Security Directory

B

Bauspot.de

bauspot.de

60

Bauspot.de is a German online platform serving the construction industry by providing product information, training, webinars, and a partner portal for manufacturers. The site targets construction professionals and manufacturers within Germany, positioning itself as a niche resource and marketplace. Technically, the website employs modern technologies such as Vue.js, integrates third-party services like YouTube and Vimeo for video content, and uses Cookiebot for GDPR-compliant cookie consent management. Hosting is provided via German-based nameservers, consistent with the business location. Security posture is solid with HTTPS enabled, CSRF protection, and anonymized IP tracking in analytics, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. No direct contact emails or phone numbers are publicly listed, with contact likely via legal or contact pages. Overall, the website is professional, trustworthy, and well-structured, with moderate tracking and advertising practices primarily through Google services.

S

SFS Group

sfs.com

71

SFS Group is a globally recognized supplier specializing in application-critical precision components, mechanical fastening systems, quality tools, and procurement solutions. The company targets industrial and manufacturing sectors, providing mission-critical products embedded in customer processes. Their market position is strong, with a worldwide footprint and a large operational scale. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored for B2B audiences. Technically, the site employs modern JavaScript libraries, Google Tag Manager for analytics, and Cookiebot for privacy compliance, indicating a commitment to data protection and user consent. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data limits domain registration trust verification, but the overall site professionalism and active social media presence support legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

A

alpha logs GmbH

alphalogs.de

62

alpha logs GmbH operates the website alphalogs.de, providing expert consulting and management services for logistical change processes targeting companies in industry, trade, and services sectors. The company positions itself as pragmatic, experienced, and future-oriented, focusing on supply chain and intralogistics solutions primarily for medium-sized enterprises and corporations in Germany. The website is professionally designed, multilingual (German and English), and optimized for user experience and SEO. Technically, it is built on WordPress with modern plugins such as Rank Math SEO and Cookiebot for privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site reflects a mature digital presence with good privacy compliance and business credibility.

A

Arosa Tourismus Genossenschaft

arosalenzerheide.swiss

61

Arosa Tourismus Genossenschaft operates the website arosalenzerheide.swiss, promoting the Arosa and Lenzerheide ski areas in Switzerland. The site targets tourists and winter sports enthusiasts, offering information about regional activities and attractions. The business is positioned as a regional tourism leader in Graubünden, Switzerland, with a medium-sized cooperative structure founded in 2015. Technically, the website employs modern frontend technologies such as Bootstrap 4, jQuery UI, and Cookiebot for cookie consent management. The site is served over HTTPS with a valid SSL certificate, but lacks some security headers and explicit privacy and terms of service documents. Security posture is moderate with room for improvement in headers and incident response contact information. Overall, the website is professional and trustworthy, but could enhance privacy compliance and security transparency to improve user trust and regulatory adherence.

Z

Z-AG Engineering

z-ag.ch

71

Z-AG Engineering, represented by Oeschgen AG, specializes in thermal process engineering with a focus on steam systems including planning, construction, and service of steam plants and boilers. The company targets industrial clients requiring expert solutions in energy and steam generation. The website is professionally designed, multilingual, and employs modern web technologies such as service workers and cookie consent mechanisms, reflecting a moderate to advanced digital maturity. Security posture is strong with HTTPS, security headers, and privacy compliance via Cookiebot. However, the absence of explicit security policies, incident response contacts, and terms of service pages suggests areas for improvement. Overall, the website presents a trustworthy and professional image with a low risk profile.

C

Cimbergy

cimbergy.com

55

Cimbergy is a specialized service provider focused on wind and solar energy projects primarily in Schleswig-Holstein, Germany. The company offers tailored solutions including planning, implementation, and management of renewable energy parks. Their market position is regional with a clear focus on sustainable energy and citizen participation. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates privacy-compliant analytics and marketing tools such as Matomo and Facebook Pixel. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data raises some concerns about domain registration transparency, but the website itself appears legitimate and trustworthy. Overall, the site demonstrates a mature digital presence suitable for its business domain.

C

Checkin — påmeldingssystemet som er regnskapets bestevenn

checkin.no

70

Checkin.no is a Norwegian technology company offering a SaaS event registration system that integrates with accounting processes, targeting event organizers and accounting professionals. The website is built on HubSpot CMS, uses Cloudflare for hosting and security, and integrates multiple marketing and analytics tools such as Google Analytics 4, Hotjar, and Cookiebot. The site demonstrates a good level of digital maturity with responsive design, clear navigation, and professional branding. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit privacy and terms of service pages are missing. No WHOIS data is available, likely due to privacy protection, which is common and justified for this business type. Overall, the website is trustworthy and professionally managed.

