Security Directory

T

Thurgauer Kantonalbank

tkb.ch

70

Thurgauer Kantonalbank (TKB) is a well-established Swiss universal bank serving primarily the canton of Thurgau. Founded in 1871, it offers a broad range of financial services including retail banking, investment products, mortgage financing, and digital banking through its OLIVIA platform. The website reflects a mature digital presence with comprehensive product information, clear navigation, and strong branding consistency. The bank positions itself as a trusted regional financial institution with a focus on personalized advisory and modern digital services. Technically, the site employs modern analytics and consent management tools, ensuring GDPR compliance and user privacy. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

R

RaiseNow

raisenow.ch

72

RaiseNow operates a professional SaaS platform focused on enabling nonprofits, associations, and changemakers to efficiently collect donations and manage payments both locally and globally. The website demonstrates a strong market position with over 54,000 organizations trusting their technology, including well-known NGOs such as UNICEF and Amnesty International. The platform offers a comprehensive suite of fundraising tools, payment acceptance solutions, community engagement features, and integration capabilities, positioning itself as a key player in the nonprofit technology sector. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies including Google Analytics 4, Google Tag Manager, and FontAwesome. The site is mobile-optimized, well-structured, and includes SEO best practices. Cookie consent mechanisms and privacy policies indicate a good level of GDPR compliance. However, explicit security headers are not clearly visible in the provided data, suggesting room for improvement in security hardening. From a security perspective, the site uses HTTPS and implements cookie consent, but lacks publicly visible security policies or incident response contacts. The absence of WHOIS registrant data is a concern but does not currently undermine the site's legitimacy given the professional presentation and reputable client base. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, RaiseNow's website reflects a mature digital presence with solid business credibility and moderate technical sophistication. Strategic recommendations include enhancing security header implementation, publishing security policies, and improving transparency around incident response. Monitoring the WHOIS data situation is advised to ensure ongoing trustworthiness.

N

NAEF PARTNERS AG

naefpartners.ch

52

NAEF PARTNERS AG is a Swiss-based boutique consulting firm specializing in corporate development, sales performance, change management, and leadership coaching. The company targets business professionals and organizations seeking tailored consulting services to enhance strategy implementation and leadership effectiveness. Their market position is that of a high-end consulting boutique with a focus on personalized and human-centric business development approaches. Key services include strategy development, leadership empowerment, sales optimization, and change management interventions. Technically, the website is built on the SilverStripe CMS platform and incorporates modern web technologies such as Google Analytics and Google Tag Manager for analytics, along with jQuery-based UI components like Fancybox and Flexslider. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features could be improved. Performance is moderate with asynchronous loading of analytics scripts. From a security perspective, the site enforces HTTPS with an excellent SSL configuration and anonymizes IP addresses in Google Analytics, reflecting some privacy awareness. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options, and does not provide a cookie consent mechanism or a published security policy. No vulnerability disclosure or incident response contacts are present, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and well-aligned with the business's consulting focus. The main risks relate to privacy compliance gaps and missing security best practices. Strategic improvements in these areas would strengthen the security posture and regulatory adherence, supporting the company’s credibility and client trust.

S

schweizeraktien.net AG

schweizeraktien.net

50

schweizeraktien.net AG operates a specialized online platform providing comprehensive information, analyses, and commentary on Swiss stocks, including small caps, unlisted shares, and the OTC market. The company targets investors and financial market participants interested in Swiss equities, positioning itself as a niche content provider within the finance sector. The website is professionally designed and regularly updated, reflecting a focused business model centered on financial content delivery. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO Premium for search optimization, Wordfence for security, and Real Cookie Banner Pro for privacy compliance. Integration with Google Tag Manager and various Google services indicates a mature digital infrastructure. Performance and mobile optimization are good, though some accessibility features could be enhanced. From a security perspective, the site employs HTTPS and Wordfence firewall protections, alongside Google reCAPTCHA on forms to mitigate spam. Cookie consent mechanisms comply with GDPR and Swiss data protection laws. However, explicit security headers like Content-Security-Policy are not detected and should be implemented to strengthen defenses. No vulnerabilities or exposed sensitive data were found. Overall, the website presents a low-risk profile with strong privacy and security practices, though the absence of WHOIS registration data raises questions about domain legitimacy. Continuous monitoring of domain registration and further security hardening are recommended to maintain trust and compliance.

Lay Theme is a specialized WordPress theme provider focused on creative professionals and portfolio websites. Established in 2015, the company offers a customizable theme with a unique layout tool called the Gridder, extensive customization options, WooCommerce shop support, and various addons to enhance website functionality. The website demonstrates a professional market position within the niche WordPress theme industry, targeting creatives who want visually appealing and customizable portfolio sites. Technically, the site leverages modern JavaScript libraries, video integration, and multiple marketing pixels, hosted on DreamHost. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the site is trustworthy and professional but could improve transparency and security practices.

