Security Directory

R

Rampline

rampline.com

61

Rampline is a Norwegian company specializing in the design and manufacture of innovative playground and activity equipment aimed at promoting physical play and motor skill development for all ages. The company has a strong market position in the niche of playground and outdoor fitness equipment, offering certified products and unique concepts such as Motor Skill Parks. Their website reflects a mature digital presence with multilingual support, rich content, and clear contact channels. Technically, the site is built on WordPress with WooCommerce and Gravity Forms, leveraging modern web technologies and SEO best practices. Security posture is solid with HTTPS, domain transfer protection, and anti-spam measures, though DNSSEC and some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, supporting user trust and regulatory adherence. Overall, Rampline demonstrates a professional, trustworthy, and well-managed online presence aligned with their business goals.

O

OpenAsset

openasset.com

69

OpenAsset is a mature technology company specializing in digital asset management and AI-powered proposal management software tailored for the architecture, engineering, and construction (AEC) industry. The company positions itself as a trusted partner to over 1,000 AEC firms, offering a SaaS platform that streamlines marketing workflows and proposal creation. Their key services include OpenAsset DAM and Shred.ai, supported by extensive partner integrations and training resources. The website reflects a professional and consistent brand with strong trust indicators such as client logos and social media presence. Technically, the website is built on WordPress, leveraging modern libraries and frameworks including Bootstrap, jQuery, and various marketing and analytics tools such as Marketo, Google Tag Manager, and Facebook Pixel. Hosting is likely on AWS, supported by DNS server data. The site demonstrates good SEO and mobile optimization, though accessibility features are basic. Performance is moderate, with room for improvement. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections in place. However, DNSSEC is not enabled, and no security headers were detected in the provided data. There is no visible security policy or incident response contact information published. Privacy and cookie policies are not found in the analyzed content, indicating a gap in compliance and transparency. Overall, the website is high quality and trustworthy from a business and content perspective but could improve its privacy compliance and security posture. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, enabling DNSSEC, implementing security headers, and providing clear security and incident response information to enhance user trust and regulatory compliance.

S

Synotio

synotio.se

59

Synotio is a Swedish-based technology company specializing in highly reliable and scalable web hosting and IT infrastructure services tailored for demanding business cases. Their market position is that of a niche provider offering dedicated hardware, comprehensive off-site data protection, and 24/7 monitoring with a strong focus on uptime and resilience. Key services include WordPress hosting, Cloud Connect disaster recovery, colocation, managed servers, managed backup, IP transit, and consultancy. The company targets businesses requiring robust hosting solutions with scalability and custom configurations. Technically, the website is built on WordPress CMS with a modern theme and plugins such as Qala Blocks. The infrastructure emphasizes performance with Varnish HTTP acceleration and uses standard web technologies including jQuery and Google Fonts. The site is mobile optimized and SEO friendly, though accessibility features are basic. Hosting provider details are not explicitly disclosed. From a security perspective, the site enforces HTTPS and follows good practices such as no exposed sensitive data and secure form handling. However, it lacks important security headers and published security policies. No vulnerability disclosure or incident response information is provided. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. Overall, the website is professional and trustworthy in appearance but suffers from missing WHOIS data and privacy compliance documentation. The domain's registration status is unclear, which lowers trustworthiness. Strategic recommendations include publishing privacy and cookie policies, adding security headers, providing incident response contacts, and clarifying domain registration details to enhance credibility and compliance.

N

New Left Review Ltd

newleftreview.org

72

New Left Review Ltd operates a well-established independent academic journal focused on leftist political and cultural discourse. The website offers a subscription-based model with digital and print content, supported by donations and newsletters. The target audience includes academics, intellectuals, and politically engaged readers. The company is UK-based with a domain age consistent with its long history since 2000. Technically, the site uses a modern Ruby on Rails stack with Hotwired Turbo and StimulusJS, integrating Stripe for payments and Rollbar for error monitoring. The site is hosted on Mythic Beasts, a reputable UK hosting provider. Security posture is good with HTTPS, CSRF protection, and content security policies, though DNSSEC is not enabled and no cookie consent mechanism is present. Privacy compliance is basic with a privacy policy but no explicit GDPR compliance indicators or cookie banners. Contact information is clearly provided including phone and physical address. Overall, the website is professional, trustworthy, and well-maintained, though improvements in privacy compliance and security disclosures are recommended.

T

The Architect’s Newspaper

archpaper.com

64

The Architect’s Newspaper is a well-established media publication focused on architecture and design in the United States, serving professionals and enthusiasts with authoritative news, analysis, and industry events. The website demonstrates a mature digital presence with a comprehensive content offering, including news articles, job listings, event information, and product libraries. It leverages a WordPress CMS with modern web technologies and integrates multiple third-party analytics and advertising services to support its business model. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. Privacy compliance is addressed with clear privacy and cookie policies and consent mechanisms. However, the WHOIS data for the domain is missing or inaccessible, which is unusual for a commercial site but does not appear to impact the legitimacy of the business. Overall, the site is professional, trustworthy, and well-positioned in its niche.