M

Mediebedriftenes Landsforening (MBL)

mediebedriftene.no

71

Mediebedriftenes Landsforening (MBL) is a Norwegian media industry association dedicated to strengthening and protecting freedom of expression, press freedom, and information freedom as fundamental democratic values. The organization advocates for stable and favorable conditions that promote a diverse and economically sound media landscape in Norway. The website reflects a professional and consistent brand presence targeting media companies and stakeholders within the Norwegian media sector. Technically, the site employs modern web technologies including Google Tag Manager, Cookiebot for cookie consent, Google reCAPTCHA Enterprise for bot protection, and Microsoft Application Insights for telemetry and analytics. The site is well-secured with HTTPS and appropriate security headers, indicating a strong security posture. However, the absence of a publicly accessible privacy policy and terms of service pages, as well as lack of direct contact information, slightly reduces privacy compliance and business transparency scores. Overall, the website is safe, professional, and trustworthy, with moderate user tracking and good technical implementation.

A

Act-On

actonsoftware.com

75

Act-On is a well-established marketing automation software provider founded in 2005, offering AI-driven solutions to help businesses create, measure, and optimize marketing campaigns. The company targets B2B marketers and enterprises, positioning itself as a competitive mid-market to enterprise SaaS platform with a comprehensive suite of services including multichannel marketing, lead scoring, analytics, and sales alignment. The website reflects a mature digital presence with professional design, clear navigation, and strong SEO practices. Technically, the site is built on WordPress using Elementor and integrates multiple marketing and analytics tools such as Google Tag Manager, Hotjar, Cookiebot, and 6sense. Hosting is via Amazon AWS, and the site employs HTTPS with good security headers, although DNSSEC is not enabled. The site demonstrates good privacy compliance with a comprehensive privacy policy and cookie consent mechanism. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but there is room for improvement by enabling DNSSEC and publishing explicit security policies or vulnerability disclosure information. Overall, the site is trustworthy, professional, and compliant with relevant privacy regulations. The risk assessment is low, with no blocking WAF detected and no suspicious WHOIS patterns. Strategic recommendations include enhancing DNS security, formalizing security incident response, and improving accessibility features to further strengthen compliance and user experience.

C

codin GmbH

codin.ch

76

codin GmbH is a Swiss-based managed IT service provider specializing in comprehensive IT solutions for small and medium-sized enterprises (KMU). Their offerings include IT support, Microsoft 365 services, cybersecurity, procurement, training, and backup management, all provided at a fixed monthly price. Positioned as an external IT department, codin GmbH aims to simplify and secure IT operations for SMEs, allowing clients to focus on their core business. The website reflects a professional and modern digital presence, leveraging Next.js and Vercel hosting for performance and scalability. Cookie consent is managed effectively through Cookiebot, ensuring compliance with data privacy norms. Security posture is strong with HTTPS and appropriate security headers, though explicit privacy policy and terms of service pages are currently missing, representing areas for improvement. Overall, codin GmbH demonstrates a credible and trustworthy business with a clear market focus and solid technical infrastructure.

R

REMONDIS Entsorgung

remondis-entsorgung.de

67

REMONDIS Entsorgung operates as a leading enterprise in the waste management and environmental services sector in Germany. The company offers a broad range of services including waste disposal, management, sorting, transport, and recycling solutions tailored for businesses. Their market position is strong, supported by a professional website that clearly communicates their services and target audience. The website is built on TYPO3 CMS and integrates modern consent management tools such as Cookiebot, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and standard security headers, although explicit security policies and incident response information are not publicly available. Overall, the website demonstrates good compliance with privacy regulations, including GDPR, through comprehensive cookie consent mechanisms. The risk profile is low, with no critical vulnerabilities or suspicious indicators detected. Strategic recommendations include publishing detailed security and incident response policies, implementing a vulnerability disclosure program, and enhancing accessibility features to further improve compliance and user trust.

H

Hessischer Turnverband e.V.

htv-online.de

62

Hessischer Turnverband e.V. (HTV) is a regional non-profit sports federation dedicated to gymnastics and related sports in Hessen, Germany. The organization provides a broad range of services including competitions, training and certification for trainers and volunteers, club consulting, and events. The website serves as an information hub for members, clubs, and sports enthusiasts, emphasizing education, child welfare, and community engagement. HTV holds a strong market position as the authoritative body for turn sports in Hessen, supported by partnerships with related organizations and events. Technically, the website is built on TYPO3 CMS with a modern frontend leveraging Bootstrap and jQuery. It employs Cookiebot for GDPR-compliant cookie consent management and Matomo for privacy-respecting analytics. The site is hosted on reliable infrastructure with good mobile optimization and accessibility features. SEO and metadata are well implemented, supporting discoverability and user experience. From a security perspective, the site enforces HTTPS and uses privacy-conscious analytics settings. While some standard security headers are not explicitly confirmed, no critical vulnerabilities or exposed sensitive data were detected. The privacy policy and cookie consent mechanisms are comprehensive and transparent, with clear contact details including a data protection officer. However, no explicit security policy or incident response information is published. Overall, HTV's website demonstrates a mature digital presence with strong compliance to privacy regulations and a solid security posture. The site effectively supports its business goals and community engagement while maintaining user trust. Strategic improvements in security headers and updating legacy libraries could further enhance its security and compliance standing.

