Security Directory

K

Kablo Vrchlabí s.r.o.

kablovrchlabi.cz

46

Kablo Vrchlabí s.r.o. is a traditional Czech manufacturer specializing in cables for the automotive industry, flexible cables, and special cables tailored to customer specifications. The company offers a diverse product range including automotive cables with high temperature resistance, harmonized flexible cables, and special cables compliant with American UL standards. Their market position is that of an established medium-sized manufacturing business serving industrial and automotive sectors primarily in the Czech Republic. The website is professionally designed, multilingual, and provides comprehensive business and contact information, supporting a B2B business model focused on manufacturing and sales. From a technical perspective, the website is built on WordPress and employs modern web standards including HTTPS, Google Fonts, and responsive design. The site performs moderately well with good mobile optimization and basic accessibility features. SEO is adequately addressed with proper meta tags and structured data. However, there is room for improvement in security headers and cookie consent mechanisms to enhance compliance and security posture. Security-wise, the site benefits from HTTPS encryption and does not expose sensitive data or vulnerable libraries. Nonetheless, the absence of explicit security headers and incident response information suggests a moderate security maturity level. The lack of WHOIS data is a notable concern, reducing trust in domain legitimacy. No signs of malware, phishing, or other critical vulnerabilities were detected. Overall, the website presents a trustworthy and professional front for Kablo Vrchlabí s.r.o., but improvements in domain registration transparency, security policies, and privacy compliance mechanisms are recommended to strengthen its security posture and regulatory adherence.

H

HC Milevsko 1934

hcmilevsko1934.cz

45

HC Milevsko 1934 is a Czech ice hockey club with a digital presence focused on providing club information, team rosters, match schedules, news, and partner promotion. The website targets local and regional ice hockey fans and community members. The domain was registered in 2021, supporting a relatively recent online presence for a club with historical roots dating back to 1934. The site is well-branded and consistent, with active social media integration and regular content updates. Technically, the site uses common JavaScript libraries such as jQuery, Slick Carousel, and LightGallery, and appears to be hosted by REG-ZONER, a Czech hosting provider. The site is mobile-optimized and has good navigation and content relevance. Security-wise, the site implements a cookie consent mechanism but lacks visible security headers and explicit privacy or security policies. No contact emails or phone numbers are directly visible, which may impact user trust and compliance. Overall, the site is functional and professional but could improve in security and privacy transparency.

I

isekacka.cz

isekacka.cz

58

isekacka.cz is a specialized retailer and service provider focused on robotic lawn mowers, primarily representing brands such as Husqvarna Automower, Segway, Mammotion, Stiga, and Ecovacs. The company offers comprehensive services including expert consultation, professional installation, servicing, and sales of accessories and spare parts. Their market position is strengthened by official certifications and dealer badges, indicating a trusted presence in the Czech Republic's retail sector for robotic garden equipment. The website is well-structured, professionally designed, and optimized for mobile devices, providing a good user experience with clear navigation and relevant content tailored to residential and commercial customers seeking automated lawn care solutions. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as Facebook SDK and Google Fonts. It is built on the JZShop.cz e-commerce platform, which supports AJAX-based forms and dynamic content loading. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, no explicit security headers were detected, and there is no dedicated security policy or incident response contact information available. The absence of WHOIS data for the domain reduces trust from a domain registration standpoint, though the website content and certifications suggest legitimate business operations. No vulnerabilities or exposed sensitive data were identified in the analyzed content. Overall, isekacka.cz presents a credible and professional online presence for a niche retail and service business in robotic lawn mowers. Strategic improvements in security headers, domain registration transparency, and incident response readiness would enhance their security posture and trustworthiness.

D

Drumextra, s.r.o.

anatolian.cz

43

Anatolian is a Czech-based company specializing in the manufacturing and wholesale distribution of high-end cymbals, targeting drummers and music professionals. The website presents a professional and consistent brand image with clear contact information and a focus on quality musical instruments. The company appears to have a history dating back to 2000, although domain registration details could not be verified due to missing WHOIS data. Technically, the website uses modern web technologies including Google Tag Manager and Typekit fonts, with a responsive design and moderate performance. However, there is a lack of advanced security headers and no visible privacy or cookie policies, which indicates room for improvement in compliance and security posture. From a security perspective, the site is accessible without WAF or blocking mechanisms, but the absence of WHOIS data and security policies reduces trustworthiness. No vulnerabilities or exposed sensitive data were detected, but the site would benefit from implementing security best practices such as security headers and GDPR-compliant policies. Overall, the website is functional and professional but has gaps in privacy compliance and domain transparency. Strategic improvements in security and compliance would enhance trust and reduce risk.