H

Hochparterre Bücher

hochparterre-buecher.ch

66

Hochparterre Bücher is a specialized architecture bookstore based in Zürich, Switzerland, offering a curated selection of architecture, landscape, and furniture design books. The website serves as an e-commerce platform targeting architects, students, and design enthusiasts, positioning itself as a niche leader in the Swiss market. The business model focuses on retail sales supported by events and a newsletter to engage its audience. Technically, the website is built on Magento with modern JavaScript libraries such as jQuery, Prototype.js, and Algolia for search functionality, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and CSRF protections in place, though it lacks some advanced security headers and a cookie consent mechanism, which are recommended for GDPR compliance. Overall, the website is professional, trustworthy, and well-maintained, with transparent contact information and a consistent brand presence.

M

MACK

mackbooks.co.uk

63

MACK is a UK-based global publisher specializing in award-winning books on art, photography, and critical studies. The company operates an e-commerce platform built on Shopify, offering a curated selection of books, special editions, and collections targeting art enthusiasts, academics, and collectors. The website demonstrates a consistent brand presence with professional design and clear navigation, supported by active social media channels. Technically, the site leverages modern web technologies including Shopify's platform, jQuery, Facebook Pixel, and Google Analytics, ensuring a robust digital infrastructure with moderate performance and good mobile optimization. Security measures include HTTPS with DNSSEC enabled and form protection via hCaptcha, though additional security headers and published policies could enhance the security posture. Privacy compliance is currently weak due to the absence of explicit privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and established entity.

H

Haus der Architektur

hda-graz.at

50

Haus der Architektur (HDA) is a cultural and educational institution based in Graz, Austria, dedicated to promoting architectural culture through exhibitions, lectures, workshops, and networking. The website serves as a comprehensive platform for event information, cooperation projects, and architectural documentation, targeting architects, students, and the general public interested in architecture. The institution holds a strong regional position with partnerships involving government and cultural bodies. Technically, the website is built on the Plone CMS platform, utilizing modern JavaScript libraries and frameworks, and is secured with HTTPS and appropriate security headers. However, it lacks visible privacy and cookie policies, which impacts its compliance posture. Overall, the site is professional, content-rich, and trustworthy, with moderate user tracking via Google Analytics.

B

Bosch Building Automation GmbH

digicontrol.info

57

DIGICONTROL, a brand under Bosch Building Automation GmbH, specializes in providing comprehensive building automation and management solutions focused on energy efficiency, comfort, and security. The company targets building automation professionals and enterprises requiring scalable and interoperable systems. The website reflects a mature digital presence built on TYPO3 CMS with modern web technologies and good mobile optimization. Security posture is solid with HTTPS and secure forms, though improvements are recommended in security headers and incident response transparency. Privacy policies are present and GDPR compliant, but cookie consent mechanisms could be enhanced. Overall, the site projects high business credibility and professionalism with clear contact channels and Bosch brand trust.

D

DRDH Architects

drdharchitects.co.uk

41

DRDH Architects is a London-based architectural practice with a portfolio showcasing cultural, residential, and civic projects across Europe, including Belgium and the UK. The firm targets clients seeking architectural design and masterplanning services, positioning itself as an established mid-sized player in the real estate and architectural sector. The website presents a professional portfolio with clear contact information but lacks modern privacy and security disclosures. Technically, the site relies on legacy JavaScript libraries and does not show evidence of modern CMS or hosting details. Security posture is weak due to missing HTTPS confirmation and security headers, and no privacy or cookie policies are present, which may impact compliance. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the website content itself appears professional and trustworthy. Overall, the site demonstrates moderate digital maturity but requires improvements in security and compliance to enhance trust and risk posture.

C

Caro Communications

carocommunications.com

61

Caro Communications is a well-established London-based communications agency specializing in architecture and design PR. The company has a strong market position within its niche, offering services that connect cultural and design communities. The website reflects a professional brand image with consistent messaging and a clear focus on its target audience of design professionals and lifestyle brands. The business model centers on providing PR and communications services tailored to the architecture and design sectors. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO and Google Analytics. The hosting appears to be managed via GoDaddy, inferred from the nameservers. The site demonstrates good mobile optimization and moderate performance, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, indicating awareness of privacy regulations like GDPR. However, DNSSEC is not enabled, and no explicit security or incident response policies are published. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy with a long registration history and consistent registration details. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in security headers, DNSSEC, and publishing security policies would enhance the security posture and trustworthiness further.

