Security Directory

B

Bosch Sicherheitssysteme GmbH

boschsecurity.com

69

Bosch Sicherheitssysteme GmbH operates a professional corporate website focused on security and safety systems, particularly fire alarm and detection technologies. The company is positioned as a large enterprise within the technology and manufacturing sectors, serving industrial and commercial clients globally. The website reflects a mature digital presence with consistent branding and comprehensive content about their realignment and product offerings. Technically, the site employs modern web technologies including Google Tag Manager and custom privacy consent management, ensuring GDPR compliance and user privacy. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and a dedicated security policy page are absent. WHOIS data is unavailable from the raw output, which is unusual but the website's professional nature and corporate branding strongly support legitimacy. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

C

CAF America

cafamerica.org

54

CAF America is a well-established non-profit organization specializing in global grantmaking and philanthropic services. The organization assists corporations, foundations, individuals, and financial advisors to facilitate international giving with compliance and risk mitigation. Their market position is strong, supported by over 30 years of experience and a comprehensive suite of donor services including donor advised funds, legacy giving, and grant management. The website reflects a professional and trustworthy brand with clear messaging and a focus on global impact. Technically, the site is built on WordPress with modern plugins and tracking tools, demonstrating a mature digital infrastructure. Security posture is good with HTTPS, content security policies, and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the site is accessible, well-structured, and compliant with privacy regulations, making it a reliable platform for its target audience. Strategic recommendations include enhancing security headers, publishing a formal security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

E

Elevate

elevate.ca

63

Elevate is a Canadian impact-driven non-profit organization founded in 2015 that unites innovators to address society's greatest challenges. The organization positions itself as a leader in fostering innovation and social change within Canada, primarily targeting innovators and leaders of change. The website is built on WordPress and employs a modern technology stack including Google Analytics, Microsoft Clarity, PostHog, and various marketing and tracking tools, indicating a mature digital infrastructure. The site is well-structured with SEO optimizations and uses structured data to enhance search visibility. Security posture is generally good with HTTPS enabled and some security best practices observed, though there is room for improvement in security headers and published policies. Privacy compliance is weak due to the absence of visible privacy and cookie policies and consent mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and compliance documentation.

Dow Jones Architects is a specialized architectural firm with a focus on sectors such as art & culture, heritage, worship, residential, and education. The company has a well-established market presence supported by a domain registered since 2001, reflecting business longevity. Their portfolio includes notable projects like the Embassy of Switzerland in London and Maggie's Cardiff, indicating a reputable position in their niche. Technically, the website employs standard libraries such as jQuery and integrates Google Analytics and Tag Manager for tracking, but lacks advanced CMS or frameworks. The site is moderately optimized for performance and mobile use but lacks comprehensive SEO and accessibility features. Security posture is basic with no DNSSEC enabled and absence of security headers, and no visible privacy or cookie policies, which impacts compliance and user trust. Overall, the website is functional but would benefit from enhanced security, privacy compliance, and richer content to improve professionalism and user confidence.

A

AKT II

akt-uk.com

60

AKT II is a globally recognized interdisciplinary engineering design firm specializing in structural, civil, infrastructure, façade, bioclimatic, geotechnical, and transport engineering. The company operates multiple offices worldwide, including a recent expansion into Toronto, and is part of the Tyréns Group. Their website reflects a mature, professional business with a strong market position in the built environment sector, emphasizing sustainability through B Corporation certification. Technically, the website is built on WordPress with modern tracking and analytics tools such as Google Analytics, Google Tag Manager, and Hotjar, providing moderate user tracking and good performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit incident response policies suggests room for improvement. The WHOIS data is missing or unavailable, which is unusual for a professional entity and slightly reduces domain trustworthiness. Overall, the website is professional, trustworthy, and well-optimized for its audience.

A

ACME

acme.ac

70

ACME is a London-based architecture and design firm established in 2007, specializing in contemporary architecture, urban planning, interior design, and product design. The company serves private, corporate, and public clients and has a portfolio of notable projects such as Liverpool Street Station and developments in Berlin and Earls Court. The website is professionally designed and hosted on Shopify, leveraging modern web technologies and integrations such as Vimeo for video content and Google Analytics for tracking. The site demonstrates good digital maturity with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though there is room for improvement in DNSSEC and security headers. Privacy compliance is well addressed with cookie consent and GDPR-aligned privacy policy. Overall, the business presents a credible and trustworthy online presence.

