Security Directory

K

KMU Werk

kmuwerk.de

66

KMU Werk is a German-based consulting network specializing in providing comprehensive, cross-disciplinary services to small and medium-sized enterprises (SMEs). Their focus is on practical, result-oriented business consulting covering topics from company foundation to succession, addressing challenges such as skilled labor shortages and digital transformation. The website is professionally designed using WordPress and Elementor, featuring clear navigation, contact information, and GDPR-compliant privacy and cookie policies. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are absent. Overall, the site reflects a trustworthy and credible business presence in the SME consulting sector.

V

Vulkan Verlag

vulkan-shop.de

52

Vulkan Shop is a German-based e-commerce platform specializing in the sale of technical books, magazines, and eBooks focused on energy, automation, water, and industrial sectors. The website is professionally designed using Magento 2, featuring a comprehensive catalog of specialized publications targeting professionals and specialists in these industries. The platform supports German and English languages and integrates Google Analytics for user behavior tracking. Cookie consent mechanisms are implemented to comply with GDPR requirements. Security posture is solid with HTTPS enforced and secure cookie settings, although explicit security headers and policies are not fully documented. Contact information and terms of service pages are not clearly presented in the analyzed content, which could impact user trust and compliance transparency.

S

Sparkasse Hannover

sparkasse-hannover.de

68

Sparkasse Hannover is a prominent regional bank serving Hannover and its surrounding region, offering a broad spectrum of financial services including online banking, investment products, insurance, real estate financing, and personalized advisory services. The website reflects a mature digital presence with comprehensive content tailored to private, corporate, and young customers. The bank holds recognized certifications and awards, underscoring its market leadership and customer service excellence. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and providing a responsive, accessible user experience. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be better documented. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.

S

SoVD-Landesverband Niedersachsen e.V.

inklusionspreis-niedersachsen.de

48

The website www.inklusionspreis-niedersachsen.de represents a regional non-profit initiative jointly managed by the SoVD-Landesverband Niedersachsen e.V. and the LandesSportBund Niedersachsen e.V. It focuses on promoting and awarding projects that foster inclusion and equal participation of people with and without disabilities in Niedersachsen, Germany. The site provides detailed information about award categories, past winners, and event highlights, targeting volunteers, media professionals, sports clubs, and the general public interested in inclusion. The business model is centered on recognition and awareness rather than commercial activities. Technically, the website is built on TYPO3 CMS, leveraging modern frontend libraries such as jQuery and Slick Slider for interactive content. It demonstrates good digital maturity with mobile responsiveness, accessibility features, and SEO optimization. The cookie consent mechanism is implemented with clear user options, reflecting compliance with GDPR requirements. Hosting appears to be managed via Your-Server.de, with secure HTTPS enforced. From a security perspective, the site benefits from HTTPS and a cookie consent framework but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is minimal but consistent with a legitimate non-profit entity. Overall, the security posture is solid but could be enhanced by adding security headers and formal incident response information. The overall risk is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include improving security headers, publishing security and incident response policies, and enhancing contact information transparency to further build trust and compliance.

E

eichels GmbH

marathon-hannover.de

45

The ADAC Marathon Hannover website represents a well-established regional sports event organizer specializing in marathon and related running events in Lower Saxony, Germany. The business is operated by eichels GmbH and enjoys strong partnerships with reputable sponsors and regional organizations such as ADAC. The website provides comprehensive event information, registration options, media galleries, and community engagement features, targeting runners, sponsors, and local participants. Technically, the site is built on TYPO3 CMS with a modern yet slightly dated technology stack including Bootstrap 3 and jQuery 3.2.1. It demonstrates good mobile optimization, accessibility features, and SEO practices. The site uses HTTPS with strong SSL configuration and employs spam protection for email addresses. However, it lacks some advanced security headers and a formal security policy or incident response information. From a security perspective, the site is generally secure with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Contact information is transparent and includes multiple channels. No suspicious or malicious content is detected, and the site is free from adult or NSFW content. Overall, the website scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic improvements in security headers, incident response transparency, and modernization of the tech stack could further enhance the site's security and resilience.

D

Deutsche Stiftung für Engagement und Ehrenamt

deutsche-stiftung-engagement-und-ehrenamt.de

53

The Deutsche Stiftung für Engagement und Ehrenamt is a German non-profit foundation dedicated to strengthening volunteer engagement through funding, consulting, education, and networking services. The organization holds a reputable position in the national non-profit sector, targeting volunteers and community organizations across Germany. Their digital presence is built on a modern WordPress infrastructure with professional design and good SEO practices, supported by plugins such as Rank Math and Borlabs Cookie for privacy compliance. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit privacy and terms of service pages are missing. Overall, the website reflects a trustworthy and professional entity with a clear mission to support civic engagement.

