Security Directory

V

Virgin Money Australia

virginmoney.com.au

71

Virgin Money Australia is a prominent financial services provider offering a wide range of products including everyday banking accounts, credit cards, home loans, superannuation, and various insurance products. The website reflects a mature digital presence with a focus on customer rewards and comprehensive financial solutions tailored for the Australian market. The brand is well established with consistent navigation and professional design, targeting retail consumers and businesses in Australia. Technically, the site leverages Adobe Experience Manager as its CMS, integrates multiple analytics and marketing tools such as Google Tag Manager, Amplitude, Adobe Analytics, Hotjar, Facebook Pixel, and LinkedIn Insight Tag, indicating a sophisticated approach to user tracking and marketing optimization. Hosting is supported by Akamai CDN infrastructure, enhancing performance and availability. Security posture is solid with HTTPS enforced and no visible sensitive data exposure; however, the absence of DNSSEC and some security headers suggests room for improvement. Privacy compliance is moderate due to missing explicit privacy and cookie policies in the provided content. Overall, the website is professional, trustworthy, and well-positioned in the Australian financial services sector.

S

SEFE Energy

sefe-energy.fr

51

SEFE Energy is a professional natural gas supplier targeting businesses and professionals in France. It offers tailored energy contracts, energy transition services including carbon compensation and audits, and emphasizes customer service quality. The company is part of the larger SEFE Group, an international energy enterprise owned by the German federal government, with sister sites in the UK, Netherlands, and Germany. The website is well-structured, professionally designed, and provides comprehensive information about its offerings and corporate values. Technically, the site is built on Drupal 10 and integrates modern analytics and marketing tools such as Matomo, Google Tag Manager, and Hotjar, alongside a cookie consent mechanism via Axeptio. The site is mobile-optimized, accessible, and SEO-friendly, with no detected blocking or WAF interference. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. The WHOIS data is not publicly available due to AFNIC privacy policies, but the domain is active and updated recently, consistent with a legitimate business. Contact information is clear, including a company email and physical address. Privacy and cookie policies are present and GDPR compliant. No adult or questionable content is found, making the site safe for general audiences. Overall, SEFE Energy demonstrates a mature digital presence with strong business credibility and a solid security baseline, though it could enhance transparency around security policies and incident response.

A

ALSO Schweiz AG

also-training.ch

57

ALSO Schweiz AG operates a professional IT training platform focused on providing product and solution trainings, certifications, and e-learning services primarily to IT resellers, service providers, and technical professionals in Switzerland. The company holds a strong market position as a leading wholesale and service provider in the IT sector, offering a broad portfolio of trainings including company-specific and online options. Technically, the website is built on a modern Ruby on Rails framework with standard frontend technologies and integrates analytics and user behavior tracking tools such as Google Analytics and Hotjar. Security posture is moderate with CSRF protections in place but lacks explicit security headers and incident response disclosures. Privacy compliance is supported by comprehensive privacy and cookie policies, though a cookie consent mechanism is absent. Overall, the website is professional, trustworthy, and well-structured, serving a clear business purpose with good user experience and content relevance.

W

Wolters Kluwer Hungary Kft.

jogtar.hu

60

Wolters Kluwer Hungary Kft. operates the Jogtár platform, Hungary's leading legal database service providing comprehensive access to Hungarian and EU legal materials, commentaries, case law, and legal documents. The website serves primarily legal professionals and organizations requiring up-to-date legal information through a subscription-based model. The platform is well-branded and consistent with the parent company's identity, Wolters Kluwer.

A

Arts Council England

artscouncil.org.uk

70

Arts Council England is the national development agency for creativity and culture in England, funded by the government and the National Lottery. The organization supports the arts, museums, and libraries by providing funding, research, and strategic guidance to foster cultural growth and accessibility. The website reflects a mature digital presence built on Drupal 10, incorporating modern JavaScript frameworks and consent management tools to ensure compliance and user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are not publicly detailed. Overall, the site is professional, trustworthy, and well-optimized for accessibility and SEO, serving a broad audience including artists, cultural organizations, and the public.

L

Linehub

linehub.com

10

Linehub is a European marketing collective comprising multiple specialized marketing agencies focused on delivering integrated marketing solutions such as check-out marketing, lead generation, and partnership marketing. The company emphasizes empowering people and driving measurable results, leveraging over 25 years of experience. The website is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, and HubSpot, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms, alongside ISO 27001 certification indicating a commitment to information security. However, the absence of WHOIS registration data and lack of explicit incident response contacts present transparency concerns. Overall, the website is professional, secure, and privacy-conscious, serving business clients seeking marketing growth and insights.

Haluxvill Kft. operates a professional e-commerce platform specializing in electrical supplies, serving both retail and wholesale customers primarily in Hungary. The website offers a broad catalog of electrical products, indicating a medium-sized business with a solid regional presence in the energy sector. The technical infrastructure leverages common web technologies such as jQuery, Bootstrap, Google Analytics, and Hotjar, reflecting a moderate level of digital maturity with room for modernization and enhanced performance optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit privacy and terms of service documentation, which are important for compliance and trust. Overall, the site is accessible, well-structured, and professionally branded, though improvements in privacy compliance and security best practices are recommended to strengthen the business's digital trustworthiness and regulatory adherence.