E

Ege Carpets

egecarpets.com

10

Ege Carpets is a Denmark-based company specializing in designing and manufacturing high-quality carpets for commercial use, including wall-to-wall carpets, carpet tiles, planks, and rugs. The company emphasizes sustainability and innovative design, targeting commercial sectors such as hospitality, office, retail, healthcare, and marine industries. Their website showcases rich multimedia content, custom design tools, and a strong sustainability agenda, positioning them as a reputable player in the commercial carpet market. Technically, the website employs modern JavaScript libraries, video integrations, and cookie consent management, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS and cookie consent but lacks some advanced security headers and published security policies. WHOIS data is unavailable, which raises some legitimacy concerns, but the presence of detailed contact information and social media presence supports business credibility. Overall, the website is professional, user-friendly, and trustworthy, with room for improvement in security transparency and domain registration clarity.

T

TreCe

trece.se

54

TreCe is a Swedish company specializing in office storage and recycling solutions designed to integrate seamlessly with office interiors. Their website presents a professional and well-structured digital presence built on WordPress with WooCommerce, leveraging modern plugins such as Yoast SEO and Cookiebot for SEO and privacy compliance. The site targets businesses and organizations seeking flexible and user-friendly storage and sorting solutions for office and public environments. Technically, the website is well-optimized for mobile devices and includes standard tracking and consent mechanisms, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and uses reCAPTCHA, but lacks some advanced security headers and explicit security policies, which could be improved. The absence of WHOIS data for the domain www.trece.se reduces trustworthiness from a domain registration perspective, though the website content and structure appear legitimate and professional. Overall, the site is safe for general audiences and provides a solid foundation for business operations, but would benefit from enhanced transparency in privacy and security documentation.

E

Essem Design

essem.se

61

Essem Design is a Swedish company specializing in the retail of hall furniture and interior accessories, focusing on design, sustainability, and functionality. Their website showcases a well-structured e-commerce platform with rich product offerings, design stories, and inspiration targeted at consumers interested in hall furnishings. The company maintains a consistent brand presence across multiple social media platforms and provides comprehensive privacy and cookie policies compliant with GDPR regulations. Technically, the website is built on the Umbraco CMS, uses modern JavaScript libraries such as Swiper.js, and integrates third-party services like Vimeo and Cookiebot for enhanced user experience and compliance. Security-wise, the site enforces HTTPS, employs strong security headers, and uses cookie consent mechanisms, although explicit security policies and incident response contacts are not published. The WHOIS data query for the subdomain 'www.essem.se' returned no results, which is expected as WHOIS data is typically registered for the root domain 'essem.se'. Overall, the website demonstrates a mature digital presence with good security posture and privacy compliance, suitable for its business model and audience.

P

Paul Mellon Centre

paul-mellon-centre.ac.uk

73

The Paul Mellon Centre is a UK-based non-profit educational charity dedicated to supporting original research into the history of British art and architecture across all periods. The organization offers key services including research support, publishing, events, conferences, grants, and fellowships, targeting academics, researchers, and students interested in British art history. The website reflects a professional and consistent brand image with good content quality and clear navigation, supporting its mission effectively. Technically, the site employs modern web technologies including JavaScript libraries, Google Analytics, and Cookiebot for privacy compliance, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of visible security headers and lack of published security policies suggest room for improvement. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, the site is trustworthy, safe, and compliant with GDPR, but could enhance transparency by publishing contact and security-related policies.

T

Tyréns Group

tyrens.com

9

Tyréns Group is a multidisciplinary consultancy specializing in sustainable urban design, infrastructure, and the built environment. The company positions itself as a market leader in delivering sustainable solutions for cities and infrastructure projects, targeting urban planners, municipalities, and infrastructure developers. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on Umbraco CMS and integrates modern tools such as Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile optimized and performs moderately well in terms of speed and accessibility. Security posture is solid with HTTPS enforced and standard security headers present, although there is room for improvement by adding a Content-Security-Policy header and publishing security policies. Privacy compliance is partially met with a cookie consent mechanism but lacks a visible privacy policy page. The absence of WHOIS registration data is a notable concern, reducing overall trustworthiness despite the professional appearance. Contact information is available, including a Stockholm office address and phone number, but no direct company emails were found. Overall, the site scores well but should address privacy and WHOIS transparency to improve credibility.

E

E.M. StatusPal UG

noticely.io

63

Noticely is a technology startup offering a SaaS platform for hosted status pages and automated incident notifications, targeting small teams and growing companies. The platform emphasizes ease of use, scalability, and fair pricing, positioning itself as a modern alternative in the status communication market. The business is a product of E.M. StatusPal UG, founded in 2025, with a clear focus on technology and customer communication services. The website is professionally designed, mobile-optimized, and integrates modern analytics and consent management tools, reflecting a mature digital infrastructure for a young company. Security posture is solid with HTTPS, privacy protection in domain registration, and cookie consent mechanisms, though there is room for improvement in DNSSEC and security headers. Overall, the site is trustworthy, with transparent business information and active social media presence. Recommendations include enhancing security policies and publishing vulnerability disclosure information to further strengthen trust and compliance.