C

Chris Dyson Architects

chrisdyson.co.uk

51

Chris Dyson Architects is a small, award-winning architecture firm based in London, specializing in diverse projects ranging from private commissions to public buildings and urban planning across Europe and Asia. The firm emphasizes context-driven design, historic building restoration, and innovative modern architecture. Their website showcases a professional portfolio and maintains a consistent brand image, targeting clients seeking architectural services. Technically, the website is built on WordPress with common plugins and integrates Google Analytics for user tracking. The site is mobile-optimized with good SEO practices but lacks some accessibility features and cookie consent mechanisms. Security posture is solid with HTTPS and secure forms, though security headers and incident response information are absent. WHOIS data is unavailable due to domain naming issues, but the website is active and legitimate. Overall, the site reflects a credible and professional business presence with room for security and privacy improvements.

Bureaux Andrew Phillips is a small architectural firm specializing in contemporary and sustainable architecture, primarily operating in Luxembourg and London. Their website serves as a professional portfolio showcasing their projects, including commercial office buildings and residential architecture. The firm targets clients seeking high-quality architectural and urban design services. Technically, the website is built on Squarespace, leveraging modern web technologies such as jQuery and Typekit fonts, and is hosted on Squarespace's CDN. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security-wise, the site enforces HTTPS with HSTS, employs standard security best practices, and does not expose sensitive data or use vulnerable libraries. However, it lacks explicit privacy policies, terms of service, and incident response information, which are important for compliance and trust. Overall, the website is professional and trustworthy but could improve privacy compliance and security transparency.

M

Maccreanor Lavington

maccreanorlavington.com

61

Maccreanor Lavington is a professional architecture and urbanism firm operating from London and Rotterdam, offering design and planning services. The website presents a well-structured portfolio of projects and clear contact information, targeting clients and professionals in the real estate and urban development sectors. The firm positions itself as an established medium-sized business with a consistent brand and professional online presence. Technically, the website is built on WordPress with modern libraries and CDN hosting, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and anonymized analytics, but lacks some security headers and cookie consent mechanisms. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy. Overall, the site is professional, trustworthy, and well-maintained.

M

Morris+Company

morrisand.company

56

Morris+Company is a professional architecture and design firm with a strong portfolio covering housing, workplace, community, education, healthcare, placemaking, tall buildings, interiors, re-use, hospitality, and mission-critical projects. The firm operates primarily in the UK and Europe, with offices in London and Copenhagen, targeting clients seeking sustainable and innovative architectural solutions. The website reflects a medium-sized, established company with consistent branding and a professional online presence. Technically, the website employs modern web technologies including jQuery, SimpleBar, Google Analytics, Google Tag Manager, and Google Maps API. Hosting of media assets on Amazon S3 indicates a scalable infrastructure. The site is mobile-optimized with good design quality and navigation, though accessibility and SEO optimizations are basic. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and privacy compliance elements such as privacy and cookie policies. No vulnerability disclosures or incident response contacts are provided. WHOIS data is unavailable due to privacy protection, which is common and likely justified for this business type. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

Z

Zaha Hadid Architects

zaha-hadid.com

51

Zaha Hadid Architects is a globally recognized architecture and design firm with a large portfolio of projects across multiple sectors including cultural, corporate, and residential. The website serves as an interactive archive showcasing their work and provides contact information and social media links. Technically, the site is built on WordPress with jQuery and includes embedded Vimeo videos and Mixpanel analytics for user tracking. The security posture is generally good with HTTPS enabled and no obvious vulnerabilities, but lacks security headers and formal privacy or cookie policies. The WHOIS data is missing or unavailable, which is unusual and warrants further investigation. Overall, the site is professional and trustworthy but could improve privacy compliance and security best practices.

A

Almacantar

almacantar.com

46

Almacantar is a property investment company specializing in large-scale, complex developments in Central London. The website presents a professional image with detailed information about key properties and team members, targeting property investors and real estate professionals. The business model focuses on property investment and development, positioning itself as a specialist in the London real estate market. The domain is mature, registered since 2011, and the website uses HTTPS with Cloudflare DNS, indicating a stable technical infrastructure. Technically, the website employs common JavaScript libraries such as jQuery and FitText, and integrates Vimeo for video content. Google Analytics is used for visitor tracking via Google Tag Manager. The site is moderately optimized for performance and mobile devices, with good SEO practices evident in meta tags and Open Graph data. However, accessibility features are basic, and no CMS or advanced frameworks are detected. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and important security headers like Content-Security-Policy. No privacy or cookie policies are present, which is a compliance gap. No incident response or vulnerability disclosure information is found. The absence of contact emails and phone numbers on the site reduces transparency. Overall, the security posture is moderate but could be improved with better policies and headers. The overall risk is moderate with no critical issues detected. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, enabling DNSSEC, adding security headers, and publishing incident response information to enhance trust and compliance.