D

DKV Zrt.

dkvejegy.hu

53

DKV Zrt. operates the official electronic ticketing and pass sales platform for public transportation in Debrecen, Hungary. The website offers a comprehensive range of ticket types including general, discounted, daily, and mobile tickets, targeting residents, students, pensioners, and foreign visitors. The platform integrates modern web technologies and provides clear navigation and user-friendly interfaces. Social media integration and official city partnerships enhance its market presence. Technically, the site uses Bootstrap, KeenSlider, Google Analytics, and Hotjar for analytics and user experience improvements. Security posture is solid with HTTPS and CSRF protections, though some security headers could be improved. Privacy compliance is strong with clear cookie consent and privacy policies. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

N

N.S. MÉDIA ÉS VAGYONKEZELŐ Kft.

nemzetisport.hu

10

Nemzeti Sport Online is a leading Hungarian sports news portal operated by N.S. MÉDIA ÉS VAGYONKEZELŐ Kft. The website offers comprehensive sports coverage including football, handball, F1, and other sports, complemented by live sports radio streaming and extensive RSS feeds. The site targets Hungarian sports enthusiasts and maintains a strong market position as a trusted media source. Technically, the site is built on Angular framework with integration of modern analytics and advertising tools such as Google Tag Manager, Hotjar, and Gemius Prism, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and consent management integration, though explicit privacy and cookie policies are not found in the provided content. Overall, the site demonstrates professional design, consistent branding, and high content quality, but could improve privacy compliance and security header implementation.

Grundfos Holding A/S is a global leader in water pump manufacturing and water technology solutions, serving industrial, commercial, and residential markets worldwide. The company emphasizes sustainability and innovation in water management. The website reflects a mature digital presence with extensive use of Adobe Experience Manager, Microsoft Azure hosting, and multiple integrated marketing and analytics tools. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although no explicit vulnerability disclosure or incident response contacts were found. Overall, the site is professional, trustworthy, and compliant with GDPR and privacy standards.

M

Magyar Kézilabda Szövetség

mksz.hu

58

The Magyar Kézilabda Szövetség website serves as the official digital presence of the Hungarian Handball Federation, providing comprehensive information about handball activities, news, competitions, and organizational details in Hungary. It targets handball players, fans, sports professionals, and the broader Hungarian sports community. The site is well-positioned as a national governing body with authoritative content and strong brand consistency. Technically, the website employs modern web technologies including Vue.js, jQuery, and various analytics tools such as Microsoft Clarity, Google Analytics, Hotjar, and Facebook Pixel. The site is mobile-optimized with good performance and SEO practices, although accessibility features could be enhanced. Hosting details are not explicitly identified but the site uses HTTPS with strong security headers. From a security perspective, the site demonstrates good practices with enforced HTTPS, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively supports the federation's mission and provides a positive user experience. Strategic recommendations include publishing security and incident response policies, adding terms of service, and enhancing accessibility compliance.

W

webgearing AG

webgearing.com

10

webgearing AG is a Swiss-based digital agency specializing in online marketing, mobile applications, web development, and corporate websites primarily targeting small and medium enterprises (KMU) in Switzerland. With over 25 years of experience, the company offers a comprehensive suite of services including consulting, UX design, development, hosting, and online marketing. Their market position is supported by a strong portfolio of projects and reputable clients. Technically, the website is built on TYPO3 CMS and integrates modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security-wise, the site enforces HTTPS and cookie consent but lacks explicit security headers and public security policies, which are areas for improvement. The WHOIS data is missing or unavailable, which raises some concerns about domain registration legitimacy despite the professional appearance of the website. Overall, the website is trustworthy and professional but would benefit from enhanced transparency in security and domain registration details.

C

Computer-L.A.N. GmbH

lancloud.cloud

53

LANcloud is a cloud-based seminar and event management software developed by Computer-L.A.N. GmbH, targeting organizers of seminars, coachings, courses, and events primarily in Germany. The platform offers a comprehensive SaaS solution with automated administrative processes, integrated online booking, and compliance with GDPR and GoBD standards. The company positions itself as a reliable and modern solution with a growing customer base and strong trust indicators such as certifications and customer testimonials. Technically, the website is built on WordPress with a modern tech stack, hosted securely on Microsoft Azure, and employs best practices in privacy and security, including SSL encryption and cookie consent management. The security posture is strong, though improvements like enabling DNSSEC and additional security headers are recommended. Overall, the website is professional, secure, and compliant, reflecting a trustworthy business with a clear market niche.

