Security Directory

M

Morris+Company

morrisand.company

56

Morris+Company is a professional architecture and design firm with a strong portfolio covering housing, workplace, community, education, healthcare, placemaking, tall buildings, interiors, re-use, hospitality, and mission-critical projects. The firm operates primarily in the UK and Europe, with offices in London and Copenhagen, targeting clients seeking sustainable and innovative architectural solutions. The website reflects a medium-sized, established company with consistent branding and a professional online presence. Technically, the website employs modern web technologies including jQuery, SimpleBar, Google Analytics, Google Tag Manager, and Google Maps API. Hosting of media assets on Amazon S3 indicates a scalable infrastructure. The site is mobile-optimized with good design quality and navigation, though accessibility and SEO optimizations are basic. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and privacy compliance elements such as privacy and cookie policies. No vulnerability disclosures or incident response contacts are provided. WHOIS data is unavailable due to privacy protection, which is common and likely justified for this business type. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

H

Hawkins\Brown

hawkinsbrown.com

51

Hawkins\Brown is a UK-based architecture firm focused on societal impact and human-centered design. The website presents a professional and modern digital presence with rich content including conversations, projects, and thought leadership. The firm holds a B Corp certification, indicating commitment to social and environmental performance. Technically, the site is built on WordPress with modern JavaScript and analytics integrations, optimized for performance and accessibility. Security posture is good with HTTPS enforced and secure forms, though explicit security policies and incident response details are absent. The lack of WHOIS data for the domain is a notable anomaly, reducing trust slightly despite the professional site content. Overall, the website reflects a mature business with strong branding and digital maturity.

A

Allies and Morrison

alliesandmorrison.com

71

Allies and Morrison is a London-based architectural and urbanist practice focused on designing beautiful buildings and shaping enduring places with attention to detail and context uniqueness. The firm serves clients interested in architecture, urban planning, and sustainable development, positioning itself as a reputable medium-sized player in the real estate and design sector. Their website showcases a comprehensive portfolio of projects, research, and talks, reflecting a mature and professional business model. Technically, the website employs modern web technologies including Google Analytics with IP anonymization, Imgix for image delivery, and JavaScript ES6, ensuring fast performance and excellent mobile optimization. The site is well-structured with good SEO and accessibility features, although no CMS or hosting provider details are explicitly identified. From a security perspective, the site uses HTTPS with a good SSL configuration and secure form handling for newsletter subscriptions. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. No vulnerability disclosures or incident response contacts are published, representing an area for improvement. Overall, the website is professional, trustworthy, and safe for general audiences. The absence of WHOIS data is a notable anomaly but does not detract significantly from the site's credibility given the quality of content and contact transparency. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and improving WHOIS transparency to strengthen trust and compliance.

F

Foster + Partners

fosterandpartners.com

68

Foster + Partners is a globally recognized architecture and design firm specializing in sustainable architecture, urbanism, engineering, and design services. Founded in 1967 by Norman Foster, the company positions itself as a leader in innovative and sustainable building solutions. The website reflects a professional and modern digital presence, leveraging advanced web technologies such as Angular, Google Analytics, Hotjar, and CookiePro for user experience and compliance. The site is well-structured, mobile-optimized, and provides a seamless user experience with clear branding and relevant content focused on their core services. From a technical perspective, the website employs modern frameworks and tracking tools, indicating a mature digital infrastructure. Hosting appears to be on Microsoft Azure, and the site uses HTTPS with good SSL configuration. However, some security best practices such as explicit security headers and published security policies are missing. The cookie consent mechanism is implemented, but no explicit privacy policy or terms of service pages were detected in the provided content. Security posture is generally good with HTTPS and consent management, but the absence of WHOIS data and lack of published security or incident response policies reduce overall trust slightly. No vulnerabilities or exposed sensitive data were detected. The website does not appear to be blocked or protected by a WAF, allowing full content access. Overall, the website is professional and trustworthy from a business and technical standpoint, but improvements in transparency regarding privacy, security policies, and domain registration information are recommended to enhance credibility and compliance.

D

Derwent London

derwentlondon.com

67

Derwent London is a prominent British property investment and development company headquartered in London, recognized as the largest London office-focused Real Estate Investment Trust (REIT) and a constituent of the FTSE 250 Index. The company manages a substantial portfolio of commercial real estate valued at £5.2 billion as of mid-2025, focusing on long-term value creation through property regeneration. Their services include office and retail space leasing, flexible furnished workspaces, and community-focused DL/Members lounges. The website reflects a mature digital presence with comprehensive content targeting investors, tenants, and partners. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and cookie consent management, ensuring compliance with privacy regulations such as GDPR. The site is mobile-optimized, accessible, and SEO-friendly, although no CMS or hosting provider details are explicitly identified. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms with granular controls. However, no explicit security headers were detected in the HTML source, and there is no published security policy or vulnerability disclosure program. The absence of WHOIS data limits domain trust verification, but the professional presentation and multiple industry certifications support legitimacy. Overall, Derwent London’s website demonstrates strong business credibility and privacy compliance, with room for improvement in security best practices and transparency. The domain’s WHOIS data absence warrants monitoring but does not currently undermine the site’s trustworthiness.