R

Robly Ltd.

robly.com

68

Robly Ltd. is a well-established company specializing in email marketing automation solutions targeted primarily at small and medium-sized businesses. The company offers a comprehensive suite of services including proprietary technologies like OpenGen and Robly AI, along with features such as landing page builders, email templates, A/B testing, and integrations with popular platforms like Shopify and WordPress. The website demonstrates strong market positioning supported by numerous customer testimonials and industry awards, reflecting a reputable and trusted brand in the email marketing space. Technically, the website employs a modern technology stack with extensive use of analytics and marketing tools, hosted on AWS infrastructure, and built with responsive design principles to ensure good user experience across devices. Security posture is solid with HTTPS enforced and domain transfer protections in place, though there is room for improvement by enabling DNSSEC and publishing explicit security policies. Privacy compliance is partially addressed with a comprehensive privacy policy, but lacks a cookie consent mechanism despite extensive tracking technologies. Overall, the website is professional, trustworthy, and well-optimized, with minor gaps in privacy and security transparency that should be addressed to enhance compliance and user trust.

A

Arkitektbedriftene i Norge AS

arkitektbedriftene.no

62

Arkitektbedriftene i Norge AS is a professional association and employer organization representing architectural offices and practitioners in Norway, including architects, landscape architects, and interior architects. The organization provides membership services, quality tools such as MAKS and MAKS-søk, legal guidelines, statistical data, webinars, and an architect search portal. Their market position is that of a key industry association supporting architectural professionals in Norway. The website is well-structured, professionally designed, and targets architectural firms and professionals within Norway. The business model revolves around membership and providing value-added services to its members.

N

Norges teknisk-naturvitenskapelige universitet

ntnu.no

64

NTNU (Norges teknisk-naturvitenskapelige universitet) is Norway's leading technical and natural sciences university with campuses in Trondheim, Gjøvik, and Ålesund. The institution serves approximately 40,000 students and holds primary responsibility for higher technology education in Norway. The website reflects a mature digital presence with comprehensive educational content, research information, and student life resources. It is built on a modern technology stack including Liferay CMS, Bootstrap, and various analytics tools, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response details are not publicly disclosed. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site demonstrates high professionalism, trustworthiness, and alignment with the institution's mission.

C

Code

code.no

51

The website code.no represents a small Norwegian technology entity named 'Code' with a domain age dating back to 2000, indicating a long-standing presence. The site is built on WordPress using common technologies such as Bootstrap 3, jQuery, and LiteSpeed Cache, with a basic level of mobile optimization and SEO. The content is minimal and primarily technical, with limited business or contact information available. No privacy, cookie, or terms of service policies are present, and no contact details or social media links are provided on the homepage. Security posture is moderate with HTTPS enabled but lacking security headers and formal security policies. Overall, the site appears legitimate but lacks comprehensive compliance and trust signals.

A

AARHSE

aarhse.com

43

AARHSE is a French academic association dedicated to historical and sociological research in the energy sector. The website serves as an informational platform presenting the association's activities, including competitions, bibliographies, and a museum dedicated to the heritage of electricity and gas. The site targets academics, researchers, and professionals interested in energy history and sociology. Technically, the website is built on WordPress with Elementor and uses modern JavaScript libraries and Matomo analytics for privacy-conscious tracking. Security posture is adequate with HTTPS enabled, but lacks some security headers and cookie consent mechanisms. WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency. Overall, the website is professional, content-rich, and trustworthy for its niche audience.

C

Caddy for Life

caddyforlife.at

66

Caddy for Life is a non-profit charity initiative organized by the Golfclub Bodensee Weissensberg, focused on hosting golf tournaments to raise funds for social projects in the Austria region. The website provides detailed information about past and upcoming charity events, supported projects, and sponsors, targeting golf enthusiasts and community members interested in charitable causes. The business model relies on sponsorships and donations collected during these events. Technically, the website is built on WordPress using Elementor and related plugins, ensuring a modern and responsive user experience. Security-wise, the site enforces HTTPS and implements GDPR-compliant cookie consent mechanisms, though it lacks a dedicated security policy or incident response information. Overall, the site is trustworthy, professionally maintained, and compliant with privacy regulations, with room for improvement in security transparency and accessibility.

A

Association de promotion mybuxi

adp-mybuxi.ch

51

Association de promotion mybuxi is a Swiss non-profit organization dedicated to promoting and expanding the demand-responsive transport service called mybuxi across rural Switzerland. Founded in 2019, the association supports operational deficits in structurally weak regions and funds technical development to enable mobility for people without private cars. The website is professionally designed using WordPress with Elementor and Yoast SEO, providing clear information about membership, projects, and the mission. The target audience includes Swiss rural communities, private individuals, and companies interested in sustainable mobility solutions. The organization positions itself as a niche promoter of innovative transport services with a growing footprint in Switzerland.