M

Mainstream Public Cloud Services d.o.o.

fitpass.rs

58

Fitpass.rs is a Serbian-based fitness membership platform offering access to a wide range of gyms, fitness studios, pools, and sports centers across Serbia. The business targets both individual consumers and corporate clients seeking wellness benefits for employees. The company appears to be a small-sized entity founded in 2014, with domain registration consistent with its business operations and location. The website is professionally designed with good content relevance and user experience, leveraging modern frontend technologies and multiple analytics tools to monitor user engagement. However, the site lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security posture is moderate with HTTPS enabled but missing advanced security headers and explicit incident response contacts. Overall, the website is functional and trustworthy but would benefit from enhanced privacy and security practices to improve compliance and user trust.

G

GetYourGuide

getyourguide.at

65

GetYourGuide operates as a leading global online marketplace specializing in booking tours, attractions, and travel activities worldwide. The platform targets travelers seeking convenient and direct access to local experiences, positioning itself strongly in the hospitality sector with a large-scale digital presence. The website demonstrates a mature technical infrastructure leveraging modern JavaScript frameworks, third-party analytics, and fraud prevention technologies, ensuring a fast, responsive, and user-friendly experience. Security posture is robust with HTTPS, Content Security Policy, and consent management integrated, although no explicit incident response or vulnerability disclosure pages were found. The absence of WHOIS data slightly impacts trust but is likely due to privacy protection measures common in large enterprises. Overall, the site is professional, secure, and compliant with GDPR, making it a trustworthy platform for travel bookings.

BauNetz interior|design is a specialized German media platform focusing on interior architecture, design, and related innovations. The website offers a rich content experience including projects, products, stories, dossiers, and news, targeting a broad audience interested in interior design. The platform is part of the BauNetz ecosystem, which includes several related portals, indicating a strong market presence in the architecture and design media sector. Technically, the site employs modern web technologies, including JavaScript ES6 modules, Vue.js framework elements, and performance optimizations such as lazy loading and responsive design. Hosting and DNS are managed via Cloudflare, providing security and performance benefits. Security posture is solid with HTTPS enforced and cookie consent managed via Consentmanager.net, though explicit privacy and security policies are not found in the provided content. Overall, the site is professional, trustworthy, and well-optimized for user experience.

BauNetz Wissen is a specialized German-language online portal providing comprehensive knowledge and resources related to architecture and construction technology. It targets professionals such as architects, planners, and engineers, offering thousands of articles, glossary terms, and building case studies. The website is well-established within its niche, supported by a strong partner network of reputable companies in the construction sector. Technically, the site employs modern web technologies including JavaScript frameworks, consent management tools, and analytics services like Hotjar and Google Tag Manager, all integrated with GDPR-compliant consent mechanisms. Hosting and security are enhanced by Cloudflare services, ensuring good performance and SSL encryption. Security posture is solid with HTTPS and consent management, though explicit security headers and incident response policies are not publicly documented. Overall, the site demonstrates high professionalism, excellent content quality, and strong trust indicators, making it a reliable resource in its industry.

C

Conversion Bear

conversionbear.com

66

Conversion Bear operates a SaaS e-commerce solution focused on Shopify merchants, offering Honeycomb Upsell Funnels to increase sales via pre- and post-purchase upsell funnels. The company positions itself as a market leader with over 90,000 customers globally and a strong emphasis on ROI and ease of use. Technically, the website is built on Webflow with integration of modern marketing and analytics tools such as Google Tag Manager, Hotjar, LinkedIn Ads, and Clearbit, indicating a mature digital infrastructure. Security posture is generally good with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published incident response policies. The absence of WHOIS domain registration data is a notable concern, potentially indicating privacy protection or domain registration issues, which slightly impacts trustworthiness. Overall, the website is professional, user-friendly, and well-optimized for mobile and SEO, supporting a credible e-commerce SaaS business.

T

Tidenhub Digital GmbH

website-tutor.com

65

Website Tutor, operated by Tidenhub Digital GmbH, is a specialized freelance service provider focusing on WordPress development and SEO optimization primarily for small businesses and freelancers in Germany. The website presents a professional and well-structured digital presence with clear service offerings including WordPress website creation, training, and SEO consulting. The business leverages modern WordPress technologies and SEO best practices to position itself as a niche expert in the German market. The domain age and registration details align well with the business history, supporting credibility.

T

Toerisme Vlaanderen

toerismevlaanderen.be

64

Toerisme Vlaanderen is the official government tourism organization for the Flanders region in Belgium, focused on strengthening tourism through strategic marketing and knowledge-driven support for tourism partners. The website serves as a comprehensive portal offering information, tools, research, and support services to tourism entrepreneurs and organizations. Technically, the site is built on Drupal 10 and integrates modern analytics and marketing technologies such as Google Tag Manager, Hotjar, and Mautic, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, consent-based cookie management, and no visible vulnerabilities, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations, making it a reliable resource for its target audience.