H

Herbert Smith Freehills Kramer

herbertsmithfreehills.com

69

Herbert Smith Freehills Kramer is a top 20 global law firm formed by the merger of Herbert Smith Freehills and Kramer Levin, boasting over 2,700 lawyers across 26 offices worldwide. The firm specializes in litigation, regulatory, and transactional legal services across multiple key sectors including energy, banking, real estate, and transportation. Their website reflects a high level of professionalism with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on Magnolia CMS and incorporates modern web technologies such as Google Tag Manager and SproutVideo for media delivery, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are absent. The lack of WHOIS registration data raises concerns about domain legitimacy, warranting further investigation. Overall, the site demonstrates a mature digital presence suitable for an enterprise-level law firm.

R

Robly Ltd.

robly.com

68

Robly Ltd. is a well-established company specializing in email marketing automation solutions targeted primarily at small and medium-sized businesses. The company offers a comprehensive suite of services including proprietary technologies like OpenGen and Robly AI, along with features such as landing page builders, email templates, A/B testing, and integrations with popular platforms like Shopify and WordPress. The website demonstrates strong market positioning supported by numerous customer testimonials and industry awards, reflecting a reputable and trusted brand in the email marketing space. Technically, the website employs a modern technology stack with extensive use of analytics and marketing tools, hosted on AWS infrastructure, and built with responsive design principles to ensure good user experience across devices. Security posture is solid with HTTPS enforced and domain transfer protections in place, though there is room for improvement by enabling DNSSEC and publishing explicit security policies. Privacy compliance is partially addressed with a comprehensive privacy policy, but lacks a cookie consent mechanism despite extensive tracking technologies. Overall, the website is professional, trustworthy, and well-optimized, with minor gaps in privacy and security transparency that should be addressed to enhance compliance and user trust.

L

LPO Arkitekter

lpo.no

60

LPO Arkitekter is Norway's largest independent architectural firm specializing in architecture for cities, places, buildings, and spaces with a strong focus on innovation, sustainability, and inclusive design processes. The company positions itself as a leader in the Norwegian architectural market, serving a broad audience including municipalities, developers, and the general public interested in urban development. Their business model centers on delivering comprehensive architectural and urban planning services with an emphasis on human-centric solutions. Technically, the website employs modern web technologies such as jQuery, Google Analytics, Google Tag Manager, and Plausible Analytics for tracking, alongside lazy loading for performance optimization. The site is mobile-optimized and features good SEO practices, although some accessibility features could be enhanced. The infrastructure appears stable and professionally maintained, with no signs of outdated or vulnerable libraries. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not provide a visible cookie consent mechanism or detailed privacy and security policies, which are important for GDPR compliance. The WHOIS data is not publicly available due to Norid's policies, but the domain and website content align with a legitimate and professional business entity. Overall, the website presents a strong business credibility and technical foundation but would benefit from improved privacy compliance and security best practices to enhance trust and regulatory adherence.

N

Nordic Office of Architecture

nordicarch.com

61

Nordic Office of Architecture is a well-established international architectural firm with studios in Norway, Denmark, and Iceland. The company serves a global clientele with a strong presence in the Nordic region, positioning itself as a leading architectural practice. Their website reflects a professional and modern design, showcasing key projects and providing comprehensive contact information for multiple office locations. The firm emphasizes transparency and compliance with privacy regulations, evidenced by a comprehensive privacy policy and cookie consent mechanism. Technically, the website employs modern JavaScript frameworks and analytics tools, ensuring a good user experience and performance. Security posture is solid with HTTPS enforcement and domain transfer protections, though there is room for improvement in security headers and incident response disclosures. Overall, the website and domain registration data indicate a credible and trustworthy business with a strong digital presence.

F

Finsk-norsk kulturinstitutt (FINNO)

finno.no

57

Finsk-norsk kulturinstitutt (FINNO) is a small, non-profit cultural institute dedicated to strengthening cultural exchange between Finland and Norway. The website is professionally designed using WordPress CMS with multilingual support for Norwegian, Finnish, and English, targeting cultural communities and government/non-profit sectors. The site includes key services such as cultural exchange facilitation and event organization, positioning itself as a niche cultural entity. Technically, the website employs modern tools including Google Tag Manager and Yoast SEO, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and cookie consent implemented, though it lacks advanced security headers and formal privacy and terms of service documentation. Overall, the domain registration details align well with the website's claims, indicating legitimacy and trustworthiness.