T

Tag der Demokratie

democracyday.ch

49

The website democracyday.ch serves as an informational and campaign platform dedicated to promoting democracy awareness in Switzerland. It targets the general public interested in civic engagement and democratic participation. The site provides multilingual content, event mapping, idea sharing, and partnership information, positioning itself as a niche non-profit campaign platform. Technically, the site is built on WordPress with modern JavaScript libraries such as jQuery, Foundation, and Isotope for layout and interactivity. It integrates Google Analytics and Facebook SDK for tracking and marketing purposes. The site is mobile optimized and shows moderate performance with basic SEO and accessibility features. Security-wise, the site enforces HTTPS and avoids exposing sensitive data but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information and incident response details are absent, which limits user trust and compliance. Overall, the site is functional and professional but could improve in privacy, security, and user engagement aspects.

V

Verein Hauptstadtregion Schweiz

hauptstadtregion.ch

41

The Verein Hauptstadtregion Schweiz is a regional non-profit association uniting five Swiss cantons and multiple municipalities to strengthen the capital region as an innovative living and economic space. The website presents a clear focus on seven key thematic areas including political center development, healthcare, smart infrastructure, food and nutrition clusters, economic and spatial development, transport, and bilingualism. The site is built on TYPO3 CMS with modern JavaScript libraries and includes a cookie consent mechanism compliant with GDPR. Social media presence on Twitter and LinkedIn supports outreach and transparency. Security posture is solid with HTTPS and anonymized analytics, though some security best practices like security headers and incident response contacts could be improved. Overall, the site is professional, trustworthy, and well-structured for its target audience of regional stakeholders and citizens.

V

Vogelschutz Aarwangen

vogelschutzaarwangen.ch

51

Vogelschutz Aarwangen is a small Swiss non-profit organization dedicated to the protection of birds and nature in the Aarwangen region and surrounding municipalities. The organization relies on volunteer efforts to maintain natural habitats and promote biodiversity through conservation activities and educational programs. The website serves as an informational and community engagement platform, presenting the organization's mission, activities, and local events. Technically, the website is built on Joomla CMS using modern web technologies such as Bootstrap 5 and jQuery. It is mobile responsive and includes structured data for SEO enhancement. However, the site lacks explicit privacy and cookie policies, and no social media or direct contact emails are provided on the homepage, which limits user engagement and compliance transparency. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, but it lacks important security headers and formal security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is moderate but could be improved with additional headers and compliance documentation. The overall risk is low given the nature of the organization and content, but compliance gaps related to privacy and cookie policies should be addressed to meet GDPR and best practice standards. Enhancing transparency and security measures will improve trust and user confidence.

N

NaturDienst Bieri

naturdienst.ch

37

NaturDienst Bieri is a small, locally focused nature conservation and biodiversity consulting firm founded in 2022 by Markus Bieri in Richenthal, Switzerland. The company offers services including biodiversity promotion consulting, nature excursions, sensitization courses, and educational programs. The website is professionally designed using WordPress with the Divi theme and includes structured data for SEO. It provides clear contact information and promotes upcoming events and offerings related to nature conservation. Technically, the site uses modern web technologies and integrates Google Analytics and Tag Manager for user tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy, accessible, and well-aligned with the business's stated mission and services.

Ostschweizer Gästekarte GmbH operates a regional guest card service called 'Oskar' that provides tourists in Eastern Switzerland with access to free public transportation on the Ostwind network and discounts or free entry to various leisure activities. The company partners with local accommodations to issue these cards, targeting travelers seeking convenient and cost-effective regional travel and experiences. The website is professionally designed with a clear focus on user experience, offering multilingual support (German and English) and interactive features such as hotel booking forms and image sliders showcasing regional attractions. The business maintains a consistent brand presence and provides comprehensive legal and privacy documentation, reflecting a mature approach to compliance and customer trust.

M

Meilenweiss

meilenweiss.ch

51

Meilenweiss is a Swiss-based company offering an annual ski pass that grants access to multiple ski resorts and leisure activities. The website is built on WordPress with WooCommerce for e-commerce functionality, integrating payment processing via Saferpay. The digital infrastructure includes modern tracking tools such as Google Tag Manager and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and use of secure payment plugins, but lacks important security headers and formal policies such as privacy and cookie consent, which are critical for GDPR compliance. Overall, the website is professionally designed and mobile-optimized, targeting winter sports enthusiasts in Switzerland. However, the absence of privacy and security policies and contact information represents compliance and trust gaps that should be addressed.

T

Ticketcorner AG

ticketcorner.ch

10

Ticketcorner AG operates a leading online ticket sales platform in Switzerland, offering tickets for a wide range of events including concerts, sports, theater, circus, and ski resorts. The website is professionally designed with excellent navigation and localized language support, targeting event attendees primarily in the Swiss market. The business model focuses on e-commerce ticket sales with a strong market position in the region. Technically, the site uses modern web technologies such as jQuery, Google Tag Manager, and a consent management platform to ensure GDPR compliance and effective marketing. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is trustworthy, compliant, and well-optimized for its audience.