W

Wilhelm Hirte Stiftung

wilhelm-hirte-stiftung.de

42

The Wilhelm Hirte Stiftung is a small non-profit foundation based in Hannover, Germany, focused on supporting projects in youth aid, sports, and social sectors. The website clearly communicates its mission and provides donation information, targeting a general audience interested in charitable activities. The foundation appears to have a stable market position within its local/regional context, with a business model centered on funding and supporting community projects. Technically, the website is built on WordPress, utilizing common plugins such as Yoast SEO and Contact Form 7, with additional anti-spam measures like Honeypot. The hosting provider is inferred to be netcup based on DNS data. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and good SEO practices. However, some technical improvements could enhance security and privacy compliance. From a security perspective, the site uses HTTPS and implements basic anti-spam protections. However, it lacks important security headers and does not provide explicit security policies or incident response contacts. The absence of a cookie consent mechanism despite using Google Analytics indicates a gap in privacy compliance. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the website's claims, supporting legitimacy. Overall, the website presents a trustworthy and professional image for a non-profit foundation but would benefit from enhanced security headers, privacy compliance improvements, and clearer security policies to strengthen its security posture and user trust.

L

LandesSportBund Niedersachsen

lsb-niedersachsen.de

55

The LandesSportBund Niedersachsen is a prominent non-profit sports federation serving the Niedersachsen region in Germany. It acts as a lobbyist, service provider, and promoter of sports activities, offering a wide range of services including advocacy, funding, education, and member support. The website reflects a mature organization with a clear market position as the leading sports federation in the region, targeting a broad audience including sports clubs, athletes, and the general public. Technically, the website is built on TYPO3 CMS with a modern technology stack including jQuery, Bootstrap, and Matomo analytics configured for privacy compliance. The site is well-optimized for mobile and accessibility, featuring structured navigation and comprehensive content. Hosting appears to be local to Germany, consistent with the organization's regional focus. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms with disabled tracking cookies by default. While no explicit security policies or incident response contacts are published, no vulnerabilities or sensitive data exposures were detected. Security headers could be improved for enhanced protection. Overall, the website presents a professional, trustworthy, and privacy-conscious digital presence suitable for a large non-profit organization. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to strengthen trust and compliance.

T

trainersuchportal

trainersuchportal.de

66

trainersuchportal.de is a specialized online job board platform focused on the sports sector, connecting trainers, coaches, and sports professionals with employers such as clubs, associations, and fitness studios primarily in Germany. The platform offers job listings, trainer profiles, and integrates partner job boards to expand reach. The website is professionally designed, mobile-optimized, and provides rich content including blogs and testimonials, positioning itself as a niche leader in the sports employment market. Technically, it employs modern web technologies including Google Tag Manager, Google Analytics, and Cloudflare DNS/CDN, ensuring good performance and security. Security posture is solid with HTTPS and error monitoring via Sentry, though explicit security headers and policies could be enhanced. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy, user-friendly, and well-positioned in its market niche.

A

active elements GmbH

active-elements.de

57

active elements GmbH is a well-established German agency specializing in web design, print design, SEO, and digital marketing services. With nearly two decades of experience, the company serves businesses and organizations seeking comprehensive digital and print marketing solutions. Their offerings include modern web development using TYPO3 and WordPress, creative print projects, SEO optimization, Google AdWords campaign management, and client training through e-learning and on-site sessions. The company emphasizes personalized service and full support, positioning itself as a trusted partner in the regional market around Hannover and Garbsen. Technically, the website is built on a modern stack including HTML5, CSS3, JavaScript, Bootstrap, and CMS platforms TYPO3 and WordPress. Hosting is provided by Hetzner, a reputable German hosting provider, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with privacy-conscious analytics via Matomo. Cookie consent and GDPR-compliant privacy policies are implemented, reflecting a mature digital presence. From a security perspective, the site uses HTTPS with strong SSL configuration and secure form handling. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which are recommended for enhanced protection. No vulnerabilities or suspicious elements were detected in the content or scripts. Overall, active elements GmbH presents a professional, trustworthy, and technically sound online presence. The company demonstrates good compliance with privacy regulations and offers a comprehensive suite of services for digital and print marketing. Strategic improvements in security transparency and incident response readiness would further strengthen their security posture.

P

PluSport Behindertensport Schweiz

plusport.ch

49

PluSport Behindertensport Schweiz is a well-established Swiss non-profit organization dedicated to promoting sports and inclusion for children, youth, and adults with disabilities. Founded in 1960, it serves as the national competence center offering a wide range of services including sport camps, clubs, education, elite sports, and events. The organization targets individuals with disabilities as well as inclusive participants, supported by a strong partnership network including Swiss Olympic and Swiss Paralympic. The website reflects a professional and accessible digital presence with multilingual support and clear navigation.

Swiss PGA is the professional golf association in Switzerland, offering education programs, tournaments, and member services for golf professionals and apprentices. The website is well-structured and targets golf professionals and enthusiasts within Switzerland. It provides comprehensive information about education, tournaments, and membership benefits, positioning itself as a key national association in the golf sector. Technically, the website uses a modern tech stack including Contao CMS, jQuery, Bootstrap, and various JavaScript libraries for sliders and UI enhancements. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. Analytics are implemented via Google Analytics and Google Tag Manager. From a security perspective, the site enforces HTTPS and uses secure forms for login. However, it lacks important security headers and published security policies. Privacy compliance is partial, with a cookie consent banner but no visible privacy policy or terms of service. WHOIS data confirms the legitimacy of the domain and its alignment with the Swiss PGA organization. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security documentation to improve compliance and user trust.