R

RADIX Schweizerische Gesundheitsstiftung

radix.ch

69

RADIX Schweizerische Gesundheitsstiftung is a Swiss non-profit health foundation dedicated to health promotion and prevention. The organization targets Swiss residents interested in improving their health and well-being through educational programs and services. The website reflects a professional and consistent brand image, with a clear focus on healthcare and public health sectors. The foundation operates with a medium-sized organizational footprint and leverages modern web technologies to engage its audience effectively. Technically, the website is built on the Umbraco CMS platform and integrates a variety of modern JavaScript libraries and APIs, including Google Tag Manager, reCAPTCHA, Cookiebot for consent management, and Google Maps API. The site demonstrates good mobile optimization and moderate performance, with a solid SEO foundation and basic accessibility features. From a security perspective, the site enforces HTTPS, employs strong security headers, and uses cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a publicly available security policy and incident response information represents an area for improvement. Overall, RADIX.ch presents a trustworthy and professionally maintained online presence with strong privacy compliance and a clear focus on user data protection. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility, and maintaining vigilance on third-party script security to sustain and improve its security posture.

C

Coop Pronto AG

coop-pronto.ch

56

Coop Pronto AG operates a large network of over 300 convenience retail shops with or without fuel stations across Switzerland. The company focuses on providing quick and fresh products from early morning to late night, targeting general consumers seeking convenience and fuel services. The website reflects a mature digital presence with good content quality, clear navigation, and consistent branding aligned with the Coop group. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, Facebook Pixel, and other marketing tools, indicating a well-integrated marketing and analytics infrastructure. Security posture is solid with HTTPS enforced and privacy compliance evident through cookie banners and privacy policies, although formal security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, trustworthy, and safe for general audiences.

P

PCI Proxy

docvault.app

62

DocVault, operated by PCI Proxy, offers a specialized PCI compliant document vault solution enabling businesses to securely collect and validate sensitive customer documents without direct handling. Positioned as a niche leader, the company targets businesses requiring stringent PCI compliance in document processing. The website reflects a professional and consistent brand image with clear messaging and a focus on security and compliance. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, and Cookiebot for consent management, hosted on Webflow's platform with good performance and mobile optimization. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through a comprehensive privacy policy and cookie consent mechanism. However, the site lacks explicit terms of service and detailed security or incident response policies, which could enhance trust and compliance. Overall, the site demonstrates a mature digital presence suitable for its business model and audience.

P

Portfolio restaurant

portfolio-restaurant.cz

56

Portfolio restaurant is a small hospitality business based in Prague, Czech Republic, offering dining services with an emphasis on wine and online ordering capabilities. The website is professionally designed with good content quality and clear navigation, targeting a mature audience interested in restaurant dining and wine purchases. The business leverages social media platforms such as Facebook and Instagram to engage customers and maintain a trustworthy online presence. Technically, the website uses standard web technologies like JavaScript, CSS, and HTML5, with moderate performance and good mobile optimization. However, no CMS or hosting provider details are evident from the content provided. Security posture is basic with HTTPS enabled but lacks important security headers, which could be improved to enhance protection. Privacy and cookie policies are present and GDPR compliant, reflecting awareness of data protection regulations. The absence of WHOIS data is a notable concern, reducing domain trustworthiness and suggesting further verification is needed. Overall, the website is functional and professional but could benefit from enhanced security measures and clearer business contact information.