W

Wright & Wright Architects LLP

wrightandwright.co.uk

68

Wright & Wright Architects LLP is a London-based award-winning architectural practice specializing in sustainable, contextual, and innovative design primarily for the culture and education sectors. Their portfolio includes Passivhaus-certified projects and a strong commitment to carbon reduction and energy efficiency. The website reflects a professional and well-established firm with a clear focus on quality and sustainability. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Vimeo video integration, Google Tag Manager, and Typekit fonts. It is well-optimized for performance, mobile responsiveness, and accessibility, providing a seamless user experience. The presence of cookie consent management and privacy policies indicates good digital maturity and compliance with privacy regulations. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a public security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS lookup failed due to querying a subdomain rather than the domain itself, but the website's professionalism and trust indicators suggest legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving accessibility features to further strengthen security posture and user trust.

W

Walters & Cohen Architects

waltersandcohen.com

65

Walters & Cohen Architects is a London-based architectural practice specializing in education, community, and cultural projects. The firm is recognized for its award-winning portfolio and serves clients primarily in the education sector. The website reflects a professional and consistent brand image with a clear focus on showcasing their projects and expertise. The target audience includes educational institutions and community organizations seeking architectural services. Technically, the website employs modern web technologies including Google Analytics and Google Tag Manager for tracking, and uses a CDN for asset delivery. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some technical improvements could be made, such as implementing security headers and expanding accessibility features. From a security perspective, the site uses HTTPS and has a cookie consent mechanism indicating basic privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data is a concern and lowers the domain trustworthiness score, though the active and professional nature of the website suggests legitimacy. No explicit contact or security incident response information is provided, which could be improved. Overall, the website presents a solid digital presence for a small architectural firm with room for enhancements in security posture and transparency. Strategic recommendations include improving WHOIS transparency, adding security headers, and providing clearer contact and privacy information to strengthen trust and compliance.

M

Metropolitan Workshop

metwork.co.uk

47

Metropolitan Workshop is a well-established architectural and urban planning practice founded in 2005, with offices in London and Dublin. The company offers professional services in architecture, urbanism, and design, targeting clients interested in these sectors. Their website reflects a professional and consistent brand image, with clear navigation and relevant content tailored to their audience. The business operates primarily within the real estate sector and maintains a small company size with a focused market position. Technically, the website is built on WordPress and leverages modern web technologies including Google Analytics, Google Tag Manager, Vimeo embeds, and Google Maps API. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Hosting is provided by GoDaddy, consistent with the domain registrar information. From a security perspective, the website uses HTTPS with an excellent SSL configuration but lacks several recommended security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy and cookie policy present but no explicit cookie consent mechanism. Contact information is comprehensive, but no dedicated security policy or incident response details are available. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security headers, privacy consent mechanisms, and incident response transparency would enhance the security posture and compliance standing.

M

Maccreanor Lavington

maccreanorlavington.com

61

Maccreanor Lavington is a professional architecture and urbanism firm operating from London and Rotterdam, offering design and planning services. The website presents a well-structured portfolio of projects and clear contact information, targeting clients and professionals in the real estate and urban development sectors. The firm positions itself as an established medium-sized business with a consistent brand and professional online presence. Technically, the website is built on WordPress with modern libraries and CDN hosting, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and anonymized analytics, but lacks some security headers and cookie consent mechanisms. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy. Overall, the site is professional, trustworthy, and well-maintained.

M

Morris+Company

morrisand.company

56

Morris+Company is a professional architecture and design firm with a strong portfolio covering housing, workplace, community, education, healthcare, placemaking, tall buildings, interiors, re-use, hospitality, and mission-critical projects. The firm operates primarily in the UK and Europe, with offices in London and Copenhagen, targeting clients seeking sustainable and innovative architectural solutions. The website reflects a medium-sized, established company with consistent branding and a professional online presence. Technically, the website employs modern web technologies including jQuery, SimpleBar, Google Analytics, Google Tag Manager, and Google Maps API. Hosting of media assets on Amazon S3 indicates a scalable infrastructure. The site is mobile-optimized with good design quality and navigation, though accessibility and SEO optimizations are basic. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and privacy compliance elements such as privacy and cookie policies. No vulnerability disclosures or incident response contacts are provided. WHOIS data is unavailable due to privacy protection, which is common and likely justified for this business type. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

H

Hawkins\Brown

hawkinsbrown.com

51

Hawkins\Brown is a UK-based architecture firm focused on societal impact and human-centered design. The website presents a professional and modern digital presence with rich content including conversations, projects, and thought leadership. The firm holds a B Corp certification, indicating commitment to social and environmental performance. Technically, the site is built on WordPress with modern JavaScript and analytics integrations, optimized for performance and accessibility. Security posture is good with HTTPS enforced and secure forms, though explicit security policies and incident response details are absent. The lack of WHOIS data for the domain is a notable anomaly, reducing trust slightly despite the professional site content. Overall, the website reflects a mature business with strong branding and digital maturity.