D

Design og arkitektur Norge (DOGA)

doga.no

55

Design og arkitektur Norge (DOGA) is a Norwegian non-profit foundation dedicated to promoting sustainable value creation and innovation through design and architecture in both the private and public sectors. The organization offers innovation programs, awards, courses, and tools aimed at fostering design-driven innovation and urban development. The website reflects a well-established entity with government ties, targeting Norwegian businesses and public institutions interested in design and architecture innovation. Technically, the website is hosted on Microsoft Azure, built with ASP.NET technologies, and employs modern tools such as Cloudflare for performance and security, Google Tag Manager and Analytics for tracking, and Cookie Information for GDPR-compliant cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is robust with detailed cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with relevant regulations.

R

Ringier Magazine AG

boleromagazin.ch

63

Bolero is a Swiss online magazine operated by Ringier Magazine AG, focusing on fashion, culture, beauty, and premium lifestyle content targeted primarily at women with style. The website is professionally designed with consistent branding and good content quality, serving as a reputable media outlet within the Swiss market. The technical infrastructure leverages modern web technologies including Ring Publishing CMS, Google Tag Manager, and OneTrust for cookie compliance, ensuring a moderate to good performance and user experience across devices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are not publicly available. Overall, the website demonstrates a solid digital maturity with good SEO and advertising transparency. The domain registration is privacy protected but consistent with the brand's legitimacy. No adult or questionable content is present, making it safe for general audiences.

A

Annabelle

annabelle.ch

66

Annabelle.ch is a Swiss lifestyle and women's magazine website offering content on fashion trends, interior inspiration, travel tips, beauty stories, and social opinion pieces. The site targets a general audience interested in lifestyle and culture, positioning itself as an established media brand in Switzerland. Technically, the website is built on WordPress with modern integrations such as Yoast SEO Premium, Google Tag Manager, Microsoft Clarity, and Cookiebot for consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities, although explicit privacy and terms of service pages are missing. Overall, the site demonstrates good professionalism and trustworthiness but could improve compliance transparency and contact accessibility.

M

Montebelo

montebelo.org

53

Montebelo is a small creative studio and textile agency operating internationally with bases in Porto, A Coruña, Paris, and Stuttgart. The company focuses on graphic design, visual communication, and sustainable supply chain solutions within the textile industry. The website is hosted on the Cargo.site platform and employs modern web technologies including Google Analytics and Tag Manager for visitor tracking. The site is well-designed with good mobile optimization and clear navigation, presenting professional content relevant to its niche market. However, the website lacks explicit privacy, cookie, and terms of service policies, and does not provide direct contact information, which may impact user trust and compliance with privacy regulations. Security-wise, the site uses HTTPS but lacks visible security headers, suggesting room for improvement in hardening the web presence. WHOIS data is unavailable due to query failure or privacy protection, which is common for small agencies but reduces transparency. Overall, the site is functional and professional but would benefit from enhanced privacy and security disclosures.

N

NaturDienst Bieri

naturdienst.ch

37

NaturDienst Bieri is a small, locally focused nature conservation and biodiversity consulting firm founded in 2022 by Markus Bieri in Richenthal, Switzerland. The company offers services including biodiversity promotion consulting, nature excursions, sensitization courses, and educational programs. The website is professionally designed using WordPress with the Divi theme and includes structured data for SEO. It provides clear contact information and promotes upcoming events and offerings related to nature conservation. Technically, the site uses modern web technologies and integrates Google Analytics and Tag Manager for user tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy, accessible, and well-aligned with the business's stated mission and services.

M

Meilenweiss

meilenweiss.ch

51

Meilenweiss is a Swiss-based company offering an annual ski pass that grants access to multiple ski resorts and leisure activities. The website is built on WordPress with WooCommerce for e-commerce functionality, integrating payment processing via Saferpay. The digital infrastructure includes modern tracking tools such as Google Tag Manager and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and use of secure payment plugins, but lacks important security headers and formal policies such as privacy and cookie consent, which are critical for GDPR compliance. Overall, the website is professionally designed and mobile-optimized, targeting winter sports enthusiasts in Switzerland. However, the absence of privacy and security policies and contact information represents compliance and trust gaps that should be addressed.

T

Ticketcorner AG

ticketcorner.ch

10

Ticketcorner AG operates a leading online ticket sales platform in Switzerland, offering tickets for a wide range of events including concerts, sports, theater, circus, and ski resorts. The website is professionally designed with excellent navigation and localized language support, targeting event attendees primarily in the Swiss market. The business model focuses on e-commerce ticket sales with a strong market position in the region. Technically, the site uses modern web technologies such as jQuery, Google Tag Manager, and a consent management platform to ensure GDPR compliance and effective marketing. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is trustworthy, compliant, and well-optimized for its audience.

