencial.com.br

66

Aliant is a well-established Brazilian company specializing in ethical whistleblowing and reporting channels, serving over 1000 organizations and millions of users for more than 25 years. The company offers a comprehensive suite of services including complaint channels, emergency reporting, diversity and inclusion channels, and LGPD compliance solutions. Their market position is strong, supported by notable client logos and certifications such as Pró-Ética. Technically, the website is built on WordPress with a modern tech stack including multiple analytics and marketing tools, ensuring good performance and SEO optimization. Security posture is solid with HTTPS, CSP headers, and reCAPTCHA integration, though additional security headers could enhance protection. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms in place. Overall, the website is professional, trustworthy, and content-rich, targeting businesses seeking compliance and ethical reporting solutions.

S

SES Spar European Shopping Centers GmbH

ses-european.com

65

SES Spar European Shopping Centers GmbH is a specialized developer, builder, and operator of shopping centers primarily in Austria and Slovenia, managing a portfolio of 32 shopping locations across Central and Southern Europe. The company offers core services including development, leasing, center and asset management, and promotion areas, targeting retail property owners and investors. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive business information. Technically, the site is built on WordPress with modern libraries such as jQuery and integrates GDPR-compliant cookie consent mechanisms and Google Tag Manager for analytics. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though some security headers are missing and no explicit security or incident response policies are published. The absence of WHOIS registration data for the domain is a notable anomaly, reducing trustworthiness despite the professional site and business indicators. Overall, the site scores well on content quality, privacy compliance, and business credibility but should improve transparency on domain registration and security policies.

C

Capacity Europe

capacityeurope.com

58

Capacity Europe is a well-established annual event focused on global connectivity and digital infrastructure, attracting over 3,500 decision-makers from the telecommunications and related industries. The website provides comprehensive event details, including agenda, speakers, sponsors, and registration options, positioning itself as a key industry networking platform in Europe. Technically, the site uses modern JavaScript libraries, asynchronous loading of analytics and marketing scripts, and implements HTTPS with a cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS and some security best practices, but lacks explicit security headers and a published privacy policy, which are areas for improvement. The absence of WHOIS registration data raises concerns about domain legitimacy, though the professional content and branding mitigate some risk. Overall, the site is functional, professional, and targeted at industry professionals, but would benefit from enhanced transparency and security documentation.

T

The COOL Company

coolmedia.ai

56

The COOL Company operates the website coolmedia.ai, offering an AI-powered platform designed to automate the creation, buying, and optimization of advertising campaigns across multiple channels. The platform targets advertisers and marketing professionals seeking to simplify complex campaign management through AI-driven ad creative generation, media strategy formulation, campaign launch, and real-time performance optimization. The company positions itself as an innovative player in the marketing technology space with a SaaS business model. Technically, the website is built on Webflow with modern web technologies including Google Fonts, jQuery, and embedded Vimeo video content, hosted on Webflow's CDN infrastructure. The site demonstrates good design quality, mobile optimization, and SEO basics but lacks comprehensive accessibility features. Security posture is adequate with HTTPS enabled and secure form handling, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies and no GDPR indicators. Contact information is limited to an email subscription form with no direct emails or phone numbers. The domain is newly registered with privacy protection, consistent with a startup profile. Overall, the website is professional and functional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

Aegean Airlines is a prominent Greek airline operating a comprehensive online platform for flight bookings, travel packages, and customer loyalty programs. The website serves a broad international audience with multilingual support and integrates various travel-related services such as car rentals, hotel bookings, and airport transfers. The company holds a strong market position as a member of the Star Alliance, enhancing its credibility and reach. Technically, the website employs a modern tech stack including AngularJS, jQuery, and Sitecore CMS, supported by advanced analytics and marketing tools like Google Analytics, Oracle Infinity, and Hotjar. The site is well-optimized for mobile devices and accessibility, with structured data enhancing SEO performance. From a security perspective, the site enforces HTTPS, implements security headers, and uses secure forms with validation. No critical vulnerabilities or exposed sensitive data were detected. However, minor compliance gaps exist such as the absence of a visible cookie consent mechanism and a dedicated terms of service page. Overall, the website demonstrates a mature digital presence with strong business credibility and security posture. Strategic improvements in privacy compliance and transparency would further enhance trust and regulatory adherence.

C

ClayPaky Merchandise

claypakymerch.com

65

ClayPaky Merchandise operates an official e-commerce platform specializing in sustainable and branded merchandise related to the Claypaky lighting technology brand. The website targets professionals and enthusiasts in the event and studio lighting sectors, offering clothing, accessories, and gadgets. The site is built on the Shopware 6 platform, leveraging modern e-commerce technologies and multiple plugins to enhance user experience and functionality. The technical infrastructure is solid, with HTTPS enforced and a responsive design optimized for mobile devices. However, the absence of visible privacy and cookie policies indicates gaps in compliance with data protection regulations. Security posture is generally good, but the lack of security headers and incident response information suggests room for improvement. The WHOIS data is missing, raising concerns about domain legitimacy, though the website content appears professional and consistent with an official brand store.