Agenza GmbH is a specialized web agency based in Kriens near Luzern, Switzerland, focusing on WordPress websites, UX design, e-commerce solutions, and web platform development. The company serves a diverse clientele including SMEs, organizations, and startups, offering tailored digital solutions that emphasize accessibility, SEO, and user experience. Their market position is solid within the regional technology sector, supported by a portfolio of over 93 clients and positive testimonials. Technically, the website is built on WordPress using modern tools such as the Breakdance builder, WooCommerce for e-commerce, and Yoast SEO for optimization. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Analytics and marketing integrations include Google Tag Manager, Google Ads, and LinkedIn Insight, indicating a moderate level of user tracking and marketing sophistication. From a security perspective, the site enforces HTTPS and follows good practices by avoiding exposed sensitive data and using reputable third-party scripts. However, explicit security headers and a formal security policy are absent, representing areas for improvement. Privacy compliance is strong with a comprehensive privacy policy and cookie policy, though a consent mechanism is not evident. Overall, Agenza GmbH presents a trustworthy and professional online presence with a strong focus on quality and client satisfaction. The website's security posture is good but could benefit from enhanced header policies and incident response transparency. The business is credible, well-branded, and aligned with its WHOIS registration data, supporting a high legitimacy score.

K

Klinikum Fulda gAG

klinikum-fulda.de

59

Klinikum Fulda gAG operates a large, modern hospital providing maximal healthcare services in the Osthessen region of Germany. The institution serves over 500,000 residents with inpatient and outpatient care, specialized clinics, and educational programs as a campus of the Universitätsmedizin Marburg. The website reflects a mature digital presence with comprehensive patient information, event announcements, and career opportunities. Technically, the site is built on WordPress with modern plugins and analytics tools, ensuring good performance and SEO optimization. Security posture is strong with HTTPS, cookie consent management, and no visible vulnerabilities. Privacy policies are comprehensive and GDPR compliant. Overall, the site projects high professionalism and trustworthiness.

M

Museo Nacional del Prado

museodelprado.es

69

Museo Nacional del Prado is a prestigious national museum in Spain dedicated to fine arts and cultural heritage. It serves a broad audience including tourists, families, researchers, and art enthusiasts by providing exhibitions, educational resources, virtual tours, and access to its extensive art collection. The museum operates under the Spanish Government's Ministry of Culture and Sport, positioning it as a leading cultural institution with a strong market presence in the government and non-profit sectors. Technically, the website employs a modern and diverse technology stack including jQuery, Bootstrap, Google Tag Manager, and TinyMCE, supported by a CDN infrastructure. The site is well-optimized for mobile devices, accessible, and SEO-friendly, reflecting a mature digital presence. The CMS used is GNOSS, which supports semantic web and knowledge graph features. From a security perspective, the site uses HTTPS with excellent SSL configuration and follows best practices such as secure forms and no visible vulnerabilities. However, explicit security headers and a public security policy or incident response contact are not evident, representing areas for improvement. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and secure, with no signs of malicious activity or content safety concerns. It effectively supports the museum's mission and public engagement goals.

L

Leipziger Messe GmbH

leipziger-buchmesse.de

60

Leipziger Buchmesse is a major cultural and media event organizer based in Germany, hosting the prominent Leipzig Book Fair which connects readers, authors, publishers, and media companies. The website reflects a well-established event with a strong market position in the German-speaking book and media industry. The site offers comprehensive information for exhibitors, visitors, and media professionals, supported by a professional design and consistent branding. Technically, the site uses modern JavaScript libraries, consent management tools, and Google Tag Manager for analytics, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site is trustworthy, professional, and serves its audience effectively.

M

MVB GmbH

mvb-online.de

59

MVB GmbH operates as a central digital infrastructure and media service provider for the book industry, serving publishers, bookstores, self-publishers, and service providers primarily in Germany and internationally. The company offers a broad portfolio of platforms and media formats designed to improve visibility and connectivity within the book market. Their website reflects a professional and consistent brand presence with a focus on digital innovation and industry networking. Technically, the site employs modern frameworks such as Bootstrap and FontAwesome, integrates Google Tag Manager for analytics, and uses a third-party cookie consent mechanism, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced and consent management in place, but lacks explicit security policies, incident response contacts, and security headers, which are areas for improvement. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

א

אוריין בע״מ

orian.com

62

Orian Ltd. is a publicly traded Israeli logistics company offering comprehensive supply chain management solutions. The company operates as part of an international group, providing sea and air freight, domestic transportation, customs brokerage, e-commerce logistics, and specialized services such as cargo insurance and clinical trials logistics. The website is professionally designed, primarily in Hebrew, targeting business clients and investors. Technical infrastructure includes modern JavaScript libraries, Google Analytics, and Tag Manager, indicating a mature digital presence. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks explicit security headers and detailed privacy compliance mechanisms. The absence of WHOIS data raises concerns about domain registration legitimacy, though the business content and investor relations links support its authenticity. Strategic improvements in privacy policies, security headers, and incident response disclosures are recommended to enhance trust and compliance.