A

Autopromotec

autopromotec.com

58

Autopromotec is an established international biennial exhibition focused on automotive equipment and aftermarket products, primarily targeting industry professionals and exhibitors. The event is held in Bologna, Italy, and serves as a key networking and showcase platform within the automotive aftermarket sector. The website presents professional branding and relevant event information, indicating a mature business presence in the transportation industry. Technically, the site employs a modern tech stack including jQuery, Cookiebot for consent management, Google Analytics, and Facebook Pixel for tracking and marketing purposes. The site is mobile-optimized with good SEO practices but lacks some advanced accessibility features and security headers. Security posture is generally good with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit privacy policies are areas for improvement. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance of the website. Overall, the site is safe, trustworthy, and well-suited for its business purpose but would benefit from enhanced transparency and security hardening.

G

gb consite GmbH | Geomarketing und Logistik Software

gbconsite.de

53

gb consite GmbH operates a professional website offering specialized software solutions in the geomarketing and logistics sector. Their services include location analysis and route optimization tools targeted at businesses seeking to optimize their geographic marketing and logistics operations. The company positions itself as a niche provider with a focus on affordable and professional online geomarketing software. The website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, indicating a moderate level of digital maturity and technical infrastructure. Cookie consent is managed effectively via Cookiebot, demonstrating attention to privacy compliance. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities detected, though improvements in security headers and incident response documentation are recommended. Overall, the website presents a trustworthy and professional front for a small technology company based in Germany.

A

Amnesty International

amnesty.de

68

Amnesty International Germany operates a comprehensive website focused on human rights advocacy and activism. The organization is positioned as the largest global human rights movement, targeting a broad audience interested in social justice and human rights. The website provides information about activism opportunities both locally and online, reflecting a non-profit business model centered on membership and campaign engagement. Technically, the site is built on Drupal 10, leveraging modern JavaScript libraries and third-party tools such as Cookiebot for consent management and Visual Website Optimizer for A/B testing and analytics. The infrastructure indicates a mature digital presence with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of explicit security headers and vulnerability disclosure mechanisms suggests room for improvement. Privacy compliance is partially addressed through cookie consent but lacks a visible privacy policy and terms of service. Overall, the website is professional, trustworthy, and safe for general audiences, with a solid foundation for further enhancements in security and compliance.

W

West Fraser Timber Company

westfraser.com

53

West Fraser Timber Company operates a professional corporate website focused on manufacturing renewable wood building products. The company targets construction professionals and sustainability-conscious customers, positioning itself as a large player in the manufacturing sector. The website is built on Drupal 10, leveraging modern technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is well optimized for mobile and accessibility, with good SEO practices and a clear cookie consent mechanism. Security posture is solid with HTTPS enforced, though explicit security headers are not detected and no vulnerability disclosure policy is published. WHOIS data for the domain is unavailable, which raises transparency concerns but does not negate the professional appearance and trust signals on the site. Overall, the website demonstrates a mature digital presence suitable for a large manufacturing business.

Y

Yetkin Mercan-Çağlayansoy | Web Consulting

yc-webconsulting.de

64

Yetkin Mercan-Çağlayansoy | Web Consulting is a small, local German web consulting and social media advisory business based in Köln. The company offers modern, secure, and responsive website creation services alongside social media consulting and support, targeting small business owners and professionals. The website demonstrates a professional presence with clear contact information, client references, and a GDPR-compliant cookie consent mechanism powered by Cookiebot. Technically, the site uses modern frontend technologies such as Bootstrap and jQuery, hosted on DomainControl nameservers, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and cookie consent management, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the site content is safe for general audiences.

The website du-machst-uns-aus.de appears to be a recruiting platform related to SGVHT, targeting job seekers in Germany. The site is built on TYPO3 CMS and incorporates a comprehensive cookie consent mechanism via Cookiebot, indicating awareness of privacy compliance requirements. However, the absence of a dedicated privacy policy, terms of service, and contact information limits its compliance and trustworthiness. Technically, the site uses modern technologies and is hosted on German servers, but SEO is minimal and the site is set to noindex, reducing discoverability. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks visible security headers or incident response information. Overall, the site is functional but requires improvements in privacy disclosures, contact transparency, and SEO to enhance credibility and compliance.

The Swiss Paraplegic Group is a well-established non-profit organization based in Switzerland, dedicated to supporting individuals with spinal cord injuries through a comprehensive network of services including rehabilitation, advocacy, and education. The website reflects a professional and trustworthy presence with clear communication of their mission and services. Technically, the site is built on modern frameworks such as Gatsby and React, leveraging reputable third-party services for analytics and consent management, ensuring a fast and accessible user experience. Security posture is strong with HTTPS enforcement, appropriate security headers, and no detected vulnerabilities, although a formal security policy and incident response information could enhance trust further. Privacy compliance is robust, with a detailed cookie policy and consent mechanism aligned with GDPR requirements. Overall, the site demonstrates high business credibility and technical maturity, suitable for its healthcare and non-profit sector audience.