A

Aargau Verkehr AG (AVA)

aargauverkehr.ch

61

Aargau Verkehr AG (AVA) is a regional public transportation company operating in the Aargau region of Switzerland. The company provides transit schedules, operational updates, and ticketing services primarily targeting local commuters and travelers. The website is professionally designed using Joomla CMS with Helix Ultimate framework and integrates modern web technologies such as Bootstrap and jQuery. It features a cookie consent mechanism compliant with GDPR and uses Google Analytics for traffic analysis. Security posture is good with HTTPS enforced and CSRF protections in place, though additional security headers could enhance protection. No critical vulnerabilities or suspicious content were detected. Overall, the website reflects a credible and established transportation service provider with a solid digital presence.

A

Aargau Tourismus AG

akb-freizeitportal.ch

54

The AKB Freizeitportal is a regional leisure and tourism platform operated in partnership with Aargau Tourismus AG and supported by the Aargauische Kantonalbank. It offers discounted leisure experiences, event information, and a newsletter service targeting residents and visitors of the Aargau region in Switzerland. The website is built on the nopCommerce platform, leveraging modern front-end technologies and analytics tools such as Google Tag Manager and Plausible Analytics. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Security posture is solid with HTTPS enforced and secure form handling, though some improvements in HTTP security headers and incident response disclosures are recommended. Overall, the site presents a professional, trustworthy, and user-friendly experience with clear business legitimacy and no suspicious content.

S

Schlossrestaurant Habsburg

schlossrestaurant-habsburg.ch

47

Schlossrestaurant Habsburg is a hospitality business operating a historic castle restaurant and event venue in Switzerland. The company offers regional cuisine and hosts weddings, banquets, seminars, and private celebrations. It is positioned as a premium venue with a strong local heritage and scenic views, targeting individual guests and event organizers. The website is professionally designed using WordPress and the Avada theme, with modern SEO and analytics integrations. Security posture is good with HTTPS and security headers, though cookie consent mechanisms and explicit security policies are missing. Overall, the site is trustworthy and well-maintained, reflecting a small but established hospitality business under the parent company AARGAUHOTELS.CH.

Therme Zurzach is a Swiss-based wellness and hospitality business specializing in thermal baths, sauna, spa treatments, and fitness services. The website presents a professional and well-structured digital presence powered by HubSpot CMS, integrating modern marketing and analytics tools. The company targets families and wellness customers seeking relaxation and health benefits from thermal water and related services. The site includes rich content about services, events, and packages, supported by social media channels and online ticketing. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit privacy and security policies are not found. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website is trustworthy, user-friendly, and compliant with basic privacy standards, though improvements in explicit policy disclosures and incident response contacts are recommended.

E

Erlebnis Freiamt

freiamt.ch

39

Erlebnis Freiamt is a regional tourism and cultural promotion website dedicated to showcasing the Freiamt region in Switzerland. The site offers comprehensive information on local events, hiking and biking routes, gastronomy, cultural activities, and services aimed at tourists, families, and local residents. It positions itself as a key regional information hub with a focus on nature, culture, and community engagement. The business model revolves around promoting regional tourism and providing accessible, engaging content to attract visitors and support local businesses.

S

sa_partners GmbH

sapartners.ch

51

sa_partners GmbH is a specialized consulting firm based in Zurich, Switzerland, focusing on urban design and territorial planning. Their core activities include project development, process design, and spatial strategies for urban and regional development. The company targets municipalities, developers, and planners seeking innovative and sustainable urban solutions. The website reflects a professional and consistent brand image with detailed project showcases and a clear business focus. Technically, the site uses modern web technologies such as Tailwind CSS, jQuery, and Google Tag Manager, providing a responsive and SEO-optimized experience. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and privacy compliance mechanisms could be improved. Overall, the site is trustworthy and well-positioned in its niche market.

B

Bureau d'étude Relief

bureau-relief.ch

51

Bureau d'étude Relief is a small Swiss company specializing in geo-tourism projects, natural heritage valorization, and cartography services. The website presents a professional and focused business offering, targeting clients interested in environmental and landscape interpretation services. The company maintains a consistent brand presence with active social media links on Facebook and LinkedIn, and the website is built on a modern WordPress platform using the Divi theme and Yoast SEO for optimization. Technically, the site is well-structured with HTTPS enabled and appropriate security headers, indicating a good security posture. However, the absence of explicit privacy policies, terms of service, and contact information limits the site's privacy compliance and user trust. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures to improve compliance and credibility.