L

LANcloud

seminarmanagercloud.de

44

LANcloud is a German-based company offering a cloud-based seminar management software solution designed to automate and streamline seminar and course administration. The platform targets educational institutions and seminar providers, offering features such as online booking portals, automated invoicing, participant management, and seminar evaluation. With over 35 years of experience in the market, LANcloud positions itself as a mature and reliable solution in the education technology sector. The website is professionally designed, mobile-optimized, and SEO-friendly, leveraging WordPress and modern plugins. Security posture is good with HTTPS and cookie consent management, though some improvements like DNSSEC and explicit security policies are recommended. Overall, the domain registration is consistent and legitimate, supporting the business claims.

Bayer AG is a globally recognized enterprise operating primarily in healthcare, agriculture, and related life sciences sectors. The website serves as the German country platform, providing localized content, news, and corporate information. Bayer holds a strong market position as a leader in pharmaceuticals and crop science, supported by a large enterprise scale and multiple subsidiaries such as Monsanto and Covestro. The site reflects a professional and consistent brand image with comprehensive content tailored to a broad audience including customers, investors, and partners. Technically, the website is built on Drupal 11, leveraging modern web technologies and third-party services such as Google Analytics, Hotjar, and OneTrust for cookie compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs security best practices including cookie consent mechanisms and security modules. However, explicit security headers like Content-Security-Policy and X-Frame-Options were not confirmed in the HTML and should be verified. No vulnerabilities or exposed sensitive data were detected. The absence of a public incident response or vulnerability disclosure page suggests an area for improvement. Overall, the website is trustworthy, compliant with GDPR, and professionally maintained. The missing WHOIS data is likely due to registry restrictions or privacy protection and does not detract from the site's legitimacy. Strategic recommendations include enhancing security header implementation, publishing incident response policies, and continuous monitoring of third-party libraries for vulnerabilities.

M

Marionette.js

marionettejs.com

55

Marionette.js is an established open source JavaScript framework designed to simplify Backbone.js application development by providing robust views, layouts, and architecture solutions. The website positions Marionette as a developer-focused tool with a strong community presence, including GitHub, Gitter chat, and Twitter. It offers documentation, screencasts, and a Chrome extension for developer tooling. The business model revolves around open source software with community contributions and paid educational content. Technically, the site uses Backbone.js, Marionette.js, and integrates analytics and translation services. The site is well-structured, mobile-optimized, and provides good user experience, though it lacks explicit privacy and cookie policies. Security posture is moderate with HTTPS usage but missing security headers and incident response information. Overall, the site is trustworthy and professional, targeting developers in the technology sector.

J

Jungwacht Blauring Schweiz

jubla.ch

56

Jungwacht Blauring Schweiz is a well-established non-profit youth organization focused on providing meaningful leisure activities and camps for children and adolescents in the German-speaking part of Switzerland. The organization operates through a large network of approximately 400 local groups, offering structured programs and volunteer opportunities. The website reflects a professional and consistent brand image, targeting families and youth participants. Technically, the site leverages modern web technologies including Google Tag Manager, Hotjar, and Google Maps API, built on the TYPO3 Neos CMS framework. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and some security best practices, though explicit security headers and policies are not fully implemented. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the domain registration aligns well with the organization's claims, supporting legitimacy and trustworthiness.

D

Dedrone

dedrone.com

67

Dedrone is a leading provider of AI-driven counter-drone defense solutions, offering a comprehensive suite of products and services designed to protect airspace from unauthorized UAVs. As a part of Axon, Dedrone leverages advanced machine learning and multi-sensor integration to deliver highly accurate drone detection and mitigation capabilities. The company serves a broad range of sectors including government, military, airports, critical infrastructure, and enterprises, positioning itself as a global leader in airspace security technology. The website reflects a mature digital presence with professional design, clear navigation, and extensive content showcasing their technology and customer success stories. Technically, the site employs modern web frameworks, analytics, and marketing tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, privacy policies, and secure forms, although explicit security headers and incident response information could be improved. Overall, Dedrone demonstrates a high level of business credibility and digital maturity, though the lack of WHOIS transparency slightly impacts domain trustworthiness.

A

Axon Enterprise, Inc.

axon.com

70

Axon Enterprise, Inc. is a leading technology company specializing in public safety solutions, including TASER devices, police body cameras, cloud-based evidence management, AI-powered tools, and drone detection systems. The company targets law enforcement, federal agencies, enterprise, fire, EMS, corrections, and campus safety sectors, positioning itself as a market leader with a comprehensive ecosystem designed to protect life and enhance public safety operations. The website reflects a mature digital presence with modern technologies such as React and Next.js, hosted on AWS with strong performance and mobile optimization. Security posture is robust with HTTPS, security headers, and privacy policies in place, though explicit vulnerability disclosure and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting Axon's reputation as a credible enterprise in the public safety technology market.

K

KM-Werbemittel GmbH

laprinta.de

66

laprinta.de is a well-established German e-commerce website specializing in promotional products and advertising gifts, operated by KM-Werbemittel GmbH since 1988. The site offers a broad product range including office supplies, USB and tech gadgets, bags, food and beverages, sustainable items, sports and leisure products, seasonal goods, and more. It targets businesses and organizations seeking customized promotional merchandise, positioning itself as a trusted specialist with over 30 years of market presence. The website features professional design, clear navigation, and consistent branding, supporting a positive user experience.