L

LEBEDA Tools s.r.o.

ronda.cz

60

LEBEDA Tools s.r.o. is a well-established Czech retail company specializing in garden, workshop, and pet supplies with over 30 years of experience. The company operates both a physical store and an e-commerce platform, offering a wide range of products including garden machinery, tools, and accessories from reputable brands. Their services include expert installation, authorized repairs, and customer training, positioning them as a reliable partner in their market segment. Technically, the website is built on the JZShop.cz platform, utilizing standard web technologies and integrating social media and marketing tools such as Facebook SDK and pixel tracking. The site is accessible, mobile-optimized, and includes GDPR-compliant privacy and cookie policies. Security posture is adequate with HTTPS enforced, though improvements in security headers and explicit incident response policies are recommended. Overall, the website presents a professional and trustworthy digital presence aligned with its business goals.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) that serves as an offline error page with embedded JavaScript for the Chrome dinosaur game. There is no actual website content, business information, or external links present. The page is not a public-facing website but a browser-generated error page. The technical infrastructure is limited to Chromium internal scripts and canvas-based game rendering. Security posture is minimal due to the nature of the page, with no HTTPS or security headers applicable. Privacy and compliance policies are absent as this is not a commercial or informational website. Overall, this content does not represent a business or service and thus cannot be evaluated for typical website security, compliance, or business credibility metrics.

The website alcmosnov.cz serves as the official information portal for the Armádní logistické centrum Mošnov, a government project in the Czech Republic focused on establishing a military logistics center near the Leoš Janáček Airport Ostrava. The site provides project updates, news, and contact information primarily targeting local communities, government stakeholders, and interested public. The domain is newly registered in 2023, consistent with the project's timeline, and hosted by Webglobe, a reputable provider. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integration of Google Tag Manager and a cookie consent mechanism supporting multiple languages. The site is mobile optimized and offers good navigation and content relevance. However, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. From a security perspective, the site uses HTTPS and enforces cookie consent with opt-in for analytics, but does not publish security policies or incident response contacts. No critical vulnerabilities or WAF blocking were detected. The analytics usage is minimal and privacy compliance is basic but could be improved with formal policies. Overall, alcmosnov.cz is a credible government project site with good content and technical implementation but would benefit from enhanced privacy, security, and compliance documentation to strengthen trust and regulatory adherence.

gutefrage.net is the largest German-speaking question-and-answer platform, facilitating community-driven knowledge exchange among millions of users. The platform emphasizes anonymity and quick responses, serving a broad general audience primarily in Germany. The website demonstrates a good level of content quality, with a professional design and clear navigation, optimized for mobile devices. Technically, it employs modern web technologies including JavaScript and CSS, and integrates a consent management platform to ensure GDPR compliance. However, some security headers and detailed WHOIS data are missing, which slightly impacts the overall security posture assessment. Privacy policies and cookie consent mechanisms are well implemented, reflecting a strong commitment to user data protection. Overall, gutefrage.net presents a trustworthy and professional online presence with room for technical and security enhancements.

Take off is a Swiss non-profit organization operating a day structure and work integration program for youth who have dropped out of the education system. It is part of the Jugendsozialwerk Blaues Kreuz BL umbrella and has been active for approximately 25 years, serving the Pratteln region. The website presents a professional and consistent brand image, with clear contact details and certifications from recognized Swiss bodies, indicating a trustworthy and established social service provider. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript libraries like jQuery and Bootstrap, and is built on the webIQ 5.0 framework. It employs HTTPS with a good SSL configuration and integrates Google Analytics via Google Tag Manager with IP anonymization, reflecting a moderate level of digital maturity. The site is mobile optimized and has a clear navigation structure, though accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses a cookie consent banner compliant with GDPR. However, it lacks explicit security headers and does not provide a public security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is justified for a non-profit, but limits direct verification of domain ownership. Overall, the website is safe, professional, and credible with a moderate security posture. Strategic improvements in security headers, privacy disclosures, and accessibility would enhance trust and compliance.

AIP plus is a Swiss non-profit organization operating since 1996, focused on providing employment opportunities and integration support for job seekers, particularly those assigned by social insurance and employment agencies. The organization collaborates with local businesses to offer training and internships, aiming to facilitate entry into the first labor market. The website is professionally designed, content-rich, and provides clear contact information and partner links, reflecting a mature digital presence. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Tag Manager, with a cookie consent mechanism ensuring privacy compliance. Security posture is adequate with HTTPS enforced, though security headers are missing and could be improved. WHOIS data is privacy protected, typical for Swiss domains, but the website's content and certifications strongly support legitimacy. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a trustworthy and professional platform.