S

Spider AF

saf-sc-protect.com

77

Spider AF is a specialized technology company founded in 2017 that provides digital marketing security solutions focused on combating ad fraud, invalid clicks, fake leads, and website risks. The company targets digital marketers and businesses seeking to optimize ad spend and protect marketing budgets. Their platform is trusted by over 500 companies and offers an all-in-one SaaS solution with a free trial option. Technically, the website is built on Webflow and hosted on AWS infrastructure, integrating multiple modern marketing and analytics tools such as Google Analytics, Facebook Pixel, Intercom, HubSpot, and Visual Website Optimizer. The site is mobile optimized and designed with good user experience and SEO practices. Security-wise, the site uses HTTPS and domain registration protections but lacks DNSSEC and explicit security headers, indicating room for improvement in hardening. Privacy compliance is basic, with a cookie consent banner but no visible privacy or terms of service pages. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures and security headers.

S

Spider AF

spideraf.com

77

Spider AF is a specialized digital marketing security company focused on combating ad fraud, click fraud, and invalid leads. The company offers a SaaS platform trusted by over 500 companies to protect marketing budgets by detecting and preventing fraudulent activities. Their key services include ad fraud detection, invalid click filtering, fake lead detection, and website risk monitoring. The website is professionally designed, targeting digital marketers and advertisers concerned with marketing security. Technically, the site is built on Webflow and leverages modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, PostHog, and Visual Website Optimizer, hosted on AWS infrastructure. The site is mobile optimized and performs moderately well.

F

Frizzy Foundation

frizzyfoundation.org

40

Frizzy Foundation is a small non-profit organization dedicated to supporting children with special needs in Switzerland and abroad. Their mission includes promoting mental and physical health through outdoor activities and infrastructure development. The website content is minimal but relevant, providing basic information about the foundation's purpose and contact emails. The domain is well-established since 2011, consistent with the foundation's history, and registered without privacy protection, enhancing transparency. Technically, the website is hand-coded with basic HTML and CSS, utilizing Google Analytics and Google Tag Manager for tracking. Mobile optimization and accessibility are basic, and no CMS or advanced frameworks are detected. Security posture is moderate with domain transfer protection but lacks DNSSEC and security headers. No cookie consent mechanism is present despite analytics usage, indicating a privacy compliance gap. Security-wise, the site shows no critical vulnerabilities or malicious indicators but would benefit from improved security headers, DNSSEC, and explicit security policies. The absence of a cookie policy and consent mechanism is a compliance risk under GDPR. Overall, the website is functional and trustworthy but could improve in privacy and security practices to enhance user trust and regulatory compliance.

S

Stiftung Denk an mich

denkanmich.ch

62

Stiftung Denk an mich is a Swiss non-profit organization dedicated to supporting people with disabilities by providing financial assistance for holidays and leisure activities. The foundation fills a social gap by enabling those who cannot afford recreational time to enjoy improved quality of life. The website reflects a focused mission with clear messaging, targeting individuals with disabilities and their supporters within Switzerland. The organization maintains a credible market position as a niche non-profit with recognized certifications such as ZEWO. Technically, the website is built on modern frameworks including Vue.js and Nuxt.js, with integrations for analytics and media content. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be enhanced. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, but lacks a public security policy or vulnerability disclosure. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for the foundation.

S

Swiss Olympic

swissolympic.ch

63

Swiss Olympic is the umbrella organization for Swiss sports and serves as the National Olympic Committee of Switzerland. It supports and strengthens its members, including 83 national sports federations and 30 partner organizations, representing approximately 18,300 clubs and 2.2 million active sports participants. The organization is well-established with a strong market position and recognized trust indicators such as ISO 9001:2015 certification and partnerships with major national and international brands. The website reflects a professional and consistent brand image with comprehensive content tailored to its target audience of sports organizations, athletes, and partners. Technically, the website employs modern JavaScript libraries including jQuery, Slick Carousel, JWPlayer, and integrates Google Analytics and Tag Manager for analytics. Accessibility tools like Eye-Able are implemented, and the site is mobile-optimized with good SEO practices. Performance is moderate, with no critical technical issues detected. However, no CMS or hosting provider details were identified. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but lacks explicit security policy pages, incident response contacts, and security headers such as Content-Security-Policy. No vulnerabilities or exposed sensitive data were found. The WHOIS data shows privacy protection consistent with organizational privacy needs, and no suspicious patterns were detected. Overall, the website is secure, professional, and compliant with privacy regulations, with room for improvement in formal security disclosures and enhanced security headers. The risk level is low, and the site effectively supports the organization's mission and stakeholder engagement.

H

Hessischer Gründerpreis – Die Auszeichnung 🏆

hessischer-gruenderpreis.de

52

The Hessischer Gründerpreis website represents a well-established regional business award platform focused on startups and business successors in Hessen, Germany. It provides visibility, networking, media exposure, and professional support to companies in their first five years of operation or succession. The platform is backed by reputable partners and sponsors, including financial institutions, industry associations, and government bodies, enhancing its credibility and market position. Technically, the website is built on Joomla CMS with modern front-end frameworks like UIkit and uses common analytics and consent management tools such as Google Analytics, Google Tag Manager, and Usercentrics. The site is mobile-optimized, accessible, and SEO-friendly, with structured data implemented for enhanced search engine understanding. From a security perspective, the site enforces HTTPS and includes CSRF tokens, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, making it a reliable digital presence for the Hessischer Gründerpreis initiative.