Wolzenalp is a small regional tourism business located in Switzerland, offering family-friendly hiking, biking, winter sports, and mountain railway services. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to tourists and families. Technically, the site uses the Contao CMS, integrates Google Tag Manager, Cookiebot for consent management, and Outdooractive API for outdoor activity information. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though some advanced headers like Content-Security-Policy could be added. Privacy compliance is well addressed with a comprehensive cookie policy and GDPR-aligned consent. However, no explicit terms of service, security policy, or incident response contacts are published, which could be improved. Overall, the website is trustworthy, secure, and well-suited for its business purpose.

S

Smaragdgebiet Oberaargau

smaragdoberaargau.ch

46

Smaragdgebiet Oberaargau is a Swiss non-profit organization dedicated to the conservation and promotion of endangered species and habitats within the Oberaargau region. Established in 2008, it operates as part of an international species protection initiative, focusing on local engagement, environmental education, and habitat enhancement. The website serves as an information hub, offering news, newsletters, event announcements, and partnership details to environmental enthusiasts and local stakeholders. Technically, the website is built on the Joomla CMS platform, utilizing modern web technologies such as Bootstrap 5 and jQuery for responsive design and interactivity. The site demonstrates good mobile optimization and basic accessibility features, though there is room for improvement in SEO and performance tuning. The absence of advanced analytics or tracking tools indicates a privacy-conscious approach. From a security perspective, the site benefits from HTTPS encryption and includes CSRF tokens in forms, but lacks important security headers that could enhance protection against common web threats. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or explicit GDPR compliance indicators. Contact information is limited to a web form, with no direct emails or phone numbers visible. Overall, the website is trustworthy and professionally maintained, with a clear mission and consistent branding. Strategic improvements in security headers, privacy compliance, and contact transparency would further strengthen its posture and user trust.

P

plusenergiequartier

plusenergiequartier.ch

49

plusenergiequartier is a Swiss-based initiative focused on promoting sustainable development in the building sector through Plusenergie-Quartiere, which produce more energy than they consume annually. The project supports the Swiss Federal Energy Strategy 2050 and collaborates with regional governments, infrastructure companies, and investors. The website serves as an informational and coordination platform, targeting municipalities, investors, and the general public interested in sustainable urban development. Technically, the site is built on WordPress with common plugins for SEO, multilingual support, and user engagement via newsletters. While the site uses HTTPS and follows basic security practices, it lacks advanced security headers and a cookie consent mechanism. The presence of a Google Analytics plugin is noted but it is not configured, indicating minimal user tracking. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

The Toolbox Agenda 2030 website serves as a digital platform aggregating best practices for sustainable development implementation targeted at Swiss cantons, municipalities, and businesses. It offers two main toolboxes tailored for government entities and companies, supporting the Agenda 2030 sustainability goals. The site is multilingual (German, French, Italian) and presents a professional, consistent brand image aligned with its government-related mission. Technically, the website is built on WordPress using the Oxygen builder framework, enhanced with jQuery and Matomo analytics for user tracking. Cookie consent is implemented with granular categories, reflecting a moderate level of privacy compliance. The site loads with moderate performance and is mobile-optimized with basic accessibility features. From a security perspective, HTTPS is enforced with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and published security policies limits the security posture. No privacy policy or terms of service pages were found, which impacts compliance and user trust. The domain uses privacy protection in WHOIS, which is common and justified for this type of project. Overall, the website is functional, professional, and moderately secure but would benefit from enhanced privacy disclosures, security policies, and contact information to improve trust and compliance.

P

ProKilowatt

prokw.ch

71

ProKilowatt is a Swiss government-backed program managed by the Office fédéral de l’énergie (OFEN) aimed at promoting electrical efficiency among businesses and households. The program offers financial contributions up to 30% of investment costs to encourage replacement of energy-intensive electrical systems with more efficient technologies. The website is professionally designed, well-structured, and provides comprehensive information including FAQs, application procedures, and upcoming events. Technically, the site is built on WordPress with Elementor and uses modern SEO and privacy compliance tools such as Yoast SEO and Complianz GDPR plugin. Security posture is strong with HTTPS enforced and security headers present, though explicit security policies and incident response contacts are not found. Overall, the site is trustworthy, compliant, and serves as an authoritative resource for energy efficiency initiatives in Switzerland.

K

Kommune 360°

kommune360.de

54

Kommune 360° is a German non-profit initiative focused on fostering cooperative and integrated planning and management to support successful child development within municipalities. The organization operates a professional website offering resources such as a Change-Guide, a Fellow-Program, podcasts, festivals, and newsletters targeted at municipal employees and stakeholders involved in child and youth welfare planning. The website is well-branded, consistent, and supported by partner organizations including Auridis Stiftung, DKJS, and PHINEO. Technically, the site is built on WordPress with modern plugins and frameworks, including Bootstrap and Mai Engine, and employs both Google Analytics and Matomo for analytics. The site is GDPR compliant with a comprehensive privacy policy and a cookie consent mechanism with opt-in functionality. Security posture is good with HTTPS enforced, though security headers are not detected and could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the site demonstrates a mature digital presence suitable for its non-profit mission.