A

Allies and Morrison

alliesandmorrison.com

71

Allies and Morrison is a London-based architectural and urbanist practice focused on designing beautiful buildings and shaping enduring places with attention to detail and context uniqueness. The firm serves clients interested in architecture, urban planning, and sustainable development, positioning itself as a reputable medium-sized player in the real estate and design sector. Their website showcases a comprehensive portfolio of projects, research, and talks, reflecting a mature and professional business model. Technically, the website employs modern web technologies including Google Analytics with IP anonymization, Imgix for image delivery, and JavaScript ES6, ensuring fast performance and excellent mobile optimization. The site is well-structured with good SEO and accessibility features, although no CMS or hosting provider details are explicitly identified. From a security perspective, the site uses HTTPS with a good SSL configuration and secure form handling for newsletter subscriptions. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. No vulnerability disclosures or incident response contacts are published, representing an area for improvement. Overall, the website is professional, trustworthy, and safe for general audiences. The absence of WHOIS data is a notable anomaly but does not detract significantly from the site's credibility given the quality of content and contact transparency. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and improving WHOIS transparency to strengthen trust and compliance.

F

Foster + Partners

fosterandpartners.com

68

Foster + Partners is a globally recognized architecture and design firm specializing in sustainable architecture, urbanism, engineering, and design services. Founded in 1967 by Norman Foster, the company positions itself as a leader in innovative and sustainable building solutions. The website reflects a professional and modern digital presence, leveraging advanced web technologies such as Angular, Google Analytics, Hotjar, and CookiePro for user experience and compliance. The site is well-structured, mobile-optimized, and provides a seamless user experience with clear branding and relevant content focused on their core services. From a technical perspective, the website employs modern frameworks and tracking tools, indicating a mature digital infrastructure. Hosting appears to be on Microsoft Azure, and the site uses HTTPS with good SSL configuration. However, some security best practices such as explicit security headers and published security policies are missing. The cookie consent mechanism is implemented, but no explicit privacy policy or terms of service pages were detected in the provided content. Security posture is generally good with HTTPS and consent management, but the absence of WHOIS data and lack of published security or incident response policies reduce overall trust slightly. No vulnerabilities or exposed sensitive data were detected. The website does not appear to be blocked or protected by a WAF, allowing full content access. Overall, the website is professional and trustworthy from a business and technical standpoint, but improvements in transparency regarding privacy, security policies, and domain registration information are recommended to enhance credibility and compliance.

D

Derwent London

derwentlondon.com

67

Derwent London is a prominent British property investment and development company headquartered in London, recognized as the largest London office-focused Real Estate Investment Trust (REIT) and a constituent of the FTSE 250 Index. The company manages a substantial portfolio of commercial real estate valued at £5.2 billion as of mid-2025, focusing on long-term value creation through property regeneration. Their services include office and retail space leasing, flexible furnished workspaces, and community-focused DL/Members lounges. The website reflects a mature digital presence with comprehensive content targeting investors, tenants, and partners. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and cookie consent management, ensuring compliance with privacy regulations such as GDPR. The site is mobile-optimized, accessible, and SEO-friendly, although no CMS or hosting provider details are explicitly identified. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms with granular controls. However, no explicit security headers were detected in the HTML source, and there is no published security policy or vulnerability disclosure program. The absence of WHOIS data limits domain trust verification, but the professional presentation and multiple industry certifications support legitimacy. Overall, Derwent London’s website demonstrates strong business credibility and privacy compliance, with room for improvement in security best practices and transparency. The domain’s WHOIS data absence warrants monitoring but does not currently undermine the site’s trustworthiness.

A

Atelier Ten

atelierten.com

67

Atelier Ten is a professional environmental design consultancy and building services engineering firm focused on sustainable building solutions. The company is positioned as a member of the Surbana Jurong Group, indicating a strong market presence and backing by a large parent company. Their services span a wide range of environmental and engineering disciplines, targeting architects, developers, and sustainability professionals. The website reflects a mature digital presence with comprehensive service descriptions and multiple office locations worldwide. Technically, the website is built on WordPress and integrates modern technologies such as Google Analytics, Google Tag Manager, and Sentry for error tracking. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers are missing. HTTPS is properly configured, ensuring secure communications. From a security perspective, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. Privacy and cookie policies are present and indicate GDPR compliance, but incident response and vulnerability disclosure information are lacking. Overall, the website is professional and trustworthy in content and design, but the domain registration inconsistency warrants further investigation. Strategic improvements in security headers and incident response transparency would enhance the security posture and trustworthiness.

H

Herbert Smith Freehills Kramer

herbertsmithfreehills.com

69

Herbert Smith Freehills Kramer is a top 20 global law firm formed by the merger of Herbert Smith Freehills and Kramer Levin, boasting over 2,700 lawyers across 26 offices worldwide. The firm specializes in litigation, regulatory, and transactional legal services across multiple key sectors including energy, banking, real estate, and transportation. Their website reflects a high level of professionalism with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on Magnolia CMS and incorporates modern web technologies such as Google Tag Manager and SproutVideo for media delivery, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are absent. The lack of WHOIS registration data raises concerns about domain legitimacy, warranting further investigation. Overall, the site demonstrates a mature digital presence suitable for an enterprise-level law firm.