A

aha - Zweckverband Abfallwirtschaft Region Hannover

aha-region.de

62

The website www.aha-region.de represents the regional public waste management authority 'aha - Zweckverband Abfallwirtschaft Region Hannover' in Germany. It provides comprehensive waste disposal services for private households and businesses, including container services, recycling, composting, and special waste management. The site targets a broad audience including residents and commercial customers within the Hannover region. The business model is focused on public service delivery in the environmental sector, positioning itself as a key regional player in waste management and sustainability. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and integrates modern tools such as Google Tag Manager, Google Analytics, and Cookiebot for cookie consent management. The site is hosted on German servers (htp-tel.de) and demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, indicating a commitment to user privacy and data protection. However, explicit security headers and detailed security policies are not evident in the provided data. No vulnerabilities or exposed sensitive data were detected. The absence of a published privacy policy or terms of service page is a notable gap in compliance documentation. Overall, the website is professional, trustworthy, and safe for general audiences. It effectively communicates its public service mission but could improve transparency by publishing comprehensive privacy and security policies and providing clear contact information. Strategic recommendations include enhancing security headers, incident response readiness, and compliance documentation to strengthen trust and regulatory adherence.

G

GOP Entertainment-Group

variete.de

49

GOP Entertainment-Group operates a network of variety theaters across Germany, offering live shows featuring artists, comedians, and entertainers. The company targets a broad audience including families and general entertainment seekers, positioning itself as a leading player in the German hospitality and live entertainment sector. The website is built on TYPO3 CMS and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and TikTok Pixel, demonstrating a mature digital infrastructure. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response information. Overall, the site is professional, content-rich, and trustworthy, supporting a large-scale entertainment business.

D

Dextro Energy

dextro-energy.com

47

Dextro Energy is a well-established German company specializing in sports nutrition products, particularly dextrose-based energy supplements for endurance and fitness athletes. The company operates a professional e-commerce platform built on Shopify, offering a range of products alongside content such as a magazine and a sports team sponsorship. Their market position is solid with a history dating back to 2005, targeting primarily German-speaking customers interested in sports and fitness nutrition. The website demonstrates good branding consistency and trust signals including customer ratings and GDPR compliance. Technically, the site leverages modern Shopify infrastructure, integrates multiple marketing and analytics tools, and employs Cloudflare for security and performance. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS enforced and GDPR-compliant cookie consent mechanisms, although explicit security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the site presents a trustworthy and professional digital presence aligned with its business goals.

B

BWT

bwt.com

58

BWT is a large, established European company specializing in water treatment technologies and sustainable water solutions for various sectors including residential, hospitality, industry, pharma, and pools. Their website reflects a mature digital presence with comprehensive content, multimedia integration, and multi-language support. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and performance optimizations like Baqend SpeedKit, indicating a high level of digital maturity. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit incident response and vulnerability disclosure information are not publicly available. Overall, the site is professional, trustworthy, and well-optimized, but the lack of WHOIS data and direct contact details slightly reduce business credibility scores.

E

enercity AG

enercity.de

71

enercity AG is a large, established German energy provider with a history dating back to 1825. The company offers a broad portfolio of energy-related services including electricity, gas, solar solutions, heating, water supply, telecommunications, and electromobility. It serves a wide audience including private customers, businesses, and municipalities primarily in Germany, with a strong regional focus on Hannover. The website reflects a mature digital presence with modern technologies such as React and Next.js, and implements GDPR-compliant consent management. Multiple industry awards and high customer ratings reinforce its market position and trustworthiness. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the website is professional, user-friendly, and compliant with privacy regulations, supporting enercity's reputation as a reliable energy partner.

C

Continental AG

continental.de

80

Continental AG is a leading global automotive supplier and tire manufacturer headquartered in Germany. The company focuses on innovation for safe, connected, and sustainable mobility, offering products and solutions primarily for automotive manufacturers and industrial customers. The website reflects a mature digital presence with comprehensive information for investors, job seekers, partners, and customers. Technically, the site is built on TYPO3 CMS and integrates modern tools such as Google Tag Manager and consent management for GDPR compliance. Security posture is strong with HTTPS enforced and content security policies in place, although additional headers could enhance protection. The absence of public WHOIS data is noted but likely due to privacy protection, not detracting from the site's legitimacy. Overall, Continental AG's website demonstrates professionalism, compliance, and a robust corporate identity.

F

Funkhaus Freiburg

baden.fm

63

baden.fm is a regional media broadcaster serving Freiburg and the Südbaden region in Germany, offering radio streaming, news, event tips, and ticket sales. The website is professionally designed with consistent branding and targets local residents and listeners. Technically, the site uses a modern tech stack including WordPress CMS, JavaScript libraries such as Swiper.js and Video.js, and analytics tools like Matomo and Google Tag Manager. Security posture is adequate with HTTPS enforced and bot protection via hCaptcha, but lacks explicit security headers and documented security policies. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the site is trustworthy and legitimate, with domain registration data consistent with the business identity.