P

PING

ping.com

73

PING is a well-established golf equipment manufacturer and retailer with a mature online presence dating back to 1993. The company offers a broad range of golf clubs, bags, accessories, and apparel, targeting golf enthusiasts and players of all levels. Their business model combines e-commerce retail with custom fitting and trade-in services, positioning them strongly in the golf retail market. The website demonstrates a professional design, clear navigation, and comprehensive product information, supporting a positive user experience. Technically, the site leverages modern JavaScript libraries, analytics tools, and integrates with reputable payment gateways, hosted likely on Microsoft Azure with Kentico CMS. Security posture is solid with HTTPS, domain transfer protections, and consent management via Osano, though DNSSEC is not enabled and explicit security policies are not published. Overall, the site is trustworthy, privacy compliant, and well-optimized for performance and accessibility.

Restaurant TS Green Inn is a small hospitality business located in Switzerland offering European-Asian fusion cuisine with facilities for dining and event hosting. The website presents a professional design built on WordPress with the Divi theme, providing clear navigation and relevant content such as menus and event information. Technically, the site uses standard web technologies and is mobile optimized, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS enabled but lacks important security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the business appears legitimate and trustworthy with room for improvement in security and compliance.

G

golfimport.ch

ugigolf.ch

51

Golfimport.ch is a Swiss-based e-commerce retailer specializing in golf equipment and accessories, serving golf enthusiasts with a wide range of products including clubs, balls, shoes, clothing, GPS devices, and training aids. The website is built on the PepperShop platform and employs modern web technologies such as jQuery, Bootstrap, and Splide.js for a responsive and user-friendly experience. Tracking and marketing tools like Google Tag Manager and Facebook Pixel are integrated for analytics and advertising purposes. Security posture is solid with HTTPS enforced and standard security headers present, though explicit privacy and cookie policies are not found, indicating room for compliance improvement. Contact options are primarily via a contact form, with no direct emails or phone numbers visible. WHOIS data confirms the domain's legitimacy and consistency with the business profile. Overall, the site presents a professional and trustworthy online retail presence with moderate technical and privacy compliance maturity.

N

Nailfashion by Theresa Richard

nailtheresa.ch

42

Nailfashion by Theresa Richard is a small local nail studio business based in Rapperswil, Switzerland, specializing in professional nail care and creative nail designs including natural nails, French Pearl nails, and Gellack. The website presents a professional and consistent brand image targeting local customers seeking quality nail services. The business has been established since 2016, with clear contact information and a user-friendly website built on WordPress. Technically, the site uses common WordPress plugins for galleries, testimonials, and sliders, with basic mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security measures.

E

ENERGETIX GmbH & Co. KG

energetix.tv

62

ENERGETIX GmbH & Co. KG is a German company specializing in magnetic jewelry and wellness products, operating primarily through a direct sales business model. The website targets consumers interested in wellness and magnetic jewelry, as well as potential business partners and hosts for home parties. The company positions itself as a niche market leader in Europe with a focus on combining design and wellness benefits. Technically, the website is built on WordPress with Bootstrap and jQuery, featuring modern web technologies and analytics tools such as Google Analytics and Cloudflare Insights. The site is mobile-optimized and provides a good user experience with clear navigation and multilingual support. Security posture is adequate with HTTPS enabled and privacy compliance through cookie consent and a comprehensive privacy policy. However, the absence of WHOIS data and lack of explicit security headers and incident response information slightly reduce trustworthiness. Overall, the website is professional, trustworthy, and compliant with GDPR, but could improve security transparency and WHOIS data availability.

S

Spider AF

sp-trk.com

70

Spider AF is a specialized technology company founded in 2017 that provides digital marketing security solutions focused on combating ad fraud, click fraud, and invalid leads. The company targets businesses and marketers seeking to protect their advertising budgets from fraudulent activities. Their market position is supported by trust from over 500 companies and positive user ratings. Technically, the website is built on Webflow and hosted on AWS, integrating modern marketing and analytics tools such as Google Tag Manager, HubSpot, Intercom, and Visual Website Optimizer, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and domain registration protections in place, though improvements can be made by enabling DNSSEC and publishing explicit security and privacy policies. Overall, the website is professional, safe, and trustworthy, but lacks some compliance documentation and direct contact information.

F

Fachagentur Nachwachsende Rohstoffe e.V.

bauerhubert.de

41

Bauer Hubert is an educational website operated by Fachagentur Nachwachsende Rohstoffe e.V., a German non-profit organization focused on renewable raw materials. The site targets children and parents by providing educational stories, games, comics, and audio plays to promote awareness of sustainable resources. The website is well-branded, consistent, and supported by official German government and agency partners, reflecting a strong market position in educational content for renewable energy and sustainability. Technically, the website is built on TYPO3 CMS with Foundation CSS and uses jQuery and Matomo analytics with cookies disabled, indicating a privacy-conscious approach. The site is hosted on servers associated with agenturserver domains, suggesting professional hosting. The website is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. From a security perspective, Bauer Hubert enforces HTTPS and disables cookies in analytics, which is positive. However, it lacks visible security headers, a cookie consent mechanism, and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. WHOIS data is consistent with the website's claims, showing legitimacy and stable domain registration. Overall, the website presents a low-risk profile with good business credibility and technical implementation but could improve privacy compliance and security posture by adding cookie consent, security headers, and formal security policies.