B

Beisheim Holding

beisheim.com

61

Beisheim Holding operates as a holding and capital management company with a professional online presence focused on corporate stakeholders and investors. The website is structured using modern web technologies including Nuxt.js and integrates Cookiebot for comprehensive cookie consent management, reflecting a commitment to privacy compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the professional appearance and GDPR-compliant cookie practices. The site lacks explicit contact information, terms of service, and security policies, which limits transparency and user trust. Security posture is moderate with HTTPS enforced but missing key security headers and incident response information. Overall, the website is functional and compliant in privacy aspects but would benefit from enhanced transparency and security disclosures.

H

Start - Hannover sauber! Gemeinsam für eine schöne Stadt.

hannover-sauber.de

46

The website www.hannover-sauber.de represents a community-driven initiative focused on promoting cleanliness and beautification in the city of Hannover, Germany. The site serves as a platform for residents and community members to engage in activities aimed at maintaining a clean urban environment. The business model is non-commercial and primarily community-oriented, with a small scale and local focus. The website was first published in 2021 and uses WordPress CMS with the Divi theme, supplemented by various plugins for enhanced functionality such as event management, testimonials, and social media feeds. From a technical perspective, the site employs modern web technologies including HTTPS, Google Fonts, Cookiebot for cookie consent, and Google Analytics for visitor tracking with IP anonymization. The site is mobile-optimized and demonstrates good SEO practices. However, there is room for improvement in accessibility and performance optimization. The technical stack is typical for small to medium WordPress sites, leveraging popular plugins and themes. Security posture is moderate with HTTPS enabled and bot protection via Google reCAPTCHA. Cookie consent is actively managed through Cookiebot, indicating awareness of privacy regulations. However, the absence of security headers and lack of explicit privacy and security policies reduce the overall security maturity. No vulnerability disclosure or incident response information is provided, which could be a concern for transparency and trust. Overall, the website is safe for general audiences, with no adult or questionable content detected. The lack of detailed contact information and formal policies slightly impacts business credibility and privacy compliance scores. Strategic recommendations include adding privacy and security policies, implementing security headers, and providing clear contact channels for incident response. These steps would enhance trustworthiness and compliance with data protection regulations.

F

Fibbl

fibbl.com

56

Fibbl is a technology platform specializing in delivering 3D product experiences and content aimed at enhancing B2B sales, go-to-market strategies, and eCommerce efficiency. The company offers services including 3D viewers, virtual try-on solutions, and augmented reality experiences, positioning itself as a key player in the digital product experience market. Founded in 2015, Fibbl has established a medium-sized business presence with a focus on innovative technology solutions for brands. The website infrastructure is built on WordPress, leveraging modern JavaScript libraries such as Swiper.js and integrating multiple marketing and analytics tools including HubSpot, Google Tag Manager, TikTok Pixel, Facebook Pixel, LinkedIn Insight Tag, Dreamdata Analytics, and Hotjar. Cookie consent is managed via Cookiebot, ensuring compliance with cookie regulations and providing users with granular control over cookie preferences. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism, but lacks explicit security policy documentation and incident response contact information. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration is consistent with the business age and shows no suspicious patterns, enhancing trustworthiness. Overall, Fibbl demonstrates a solid technical and business foundation with good privacy compliance and marketing transparency. Strategic improvements include publishing comprehensive privacy and security policies, incident response details, and enhancing security headers to further strengthen the security posture.

C

Cave de La Côte

cavedelacote.ch

59

Cave de La Côte is a Swiss-based e-commerce retailer specializing in premium Vaudois and Swiss wines. The website positions itself as a provider of award-winning Swiss wines, targeting wine consumers both locally and internationally. The business model focuses on online sales with an emphasis on quality and regional authenticity. Technically, the website is built on WordPress with WooCommerce, leveraging popular plugins such as Yoast SEO and Cookiebot for SEO and privacy compliance respectively. The site demonstrates moderate digital maturity with good mobile optimization and SEO practices, though some areas like explicit privacy policies and terms of service are missing. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but could be improved with additional security headers and vulnerability disclosures. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact information.

L

Landessportverband Schleswig-Holstein e.V.

lsv-sh.de

11

The Landessportverband Schleswig-Holstein e.V. is a regional non-profit sports association dedicated to supporting sports clubs and organizations in Schleswig-Holstein, Germany. The website provides comprehensive information about the association's services, including sports promotion, education, funding opportunities, and community projects. It targets sports clubs, volunteers, and sports enthusiasts within the region. The organization holds a strong market position as the leading sports association in Schleswig-Holstein, supported by reputable partners and sponsors. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery and Owl Carousel for enhanced user experience. The site is mobile-optimized, accessible, and SEO-friendly, with a well-structured navigation system. Privacy compliance is robust, featuring GDPR-compliant privacy and cookie policies with active consent mechanisms. From a security perspective, the site enforces HTTPS and employs cookie consent tools, with no visible vulnerabilities or exposed sensitive data. However, it lacks publicly available security policies and incident response contacts, which could be improved to enhance trust and preparedness. Overall, the website is professional, trustworthy, and well-maintained, reflecting the organization's commitment to transparency and community engagement. Strategic recommendations include publishing a dedicated security policy, incident response information, and enhancing security headers to further strengthen the security posture.