A

Academy of Sports GmbH

academyofsports.de

54

Academy of Sports GmbH is a reputable German educational institution specializing in flexible, state-certified distance learning programs primarily in fitness, nutrition, coaching, sport management, and e-sports. Established in 2005, it offers over 50 accredited courses targeting professionals and individuals seeking career advancement or personal development in health and sports sectors. The company holds multiple certifications and awards, reinforcing its market position as a trusted provider in the education sector. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, and Salesforce integrations, hosted on a reliable infrastructure with domain control by GoDaddy. The site is well-optimized for mobile and accessibility, with good SEO practices and a professional design that supports user engagement and navigation. From a security perspective, the site enforces HTTPS, uses security best practices, and avoids exposing sensitive data. However, it lacks explicit security policies and a vulnerability disclosure mechanism, which could be improved. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the website presents a low-risk profile with strong business credibility, good technical implementation, and solid privacy compliance. Strategic recommendations include enhancing security transparency and adding formal incident response documentation to further strengthen trust and resilience.

E

Evangelische Hochschule Ludwigsburg

eh-ludwigsburg.de

53

Evangelische Hochschule Ludwigsburg is a state-recognized university of applied sciences affiliated with the Evangelical Church in Württemberg, Germany. The institution offers a broad range of bachelor and master programs primarily in social work, pedagogy, and theology, with a strong emphasis on practical application and international orientation. The website reflects a well-established academic institution with a clear focus on education, research, and community engagement. The target audience includes prospective and current students, academic staff, and partners in social and church-related sectors. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Bootstrap and jQuery, and integrates third-party services like Google Analytics 4 and YouTube for enhanced user engagement. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Privacy and cookie compliance are robust, featuring a detailed cookie consent mechanism and clear privacy policies aligned with GDPR requirements. From a security perspective, the site enforces HTTPS and employs cookie management best practices. While explicit security headers like Content-Security-Policy are not visibly declared, the overall security posture is strong with no evident vulnerabilities or exposed sensitive data. The WHOIS data is minimal but consistent with the domain's educational purpose, and no suspicious patterns were detected. Overall, the website demonstrates a mature digital presence with high content quality, good technical implementation, and strong privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party scripts to sustain security and trust.

L

Landessportbund Nordrhein-Westfalen e. V.

vibss.de

30

The website www.vibss.de serves as an information and advisory portal for sports clubs primarily in the German state of Nordrhein-Westfalen. Operated by the Landessportbund Nordrhein-Westfalen e. V., a non-profit organization, it offers comprehensive resources on club management, sports practice, legal matters, and digital transformation including AI assistance. The site is well-positioned as a regional leader in supporting sports associations with a clear focus on practical and legal guidance. Technically, the site is built on the TYPO3 CMS platform, integrates Google Analytics and Tag Manager for tracking and search functionalities, and is hosted likely via Deutsche Telekom infrastructure. The website demonstrates good mobile optimization, structured navigation, and professional branding consistency. Security-wise, the site enforces HTTPS, implements GDPR-compliant cookie consent mechanisms, and avoids exposing sensitive data, though it lacks explicit security policies or incident response contacts. Overall, the site is trustworthy, compliant, and serves its target audience effectively.

S

STUCO Fullservice GmbH

fullservice-stuco.de

55

STUCO Fullservice GmbH operates as a specialist fullservice provider for promotional products in Germany, offering comprehensive services from product conception to logistics and e-shop solutions. The company targets businesses seeking scalable and sustainable promotional merchandise solutions. The website reflects a professional digital presence with a modern WordPress and Elementor infrastructure, enhanced by SEO plugins and consent management tools. While the technical setup is solid, there is room for improvement in privacy compliance and security best practices. The absence of a published privacy policy and terms of service represents a compliance gap, and security headers are not detected, which could be enhanced to improve security posture. Overall, the site is trustworthy and well-positioned in its niche, with active social media engagement and recognized certifications such as EcoVadis.

B

Börsenblatt

boersenblatt.net

70

Börsenblatt.net is a leading German trade magazine website serving the book industry, providing news, background information, and services for book retailers and publishers. The site is professionally designed, mobile-optimized, and integrates multiple analytics and advertising technologies, including Google Analytics, Matomo, and Revive Adserver. The website demonstrates a mature digital infrastructure with comprehensive cookie consent management and GDPR compliance. However, the WHOIS data for the domain is unavailable, which raises moderate concerns about domain registration transparency. No explicit contact emails or phone numbers are present on the site, which could impact user trust and business credibility. Overall, the website is secure with proper HTTPS and security headers, and it maintains a high level of content quality and user experience.

J

Jazzcampus / Hochschule für Musik Basel

jazzcampus.com

64

Jazzcampus is an educational institution specializing in jazz music education located in Basel, Switzerland. It operates as part of the Hochschule für Musik Basel under the Fachhochschule Nordwestschweiz FHNW umbrella. The website presents a professional and comprehensive digital presence, offering detailed information about study programs, music courses, events, and affiliated organizations. The site is well-structured, mobile-optimized, and integrates multimedia content such as Vimeo videos to enhance user engagement. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements in cookie consent and security headers are recommended. The absence of WHOIS data for the domain raises concerns about domain registration transparency, but the strong institutional affiliation and content quality support legitimacy. Overall, the site serves its educational mission effectively with a trustworthy and professional online presence.