M

MITSUBISHI MOTORS

mitsubishi-motors.de

64

MITSUBISHI MOTORS Germany operates a professional website showcasing their automotive models, services, and offers with a focus on modern mobility including electric and plug-in hybrid vehicles. The site targets German automotive consumers and provides detailed navigation for models and services. The technical infrastructure is based on TYPO3 CMS with modern frontend technologies and includes comprehensive cookie consent and analytics integration. Security posture is good with HTTPS and cookie consent but lacks explicit security policies or vulnerability disclosures. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

B

BauNetz Media

baunetz.de

68

BauNetz.de is a leading German architecture news portal providing daily updates, architect rankings, office profiles, interviews, competitions, and job listings targeted at architects and planners. The site holds a strong market position as the largest German architecture portal with international coverage. Technically, the website is built on the InterRed CMS platform, utilizing a mix of modern and legacy technologies including jQuery, RequireJS, and various marketing and analytics tools such as Hotjar and Google Tag Manager. The site demonstrates good GDPR compliance with a comprehensive cookie consent mechanism and privacy policy. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements are recommended in security headers and updating legacy libraries. Overall, the website is professional, well-branded, and trustworthy, with a moderate to good technical performance and user experience.

A

Act-On

actonsoftware.com

75

Act-On is a well-established marketing automation software provider founded in 2005, offering AI-driven solutions to help businesses create, measure, and optimize marketing campaigns. The company targets B2B marketers and enterprises, positioning itself as a competitive mid-market to enterprise SaaS platform with a comprehensive suite of services including multichannel marketing, lead scoring, analytics, and sales alignment. The website reflects a mature digital presence with professional design, clear navigation, and strong SEO practices. Technically, the site is built on WordPress using Elementor and integrates multiple marketing and analytics tools such as Google Tag Manager, Hotjar, Cookiebot, and 6sense. Hosting is via Amazon AWS, and the site employs HTTPS with good security headers, although DNSSEC is not enabled. The site demonstrates good privacy compliance with a comprehensive privacy policy and cookie consent mechanism. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but there is room for improvement by enabling DNSSEC and publishing explicit security policies or vulnerability disclosure information. Overall, the site is trustworthy, professional, and compliant with relevant privacy regulations. The risk assessment is low, with no blocking WAF detected and no suspicious WHOIS patterns. Strategic recommendations include enhancing DNS security, formalizing security incident response, and improving accessibility features to further strengthen compliance and user experience.

yesforever.ch is a Swiss-based small business operated by Optimize AG, offering a niche SaaS platform for creating personalized wedding websites. The platform provides tailored features such as gift registries, photo galleries, guest registration forms, and password-protected pages, targeting couples planning weddings and their guests. The business model is subscription-based with free trials and flexible pricing plans. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, Owl Carousel, and integrates analytics tools like Google Analytics and Hotjar, indicating a moderate level of digital maturity. The site is mobile-optimized and presents a professional user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and password protection for certain pages but lacks explicit security headers and published security policies, which are areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

I

invitu

invitu.ch

43

invitu.ch is a Swiss-based online platform specializing in stylish and quick event invitations for private, corporate, and public events. The website offers a user-friendly interface with various event categories and customizable invitation templates, targeting individuals and companies in Switzerland. The business operates as a small-sized entity focusing on digital event invitation services with a clear market niche. Technically, the site employs modern web technologies including Bootstrap, jQuery, FontAwesome, and integrates analytics and user behavior tracking tools such as Google Analytics, Google Tag Manager, and Hotjar. The website is mobile-optimized and presents a professional design with good navigation and content relevance. Security-wise, the site uses HTTPS with appropriate security headers, but lacks some advanced security policies and incident response information. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR explicit statements. Overall, the site is legitimate and trustworthy with room for improvement in privacy and security documentation.

O

Optimize AG

eventlokale.ch

62

eventlokale.ch is a well-established Swiss event portal operated by Optimize AG, offering a comprehensive marketplace for event locations, service providers, and event-related job listings. The platform targets event planners and individuals in Switzerland, positioning itself as the largest event portal in the country. The website provides rich content including editorial articles, event ideas, and the Swiss Location Award information, enhancing its market presence and user engagement. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, with integrations of Google Analytics, Google Tag Manager, and Hotjar for analytics and user behavior tracking. The site is mobile-optimized and features good SEO practices, although accessibility could be improved. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks visible privacy and cookie policies, which are critical for GDPR compliance. No contact emails or phone numbers were found, which may impact user trust and compliance. Overall, the site is professional and trustworthy but should address privacy compliance and contact transparency to enhance its security posture and user confidence.