A

Aargauische Kantonalbank

akb.ch

29

Aargauische Kantonalbank is a leading financial services provider operating primarily in the Canton of Aargau and the Olten-Gösgen-Gäu region in Switzerland. The website reflects a professional banking institution offering a range of financial products and customer support services. The company maintains a strong market position as a regional bank with a clear focus on its local clientele. The digital presence is built on a modern technical infrastructure leveraging Liferay CMS, React, and Clay UI components, ensuring a responsive and user-friendly experience. Integration with Google Tag Manager and Jentis Analytics indicates a mature approach to user behavior tracking and marketing analytics. Security posture is robust with HTTPS enforcement, script nonce usage, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly visible. Overall, the website demonstrates a high level of professionalism and trustworthiness suitable for a financial institution.

PostBus Ltd operates a comprehensive regional and local bus transportation network throughout Switzerland, providing essential public transit services, special trips, and leisure excursions. The company maintains a professional and user-friendly website that supports multiple languages and offers extensive customer service resources, including ticket purchases and lost property services. The website reflects a mature digital infrastructure with modern technologies such as Google Tag Manager, Coveo search integration, and Usercentrics consent management, indicating a high level of digital maturity and compliance with privacy regulations. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, though explicit security policies and incident response details are not published. Overall, the website and domain registration data align well, confirming the legitimacy and trustworthiness of the business.

A

Aargau Verkehr AG (AVA)

aargauverkehr.ch

61

Aargau Verkehr AG (AVA) is a regional public transportation company operating in the Aargau region of Switzerland. The company provides transit schedules, operational updates, and ticketing services primarily targeting local commuters and travelers. The website is professionally designed using Joomla CMS with Helix Ultimate framework and integrates modern web technologies such as Bootstrap and jQuery. It features a cookie consent mechanism compliant with GDPR and uses Google Analytics for traffic analysis. Security posture is good with HTTPS enforced and CSRF protections in place, though additional security headers could enhance protection. No critical vulnerabilities or suspicious content were detected. Overall, the website reflects a credible and established transportation service provider with a solid digital presence.

T

Tarifverbund A-Welle

a-welle.ch

10

Tarifverbund A-Welle operates as a regional public transportation tariff association in Switzerland, providing ticketing, subscriptions, zone plans, and travel information services primarily for the A-Welle region. The website is professionally designed and targets general public users including commuters and travelers within the region. The business model focuses on facilitating public transport access through digital and physical ticketing solutions, supported by partnerships such as SwissPass. Technically, the website is built on TYPO3 CMS, employs modern web technologies, and integrates Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a moderate to good performance profile. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. Strategic recommendations include enhancing security transparency and incident response readiness to further strengthen trust and compliance.

W

Work Life Aargau

worklifeaargau.ch

9

Work Life Aargau is a regional employment and lifestyle platform focused on the canton of Aargau in Switzerland. It serves as a portal connecting job seekers with employers, providing job listings, employer profiles, career advice, and lifestyle content to promote the region as an attractive place to live and work. The website is supported by regional government and partner institutions, reflecting a strong local market position in public sector employment promotion. Technically, the website employs modern web technologies including React and Material-UI components, integrates multiple third-party analytics and advertising services such as Google Analytics, Facebook Pixel, and Adform, and uses HTTPS to secure communications. The design is professional and mobile-optimized, offering a good user experience with clear navigation and relevant content sections. From a security perspective, the site benefits from HTTPS and asynchronous loading of tracking scripts but lacks visible security headers and formal security policies such as incident response or vulnerability disclosure. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms, which poses compliance risks under GDPR. Overall, the website is legitimate and trustworthy with a strong regional government backing but should improve privacy transparency and security policy disclosures to enhance compliance and user trust.

A

Aargau Tourismus AG

akb-freizeitportal.ch

54

The AKB Freizeitportal is a regional leisure and tourism platform operated in partnership with Aargau Tourismus AG and supported by the Aargauische Kantonalbank. It offers discounted leisure experiences, event information, and a newsletter service targeting residents and visitors of the Aargau region in Switzerland. The website is built on the nopCommerce platform, leveraging modern front-end technologies and analytics tools such as Google Tag Manager and Plausible Analytics. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Security posture is solid with HTTPS enforced and secure form handling, though some improvements in HTTP security headers and incident response disclosures are recommended. Overall, the site presents a professional, trustworthy, and user-friendly experience with clear business legitimacy and no suspicious content.