R

Robly Ltd.

robly.com

68

Robly Ltd. is a well-established company specializing in email marketing automation solutions targeted primarily at small and medium-sized businesses. The company offers a comprehensive suite of services including proprietary technologies like OpenGen and Robly AI, along with features such as landing page builders, email templates, A/B testing, and integrations with popular platforms like Shopify and WordPress. The website demonstrates strong market positioning supported by numerous customer testimonials and industry awards, reflecting a reputable and trusted brand in the email marketing space. Technically, the website employs a modern technology stack with extensive use of analytics and marketing tools, hosted on AWS infrastructure, and built with responsive design principles to ensure good user experience across devices. Security posture is solid with HTTPS enforced and domain transfer protections in place, though there is room for improvement by enabling DNSSEC and publishing explicit security policies. Privacy compliance is partially addressed with a comprehensive privacy policy, but lacks a cookie consent mechanism despite extensive tracking technologies. Overall, the website is professional, trustworthy, and well-optimized, with minor gaps in privacy and security transparency that should be addressed to enhance compliance and user trust.

L

LPO Arkitekter

lpo.no

60

LPO Arkitekter is Norway's largest independent architectural firm specializing in architecture for cities, places, buildings, and spaces with a strong focus on innovation, sustainability, and inclusive design processes. The company positions itself as a leader in the Norwegian architectural market, serving a broad audience including municipalities, developers, and the general public interested in urban development. Their business model centers on delivering comprehensive architectural and urban planning services with an emphasis on human-centric solutions. Technically, the website employs modern web technologies such as jQuery, Google Analytics, Google Tag Manager, and Plausible Analytics for tracking, alongside lazy loading for performance optimization. The site is mobile-optimized and features good SEO practices, although some accessibility features could be enhanced. The infrastructure appears stable and professionally maintained, with no signs of outdated or vulnerable libraries. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not provide a visible cookie consent mechanism or detailed privacy and security policies, which are important for GDPR compliance. The WHOIS data is not publicly available due to Norid's policies, but the domain and website content align with a legitimate and professional business entity. Overall, the website presents a strong business credibility and technical foundation but would benefit from improved privacy compliance and security best practices to enhance trust and regulatory adherence.

N

Nordic Office of Architecture

nordicarch.com

61

Nordic Office of Architecture is a well-established international architectural firm with studios in Norway, Denmark, and Iceland. The company serves a global clientele with a strong presence in the Nordic region, positioning itself as a leading architectural practice. Their website reflects a professional and modern design, showcasing key projects and providing comprehensive contact information for multiple office locations. The firm emphasizes transparency and compliance with privacy regulations, evidenced by a comprehensive privacy policy and cookie consent mechanism. Technically, the website employs modern JavaScript frameworks and analytics tools, ensuring a good user experience and performance. Security posture is solid with HTTPS enforcement and domain transfer protections, though there is room for improvement in security headers and incident response disclosures. Overall, the website and domain registration data indicate a credible and trustworthy business with a strong digital presence.

F

Finsk-norsk kulturinstitutt (FINNO)

finno.no

57

Finsk-norsk kulturinstitutt (FINNO) is a small, non-profit cultural institute dedicated to strengthening cultural exchange between Finland and Norway. The website is professionally designed using WordPress CMS with multilingual support for Norwegian, Finnish, and English, targeting cultural communities and government/non-profit sectors. The site includes key services such as cultural exchange facilitation and event organization, positioning itself as a niche cultural entity. Technically, the website employs modern tools including Google Tag Manager and Yoast SEO, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and cookie consent implemented, though it lacks advanced security headers and formal privacy and terms of service documentation. Overall, the domain registration details align well with the website's claims, indicating legitimacy and trustworthiness.

D

Design og arkitektur Norge (DOGA)

doga.no

55

Design og arkitektur Norge (DOGA) is a Norwegian non-profit foundation dedicated to promoting sustainable value creation and innovation through design and architecture in both the private and public sectors. The organization offers innovation programs, awards, courses, and tools aimed at fostering design-driven innovation and urban development. The website reflects a well-established entity with government ties, targeting Norwegian businesses and public institutions interested in design and architecture innovation. Technically, the website is hosted on Microsoft Azure, built with ASP.NET technologies, and employs modern tools such as Cloudflare for performance and security, Google Tag Manager and Analytics for tracking, and Cookie Information for GDPR-compliant cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is robust with detailed cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with relevant regulations.