M

Musikschule Basel

musikschule-basel.ch

65

Musikschule Basel is a well-established music education institution based in Basel, Switzerland, offering a wide range of musical education services including individual and group instrumental and vocal lessons, ensembles, choirs, and music projects for children, youth, and adults. The website reflects a strong market position as a competence center for musical education with a comprehensive offering and clear target audience. Technically, the website employs modern JavaScript and Google Tag Manager for analytics, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policy and incident response information are not present. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

A

Allegra Academy

allegra.academy

65

Allegra Academy is an educational platform specializing in bike tourism and slow traffic mobility, primarily serving the Graubünden region in Switzerland. The website offers online courses with multimedia content and certificates, targeting professionals involved in bike tourism such as product managers, municipal employees, hotel staff, and guides. The platform is positioned as a niche educational resource with a focus on enhancing knowledge and service quality in the bike tourism sector. Technically, the site is built on WordPress using popular plugins like LearnDash for LMS functionality, WooCommerce for e-commerce, and Elementor for design. It employs modern web technologies and is mobile-optimized with good SEO practices. Security-wise, the site uses HTTPS and Google Tag Manager but lacks some security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism but no clear privacy or terms of service pages. No direct contact or incident response information is provided, which could be improved to enhance trust. Overall, the site is professional, secure, and credible but could benefit from enhanced privacy and security disclosures.

M

Musik-Akademie Basel

musik-akademie.ch

11

Musik-Akademie Basel is a well-established educational institution specializing in musical education across all levels, including higher education, talent development, and cultural events. It holds a strong market position in Basel, Switzerland, with a history spanning over 150 years. The website reflects a professional and comprehensive digital presence, offering detailed information about courses, institutes, and events, targeting music students, educators, and cultural audiences. Technically, the site employs modern web technologies with good mobile optimization and accessibility, and integrates Google Tag Manager for analytics with user consent mechanisms. Security posture is solid with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates high trustworthiness and compliance with privacy regulations, making it a credible and reliable resource for its audience.

C

ClubDesk

clubdesk.com

61

ClubDesk is a Swiss-based online club management software provider offering a comprehensive SaaS platform for associations and clubs to manage members, accounting, events, and websites. The company targets a broad range of clubs including sports, cultural, and hobby groups, with a strong presence in Switzerland and Germany. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Contao CMS, jQuery, and Google Tag Manager. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit privacy policies are missing. The business demonstrates legitimacy through transparent WHOIS data and partnerships with reputable financial and sports organizations. Overall, ClubDesk presents a mature digital infrastructure with a strong market position in the club management software niche.

K

KEENFINITY Group

keenfinity-group.com

72

KEENFINITY Group is a global leader in providing innovative security and professional communication solutions, partnering with renowned brands such as Bosch, Dynacord, and Electro-Voice. Their website showcases a comprehensive portfolio of products and services including video systems, intrusion alarms, access control, public address, conference systems, and electronics manufacturing services. The company targets businesses and organizations seeking advanced security and communication technologies. Technically, the website is built on modern web technologies with good mobile optimization, SEO, and performance. Security posture is solid with HTTPS and consent management, though explicit security policies and incident response contacts are not published. The absence of WHOIS registration data is a notable concern for domain legitimacy, though the professional website and strong brand associations mitigate some risk. Overall, KEENFINITY presents a credible and professional digital presence with room for improvement in transparency and security disclosures.

The website www.overenezakaznikmi.sk is a Slovak language platform focused on customer verification and review aggregation services. It targets a general audience in Slovakia, providing a service platform that likely helps businesses and consumers verify customer feedback. The site demonstrates a modern design with mobile optimization and basic accessibility features. Technically, it employs Google Analytics and Google Tag Manager for user tracking and analytics, alongside a privacy consent mechanism via the Privacy Center SDK, indicating some level of GDPR awareness. However, the absence of an explicit privacy policy and terms of service reduces its privacy compliance maturity. Security-wise, the site uses HTTPS but lacks visible security headers and detailed security policies, which suggests room for improvement in its security posture. No critical vulnerabilities or adult content were detected, and the domain WHOIS data is privacy protected, which is common for small businesses but slightly reduces transparency. Overall, the website scores moderately in content quality, technical implementation, security, privacy compliance, and business credibility, resulting in an overall AI score of 68.

T

TITLIS Bergbahnen AG

titlis.ch

72

TITLIS Bergbahnen AG operates a leading mountain tourism website promoting the TITLIS mountain region in Central Switzerland. The site offers information on skiing, hiking, cable cars, accommodation, restaurants, and events, positioning itself as a premier destination for tourists and adventure seekers. The technical infrastructure is modern, leveraging Next.js and React frameworks, with integrated analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for consent management. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit privacy and terms of service pages are not detected in the provided content. Overall, the website is professional, well-branded, and trustworthy, supporting the business's market position.