H

Hallwilerseelauf Gmbh

hallwilerseelauf.ch

57

Hallwilerseelauf Gmbh operates a well-established Swiss running event website focused on the Hallwilerseelauf race series, offering multiple race formats including half marathon, 10 km, and team runs. The website targets runners, families, and sports enthusiasts, providing comprehensive event information and registration options. The company maintains a consistent brand presence with active social media engagement and partnerships with reputable sponsors. Technically, the site is built on WordPress with modern SEO and analytics tools, delivering a responsive and user-friendly experience. Security posture is strong with HTTPS and security headers implemented, though formal security policies and incident response details are not published. Privacy compliance is well addressed with clear cookie consent and privacy policy. Overall, the site is professional, trustworthy, and well suited for its audience.

S

Schlossrestaurant Habsburg

schlossrestaurant-habsburg.ch

47

Schlossrestaurant Habsburg is a hospitality business operating a historic castle restaurant and event venue in Switzerland. The company offers regional cuisine and hosts weddings, banquets, seminars, and private celebrations. It is positioned as a premium venue with a strong local heritage and scenic views, targeting individual guests and event organizers. The website is professionally designed using WordPress and the Avada theme, with modern SEO and analytics integrations. Security posture is good with HTTPS and security headers, though cookie consent mechanisms and explicit security policies are missing. Overall, the site is trustworthy and well-maintained, reflecting a small but established hospitality business under the parent company AARGAUHOTELS.CH.

Therme Zurzach is a Swiss-based wellness and hospitality business specializing in thermal baths, sauna, spa treatments, and fitness services. The website presents a professional and well-structured digital presence powered by HubSpot CMS, integrating modern marketing and analytics tools. The company targets families and wellness customers seeking relaxation and health benefits from thermal water and related services. The site includes rich content about services, events, and packages, supported by social media channels and online ticketing. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit privacy and security policies are not found. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website is trustworthy, user-friendly, and compliant with basic privacy standards, though improvements in explicit policy disclosures and incident response contacts are recommended.

S

Standortförderung Zürioberland

zuerioberland.ch

53

Standortförderung Zürioberland operates as a regional economic and cultural promotion organization for the Zürcher Oberland area in Switzerland. The website serves as a portal for businesses, residents, and visitors, offering information on economic opportunities, cultural events, regional products, and community initiatives. The organization positions itself as a key regional player fostering innovation, sustainability, and quality of life. Technically, the website is built on WordPress with modern JavaScript libraries and integrates multiple analytics and tracking services via Google Tag Manager. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. Overall, the domain registration data aligns well with the website's regional focus, indicating legitimacy and trustworthiness.

A

Aargau Tourismus AG

aargautourismus.ch

48

Aargau Tourismus AG operates as the regional tourism authority for the canton of Aargau in Switzerland, providing comprehensive tourism information, event promotion, and services such as meeting location facilitation and an online shop for vouchers. The website targets tourists, cultural enthusiasts, families, and event attendees, positioning itself as a trusted regional tourism hub with strong partnerships and certifications like Swisstainable. Technically, the site employs modern tracking and analytics tools including Google Analytics and Facebook Pixel, uses Bootstrap and jQuery UI for UI components, and is likely powered by the ZMS CMS platform. The site is mobile-optimized with good navigation and content quality. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security policies and incident response information. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

S

sa_partners GmbH

sapartners.ch

51

sa_partners GmbH is a specialized consulting firm based in Zurich, Switzerland, focusing on urban design and territorial planning. Their core activities include project development, process design, and spatial strategies for urban and regional development. The company targets municipalities, developers, and planners seeking innovative and sustainable urban solutions. The website reflects a professional and consistent brand image with detailed project showcases and a clear business focus. Technically, the site uses modern web technologies such as Tailwind CSS, jQuery, and Google Tag Manager, providing a responsive and SEO-optimized experience. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and privacy compliance mechanisms could be improved. Overall, the site is trustworthy and well-positioned in its niche market.

Wolzenalp is a small regional tourism business located in Switzerland, offering family-friendly hiking, biking, winter sports, and mountain railway services. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to tourists and families. Technically, the site uses the Contao CMS, integrates Google Tag Manager, Cookiebot for consent management, and Outdooractive API for outdoor activity information. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though some advanced headers like Content-Security-Policy could be added. Privacy compliance is well addressed with a comprehensive cookie policy and GDPR-aligned consent. However, no explicit terms of service, security policy, or incident response contacts are published, which could be improved. Overall, the website is trustworthy, secure, and well-suited for its business purpose.