S

Statsforvalteren

fylkesmannen.no

66

Statsforvalteren.no is the official website of the Norwegian government agency representing the state at the county level. The agency is responsible for implementing decisions, goals, and guidelines from the Norwegian Parliament and government, acting as a vital link between municipalities and central authorities. The website provides access to public services, complaint handling, forms, news, and job postings relevant to the agency's functions. It targets Norwegian citizens, public sector employees, and municipalities, offering content primarily in Norwegian with language options including English and regional languages. Technically, the website employs modern web technologies including Bootstrap for responsive design, JavaScript libraries, and integrates analytics tools such as Azure Application Insights, Hotjar, Maze Analytics, and Siteimprove Analytics. The site is served over HTTPS with good mobile optimization and accessibility features, though explicit security headers are not evident. The site lacks a cookie consent mechanism despite using tracking scripts, which is a privacy compliance gap. From a security perspective, the site demonstrates a solid posture with HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security headers and a published security or incident response policy are areas for improvement. The WHOIS data is unavailable due to Norid's privacy policies, but the domain's .no TLD and consistent government-related content strongly indicate legitimacy and trustworthiness. Overall, Statsforvalteren.no is a professionally maintained government website with good content quality and technical implementation. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and adding security headers to strengthen the security posture and user trust.

E

E.M. StatusPal UG

noticely.io

63

Noticely is a technology startup offering a SaaS platform for hosted status pages and automated incident notifications, targeting small teams and growing companies. The platform emphasizes ease of use, scalability, and fair pricing, positioning itself as a modern alternative in the status communication market. The business is a product of E.M. StatusPal UG, founded in 2025, with a clear focus on technology and customer communication services. The website is professionally designed, mobile-optimized, and integrates modern analytics and consent management tools, reflecting a mature digital infrastructure for a young company. Security posture is solid with HTTPS, privacy protection in domain registration, and cookie consent mechanisms, though there is room for improvement in DNSSEC and security headers. Overall, the site is trustworthy, with transparent business information and active social media presence. Recommendations include enhancing security policies and publishing vulnerability disclosure information to further strengthen trust and compliance.

S

ShareDesk Global Inc.

optixapp.com

65

Optix, operated by ShareDesk Global Inc., is a specialized SaaS provider offering automation-first coworking and flexible workspace management software. The platform emphasizes end-to-end automation, including booking, invoicing, CRM, and branded mobile apps, targeting coworking operators and community managers seeking to streamline workflows and accelerate growth. The website presents a professional, well-branded, and content-rich experience with strong trust signals such as customer testimonials and industry awards. Technically, the site is built on WordPress with modern marketing and analytics tools integrated, including HubSpot, Google Analytics, and Facebook Pixel. Security posture is solid with HTTPS and some security plugins, though explicit security headers and policies are not evident. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a visible cookie consent mechanism. WHOIS data for the domain is missing, which raises concerns about domain registration transparency, though the website content and branding suggest a legitimate business. Overall, the site is mature, professional, and well-optimized but would benefit from enhanced transparency and security disclosures.

H

Holidu Hosts GmbH

bookiply.com

76

Bookiply is a vacation rental management platform focused on helping hosts maximize bookings and reduce administrative workload. It operates primarily in Europe and is part of the Holidu Group, a recognized entity in the hospitality sector. The website offers a comprehensive suite of services including property listing, channel management, and personal support for hosts. The company targets vacation rental owners and agencies, providing an all-in-one solution to increase visibility and revenue. Technically, the website is built using modern web technologies such as React and Next.js, hosted on AWS in Ireland, and integrates multiple analytics and marketing tools including Google Analytics, Hotjar, and Facebook Pixel. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs standard security headers, and uses cookie consent mechanisms aligned with GDPR requirements. However, explicit security policies and incident response contacts are not publicly disclosed, which could be improved. The WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is mitigated by the professional presentation and detailed imprint. Overall, Bookiply presents a trustworthy and professional online presence with strong compliance and technical maturity. Strategic improvements in transparency around security policies and incident response would enhance its security posture and trustworthiness further.

M

MIDI Europe Srl

isuzu.si

61

MIDI Europe Srl operates the official Isuzu regional website for Slovenia and Italy, focusing on the promotion and sales of Isuzu pickup trucks and commercial vehicles. The website serves as a portal for vehicle information, dealer networks, after-sales services, and marketing materials. It targets both individual consumers and business clients interested in Isuzu's transportation solutions within the region. The company has maintained the domain since 2015, indicating a stable market presence. Technically, the website is built on Drupal 7 with a combination of jQuery, Bootstrap, and various UI libraries. It employs modern web practices such as HTTPS, responsive design, and cookie consent mechanisms. However, some technologies like jQuery 1.10 are outdated, and explicit security headers are not evident in the HTML content, suggesting room for security enhancements. From a security perspective, the site enforces HTTPS and uses cookie consent banners aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of a published security policy or incident response contact limits transparency in security governance. Analytics tools like Google Tag Manager and Hotjar are used with user consent, reflecting moderate user tracking. Overall, the website demonstrates a good balance of business credibility, technical implementation, and privacy compliance. Strategic improvements in security headers, updated libraries, and clearer security policies would enhance the security posture and trustworthiness further.