B

Behavioral data j.d.o.o.

defractal.com

67

DeFractal is a specialized data management and revenue growth platform targeting media publishers who want to optimize their first-party data usage and increase advertising revenue. The platform offers advanced audience segmentation, AI-driven monetization assistants, and retail media capabilities, positioning itself as a comprehensive solution for programmatic advertising optimization. The website content is professional and clearly communicates the business value and services offered. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and tracking pixels from LinkedIn and Leadfeeder, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and secure form handling, but lacks security headers and explicit cookie consent mechanisms. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration status, which impacts overall trust. Contact information is clearly provided, enhancing business credibility. Strategic improvements in privacy compliance and security practices would strengthen the platform's trustworthiness and regulatory alignment.

H

HELLO UMI S.L.

landbot.io

74

Landbot is a mature SaaS company founded in 2017, specializing in AI-powered chatbot generation for marketing, sales, and customer service teams. The company offers a no-code platform enabling businesses to create conversational experiences across multiple channels including WhatsApp, web, and Facebook Messenger. Positioned as a leader in its market segment, Landbot serves over 12,000 businesses globally and is recognized by G2 with multiple badges. The website reflects a professional brand with consistent messaging and strong trust indicators such as SOC2 and GDPR compliance. Technically, the site is built on modern web technologies including Webflow CMS, Cloudflare DNS, and integrates analytics and consent management tools, ensuring good performance and user experience. Security posture is strong with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and explicit security policies are not published. Overall, Landbot demonstrates a high level of digital maturity and business credibility.

B

Badel 1862

antiquepelinkovac.hr

49

Antique Pelinkovac is a premium Croatian herbal liqueur brand operated under the parent company Badel 1862. The website serves as a brand showcase, providing detailed storytelling about the product's heritage, production process, product range, and enjoyment tips including cocktail recipes. The brand positions itself as a historic and premium offering in the hospitality sector, targeting adult consumers with a focus on quality and tradition. The website is built on WordPress, hosted by a Croatian hosting provider, and employs modern web technologies including Cookiebot for GDPR-compliant cookie consent and an age verification overlay to restrict underage access. The site demonstrates good digital maturity with responsive design, SEO optimization, and social media integration. Security posture is solid with HTTPS and basic protections, though lacks explicit security headers and incident response disclosures. Privacy compliance is partially met via cookie consent but lacks a visible privacy policy page. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

ServSafe Brands, operated by National Restaurant Association Solutions, LLC, is a leading provider of training, certification, and benefits for professionals in the restaurant and hospitality industry. The website presents a comprehensive portfolio of brands including ServSafe, AHLEI, ServSuccess, and others, targeting career development and safety compliance in hospitality. The company positions itself as a market leader with a strong brand presence and a broad service offering tailored to hospitality professionals. Technically, the website employs modern marketing and analytics technologies such as Google Tag Manager, Microsoft Application Insights, and Marketo forms, built on the Kentico CMS platform. The site is well-structured, mobile-optimized, and demonstrates good SEO and accessibility practices. However, some security best practices like DNSSEC and security headers could be improved. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks explicit published security policies or incident response contacts. Privacy compliance is supported by a comprehensive privacy policy and terms of use, though no cookie consent mechanism was detected despite tracking scripts in use. Overall, the security posture is solid but could benefit from enhancements in security headers and transparency. The domain WHOIS data aligns well with the business claims, showing a consistent registration history and no privacy protection, indicating legitimacy. No blocking or WAF challenges were detected, allowing full content analysis. The site content is safe for general audiences, with no adult or questionable content detected.

S

Swiss Polar Institute

swisspolar.ch

64

The Swiss Polar Institute website serves as a professional platform supporting Swiss polar science through funding, collaboration, and outreach. It targets researchers and institutions involved in polar and high-altitude research, providing tailored services and funding opportunities. The website is well-structured, content-rich, and reflects the organization's mission clearly. Technically, it is built on WordPress with modern plugins and frameworks, offering good performance and mobile optimization. Security posture is adequate with HTTPS and some security plugins, but lacks published security policies and incident response information. Privacy compliance is partial, with a privacy and cookie policy present but no active cookie consent mechanism. Overall, the site is trustworthy and credible, with room for improvement in security transparency and privacy compliance.

F

Free Software Foundation Europe

fsfe.org

53

The Free Software Foundation Europe (FSFE) is a well-established non-profit organization founded in 2001, dedicated to advocating for software freedom and empowering users to control technology. The website serves as a comprehensive platform for news, events, campaigns, and community engagement related to free software in Europe. It targets users, contributors, and policy stakeholders interested in digital rights and software freedom. The organization operates with a clear mission and maintains a consistent brand presence with multilingual support and community testimonials. Technically, the website employs a modern yet somewhat dated technology stack including jQuery, Modernizr, and Bootstrap 3. It is hosted under the registrar Gandi SAS and shows moderate performance with good mobile optimization and accessibility. The site lacks a CMS indication, suggesting a custom or static site approach. SEO and metadata are well implemented with comprehensive Open Graph and Twitter card tags. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and visible security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy, though no cookie consent mechanism was found. Contact is primarily via forms and a contact page, with no direct emails or phone numbers publicly listed. Social media presence is limited but includes Mastodon and Peertube. Overall, FSFE's website demonstrates a high level of professionalism, trustworthiness, and content quality suitable for its non-profit advocacy role. Recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, and publishing explicit security and incident response policies to further enhance trust and compliance.