U

UNICEF Schweiz und Liechtenstein

unicef.ch

67

UNICEF Schweiz und Liechtenstein operates as a reputable non-profit organization dedicated to the welfare and survival of children globally, with a strong local presence in Switzerland and Liechtenstein. The website reflects a professional and well-branded digital presence, offering comprehensive information about their humanitarian efforts, donation opportunities, and advocacy work. The organization maintains a clear market position as part of the global UNICEF network, supported by transparent financial reporting and trust indicators such as ISO 9001 certification. Technically, the site is built on Drupal 10 with modern libraries and frameworks, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response disclosures. Overall, the site demonstrates high business credibility and privacy compliance, making it a trustworthy platform for donors and stakeholders.

S

step into action

step-into-action.org

65

Step into action is a small non-profit organization based in Switzerland focused on education for sustainable development. Their website promotes experiential events and creative methods to inspire organizations, schools, teams, and individuals to actively shape their future. The organization targets educational institutions and community groups with facilitation services and events designed to foster engagement in sustainability. Technically, the website is built on Squarespace, leveraging modern web technologies including Google Tag Manager and Weglot for multilingual support. The site is well-designed, mobile-optimized, and includes cookie consent mechanisms, though it lacks explicit privacy and terms of service pages. Security posture is strong with HTTPS and HSTS enabled, and use of Google reCAPTCHA for form protection. However, additional security headers and formal policies would enhance compliance and trust. Overall, the site presents a professional and trustworthy digital presence appropriate for its educational mission.

K

Kommune 360°

kommune360.de

54

Kommune 360° is a German non-profit initiative focused on fostering cooperative and integrated planning and management to support successful child development within municipalities. The organization operates a professional website offering resources such as a Change-Guide, a Fellow-Program, podcasts, festivals, and newsletters targeted at municipal employees and stakeholders involved in child and youth welfare planning. The website is well-branded, consistent, and supported by partner organizations including Auridis Stiftung, DKJS, and PHINEO. Technically, the site is built on WordPress with modern plugins and frameworks, including Bootstrap and Mai Engine, and employs both Google Analytics and Matomo for analytics. The site is GDPR compliant with a comprehensive privacy policy and a cookie consent mechanism with opt-in functionality. Security posture is good with HTTPS enforced, though security headers are not detected and could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the site demonstrates a mature digital presence suitable for its non-profit mission.

The Dachverband Schweizer Jugendparlamente DSJ is a Swiss non-profit organization serving as a politically neutral competence center for political education and youth participation. It supports 65 youth parliaments across Switzerland and Liechtenstein, offering educational programs, workshops, and digital tools such as easyvote and engage-Ateliers. The organization is well-established with a domain age consistent with its 30-year anniversary in 2025, positioning it as a leading entity in its sector. Technically, the website is built on WordPress with modern plugins and libraries, supporting multilingual content and optimized images. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with GDPR, targeting young people, educators, and local governments.

O

okaj zürich

okaj.ch

47

okaj zürich is a well-established non-profit umbrella organization dedicated to coordinating and supporting open, associative, and church-based child and youth work in the canton of Zürich, Switzerland. With a history spanning 100 years, it serves approximately 600 member organizations and operates under a mandate from the canton government. The website effectively communicates its mission, projects, and events, targeting professionals in youth work, government officials, and member organizations. The organization emphasizes education, networking, and advocacy through various projects and publications.

G

Gemeinde Hasliberg

hasliberg.ch

54

Gemeinde Hasliberg is the official municipal government website serving the Hasliberg region in Switzerland. It provides local administrative information, community services, tourism details, event announcements, and educational resources. The site targets residents and visitors, offering comprehensive local content in German. The business model is that of a government entity focused on public service and community engagement. Technically, the website is built on the concrete5 CMS platform, utilizing common JavaScript libraries and Google services such as Analytics and reCAPTCHA to enhance functionality and security. The site is mobile optimized and presents a professional design with clear navigation. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy, legitimate, and well-maintained, reflecting its role as a government portal.

T

Ticino Turismo

ticino.ch

65

Ticino Turismo operates the official regional tourism website for Ticino, Switzerland, providing comprehensive travel and holiday information including accommodations, events, excursions, and cultural highlights. The website targets tourists and travelers seeking to explore the Mediterranean soul of Switzerland, positioning itself as a trusted and authoritative source in the hospitality and government tourism sector. Technically, the site employs a modern technology stack including Google Tag Manager, Facebook and Pinterest SDKs, and Leaflet.js for interactive maps, likely built on Adobe Experience Manager CMS. The website is well-optimized for mobile devices and SEO, with good performance and accessibility features. Security posture is strong with HTTPS enforced, appropriate security headers, and a robust cookie consent mechanism via iubenda, although no explicit security policy or vulnerability disclosure page was found. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource for visitors.