E

Euromontana

euromontana.org

48

Euromontana is a European multi-stakeholder network dedicated to sustainable development and improving quality of life in mountain areas. It serves as a recognized voice for European mountain communities, providing policy advocacy, networking, research promotion, and event organization. The website reflects a professional and consistent brand image targeting policymakers, researchers, and local stakeholders in mountain regions. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and user experience. Security posture is solid with HTTPS and reCAPTCHA usage, though it lacks some security headers and formal security policies. Privacy compliance is partially met with a privacy policy but no cookie consent mechanism. WHOIS data is unavailable, limiting domain trust analysis, but the site content and presentation suggest legitimacy. Overall, the site is well-maintained, informative, and trustworthy for its audience.

C

Campus Demokratie

campusdemokratie.ch

52

Campus Demokratie is a Swiss non-profit organization dedicated to promoting political education and participation nationwide to strengthen democracy. The website serves as a national platform offering resources, events, and projects focused on democratic engagement. It targets politically interested citizens and educational institutions within Switzerland. The organization appears well-established since 2017 with a clear mission and active social media presence. Technically, the website is built on WordPress using modern libraries such as jQuery and Foundation, optimized for mobile devices and SEO with Yoast plugin. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though it lacks some security headers and a cookie consent mechanism. Privacy compliance is partially met with a comprehensive privacy policy but no explicit cookie banner. Overall, the site is professional, trustworthy, and content-rich, supporting its role as a key educational resource in Swiss democracy.

D

Dachverband Kinder- und Jugendförderung Graubünden

jugend.gr

59

Dachverband Kinder- und Jugendförderung Graubünden operates as a regional non-profit organization dedicated to child and youth promotion within the canton of Graubünden, Switzerland. The organization provides advisory services, educational inputs, project coordination, and networking opportunities aimed at supporting children, youth, social workers, and community stakeholders. The website reflects a clear focus on these services with professional design and consistent branding. Technically, the website is built on WordPress with common plugins such as Contact Form 7 and Cookie Notice, ensuring basic functionality and GDPR compliance. The site is mobile-optimized and uses HTTPS with email obfuscation to protect contact details. However, there is room for improvement in security headers and published security policies. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms but lacks explicit security or incident response policies. No vulnerabilities or suspicious activities were detected. Privacy compliance is strong with clear privacy and cookie policies. Overall, the website is trustworthy, professionally maintained, and suitable for its target audience. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular plugin audits to ensure ongoing security and compliance.

G

Gemeinde Hasliberg

hasliberg.ch

54

Gemeinde Hasliberg is the official municipal government website serving the Hasliberg region in Switzerland. It provides local administrative information, community services, tourism details, event announcements, and educational resources. The site targets residents and visitors, offering comprehensive local content in German. The business model is that of a government entity focused on public service and community engagement. Technically, the website is built on the concrete5 CMS platform, utilizing common JavaScript libraries and Google services such as Analytics and reCAPTCHA to enhance functionality and security. The site is mobile optimized and presents a professional design with clear navigation. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy, legitimate, and well-maintained, reflecting its role as a government portal.

C

Cluster e.V.

cluster-verein.de

50

Cluster e.V. is a small, non-profit organization based in Hildesheim, Germany, focused on youth support, culture, and community projects. The organization operates various innovative projects aimed at youth empowerment and social engagement, often collaborating with local municipalities and other stakeholders. Their website reflects a professional and consistent brand presence with clear messaging and community testimonials that enhance trustworthiness. Technically, the website is built on WordPress with a modern plugin stack including Yoast SEO, Contact Form 7, and cookie consent tools. Hosting is provided by Contabo, and the site uses HTTPS with good SSL configuration. The site is moderately performant and mobile-optimized, though some improvements in accessibility and security headers could be made. From a security perspective, the site employs HTTPS and hCaptcha for form protection, but lacks explicit security headers and a published security policy or incident response contacts. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism, indicating GDPR awareness. Overall, the website presents a trustworthy and professional image suitable for its non-profit mission. Strategic improvements in security headers, incident response transparency, and contact information visibility would further enhance its security posture and user trust.

M

mybuxi AG

mybuxi.ch

49

mybuxi AG operates a sustainable on-demand driving service primarily targeting rural areas in Switzerland. The company leverages a mobile app and web platform to provide flexible regional transport solutions, positioning itself as a mobility startup focused on ecological and community-oriented transport. The website reflects a professional and consistent brand image with clear navigation and multilingual support, enhancing accessibility for diverse users. Technically, the site is built on WordPress with Elementor and uses modern libraries such as Swiper.js and Bootstrap, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Contact information is comprehensive, including multiple regional emails and a customer hotline, supporting business credibility. Overall, the website is trustworthy and well-positioned but could improve in privacy and security transparency.