R

Ringier Magazine AG

boleromagazin.ch

63

Bolero is a Swiss online magazine operated by Ringier Magazine AG, focusing on fashion, culture, beauty, and premium lifestyle content targeted primarily at women with style. The website is professionally designed with consistent branding and good content quality, serving as a reputable media outlet within the Swiss market. The technical infrastructure leverages modern web technologies including Ring Publishing CMS, Google Tag Manager, and OneTrust for cookie compliance, ensuring a moderate to good performance and user experience across devices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are not publicly available. Overall, the website demonstrates a solid digital maturity with good SEO and advertising transparency. The domain registration is privacy protected but consistent with the brand's legitimacy. No adult or questionable content is present, making it safe for general audiences.

A

Annabelle

annabelle.ch

66

Annabelle.ch is a Swiss lifestyle and women's magazine website offering content on fashion trends, interior inspiration, travel tips, beauty stories, and social opinion pieces. The site targets a general audience interested in lifestyle and culture, positioning itself as an established media brand in Switzerland. Technically, the website is built on WordPress with modern integrations such as Yoast SEO Premium, Google Tag Manager, Microsoft Clarity, and Cookiebot for consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities, although explicit privacy and terms of service pages are missing. Overall, the site demonstrates good professionalism and trustworthiness but could improve compliance transparency and contact accessibility.

M

Montebelo

montebelo.org

53

Montebelo is a small creative studio and textile agency operating internationally with bases in Porto, A Coruña, Paris, and Stuttgart. The company focuses on graphic design, visual communication, and sustainable supply chain solutions within the textile industry. The website is hosted on the Cargo.site platform and employs modern web technologies including Google Analytics and Tag Manager for visitor tracking. The site is well-designed with good mobile optimization and clear navigation, presenting professional content relevant to its niche market. However, the website lacks explicit privacy, cookie, and terms of service policies, and does not provide direct contact information, which may impact user trust and compliance with privacy regulations. Security-wise, the site uses HTTPS but lacks visible security headers, suggesting room for improvement in hardening the web presence. WHOIS data is unavailable due to query failure or privacy protection, which is common for small agencies but reduces transparency. Overall, the site is functional and professional but would benefit from enhanced privacy and security disclosures.

N

NaturDienst Bieri

naturdienst.ch

37

NaturDienst Bieri is a small, locally focused nature conservation and biodiversity consulting firm founded in 2022 by Markus Bieri in Richenthal, Switzerland. The company offers services including biodiversity promotion consulting, nature excursions, sensitization courses, and educational programs. The website is professionally designed using WordPress with the Divi theme and includes structured data for SEO. It provides clear contact information and promotes upcoming events and offerings related to nature conservation. Technically, the site uses modern web technologies and integrates Google Analytics and Tag Manager for user tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy, accessible, and well-aligned with the business's stated mission and services.

M

Meilenweiss

meilenweiss.ch

51

Meilenweiss is a Swiss-based company offering an annual ski pass that grants access to multiple ski resorts and leisure activities. The website is built on WordPress with WooCommerce for e-commerce functionality, integrating payment processing via Saferpay. The digital infrastructure includes modern tracking tools such as Google Tag Manager and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and use of secure payment plugins, but lacks important security headers and formal policies such as privacy and cookie consent, which are critical for GDPR compliance. Overall, the website is professionally designed and mobile-optimized, targeting winter sports enthusiasts in Switzerland. However, the absence of privacy and security policies and contact information represents compliance and trust gaps that should be addressed.

T

Ticketcorner AG

ticketcorner.ch

10

Ticketcorner AG operates a leading online ticket sales platform in Switzerland, offering tickets for a wide range of events including concerts, sports, theater, circus, and ski resorts. The website is professionally designed with excellent navigation and localized language support, targeting event attendees primarily in the Swiss market. The business model focuses on e-commerce ticket sales with a strong market position in the region. Technically, the site uses modern web technologies such as jQuery, Google Tag Manager, and a consent management platform to ensure GDPR compliance and effective marketing. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is trustworthy, compliant, and well-optimized for its audience.

A

Aargauische Kantonalbank

akb.ch

29

Aargauische Kantonalbank is a leading financial services provider operating primarily in the Canton of Aargau and the Olten-Gösgen-Gäu region in Switzerland. The website reflects a professional banking institution offering a range of financial products and customer support services. The company maintains a strong market position as a regional bank with a clear focus on its local clientele. The digital presence is built on a modern technical infrastructure leveraging Liferay CMS, React, and Clay UI components, ensuring a responsive and user-friendly experience. Integration with Google Tag Manager and Jentis Analytics indicates a mature approach to user behavior tracking and marketing analytics. Security posture is robust with HTTPS enforcement, script nonce usage, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly visible. Overall, the website demonstrates a high level of professionalism and trustworthiness suitable for a financial institution.