InnovationsTransfer Zentralschweiz is a regional Swiss organization focused on promoting innovation and supporting startups, SMEs, and private individuals in Central Switzerland. Their services include startup acceleration, innovation coaching, digital financing, patent and trademark consulting, and funding programs. The website is built on WordPress using the Breakdance theme and integrates marketing and analytics tools such as HubSpot and Google Tag Manager. While the site uses HTTPS and has a cookie consent mechanism, the specific requested page is missing (404 error), and no privacy policy or terms of service are found, which impacts compliance and user trust. Security headers are not detected, indicating room for improvement in security posture.

F

Fondazione AGIRE

agire.ch

70

Fondazione AGIRE is a Swiss regional innovation agency dedicated to supporting startups and SMEs in the Ticino region and the Italian-speaking Grisons. The organization provides a comprehensive range of services including startup support, SME assistance, coworking spaces at Tecnopolo, and coordination of the regional innovation system. The website reflects a professional and well-established entity with a clear focus on fostering technological development and economic competitiveness in its territory. Technically, the site is built on Drupal 10, employs modern web technologies such as Font Awesome and Google Tag Manager, and implements a robust cookie consent mechanism via Iubenda, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through comprehensive policies and consent management. Overall, the website presents a trustworthy and credible digital presence aligned with its business mission.

I

INOS – Innovationsförderung für Ostschweizer KMU

inos.swiss

45

INOS is a Swiss innovation support organization focused on fostering innovation in small and medium-sized enterprises (SMEs) in Eastern Switzerland. Affiliated with the University of St. Gallen, INOS offers professional innovation coaching and platforms for cross-company networking and resource pooling. The website is well-structured, primarily in German, and targets regional SMEs seeking innovation support. Technically, the site is built on WordPress with modern plugins like Elementor and Yoast SEO, indicating a mature digital infrastructure. However, the domain is currently expired but pending renewal, which poses a risk to service continuity. Security posture is moderate with HTTPS enabled but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but requires improvements in security and privacy transparency.

B

Basel Area Business & Innovation

baselarea.swiss

55

Basel Area Business & Innovation is a well-established non-profit organization founded in 2015, dedicated to fostering innovation and business success in the Basel Area of Switzerland. The organization supports companies, startups, and institutions by providing consulting services, facilitating connections, managing accelerator programs, and hosting events. Their market position is strong as a regional innovation and investment promotion agency, targeting a diverse audience interested in life sciences, technology, and business growth. The website reflects a mature digital presence with professional design, multilingual support, and comprehensive content. Technically, the site is built on WordPress with modern plugins and tracking tools, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC and some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness.

H

hosttech GmbH

hosttech.de

10

hosttech GmbH is a German-based technology company specializing in web hosting, domain registration, and server solutions. The company targets small to medium businesses and private users primarily in German-speaking countries such as Germany, Austria, and Switzerland. Their market position is that of an established regional hosting provider offering a broad range of hosting services including shared hosting, VPS, and dedicated servers. The website is professionally designed with consistent branding and clear navigation, supporting a good user experience and trustworthiness. Technically, the website is built on WordPress with Elementor as the page builder, integrating modern marketing and analytics tools such as Google Tag Manager, HubSpot, and Facebook Pixel. The hosting infrastructure appears to be managed by hosttech GmbH itself, with good performance and mobile optimization. Security measures include HTTPS enforcement, appropriate security headers, and GDPR-compliant cookie consent mechanisms, reflecting a mature security posture. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the site lacks a public security policy or vulnerability disclosure page, which could enhance transparency and incident response readiness. The WHOIS data is limited due to DENIC privacy policies but aligns with the business's operational footprint, supporting legitimacy. Overall, the website and business demonstrate a high level of professionalism, security, and compliance suitable for their market segment.

The Architectural Association, Inc. operates a well-established educational website serving as the primary online portal for its architecture school based in London. The site provides comprehensive information about academic programmes ranging from foundation courses to PhD levels, public lectures, events, and publications. It targets students, architects, researchers, and the general public interested in architecture education and cultural programming. The institution holds a reputable market position as an independent and historic architecture school with a global reach. Technically, the website employs a modern technology stack including React, Google Analytics, Hotjar, and Bootstrap, ensuring a responsive and user-friendly experience. The site is served over HTTPS with asynchronous loading of scripts, contributing to moderate performance and good mobile optimization. However, some accessibility features could be enhanced, and security headers are not explicitly present. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible exposure of sensitive data. Privacy and cookie policies are comprehensive and GDPR compliant, though no explicit security or incident response policies are published. The absence of WHOIS data is attributed to privacy protection, which is reasonable for this type of institution. Overall, the site maintains a high trust level with clear contact information and charity registration disclosures. The overall risk profile is low, with recommendations focusing on improving security headers, publishing incident response contacts, and enhancing accessibility compliance. These steps would further strengthen the site's security posture and user trust.