Hotel Des Alpes is a well-established family-run hospitality business located in the picturesque Saanenmöser-Gstaad region of Switzerland, with a history dating back to 1904. The website reflects a professional and consistent brand image, offering hotel accommodation, gastronomy, and event services. The target audience includes tourists and travelers seeking premium mountain hospitality experiences. The business maintains a strong market position through its tradition and partnership with Hotel Kernen. Technically, the website employs modern web technologies including Google Tag Manager and Cookiebot for analytics and cookie consent management, ensuring GDPR compliance and user privacy. The site is mobile-optimized with good SEO and accessibility basics. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, explicit security policies and incident response information are absent, representing an area for improvement. Overall, the website is trustworthy, secure, and compliant, supporting the business's credibility and customer engagement.

Wienerberger is an international manufacturer and supplier of building and infrastructure solutions, specializing in energy-efficient and sustainable construction materials such as bricks, roof tiles, pipelines, and solar panels. The website serves primarily as a recruitment platform targeting job seekers interested in joining the company’s diverse workforce across multiple locations in Belgium. The company positions itself as a large, established player with a family-oriented culture and a strong focus on innovation and sustainability. Technically, the website uses modern web technologies including JavaScript, CSS, Google Tag Manager, and Cookiebot for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site employs HTTPS and cookie consent mechanisms but lacks visible security headers and explicit security policies. WHOIS data is inconsistent, showing a future domain creation date and a registrar that does not match the company, which raises some trust concerns. Overall, the website is professional and functional but could improve in privacy transparency and security posture.

Seminarland is a regional service provider specializing in seminar, conference, and event venue bookings in Eastern Switzerland. The website offers a professional and user-friendly platform for businesses and groups to find and book venues, supported by a free booking service and expert consultation. The business model focuses on hospitality and event management services within a defined geographic region. Technically, the website is built on the Contao Open Source CMS and leverages modern web technologies including jQuery, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is strong with HTTPS enforced and cookie consent implemented, but lacks some advanced security headers and explicit incident response contacts. Privacy compliance is partial, with a cookie policy and consent mechanism present but no visible privacy policy or terms of service. Overall, the domain registration data aligns well with the website's business claims, supporting legitimacy and trustworthiness.

G

GVB Privatversicherungen AG

gvb-privatversicherungen.ch

69

GVB Privatversicherungen AG is a Swiss insurance company specializing in supplementary building insurance products that complement the obligatory building insurance in Switzerland. The company targets property owners across Switzerland, offering tailored insurance solutions and online contract services. The website reflects a professional and consistent brand image with clear business focus and relevant content for its audience. Technically, the site employs modern technologies including Adobe's tag management and analytics platforms, Cookiebot for cookie consent, and CDN services for hosting and media delivery. Security posture is strong with HTTPS enforcement and security headers, although explicit privacy and terms of service documents are missing. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

W

wetteralarm.ch

wetteralarm.ch

74

Wetteralarm.ch is a Swiss-focused weather application providing free weather forecasts, precipitation radar, severe weather warnings, and access to over 500 live webcams. The service targets the general public in Switzerland, offering multilingual support and mobile app availability for iOS and Android. The website demonstrates a professional digital presence with consistent branding and good content quality. Technically, it employs modern JavaScript libraries, Adobe analytics, and Cookiebot for consent management, hosted likely on a CDN for performance. Security posture is solid with HTTPS and security headers, though explicit privacy and security policies are missing. Overall, the site is trustworthy and well-positioned in its niche.

Hausinfo.ch is a Swiss-based advisory website operated by GVB Services AG, providing neutral guidance around house and garden topics, primarily targeting homeowners and property owners in Switzerland. The site is positioned as a service linked to the Swiss Homeowners Association, offering insurance-related advice and consultation services. The business model focuses on providing informational content and facilitating insurance and property management services through digital forms and advisory tools. The website demonstrates a consistent brand presence and targets a niche market segment effectively. Technically, the website employs modern web technologies including JavaScript, Adobe Experience Platform Launch for tag management, and Cookiebot for cookie consent management. The hosting appears to be managed or supported by GVB's CDN infrastructure. The site is moderately performant, mobile-optimized, and includes basic accessibility features. SEO practices are well implemented with proper meta tags and structured data. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes standard security headers such as Content-Security-Policy and Strict-Transport-Security. Cookie consent mechanisms are in place, supporting GDPR compliance. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not published, representing areas for improvement. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, hausinfo.ch presents a trustworthy and professional online presence with good privacy compliance and security posture. Strategic recommendations include publishing detailed security and incident response policies, adding a terms of service page, enhancing accessibility, and maintaining vigilance on third-party scripts. These steps will further strengthen the site's security and compliance maturity.