C

Cubus Medien Verlag GmbH

schulbau-messe.de

54

SCHULBAU.online is a professional German platform focused on educational construction, offering a magazine, trade fairs, and think tanks targeted at architects, school authorities, and planners. The website is well-positioned as a leading resource in the education construction sector in Germany, supported by a medium-sized company, Cubus Medien Verlag GmbH. The technical infrastructure is based on a modern WordPress CMS with relevant plugins for e-commerce, events, SEO, and multilingual support, hosted under a reputable registrar. Security posture is good with HTTPS and cookie consent mechanisms, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is strong, with clear GDPR-aligned privacy and cookie policies. Overall, the site is trustworthy, professionally designed, and content-rich, serving a general audience interested in educational infrastructure.

F

Fachagentur Nachwachsende Rohstoffe e.V. (FNR)

charta-fuer-holz.de

43

The website www.charta-fuer-holz.de represents the 'Charta für Holz 2.0' initiative managed by the Fachagentur Nachwachsende Rohstoffe e.V. (FNR), a German non-profit agency focused on promoting sustainable wood use and forestry. The site serves as an information hub for government bodies, industry stakeholders, researchers, and the public, offering resources, event information, and project updates related to renewable raw materials and wood construction. The business model is non-profit and government-supported, positioning the organization as a key player in Germany's sustainable forestry sector. Technically, the website is built on TYPO3 CMS with modern front-end technologies including jQuery, Foundation CSS, and Slick Carousel. It is mobile-optimized and provides a good user experience with clear navigation and professional design. Analytics are implemented via Matomo with cookies disabled, reflecting a privacy-conscious approach. However, the site lacks a cookie consent mechanism and some security headers, which are areas for improvement. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. No major vulnerabilities or security incidents are evident. The absence of a published security policy or incident response contact reduces transparency but does not indicate immediate risk. WHOIS data is consistent and supports the legitimacy of the domain and organization. Overall, the website is professional, trustworthy, and well-aligned with its mission. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, and publishing security and incident response policies to enhance compliance and trust.

F

Fachagentur Nachwachsende Rohstoffe e.V. (FNR)

holzbauplus-wettbewerb.info

62

The website holzbauplus-wettbewerb.info serves as the official platform for the Bundeswettbewerb HolzbauPlus 2025/26, a German federal competition promoting sustainable wood construction projects. It is managed by the Fachagentur Nachwachsende Rohstoffe e.V. (FNR) under the auspices of the German Federal Ministry of Food, Agriculture and Homeland. The site provides comprehensive information about competition goals, categories, jury, archives, and an online application portal. The content is professionally presented, targeting builders, planners, and stakeholders interested in sustainable building practices in Germany. Technically, the website is built on TYPO3 CMS with modern frontend frameworks such as Foundation and uses privacy-conscious Matomo analytics with cookies disabled. The site is mobile-optimized and demonstrates good SEO and accessibility basics. HTTPS is enforced, but security headers are missing, and no cookie consent mechanism is present, indicating areas for improvement in security and privacy compliance. From a security perspective, the site shows a solid posture with secure forms and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and cookie consent could be addressed to enhance compliance and protection. The WHOIS data is malformed and lacks detailed registrant information, likely due to privacy protection, but the website's official nature and government affiliation support its legitimacy. Overall, the website is trustworthy, professionally maintained, and serves an important government function promoting sustainable construction. Strategic recommendations include implementing security headers, adding cookie consent for GDPR compliance, and publishing security and incident response policies to further strengthen trust and compliance.

F

Fachagentur Nachwachsende Rohstoffe e.V. (FNR)

klav.de

45

KLAV is a German government-affiliated competence center focused on reducing food waste across the supply chain sectors including primary production, processing, trade, and out-of-home catering. It operates as part of the National Strategy to reduce food waste and collaborates with economic actors, policymakers, and scientists. The website is professionally designed using TYPO3 CMS and modern frontend technologies, providing comprehensive information, seminar offerings, and sector dialogue facilitation. The technical infrastructure is solid with good mobile optimization and accessibility. Security posture is strong with HTTPS and privacy-conscious analytics (Matomo with disabled cookies), though explicit cookie consent and security policies are missing. Contact information is clearly presented, enhancing trust and credibility. Overall, KLAV presents a trustworthy and authoritative online presence aligned with its governmental mission.

F

Fachagentur Nachwachsende Rohstoffe e. V. (FNR)

klimaanpassung-wald.de

44

The website www.klimaanpassung-wald.de is an official government-related platform operated by the Fachagentur Nachwachsende Rohstoffe e. V. (FNR) that provides comprehensive information and support for the climate-adapted forest management funding program in Germany. It serves private and communal forest owners by offering program details, document submission options, and relevant news. The site is well-positioned as an authoritative source within the forestry and environmental protection sector, supported by government ministries. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and uses Matomo for privacy-conscious analytics. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced, though some security headers are missing and privacy policies are not explicitly presented. Contact information is clearly provided, enhancing trust and credibility.