A

ARCH+ Verlag GmbH

archplus.net

57

ARCH+ Verlag GmbH operates a well-established German architecture and urbanism magazine with a strong digital presence. The website serves as a platform for magazine sales, event promotion, and architectural discourse, targeting professionals, students, and enthusiasts in the architecture sector. The business model centers on publishing quarterly issues in print and digital formats, supplemented by events and advertising. The company holds a leading position in its niche market in Germany with international outreach through English content and social media engagement. Technically, the website employs modern web standards, including HTML5, CSS3, and JavaScript, with embedded video content and Google Tag Manager for analytics and marketing. The site is hosted on Namespace4You infrastructure and shows moderate performance with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though improvements are recommended such as enabling DNSSEC and adding security headers. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and aligns well with the company's business objectives.

M

MētisPresses

metispresses.ch

59

MētisPresses is a Swiss-based publishing company specializing in academic and cultural publications, offering both printed and digital books. The website targets French-speaking academics, researchers, and cultural enthusiasts, positioning itself as a niche publisher with a focus on sociological and historical content. The business model revolves around online sales of books and collections, supported by a professional and consistent brand presence. Technically, the website employs modern web technologies including Bootstrap, jQuery, and integrates payment solutions like Stripe and PayPal, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and some basic security headers but lacks comprehensive policies such as privacy and cookie policies, and does not provide a vulnerability disclosure or security contact. Analytics usage is moderate with Google Analytics and Tag Manager implemented, but privacy compliance is weak due to missing policies. Overall, the website is trustworthy and professional but could improve its compliance and security posture.

N

New Generations

newgenerationsweb.com

36

New Generations is a European media and cultural platform focused on emerging architectural practices since 2013. It provides a space for knowledge exchange, events, publications, and networking for architects across Europe. The website is built on SilverStripe CMS, uses modern web technologies including Bootstrap and jQuery, and integrates Google Analytics and reCAPTCHA for user interaction and spam protection. The security posture is moderate with HTTPS enabled and reCAPTCHA implemented, but lacks some security headers and DNSSEC. Privacy and cookie policies are absent, which impacts compliance. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

H

Hochparterre

hochparterre.ch

46

Hochparterre is a Swiss media platform specializing in architecture, planning, and design news, publications, and events. It serves professionals and enthusiasts in the Swiss architecture and design community, offering news articles, event information, subscription services, and an online shop. The website is built on TYPO3 CMS with modern frontend technologies and integrates multiple advertising and tracking services. The site is well-designed, mobile-optimized, and provides a professional user experience. Security posture is good with HTTPS and secure form practices, but lacks visible privacy and cookie policies, as well as explicit security and incident response policies. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the site is a reputable media outlet with room for improvement in privacy compliance and security transparency.

S

Schulthess Klinik

schulthess-klinik.ch

71

Schulthess Klinik is a leading orthopedic healthcare provider in Switzerland and Europe, specializing in a wide range of orthopedic surgeries and related medical services. The website reflects a mature digital presence with comprehensive content targeting patients, referring physicians, and healthcare professionals. It supports multiple languages and offers clear pathways for appointment scheduling and patient referrals. Technically, the site is built on Drupal 10 with modern front-end technologies and integrates Google Tag Manager for analytics. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and vulnerability disclosures are not publicly detailed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

S

Swisslos

swisslos.ch

71

Swisslos is a prominent Swiss lottery and betting operator offering a wide range of games including Swiss Lotto, EuroMillions, EuroDreams, and various skill and instant ticket games. The website targets adult players in Switzerland and emphasizes responsible gaming with visible 18+ player protection indicators. Technically, the site employs modern frameworks such as Vue.js, integrates Google Analytics and Tag Manager for analytics, uses Google reCAPTCHA v3 for bot protection, and manages cookie consent via Usercentrics, reflecting a mature digital infrastructure. Security measures include HTTPS enforcement and CSRF token usage, though explicit privacy and terms of service pages are not clearly found in the provided content. Overall, the site presents a professional and trustworthy front with good branding and user experience.

Z

Zug Estates Holding AG

zugestates.ch

59

Zug Estates Holding AG is a Swiss real estate company specializing in sustainable development and management of living spaces primarily in the Zug region. The company emphasizes creating value through sustainable and innovative real estate solutions, targeting investors, tenants, and partners interested in environmentally responsible property management. Their website reflects a professional corporate presence with comprehensive investor relations and sustainability reporting. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and Usercentrics for cookie consent, hosted on DigitalOcean infrastructure. The website is mobile-optimized and well-structured, providing a good user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of a publicly available security policy and incident response contact is noted. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.