V

Val Surses

val-surses.ch

65

Val Surses is a regional tourism website promoting winter sports, accommodations, and activities in the Val Surses area of Switzerland, including Savognin and Bivio. The site targets tourists interested in winter holidays and outdoor experiences, offering booking services and information about local events and weather. Technically, the website is built on Drupal 10, uses Google Tag Manager for analytics, and includes a chat widget for user interaction. The site is mobile-optimized with a professional design and good navigation. Security-wise, the site uses HTTPS and has cookie consent mechanisms denying ad personalization and storage by default, but lacks explicit privacy policy and terms of service pages, which are important for GDPR compliance. No security incidents or vulnerabilities are evident from the content. Overall, the website is legitimate, professional, and safe for general audiences, but could improve privacy transparency and contact information to enhance trust and compliance.

T

Top Klassik Zürcher Oberland

topklassik.ch

55

Top Klassik Zürcher Oberland is a well-established Swiss non-profit organization dedicated to promoting classical music concerts in the Zürcher Oberland region. With over 50 years of history, it offers a rich annual program of classical concerts, targeting classical music enthusiasts locally. The website serves as a platform for event information, ticket sales, and membership engagement, supported by reputable local sponsors and municipalities. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring a good user experience and SEO optimization. However, there is room for improvement in security headers and privacy compliance. The security posture is solid with HTTPS and anonymized Google Tag Manager usage but lacks advanced security headers. Overall, the site is professional, trustworthy, and safe for general audiences, though it should address privacy and cookie policy gaps to enhance compliance and user trust.

A

Angus Council

angus.gov.uk

67

Angus Council operates as the official local government authority for the Angus region in Scotland, providing a broad spectrum of public services including housing, council tax, benefits, planning, and community support. The website serves residents and businesses with accessible information and service portals, reflecting a mature public sector digital presence. The council maintains a strong market position as a regional government entity with a focus on community engagement and service delivery. Technically, the website is built on Drupal 10, leveraging modern web technologies and analytics tools such as Google Analytics, Google Tag Manager, and Siteimprove Analytics. The site is mobile-optimized, accessible, and incorporates a chatbot for enhanced user interaction. Performance is moderate with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. However, explicit security headers are not evident, and there is no public security policy or incident response information. No vulnerabilities or exposed sensitive data were detected, indicating a solid security posture for a government website. Overall, the website is trustworthy, professional, and compliant with privacy regulations. The absence of WHOIS data limits domain age and registrant verification, but the .gov.uk domain and content strongly support legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and establishing a vulnerability disclosure program to further strengthen security and transparency.

GoHire.io is a SaaS-based recruitment platform offering simple and user-friendly hiring software targeted primarily at small and medium businesses (SMBs). The platform is trusted by over 3000 companies worldwide, indicating a solid market presence and a focus on efficient candidate hiring processes. The website is professionally designed with good content relevance and clear navigation, optimized for mobile devices. Technically, the site uses modern analytics and marketing tools such as HubSpot and Microsoft Clarity, hosted on Amazon AWS infrastructure. However, there is a lack of visible privacy and cookie policies, which impacts privacy compliance scores. Security posture is moderate with domain registration protections in place but missing DNSSEC and security headers. Overall, the website is safe, professional, and credible but would benefit from enhanced privacy disclosures and security best practices.

E

Emap

emap.com

69

emap is a UK-based niche media owner with a long historical background dating back to 1887. It operates under the Metropolis Group and offers specialized content, digital media, events, and awards targeting various niche industries. The website is professionally designed using WordPress and integrates modern plugins and analytics tools, indicating a mature digital infrastructure. Security posture is generally good with HTTPS and reCAPTCHA usage, but lacks visible security headers and formal privacy/cookie policies. The absence of WHOIS data for the domain is a notable anomaly that impacts trust and credibility assessments. Overall, the site serves its target audience effectively but would benefit from enhanced transparency and security practices.

L

Literary Review

literaryreview.co.uk

52

Literary Review is a reputable UK-based literary magazine established in 1979, focusing on book reviews and literary commentary. The website serves as a digital platform for its content, subscription services, and advertising. It targets readers interested in literature and culture, maintaining a consistent brand and high-quality content. Technically, the site is built on WordPress with common plugins and tracking tools, hosted by Easyspace Ltd. The site is moderately optimized for performance and mobile use, with good SEO and basic accessibility features. Security posture is solid with HTTPS and some security best practices, though improvements in HTTP security headers and cookie consent mechanisms are recommended. Privacy policies are present and GDPR compliant, but cookie consent is lacking. Contact information is limited to email and a contact form, with no phone or physical address listed. Social media presence is active, enhancing engagement. Overall, the site is professional, trustworthy, and safe for general audiences.

D

Dezeen

dezeen.com

65

Dezeen is a globally recognized online architecture, interiors, and design magazine offering a wide range of content including news, features, awards, jobs, events, and educational courses. The website demonstrates a mature digital presence with strong branding, comprehensive content, and active social media engagement. The technical infrastructure leverages WordPress CMS, modern JavaScript libraries, and integrates multiple advertising and analytics platforms such as Google Analytics, Algolia, and Amazon Ads, indicating a well-developed digital marketing strategy. Security posture is solid with HTTPS enforced and Content Security Policy in place, though additional security headers and a public security policy could enhance trust. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user privacy and consent management. The absence of WHOIS data reduces domain trust slightly but does not detract from the overall legitimacy and professionalism of the site.