L

Laurids Jensen Photographer

lauridsjensen.com

48

Laurids Jensen operates a professional photography portfolio website showcasing editorial, commissioned, and moving image works. The business is positioned as a niche creative service provider in the media industry, targeting clients and collaborators in the art and editorial sectors. The website content is well-structured and visually oriented to highlight the photographer's work, with a consistent branding approach and good user experience. Technically, the website is built using standard web technologies including HTML5, CSS, JavaScript, and jQuery, hosted by cyon.ch. It employs Google Analytics and Google Tag Manager for visitor tracking but lacks advanced CMS or frameworks. The site is mobile optimized with moderate performance and basic accessibility features. However, there is room for improvement in SEO and technical modernization. From a security perspective, the site uses HTTPS and has domain transfer protections enabled but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, and no incident response contacts are provided, indicating gaps in compliance and security readiness. The use of tracking scripts without visible consent mechanisms also raises privacy concerns. Overall, the website is a legitimate, small-scale professional portfolio with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and incident response readiness would enhance trust and reduce risk.

T

Treestate Productions

treestate.de

63

Treestate Productions is a small media production company based in Germany, specializing in film, photography, and 3D content creation. The website presents a professional and visually appealing interface showcasing their media portfolio. The company maintains an active social media presence on LinkedIn, Facebook, and Instagram, reinforcing their brand identity. The site is built on WordPress with modern plugins for SEO and GDPR compliance, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. Overall, the website is trustworthy and functional, serving its niche audience effectively.

N

Nouvelle Noire Type Foundry

nouvellenoire.ch

57

Nouvelle Noire Type Foundry is a Swiss-based company specializing in the design, publication, and distribution of high-quality retail and custom typefaces. The company targets designers and corporate clients across various sectors, offering bespoke font solutions and logo refinement services. Their market position is that of a niche, high-quality Swiss type foundry with a focus on elevating design projects through typography. Technically, the website is built on a modern WordPress CMS platform with WooCommerce integration, utilizing common industry tools such as Google Analytics, Google Tag Manager, and Mailchimp for marketing and analytics. The site demonstrates good mobile optimization and SEO practices, supported by the Yoast SEO plugin and structured data markup. Security-wise, the site benefits from HTTPS encryption and a cookie consent mechanism, but lacks published privacy policies, terms of service, and incident response information, which are important for compliance and trust. Overall, the website is professional and functional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

I

it’s mee

its-mee.com

53

it’s mee is a small visual communication agency based in Basel, Switzerland, specializing in conceptualizing and designing visual identities, exhibitions, websites, and publications. The website serves as a professional portfolio showcasing their projects primarily in the cultural and publication sectors. The company appears to be well-established with a domain age consistent with its founding date in 2017. The business targets clients seeking high-quality visual communication services in the local region. Technically, the website is built on WordPress using common libraries such as jQuery, Masonry.js, and MediaElement.js, with SEO optimization via the All in One SEO plugin. Hosting is provided by a German hosting provider. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Analytics are handled by Matomo, indicating some privacy-conscious tracking. From a security perspective, HTTPS is enabled, but DNSSEC is not configured, and no security headers are detected, which are areas for improvement. There is no visible privacy or cookie policy, nor any incident response or security policy pages, indicating compliance gaps especially regarding GDPR. Contact information is clearly provided, but no forms are present on the homepage. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to improve its risk posture and user trust.

R

Rocket Ruby

rocketruby.ch

51

Rocket Ruby is a small, established visual communication studio based in Basel and Luzern, Switzerland, operating since 2011. The company specializes in comprehensive design solutions including corporate design, web development, infographics, and book design, targeting businesses and organizations seeking professional visual communication services. The website reflects a consistent and professional brand image with a portfolio of diverse projects demonstrating their expertise. Technically, the site is built on WordPress, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is provided via email and physical address, but no phone or social media links are available. Overall, the website is trustworthy and professional, with room for improvement in security and privacy transparency.

W

Westermann Gruppe

westermanngruppe.de

10

Westermann Gruppe is a prominent German educational media provider offering a broad range of digital and print educational products, supported by printing and logistics services. The company holds a strong market position in the German-speaking education sector, serving educators, students, and institutions. Their website reflects a professional and consistent brand image with clear navigation and comprehensive business information. Technically, the site is built on TYPO3 CMS with modern web technologies and includes GDPR-compliant cookie consent mechanisms and privacy protections. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though formal security policies and incident response contacts are absent. Overall, the website is trustworthy, well-maintained, and compliant with relevant privacy regulations.