W

Wienerberger

wienerberger.be

71

Wienerberger is a well-established manufacturer and distributor of ceramic building materials including bricks, roof tiles, and clay pavers, serving primarily the Belgian market. The company emphasizes quality, sustainability, and offers a range of tools and training for construction professionals. The website is professionally designed using Adobe Experience Manager and integrates modern marketing and analytics tools such as Google Tag Manager and Adobe DTM. Cookie consent is managed via Cookiebot, indicating compliance efforts with GDPR. However, explicit privacy and terms of service pages were not detected in the provided content. The WHOIS data for the domain is restricted, which is common for corporate domains to protect registrant privacy. Overall, the website presents a credible and professional business presence with good content quality and user experience.

C

Cosentino

cosentino.com

65

Cosentino is a global leader in the manufacturing and distribution of innovative architectural surfaces and materials, targeting architects, designers, and professionals in the construction and design sectors. The website reflects a mature digital presence with comprehensive content showcasing their products, services, and design inspirations. The technical infrastructure is based on WordPress with modern marketing and analytics tools integrated, including Google Tag Manager, Cookiebot for consent management, and AB Tasty for optimization. Security posture is strong with HTTPS enforced and bot protection via reCAPTCHA, though the absence of explicit security headers and a public security policy suggests room for improvement. The missing WHOIS data is a notable gap but does not detract significantly from the overall trustworthiness given the professional presentation and compliance indicators. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving transparency around domain registration.

F

Forster Profilsysteme AG

forster-profile.ch

45

Forster Profilsysteme AG is a Swiss-based manufacturer specializing in steel and stainless steel profile systems for doors, windows, and facades. The company emphasizes safety, durability, and energy efficiency, offering products with fire protection, smoke protection, burglary resistance, and bullet resistance. Their market position is that of an established medium-sized manufacturer serving architects, builders, and industrial clients. The website reflects a professional business with clear product offerings and a focus on quality. Technically, the site is built on TYPO3 CMS with modern frontend libraries and includes a comprehensive cookie consent mechanism, indicating a mature digital presence. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the site is trustworthy and compliant with GDPR, with moderate user tracking via Google Analytics and Google Ads cookies managed through Cookiebot consent.

D

DE SINGEL

desingel.be

48

DE SINGEL is an established international arts center based in Belgium, specializing in theater, dance, music, and architecture exhibitions. The organization serves a broad audience interested in cultural events and operates a medium-sized business model focused on hosting performances and exhibitions. The website reflects a professional and consistent brand with excellent content quality and user experience. Technically, the site uses modern frameworks such as Angular 11, integrates Google Tag Manager and Cookiebot for analytics and consent management, and employs Salesforce for newsletter subscriptions. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies could be improved. Overall, the site demonstrates good GDPR compliance and business credibility.

H

House Of Builders

houseofbuilders.no

62

House Of Builders operates as an innovative showroom and meeting place within the Norwegian construction industry, targeting professionals and companies in this sector. The website presents a professional image with good SEO and structured data, reflecting a small but focused business established in 2017. The technical infrastructure is based on WordPress, utilizing common libraries and plugins such as jQuery, Bootstrap, FontAwesome, and Cookiebot for cookie consent management. Google Analytics is employed for visitor tracking, indicating moderate user tracking levels. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of a published privacy policy and terms of service pages represents compliance gaps. No WAF or blocking mechanisms were detected, and no suspicious or malicious content was found.

N

NAML

naml.no

66

The website www.naml.no represents a Norwegian entity with a professional web presence focused on providing organizational or business-related services. The site uses modern web technologies including HTTPS, Google reCAPTCHA Enterprise for bot protection, Microsoft Application Insights for analytics, and Cookiebot for cookie consent management. The content is primarily in Norwegian and the site demonstrates good design quality and user experience with clear navigation and mobile optimization. However, explicit privacy policy and terms of service pages are not clearly found, and no direct contact information such as emails or phone numbers are visible, which slightly impacts transparency and user trust. Technically, the site employs a modern tech stack with standard web technologies and integrates third-party services for analytics and marketing. Security posture is solid with HTTPS enforced and bot protection in place, but the absence of explicit security headers and detailed privacy documentation suggests room for improvement. The WHOIS data is not publicly available, indicating privacy protection, which is common but reduces the ability to verify domain ownership and age. Overall, the website is secure and professional but could enhance trust and compliance by publishing clear privacy and terms policies and providing contact details. The domain's privacy-protected WHOIS is not unusual but should be monitored for legitimacy. No critical vulnerabilities or suspicious content were detected, and the site is safe for general audiences.