B

Brands for Employees

brandsforemployees.com

61

Brands for Employees is a Swiss-based platform offering weekly exclusive discount deals targeted at employees of participating companies. The website is built using modern web technologies including React and Next.js, hosted behind Cloudflare, and integrates analytics tools such as Hotjar and Cloudflare Insights. The platform aims to provide value through employee-exclusive offers, positioning itself as a niche service in the employee benefits market. Technically, the site demonstrates good mobile optimization and moderate performance, though accessibility features are basic. Security posture is adequate with HTTPS enforced and use of CDN security, but lacks explicit security headers and visible privacy or cookie policies. Contact information and legal disclosures are absent from the main page, which impacts trust and compliance perception. Overall, the site is safe for general audiences and does not contain adult or questionable content.

K

Krüger + Co. AG

krueger.ch

58

Krüger + Co. AG is a Swiss medium-sized company specializing in heating, cooling, humidification, dehumidification, and water damage drying solutions, serving both industrial and residential markets across 21 locations. The company offers a broad range of products and services including emergency heating, climate systems, and consulting, positioning itself as a reliable regional player in the energy sector. Technically, the website is built on WordPress with WooCommerce, enhanced by modern plugins for SEO, multilingual support, and GDPR compliance. Analytics tools like Microsoft Clarity, Google Tag Manager, and Hotjar are used for user behavior insights. Security posture is solid with HTTPS and consent mechanisms, though security headers and explicit policies could be improved. Overall, the website is professional, user-friendly, and trustworthy, with transparent contact information and compliance with privacy regulations.

F

Fibbl

fibbl.com

56

Fibbl is a technology platform specializing in delivering 3D product experiences and content aimed at enhancing B2B sales, go-to-market strategies, and eCommerce efficiency. The company offers services including 3D viewers, virtual try-on solutions, and augmented reality experiences, positioning itself as a key player in the digital product experience market. Founded in 2015, Fibbl has established a medium-sized business presence with a focus on innovative technology solutions for brands. The website infrastructure is built on WordPress, leveraging modern JavaScript libraries such as Swiper.js and integrating multiple marketing and analytics tools including HubSpot, Google Tag Manager, TikTok Pixel, Facebook Pixel, LinkedIn Insight Tag, Dreamdata Analytics, and Hotjar. Cookie consent is managed via Cookiebot, ensuring compliance with cookie regulations and providing users with granular control over cookie preferences. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism, but lacks explicit security policy documentation and incident response contact information. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration is consistent with the business age and shows no suspicious patterns, enhancing trustworthiness. Overall, Fibbl demonstrates a solid technical and business foundation with good privacy compliance and marketing transparency. Strategic improvements include publishing comprehensive privacy and security policies, incident response details, and enhancing security headers to further strengthen the security posture.

L

Léguriviera Groupe

leguriviera-groupe.ch

50

Léguriviera Groupe is a Swiss-based company specializing in the selection and delivery of exceptional fruits and vegetables primarily serving the gastronomy and retail sectors in Suisse romande. The company operates a professional e-commerce platform allowing customers to order fresh produce, including fresh-cut and ready-to-eat products. Their market position is that of a trusted regional supplier with strong local partnerships and a commitment to quality and freshness. The website reflects a mature digital presence with multilingual support and comprehensive customer engagement features. Technically, the website is built on WordPress with WooCommerce and enhanced by various plugins for analytics, cookie compliance, and multilingual support. The infrastructure uses modern web technologies and tracking tools such as Google Analytics, Hotjar, and Google Tag Manager. The site is mobile optimized and SEO friendly, though performance is moderate and accessibility could be improved. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. However, it lacks advanced security headers and a publicly visible security policy or incident response information. No critical vulnerabilities or blocking mechanisms were detected, indicating a generally sound security posture but with room for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its business purpose effectively. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility to further strengthen the site's security and user experience.

D

DLRG Bundesverband

dlrg.de

76

DLRG Bundesverband is Germany's largest voluntary water rescue organization, founded in 1913, with a mission to prevent drowning through education, rescue services, and volunteer engagement. The organization operates a comprehensive website powered by TYPO3 CMS, hosted on AWS infrastructure, and integrates multiple modern analytics and marketing tools such as Google Analytics, Meta Pixel, and Brevo. The website demonstrates strong digital maturity with excellent content quality, clear navigation, and mobile optimization. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and a dedicated security policy are absent. Overall, the domain registration and WHOIS data align well with the organization's identity, supporting high legitimacy and trustworthiness.

W

Webtune AI

webtune.ai

63

Webtune AI is a SaaS platform specializing in autonomous AI-driven website SEO management, offering detection, resolution, and deployment of on-page SEO issues with a one-click approach. The platform targets SEO professionals, small business owners, startups, and digital marketers, positioning itself as a pioneering solution in automated SEO optimization. The website is well-branded, consistent, and associated with Scalenut, a recognized AI-SEO platform, enhancing its market credibility. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, Microsoft Clarity, Hotjar, and integrates marketing and analytics tools effectively. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS and no exposed sensitive data, though it lacks some advanced security headers and published security policies. Privacy compliance is partial, with a comprehensive privacy policy but no visible cookie consent mechanism. WHOIS data is unavailable publicly, likely due to privacy protection, which is justified for this business type. Overall, the site demonstrates a mature digital presence with room for improvement in security transparency and privacy controls.