PostBus Ltd operates a comprehensive regional and local bus transportation network throughout Switzerland, providing essential public transit services, special trips, and leisure excursions. The company maintains a professional and user-friendly website that supports multiple languages and offers extensive customer service resources, including ticket purchases and lost property services. The website reflects a mature digital infrastructure with modern technologies such as Google Tag Manager, Coveo search integration, and Usercentrics consent management, indicating a high level of digital maturity and compliance with privacy regulations. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, though explicit security policies and incident response details are not published. Overall, the website and domain registration data align well, confirming the legitimacy and trustworthiness of the business.

A

Aargau Verkehr AG (AVA)

aargauverkehr.ch

61

Aargau Verkehr AG (AVA) is a regional public transportation company operating in the Aargau region of Switzerland. The company provides transit schedules, operational updates, and ticketing services primarily targeting local commuters and travelers. The website is professionally designed using Joomla CMS with Helix Ultimate framework and integrates modern web technologies such as Bootstrap and jQuery. It features a cookie consent mechanism compliant with GDPR and uses Google Analytics for traffic analysis. Security posture is good with HTTPS enforced and CSRF protections in place, though additional security headers could enhance protection. No critical vulnerabilities or suspicious content were detected. Overall, the website reflects a credible and established transportation service provider with a solid digital presence.

T

Tarifverbund A-Welle

a-welle.ch

10

Tarifverbund A-Welle operates as a regional public transportation tariff association in Switzerland, providing ticketing, subscriptions, zone plans, and travel information services primarily for the A-Welle region. The website is professionally designed and targets general public users including commuters and travelers within the region. The business model focuses on facilitating public transport access through digital and physical ticketing solutions, supported by partnerships such as SwissPass. Technically, the website is built on TYPO3 CMS, employs modern web technologies, and integrates Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a moderate to good performance profile. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. Strategic recommendations include enhancing security transparency and incident response readiness to further strengthen trust and compliance.

W

Work Life Aargau

worklifeaargau.ch

9

Work Life Aargau is a regional employment and lifestyle platform focused on the canton of Aargau in Switzerland. It serves as a portal connecting job seekers with employers, providing job listings, employer profiles, career advice, and lifestyle content to promote the region as an attractive place to live and work. The website is supported by regional government and partner institutions, reflecting a strong local market position in public sector employment promotion. Technically, the website employs modern web technologies including React and Material-UI components, integrates multiple third-party analytics and advertising services such as Google Analytics, Facebook Pixel, and Adform, and uses HTTPS to secure communications. The design is professional and mobile-optimized, offering a good user experience with clear navigation and relevant content sections. From a security perspective, the site benefits from HTTPS and asynchronous loading of tracking scripts but lacks visible security headers and formal security policies such as incident response or vulnerability disclosure. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms, which poses compliance risks under GDPR. Overall, the website is legitimate and trustworthy with a strong regional government backing but should improve privacy transparency and security policy disclosures to enhance compliance and user trust.

A

Aargau Tourismus AG

akb-freizeitportal.ch

54

The AKB Freizeitportal is a regional leisure and tourism platform operated in partnership with Aargau Tourismus AG and supported by the Aargauische Kantonalbank. It offers discounted leisure experiences, event information, and a newsletter service targeting residents and visitors of the Aargau region in Switzerland. The website is built on the nopCommerce platform, leveraging modern front-end technologies and analytics tools such as Google Tag Manager and Plausible Analytics. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Security posture is solid with HTTPS enforced and secure form handling, though some improvements in HTTP security headers and incident response disclosures are recommended. Overall, the site presents a professional, trustworthy, and user-friendly experience with clear business legitimacy and no suspicious content.

H

Hallwilerseelauf Gmbh

hallwilerseelauf.ch

57

Hallwilerseelauf Gmbh operates a well-established Swiss running event website focused on the Hallwilerseelauf race series, offering multiple race formats including half marathon, 10 km, and team runs. The website targets runners, families, and sports enthusiasts, providing comprehensive event information and registration options. The company maintains a consistent brand presence with active social media engagement and partnerships with reputable sponsors. Technically, the site is built on WordPress with modern SEO and analytics tools, delivering a responsive and user-friendly experience. Security posture is strong with HTTPS and security headers implemented, though formal security policies and incident response details are not published. Privacy compliance is well addressed with clear cookie consent and privacy policy. Overall, the site is professional, trustworthy, and well suited for its audience.