A

Armin Werren AG

werrenag.ch

60

Armin Werren AG is a specialized painting, plastering, staining, varnishing, wallpapering, and sandblasting service provider based in Gstaad, Switzerland. The company focuses on creating sophisticated and personalized living environments for private, hospitality, and business clients. Their website reflects a professional and consistent brand image with clear service offerings and company information. Technically, the site uses modern web technologies including Google Analytics and Cookiebot for tracking and consent management, with a responsive design and good SEO practices. Security posture is solid with HTTPS enforced and email obfuscation implemented, though explicit security headers and incident response information are absent. Overall, the website is trustworthy, compliant with GDPR, and well-suited for its target audience.

Hotel Kernen AG operates a family and sport hotel located in Gstaad-Schönried, Switzerland, with a long tradition dating back to 1904. The business focuses on hospitality services including accommodation, gastronomy, and outdoor activity packages targeting families and active vacationers. The website reflects a well-established market position, recognized for quality and value. Technically, the site employs modern web technologies including Cookiebot for consent management and Google Tag Manager for analytics, ensuring compliance and performance. Security posture is strong with HTTPS enforcement and standard security headers, though no explicit security policy or incident response information is published. Overall, the site is professional, user-friendly, and trustworthy, with good privacy compliance and clear business information.

L

Link Arkitektur A/S

linkkompass.ai

66

Link Arkitektur A/S operates the website linkkompass.ai, offering a digital sustainability dialogue tool called LINK Kompass® aimed at guiding projects and businesses through environmental and social sustainability requirements. The company is positioned as a leading Scandinavian architectural business with a focus on strategic sustainability consulting. The website is built on Drupal 10, uses Cookiebot for GDPR-compliant cookie consent, and supports multiple languages including Norwegian Bokmål. The technical infrastructure is modern and well-implemented, with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website reflects a professional and trustworthy business presence in the sustainability consulting sector.

T

Tyréns Sverige AB

tyrens.se

10

Tyréns Sverige AB is a leading Swedish consultancy specializing in societal building, urban planning, infrastructure, and sustainability solutions. The company offers a broad range of engineering and architectural services targeting public and private sector clients focused on sustainable development. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content showcasing projects and expertise. Technically, the site uses modern technologies including Umbraco CMS, Google Tag Manager, and Cookiebot for consent management, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. The absence of WHOIS data for the exact domain suggests subdomain usage or registration under a parent domain, but the overall legitimacy is supported by consistent business information and linked subsidiary domains. Overall, the site is trustworthy, professional, and well-structured, supporting Tyréns' market position as a major player in Sweden's infrastructure and urban development sector.

G

Gleeds

gleeds.com

76

Gleeds is a global property and construction consultancy with a long-standing history dating back to 1875. The company offers a broad range of consultancy services focused on the built environment, targeting clients in the real estate and construction sectors. The website reflects a professional brand image with consistent messaging and a clear focus on their industry expertise. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party tools such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Accessibility features are supported via the UserWay widget, enhancing usability for users with disabilities. Security posture is generally good with HTTPS enforced and anti-forgery cookies in use; however, explicit security headers are not clearly detected and no public security or incident response policies are found. The domain WHOIS data is missing or protected, which reduces trustworthiness from a registration transparency perspective. Cookie consent mechanisms are well implemented, supporting GDPR compliance. Overall, the website is professional and secure but would benefit from improved transparency in domain registration and explicit privacy and security policy disclosures.

E

expoya

expoya.travel

58

Expoya Travel operates as a digital platform specializing in travel and leisure experiences, offering users access to vouchers, destinations, and activities primarily targeting the German-speaking market. The platform functions as a digital expo, facilitating discovery and planning of travel adventures. Technically, the website is built on modern frameworks such as Next.js and Material-UI, hosted on Vercel, and integrates analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent, though explicit security policies and incident response information are absent, representing areas for improvement. Overall, the website is professional and trustworthy, but the lack of WHOIS transparency and direct contact details slightly reduce business credibility.

S

SV Werder Bremen

werder.de

70

SV Werder Bremen operates a professional football club website providing fans and stakeholders with news, match schedules, ticketing, and media content. The site is built on a modern Nuxt.js framework with Tailwind CSS styling and integrates third-party services such as Cookiebot for consent management and Google Tag Manager for analytics. The website demonstrates good technical maturity with responsive design and accessibility considerations. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. The domain registration aligns well with the business's German origin, supporting legitimacy. Overall, the site is professional, trustworthy, and well-positioned to serve its audience effectively.

S

StatusPal UG

statuspal.io

73

StatusPal UG operates a SaaS platform providing hosted status pages and incident communication tools targeted at CTOs, DevOps, SREs, and support engineers. The company positions itself as a reliable and scalable solution for monitoring and communicating system status, with features including multi-language support, notifications, and powerful APIs. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site uses modern frameworks such as Next.js and React, integrates Google Tag Manager and Cookiebot for analytics and consent management, and employs SVG graphics for visual appeal. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and published security policies are absent. Overall, the domain WHOIS data is privacy protected, which is common for SaaS businesses, and no suspicious patterns are detected. The website demonstrates high trustworthiness and professionalism.