S

Statsforvalteren

statsforvalteren.no

66

Statsforvalteren.no is the official website of the Norwegian government agency representing the state in various counties. The agency is responsible for implementing parliamentary and governmental decisions, acting as a liaison between municipalities and central authorities. The website provides comprehensive information about the agency's services, news updates, job postings, and access to various public forms and complaint mechanisms. It targets Norwegian citizens, public officials, and municipalities, offering content primarily in Norwegian with options for English and other Norwegian dialects. Technically, the website employs a modern technology stack including Bootstrap for responsive design, Azure Application Insights, Hotjar, and Maze Analytics for user behavior tracking and performance monitoring. The site is well-structured with good SEO and mobile optimization, though it lacks a visible cookie consent mechanism. The site uses HTTPS with no detected security vulnerabilities in the content or scripts. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no exposed sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. The WHOIS data is unavailable due to Norid's privacy policies for .no domains, which is typical and not suspicious for Norwegian government domains. Overall, the site is trustworthy, professional, and safe for general audiences. Strategically, the site would benefit from implementing a cookie consent banner to comply fully with privacy regulations, publishing clear security and incident response policies, and enhancing accessibility features to improve inclusivity and compliance.

S

Students' Union UCL

studentsunionucl.org

10

Students' Union UCL is a well-established non-profit organization representing University College London students. The website serves as a central hub for student engagement, providing access to support services, events, clubs, and representation. The organization has a strong market position within the education sector, supported by a consistent brand and comprehensive content. Technically, the website is built on Drupal 10 with modern web technologies and integrates analytics and user behavior tracking tools such as Google Analytics and Hotjar. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS and anonymized analytics, though improvements are recommended in security headers and vulnerability disclosure. Privacy compliance is mostly met with a clear privacy policy, but cookie consent mechanisms are lacking. Overall, the domain registration data aligns well with the organization's profile, supporting legitimacy and trustworthiness.

M

Macardo Swiss Distillery GmbH

macardo.ch

61

Macardo Swiss Distillery GmbH operates a professional and well-branded website focused on premium spirits production, hospitality services including a bed and breakfast, and event hosting in the Thurgau region of Switzerland. The company positions itself as a premium Swiss distillery with a strong local presence and an e-commerce platform for direct sales. The website demonstrates a mature digital infrastructure built on WordPress with WooCommerce, enhanced by modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, Hotjar, and Facebook Pixel. The site is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with comprehensive policies and consent mechanisms in place. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration details align well with the business profile, indicating legitimacy and transparency. Overall, the website reflects a trustworthy and credible business with room for enhanced security policies and incident response disclosures.

S

Swiss Public Services

publicjobs.ch

53

Publicjobs.ch is a specialized Swiss job portal focusing on socially meaningful jobs within the public administration sector and related organizations such as non-profits, healthcare, education, and energy. The platform offers job listings, employer profiles, and candidate account management primarily targeting job seekers interested in public sector employment in Switzerland. The website is well-branded and consistent, with a clear focus on its niche market. Technically, it uses a combination of Bootstrap, jQuery, and various third-party analytics and tracking services, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and secure login forms, but lacks some security headers and published security policies. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism despite extensive tracking. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

V

Verlagshaus24.com | Bücher, Magazine, Verlage

verlagshaus24.com

55

Verlagshaus24.com is a German-language e-commerce platform specializing in the sale of books, magazines, calendars, and subscription services. The website targets German-speaking readers and hobbyists interested in various thematic worlds such as travel, history, DIY, and more. The business operates primarily as an online retailer leveraging a Magento 2 infrastructure, integrating multiple marketing and tracking tools to optimize customer engagement and sales. The platform offers a broad catalog with clear navigation and thematic categorization, supporting a medium-sized retail operation in the publishing sector. Technically, the website is built on a modern Magento 2 CMS with extensive use of RequireJS, jQuery, and integrations such as Google Tag Manager, Facebook Pixel, Taboola, Hotjar, and GetResponse. The site is mobile-optimized and employs security measures including HTTPS and invisible reCAPTCHA on forms. However, explicit security headers are not fully implemented, and privacy policy documentation is not clearly accessible, which may impact compliance and user trust. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect forms, but lacks visible security policies or incident response contacts. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration status, which is a critical trust factor. No vulnerabilities or malicious content were detected in the accessible content, and the site does not contain adult or explicit material. Overall, Verlagshaus24.com presents as a professional and functional e-commerce platform with good content quality and marketing sophistication. The primary risks relate to incomplete domain registration transparency and privacy compliance documentation. Strategic improvements in security headers, privacy policy visibility, and domain registration clarity would enhance trust and compliance.