S

Schlossrestaurant Habsburg

schlossrestaurant-habsburg.ch

47

Schlossrestaurant Habsburg is a hospitality business operating a historic castle restaurant and event venue in Switzerland. The company offers regional cuisine and hosts weddings, banquets, seminars, and private celebrations. It is positioned as a premium venue with a strong local heritage and scenic views, targeting individual guests and event organizers. The website is professionally designed using WordPress and the Avada theme, with modern SEO and analytics integrations. Security posture is good with HTTPS and security headers, though cookie consent mechanisms and explicit security policies are missing. Overall, the site is trustworthy and well-maintained, reflecting a small but established hospitality business under the parent company AARGAUHOTELS.CH.

Therme Zurzach is a Swiss-based wellness and hospitality business specializing in thermal baths, sauna, spa treatments, and fitness services. The website presents a professional and well-structured digital presence powered by HubSpot CMS, integrating modern marketing and analytics tools. The company targets families and wellness customers seeking relaxation and health benefits from thermal water and related services. The site includes rich content about services, events, and packages, supported by social media channels and online ticketing. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit privacy and security policies are not found. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website is trustworthy, user-friendly, and compliant with basic privacy standards, though improvements in explicit policy disclosures and incident response contacts are recommended.

S

Standortförderung Zürioberland

zuerioberland.ch

53

Standortförderung Zürioberland operates as a regional economic and cultural promotion organization for the Zürcher Oberland area in Switzerland. The website serves as a portal for businesses, residents, and visitors, offering information on economic opportunities, cultural events, regional products, and community initiatives. The organization positions itself as a key regional player fostering innovation, sustainability, and quality of life. Technically, the website is built on WordPress with modern JavaScript libraries and integrates multiple analytics and tracking services via Google Tag Manager. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. Overall, the domain registration data aligns well with the website's regional focus, indicating legitimacy and trustworthiness.

A

Aargau Tourismus AG

aargautourismus.ch

48

Aargau Tourismus AG operates as the regional tourism authority for the canton of Aargau in Switzerland, providing comprehensive tourism information, event promotion, and services such as meeting location facilitation and an online shop for vouchers. The website targets tourists, cultural enthusiasts, families, and event attendees, positioning itself as a trusted regional tourism hub with strong partnerships and certifications like Swisstainable. Technically, the site employs modern tracking and analytics tools including Google Analytics and Facebook Pixel, uses Bootstrap and jQuery UI for UI components, and is likely powered by the ZMS CMS platform. The site is mobile-optimized with good navigation and content quality. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security policies and incident response information. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

S

sa_partners GmbH

sapartners.ch

51

sa_partners GmbH is a specialized consulting firm based in Zurich, Switzerland, focusing on urban design and territorial planning. Their core activities include project development, process design, and spatial strategies for urban and regional development. The company targets municipalities, developers, and planners seeking innovative and sustainable urban solutions. The website reflects a professional and consistent brand image with detailed project showcases and a clear business focus. Technically, the site uses modern web technologies such as Tailwind CSS, jQuery, and Google Tag Manager, providing a responsive and SEO-optimized experience. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and privacy compliance mechanisms could be improved. Overall, the site is trustworthy and well-positioned in its niche market.

Wolzenalp is a small regional tourism business located in Switzerland, offering family-friendly hiking, biking, winter sports, and mountain railway services. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to tourists and families. Technically, the site uses the Contao CMS, integrates Google Tag Manager, Cookiebot for consent management, and Outdooractive API for outdoor activity information. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though some advanced headers like Content-Security-Policy could be added. Privacy compliance is well addressed with a comprehensive cookie policy and GDPR-aligned consent. However, no explicit terms of service, security policy, or incident response contacts are published, which could be improved. Overall, the website is trustworthy, secure, and well-suited for its business purpose.

U

UNICEF Schweiz und Liechtenstein

unicef.ch

67

UNICEF Schweiz und Liechtenstein operates as a reputable non-profit organization dedicated to the welfare and survival of children globally, with a strong local presence in Switzerland and Liechtenstein. The website reflects a professional and well-branded digital presence, offering comprehensive information about their humanitarian efforts, donation opportunities, and advocacy work. The organization maintains a clear market position as part of the global UNICEF network, supported by transparent financial reporting and trust indicators such as ISO 9001 certification. Technically, the site is built on Drupal 10 with modern libraries and frameworks, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response disclosures. Overall, the site demonstrates high business credibility and privacy compliance, making it a trustworthy platform for donors and stakeholders.

S

step into action

step-into-action.org

65

Step into action is a small non-profit organization based in Switzerland focused on education for sustainable development. Their website promotes experiential events and creative methods to inspire organizations, schools, teams, and individuals to actively shape their future. The organization targets educational institutions and community groups with facilitation services and events designed to foster engagement in sustainability. Technically, the website is built on Squarespace, leveraging modern web technologies including Google Tag Manager and Weglot for multilingual support. The site is well-designed, mobile-optimized, and includes cookie consent mechanisms, though it lacks explicit privacy and terms of service pages. Security posture is strong with HTTPS and HSTS enabled, and use of Google reCAPTCHA for form protection. However, additional security headers and formal policies would enhance compliance and trust. Overall, the site presents a professional and trustworthy digital presence appropriate for its educational mission.