V

Vestre

vestrehabitats.no

59

Vestre Habitats is a professional website representing Vestre, a company focused on enhancing biodiversity in urban green spaces through innovative furniture design and vegetation interventions. The site targets urban planners and environmental designers, positioning itself as a niche leader in sustainable urban furniture. Technically, the website employs modern technologies including Craft CMS, Cookiebot for consent management, and Google Tag Manager for analytics, delivering a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and cookie consent mechanisms, though some security headers are missing and no explicit security policy or incident response contacts are published. The domain WHOIS data is unavailable, which slightly reduces trustworthiness, but the website content and branding are consistent and professional. Overall, the site demonstrates a mature digital presence with good privacy compliance and moderate user tracking.

V

Vestre

vestrehabitats.com

59

Vestre Habitats is a specialized initiative focused on enhancing biodiversity in urban environments through innovative furniture design and vegetation interventions. The website presents a professional and well-structured digital presence, targeting urban planners, environmentalists, and city authorities. The technical infrastructure leverages modern web technologies including Craft CMS, Cookiebot for privacy compliance, and Google Tag Manager for analytics, indicating a mature digital setup. Security posture is strong with HTTPS enforcement, appropriate security headers, and CSRF protections, though the absence of explicit security policies and incident response contacts suggests room for improvement. The lack of WHOIS data transparency is a concern for domain legitimacy, but the website content and compliance mechanisms support a generally trustworthy profile. Strategic recommendations include publishing comprehensive security and incident response policies, improving domain registration transparency, and enhancing contact availability to bolster business credibility and user trust.

S

Staysville

staysville.no

52

Staysville is a small hospitality business specializing in serviced hotel apartments located in central Stavanger, Norway. Founded in 2023, it offers modern, fully furnished apartments with hotel-like services for short and long-term stays. The website presents a professional and consistent brand image targeting tourists and business travelers seeking flexible accommodation options. The business model focuses on providing personalized services such as easy self check-in, laundry facilities, and fully equipped kitchens, positioning itself as a niche apartment hotel provider in the Stavanger market. Technically, the website uses modern web technologies including JavaScript, CSS, SVG graphics, Google Tag Manager for analytics, and Cookiebot for GDPR-compliant cookie consent management. The site is mobile-optimized with good SEO and accessibility basics, though some accessibility enhancements could be made. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is evident through a privacy policy and cookie consent mechanism, though terms of service and security policies are absent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. No WAF or content blocking was detected, allowing full content analysis.

P

Promenaden

promenaden.no

64

Promenaden is a website dedicated to promoting a vibrant and inspiring area in the heart of historic Oslo, Norway. The site targets a general audience interested in cultural and historical experiences. The business model appears to focus on area promotion and cultural engagement, positioning itself as a local attraction. The website demonstrates a good level of digital maturity with modern technologies such as Google Tag Manager and Cookiebot for analytics and consent management. The design is professional, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. Privacy compliance is well addressed through detailed cookie consent mechanisms and GDPR-aligned practices. However, the absence of WHOIS registrant data and explicit contact information slightly reduces business credibility. Overall, the site is trustworthy and professionally maintained, suitable for its promotional purpose.

F

FCC Products AS

fccproducts.no

53

FCC Products AS is a Norwegian company specializing in outdoor cooking and lifestyle products, including grills, pizza ovens, fire pits, furniture, and accessories. The website presents a professional and well-structured digital presence with rich content such as recipes, articles, and product information targeting consumers interested in enhancing their outdoor cooking experience. The company is positioned as a reputable brand in Norway with a clear focus on quality and customer engagement through social media and newsletters. Technically, the website uses modern JavaScript frameworks, Google Tag Manager for analytics, and Cookiebot for privacy compliance, hosted on a CDN for performance optimization. The site is mobile-optimized and accessible, providing a smooth user experience. Security posture is good with HTTPS enforced and cookie consent implemented, though there is room for improvement by adding security headers and explicit incident response contacts. The absence of WHOIS data reduces domain trustworthiness, but the website's content and contact information support legitimacy. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a trustworthy and professional online presence.

W

Wellnesshotel Golfpanorama

golfpanorama.ch

67

Wellnesshotel Golfpanorama is a premium hospitality business located in Lipperswil, Switzerland, specializing in wellness, golf, and luxury accommodation services. The website presents a comprehensive range of offerings including hotel rooms, spa and wellness treatments, golf packages, restaurant services, and business seminar facilities. The business targets leisure travelers, wellness enthusiasts, and corporate clients, positioning itself as a 4-star superior hotel in the Bodensee region. The site is professionally designed with multilingual support and strong branding consistency. Technically, the website employs modern JavaScript libraries, Google Tag Manager, Cookiebot for consent management, and integrates third-party booking and chat services. The CMS appears to be Kirby, supporting a well-structured and responsive design optimized for mobile devices. SEO and accessibility features are well implemented, contributing to a positive user experience. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, with a solid security posture and effective business presentation. Strategic improvements in security headers and incident response disclosures could further enhance the security maturity and trustworthiness of the site.