S

Supporting Golf

supportinggolf.ch

48

Supporting Golf is a Swiss non-profit organization established in 2019 that financially supports the golf sport ecosystem in Switzerland. It collaborates with Swiss Golf, ASGI, and Migros GolfCard to fund professional tournaments and support Swiss golf professionals. The website is built on WordPress using Elementor and related plugins, providing a multilingual experience in German, French, and Italian. The site is well-designed with good content relevance and user experience but lacks published privacy and cookie policies, which impacts compliance. Security posture is good with HTTPS enabled and no obvious vulnerabilities, but security headers and incident response information are missing. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

P

Pädagogische Hochschule Schwyz

phsz.ch

55

Pädagogische Hochschule Schwyz (PH Schwyz) is a Swiss educational institution specializing in teacher training, continuing education, and educational research. The website presents a comprehensive portfolio of bachelor and master programs, preparation courses, and professional development offerings. It serves educators, school leaders, and educational professionals with a strong regional presence and innovative research institutes. The site is well-branded, professionally designed, and provides clear contact and accreditation information, reinforcing its credibility. Technically, the website is built on TYPO3 CMS with modern web technologies including jQuery and Google Tag Manager for analytics. It demonstrates good mobile optimization, accessibility, and SEO practices. Security is robust with HTTPS enforced and appropriate security headers, although explicit security policies and incident response details are not published. Cookie consent mechanisms are in place, supporting GDPR compliance. Overall, the security posture is strong with no evident vulnerabilities or suspicious activity. The domain registration aligns well with the institution's history and location, supporting legitimacy. The website is safe for general audiences, focusing on educational content without any adult or questionable material. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to enhance transparency and trust. Regular audits of third-party scripts and continued adherence to privacy regulations will further strengthen the security and compliance stance.

H

Hannoversche Sportjugend

hannoversche-sportjugend.de

56

Hannoversche Sportjugend is a local youth sports organization affiliated with SSB Hannover, providing news updates and equipment rental services for sports and community events in the Hannover region. The website is built on WordPress using the Avada theme and WooCommerce plugin, indicating a moderate level of digital maturity. The site content is primarily in German and targets local sports clubs and youth. Technically, the site uses modern web technologies but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and privacy compliance mechanisms. No contact or incident response information is provided, which limits trust and compliance. Overall, the site is functional but would benefit from enhanced security, privacy policies, and clearer contact information to improve credibility and compliance.

S

Stadtsportbund Hannover e.V.

ssb-hannover.de

58

Stadtsportbund Hannover e.V. is a well-established non-profit organization dedicated to supporting and promoting club sports in Hannover, Germany. The organization provides advisory, funding, training, and networking services to over 350 sports clubs and related stakeholders. Their website reflects a professional and comprehensive digital presence with clear navigation, rich content, and a focus on community engagement. The target audience includes sports clubs, coaches, volunteers, and sports enthusiasts in the Hannover region. Technically, the website uses modern web technologies including JavaScript, jQuery, Owl Carousel, and SVG graphics, managed via the AmphiCMS platform. Accessibility features such as font size changers and visual assistance tools are implemented, and the site is mobile-optimized with good SEO practices. The presence of a consent management platform ensures compliance with privacy regulations. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or suspicious content were detected. The WHOIS data is limited but does not raise concerns about legitimacy. Overall, the website demonstrates a strong security posture, good privacy compliance, and high business credibility. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further improve trust and security maturity.

H

Herzog & de Meuron Objects Ltd

hdmobjects.com

68

Herzog & de Meuron Objects Ltd operates an e-commerce platform specializing in the sale of design objects including furniture, lighting, accessories, and books. The business leverages the reputation of the Herzog & de Meuron architectural studio to target design enthusiasts and collectors globally, positioning itself as a niche luxury retailer. The website is built on the Shopify platform, integrating modern e-commerce technologies and marketing tools to provide a seamless shopping experience. The company maintains a consistent brand presence with social media engagement and newsletter subscriptions to foster customer relationships. Technically, the website employs a robust Shopify infrastructure with CDN hosting, modern JavaScript libraries such as jQuery and Swiper.js, and marketing integrations like Klaviyo and Back In Stock. The site demonstrates good mobile optimization and moderate performance, with room for improvement in accessibility and explicit security headers. Privacy and cookie policies are present and indicate GDPR compliance, although direct company contact details are limited to forms without explicit emails or phone numbers. From a security perspective, the site enforces HTTPS and uses CAPTCHA protections on forms, but lacks some recommended HTTP security headers. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data introduces some uncertainty about domain legitimacy, though the active Shopify store and consistent branding mitigate concerns. No incident response or vulnerability disclosure policies were found, suggesting an area for future enhancement. Overall, Herzog & de Meuron Objects Ltd presents a professional and trustworthy e-commerce presence with solid technical foundations and privacy compliance. Strategic improvements in security headers, contact transparency, and incident response documentation would further strengthen its security posture and business credibility.

R

Rasso Hilber

rassohilber.com

41

Rasso Hilber is a creative web developer based in Germany specializing in building original and accessible websites, primarily for artistic and cultural clients. The website serves as a professional portfolio showcasing a variety of projects developed using WordPress and Kirby CMS, often in collaboration with design partners. The business operates as a small entity with a niche focus on creative web development services. Technically, the website employs modern web technologies including HTTPS, jQuery, and video embedding, with good mobile optimization and SEO practices. However, there is room for improvement in accessibility and security headers implementation. Security posture is solid with HTTPS and domain transfer protection, but lacks DNSSEC and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional, trustworthy, and well-maintained, with a domain registration consistent with the business history.