K

Kommune 360°

kommune360.de

54

Kommune 360° is a German non-profit initiative focused on fostering cooperative and integrated planning and management to support successful child development within municipalities. The organization operates a professional website offering resources such as a Change-Guide, a Fellow-Program, podcasts, festivals, and newsletters targeted at municipal employees and stakeholders involved in child and youth welfare planning. The website is well-branded, consistent, and supported by partner organizations including Auridis Stiftung, DKJS, and PHINEO. Technically, the site is built on WordPress with modern plugins and frameworks, including Bootstrap and Mai Engine, and employs both Google Analytics and Matomo for analytics. The site is GDPR compliant with a comprehensive privacy policy and a cookie consent mechanism with opt-in functionality. Security posture is good with HTTPS enforced, though security headers are not detected and could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the site demonstrates a mature digital presence suitable for its non-profit mission.

The Dachverband Schweizer Jugendparlamente DSJ is a Swiss non-profit organization serving as a politically neutral competence center for political education and youth participation. It supports 65 youth parliaments across Switzerland and Liechtenstein, offering educational programs, workshops, and digital tools such as easyvote and engage-Ateliers. The organization is well-established with a domain age consistent with its 30-year anniversary in 2025, positioning it as a leading entity in its sector. Technically, the website is built on WordPress with modern plugins and libraries, supporting multilingual content and optimized images. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with GDPR, targeting young people, educators, and local governments.

O

okaj zürich

okaj.ch

47

okaj zürich is a well-established non-profit umbrella organization dedicated to coordinating and supporting open, associative, and church-based child and youth work in the canton of Zürich, Switzerland. With a history spanning 100 years, it serves approximately 600 member organizations and operates under a mandate from the canton government. The website effectively communicates its mission, projects, and events, targeting professionals in youth work, government officials, and member organizations. The organization emphasizes education, networking, and advocacy through various projects and publications.

G

Gemeinde Hasliberg

hasliberg.ch

54

Gemeinde Hasliberg is the official municipal government website serving the Hasliberg region in Switzerland. It provides local administrative information, community services, tourism details, event announcements, and educational resources. The site targets residents and visitors, offering comprehensive local content in German. The business model is that of a government entity focused on public service and community engagement. Technically, the website is built on the concrete5 CMS platform, utilizing common JavaScript libraries and Google services such as Analytics and reCAPTCHA to enhance functionality and security. The site is mobile optimized and presents a professional design with clear navigation. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy, legitimate, and well-maintained, reflecting its role as a government portal.

T

Ticino Turismo

ticino.ch

65

Ticino Turismo operates the official regional tourism website for Ticino, Switzerland, providing comprehensive travel and holiday information including accommodations, events, excursions, and cultural highlights. The website targets tourists and travelers seeking to explore the Mediterranean soul of Switzerland, positioning itself as a trusted and authoritative source in the hospitality and government tourism sector. Technically, the site employs a modern technology stack including Google Tag Manager, Facebook and Pinterest SDKs, and Leaflet.js for interactive maps, likely built on Adobe Experience Manager CMS. The website is well-optimized for mobile devices and SEO, with good performance and accessibility features. Security posture is strong with HTTPS enforced, appropriate security headers, and a robust cookie consent mechanism via iubenda, although no explicit security policy or vulnerability disclosure page was found. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource for visitors.

InnovationsTransfer Zentralschweiz is a regional Swiss organization focused on promoting innovation and supporting startups, SMEs, and private individuals in Central Switzerland. Their services include startup acceleration, innovation coaching, digital financing, patent and trademark consulting, and funding programs. The website is built on WordPress using the Breakdance theme and integrates marketing and analytics tools such as HubSpot and Google Tag Manager. While the site uses HTTPS and has a cookie consent mechanism, the specific requested page is missing (404 error), and no privacy policy or terms of service are found, which impacts compliance and user trust. Security headers are not detected, indicating room for improvement in security posture.

F

Fondazione AGIRE

agire.ch

70

Fondazione AGIRE is a Swiss regional innovation agency dedicated to supporting startups and SMEs in the Ticino region and the Italian-speaking Grisons. The organization provides a comprehensive range of services including startup support, SME assistance, coworking spaces at Tecnopolo, and coordination of the regional innovation system. The website reflects a professional and well-established entity with a clear focus on fostering technological development and economic competitiveness in its territory. Technically, the site is built on Drupal 10, employs modern web technologies such as Font Awesome and Google Tag Manager, and implements a robust cookie consent mechanism via Iubenda, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through comprehensive policies and consent management. Overall, the website presents a trustworthy and credible digital presence aligned with its business mission.