G

guidle

guidle.com

63

Guidle is a digital advertising and leisure planning platform primarily serving the DACH region, with a focus on providing diverse content such as events, restaurants, museums, and more. The platform targets both end consumers and business clients including municipalities and event organizers, offering services like digital ad mediation, managed content, and sector-specific solutions. The website demonstrates a professional and consistent brand presence with good content quality and user experience. Technically, the site leverages modern web technologies including Vue.js, Google Analytics, and CDN hosting via Amazon Cloudfront. It implements a comprehensive cookie consent mechanism aligned with GDPR requirements, ensuring user privacy and transparency. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses cookie consent controls effectively. However, it lacks visible security headers and explicit security or incident response policies, which are recommended for enhanced protection. The absence of WHOIS data raises concerns about domain legitimacy, though the website content and structure suggest a legitimate business operation. Overall, Guidle presents a solid digital presence with room for improvement in security transparency and domain registration clarity. Strategic enhancements in security headers and incident response documentation would strengthen trust and compliance.

H

House of Winterthur

winterthur.com

61

House of Winterthur operates as a regional promotional entity focusing on tourism, culture, and business development in Winterthur, Switzerland. The website serves as a comprehensive portal for visitors and locals to explore cultural events, city tours, and business opportunities. The organization positions itself as a key regional player with a strong digital presence and partnerships with notable regional and national tourism bodies. Technically, the website is built on the Contao CMS platform, leveraging modern web technologies and third-party marketing and analytics tools such as Google Analytics and HubSpot. The site is mobile optimized and provides a good user experience with clear navigation and rich content. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements such as enabling DNSSEC and adding security headers could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear policies and consent mechanisms in place. Overall, the website reflects a professional and trustworthy regional promotion platform with moderate technical sophistication and good compliance practices.

TSO AG is a Swiss-based company specializing in digitalization services for the tourism sector, offering shared-service digital solutions to associations, destinations, transport companies, and hotels. Their business model focuses on automating processes and improving performance for tourism providers. The website reflects a professional and consistent brand presence with clear messaging targeted at tourism industry stakeholders. Technically, the site is built on the Contao CMS platform, leveraging modern technologies such as Cookiebot for consent management and Google Tag Manager for analytics, indicating a mature digital infrastructure. Security-wise, the website enforces HTTPS, implements standard security headers, and manages cookie consent effectively, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, compliant with GDPR, and demonstrates good privacy practices.

J

JUNGKUNST

jungkunst.ch

47

JUNGKUNST is a cultural event organizer hosting an art and music festival in Winterthur, Switzerland, scheduled for October 2025. The website serves as an information portal for the event, providing details about dates, location, participating artists, and opportunities for sponsorship and support. The target audience is the general public interested in arts and culture within the region. The business model revolves around event organization, sponsorships, and community engagement. Technically, the website uses standard web technologies including jQuery and integrates Facebook Pixel for tracking. The site is served over HTTPS with good SSL configuration, and performance is moderate with good mobile optimization. However, there is no detected CMS or advanced frameworks, suggesting a custom or lightweight platform. SEO and accessibility are basic but adequate for the site’s purpose. From a security perspective, the site employs HTTPS and secure form submission via Mailchimp for newsletter subscriptions. However, it lacks security headers and explicit security or incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. User tracking is moderate due to Facebook Pixel usage. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional and trustworthy, with a moderate security posture and good business credibility. Recommendations include implementing security headers, adding cookie consent, publishing security policies, and enhancing privacy compliance to improve trust and security posture.

D

DESIGNGUT

designgut.ch

47

DESIGNGUT is a Swiss-based platform organizing an annual design exhibition focused on sustainable products including fashion, accessories, jewelry, ceramics, and furniture. It serves as a marketplace and showcase for approximately 80 sustainable Swiss designers, positioning itself as a niche leader in sustainable Swiss design exhibitions. The website content is rich and well-structured, targeting consumers interested in sustainable and Swiss-made design products. Technically, the website uses standard web technologies such as HTML5, CSS3, jQuery, and Fancybox, with a custom CMS inferred from URL patterns. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Social media presence is strong, with multiple Facebook and Instagram links for exhibitors and the event itself. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security measures.

R

Rast Geigenbauer GmbH

rast-violins.ch

52

Rast Geigenbauer GmbH is a well-established master violin maker workshop located in Zurich, Switzerland, with a history dating back to 1969. The company specializes in the rental, repair, restoration, new construction, and sale of string instruments such as violins, violas, cellos, and double basses. Their market position is that of a trusted local expert with a strong reputation in craftsmanship and personalized service. The website reflects a professional and consistent brand image targeting musicians and enthusiasts in the region. Technically, the website is built on WordPress using the Elementor framework, incorporating modern web technologies such as jQuery and Google Maps embeds. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Accessibility features are enhanced by the OneTap plugin, indicating a commitment to inclusive design. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes several security headers. There are no visible vulnerabilities or exposed sensitive data. However, the absence of a cookie consent mechanism and published security or incident response policies indicates room for improvement in compliance and transparency. Overall, the website presents a low-risk profile with strong business credibility and technical implementation. Strategic enhancements in privacy compliance and security policy publication would further strengthen trust and regulatory adherence.

P

Piano Sigrist

pianosigrist.ch

55

Piano Sigrist is a specialized retail and service business based in Switzerland, focusing on the sale, rental, and maintenance of pianos and grand pianos. The company represents family-owned piano manufacturers and offers a range of services including tuning, repairs, expert appraisals, and music events. Their market position is strong within the Swiss piano retail sector, supported by a professional website with multilingual support and customer testimonials. Technically, the website is built on WordPress with modern plugins and analytics tools, optimized for performance and mobile use. Security posture is solid with HTTPS, security headers, and consent management, though lacking a published security policy or incident response details. Overall, the site demonstrates good privacy compliance and business credibility, making it a trustworthy platform for customers. Recommendations include publishing a security policy, incident response contacts, and vulnerability disclosure information to further enhance trust and compliance.

N

Notenpunkt AG

noten.ch

58

Notenpunkt AG operates a specialized music retail business primarily serving the Swiss market through both physical stores and an online e-commerce platform. The company offers a wide range of music sheets, books, blockflutes, and musical accessories, targeting musicians, educators, and music enthusiasts. The website reflects a well-established regional presence with clear branding and consistent business information. Technically, the site uses a proprietary CMS (NImQ Enterprise Shop Edition) with common JavaScript libraries such as jQuery and slick carousel for UI enhancements. Mobile optimization and user experience are good, supporting a broad customer base. Security posture is adequate with HTTPS and form validation, but lacks some advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

D

Daniel Bürki Musik

buerkimusik.ch

50

Daniel Bürki Musik is a small retail music store based in Switzerland specializing in the sale, rental, and servicing of musical instruments such as guitars, cajons, ukuleles, and the traditional Swiss Schwyzerörgeli. The business offers expert tuning, repairs, and music lessons, positioning itself as a local expert in traditional and modern musical instruments. The website is built on WordPress using the Divi theme and incorporates SEO best practices with Rank Math. It uses Google Analytics for visitor tracking but lacks a cookie consent mechanism and comprehensive GDPR compliance indicators. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Overall, the website is professional, content-rich, and trustworthy for its target audience of music enthusiasts and local customers.

R

RESIGN. Grafikstudio

resign.ch

49

RESIGN. Grafikstudio is a well-established small design and web agency based in Winterthur, Switzerland, specializing in WordPress website design, branding, and SEO services. With over 25 years of experience, the company targets businesses and startups seeking modern and professional digital presence solutions. The website reflects a mature digital infrastructure using modern technologies such as Bootstrap, jQuery, and Google Tag Manager, indicating a good level of digital maturity and SEO awareness. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though the absence of explicit cookie consent and security policies suggests room for compliance improvement. Overall, the site is professional, trustworthy, and well-structured, supporting the company's market position as a reliable local web agency.

S

SpeedAdmin ApS

speedadmin.dk

60

SpeedAdmin ApS operates a specialized SaaS platform focused on managing accounts and services for music and cultural schools primarily in Denmark and other Nordic countries. The platform facilitates school selection and login for a wide range of educational institutions, indicating a mature and established business with a strong regional presence since 2006. The website serves as a login portal with a clean, professional design and good mobile optimization, supporting accessibility through linked documentation. Technically, the site uses common web technologies such as jQuery and Bootstrap, with custom scripts and styles, delivering moderate performance and a user-friendly experience. Security posture is adequate with HTTPS in use, but lacks DNSSEC and explicit security headers, and no visible privacy or cookie policies, which are areas for improvement. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. The site contains no adult or questionable content and targets a general audience of educational institutions and users.

The website www.vszgb-handbuch.ch serves as an informational handbook for municipalities within the canton of Schwyz, Switzerland. It provides comprehensive guidance on municipal law, social services, finance, security, and environmental topics relevant to local government officials and administrative staff. The site is positioned as a niche government-related resource, targeting municipal employees and local authorities. The business model centers on providing updated, non-binding reference material to support municipal governance. The website is small-scale, consistent in branding, and maintains a professional tone with clear contact details and legal notices.

D

Deutsche Sportjugend

dsj.de

65

The website www.dsj.de represents Deutsche Sportjugend, a well-established German non-profit organization dedicated to youth sports and social engagement. The site is professionally designed using TYPO3 CMS, featuring rich content, accessibility tools like ReadSpeaker, and a clear navigation structure. The organization is positioned as a leading umbrella body for youth sports in Germany, with a history dating back to 1950. Technically, the site uses modern web technologies and hosts static content on Amazon S3, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though some security headers could be improved. Privacy compliance is lacking explicit privacy and cookie policies, which is a notable gap. Overall, the site is trustworthy, safe, and serves a general audience with no adult or questionable content.

R

Rehasportwelt e. V.

rehasport-informationen.de

59

Rehasport Informationen is a German online information portal dedicated to rehabilitation sports, targeting participants, providers, instructors, and physicians. The site is operated as a project by the non-profit association Rehasportwelt e. V. in partnership with the marketing agency Marketingwelt Lipp. It offers comprehensive educational content, news, and marketing tips related to Rehasport, positioning itself as a niche resource within the healthcare and non-profit sectors in Germany. The website maintains a professional and consistent brand presence, supported by active social media channels on Facebook and Instagram.