Wohn- und Arbeitsintegration Bernhardsberg is a Swiss non-profit organization focused on providing housing and work integration services for adults with psychological impairments. It operates under the parent organization Jugendsozialwerk Blaues Kreuz BL and offers a range of social services including residential care, supported employment, and a bio-product manufactory. The website is professionally designed, content-rich, and targets a regional audience in Switzerland. It demonstrates strong trust signals such as certifications (ZEWO, SQS, dot.swiss), clear contact information, and a cookie consent mechanism. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Tag Manager with IP anonymization, ensuring a good user experience and moderate performance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers and incident response policies could enhance protection. WHOIS data is privacy protected, which is justified for this type of non-profit entity. Overall, the website is trustworthy, compliant with privacy regulations, and well-positioned in its social service niche.

Jugendwohngruppen Im Park is a Swiss non-profit organization focused on providing supported living and social integration services for youth in Basel. It operates under the umbrella of Jugendsozialwerk Blaues Kreuz BL and offers residential groups, assisted living, and placement services for young people, including those with psychological stability. The organization maintains a professional online presence with clear contact information, certifications, and social media engagement. Technically, the website uses modern web technologies and frameworks, including webIQ, Bootstrap, and jQuery, and is mobile optimized with a cookie consent mechanism in place. Security posture is good with HTTPS enabled and no visible vulnerabilities, though security headers are missing and could be improved. WHOIS data is privacy protected, which is justified for this type of non-profit entity. Overall, the website is trustworthy, well-structured, and compliant with privacy regulations.

B

BAYO Solutions AG

bayo.ch

57

BAYO Solutions AG operates a specialized cloud-based CRM platform tailored for insurance brokers, fiduciary companies, and law firms primarily in Switzerland. Their solution focuses on enhancing customer relationship management and secure data exchange, positioning them as a niche player in the Swiss financial and legal technology sectors. The website reflects a professional and consistent brand image with clear contact channels and partner affiliations. Technically, the site uses modern web standards, including HTML5, CSS3, and JavaScript, with Google Tag Manager for analytics. The CMS identified is MoveCMS, indicating a custom or specialized content management approach. Security-wise, the site enforces HTTPS and displays a CyberSeal certification, signaling adherence to cybersecurity best practices. However, there is room for improvement in publishing explicit security policies and headers. Overall, the website is well-structured, mobile-optimized, and compliant with GDPR through visible privacy and cookie policies.

M

Panenky Malunka

malunka.cz

43

Panenky Malunka is a small artisan retail business based in the Czech Republic specializing in handcrafted dolls made from natural materials. The website showcases various doll categories, including flower dolls, traditional dolls, and small figurines, with a focus on custom orders and personalized craftsmanship. The business targets consumers seeking unique, handcrafted gifts and collectibles. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and is hosted with Amazon Cloudfront CDN, ensuring moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced, but lacks important security headers and formal privacy or cookie policies, which impacts compliance and trust. The absence of WHOIS registration data is a significant concern for domain legitimacy and trustworthiness. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security best practices.

S

Sotovox

sotovox.cz

43

Sotovox is a small a cappella vocal group based in the Czech Republic, specializing in live vocal performances without instrumental accompaniment. Their website showcases upcoming and past concerts primarily in Prague, offers a Christmas CD, and links to their presence on Spotify and YouTube. The group engages with their audience via social media platforms including Facebook, Instagram, and YouTube. Technically, the website is built with standard HTML5, CSS, and JavaScript, using Google Fonts and embedded YouTube videos. The site is mobile optimized and provides a good user experience with clear navigation and multimedia content. However, it lacks privacy and cookie policies, security headers, and WHOIS domain registration data, which impacts trust and compliance assessments. No forms or analytics scripts are present, indicating minimal data collection and tracking.

M

Město Tábor

taborcz.eu

48

Město Tábor operates an official municipal website serving residents and visitors with comprehensive information about city administration, public services, events, and community resources. The website is positioned as the authoritative source for city-related information in Tábor, Czech Republic, targeting local citizens and tourists. Key services include online document requests, public announcements, and contact channels for municipal support. Technically, the site uses the Vismo CMS platform, integrates Google Analytics and Tag Manager for user tracking, and employs Google reCAPTCHA for form security. The site is hosted by Webglobe, s.r.o., a reputable Czech hosting provider, and uses HTTPS with an excellent SSL configuration. Security practices include cookie consent with granular controls and no visible exposed sensitive data. However, the site lacks explicit security policies and incident response information. Overall, the website is professional, trustworthy, and well-optimized for accessibility and SEO, with moderate user tracking and good privacy compliance.

R

responsiblo s.r.o.

responsiblo.com

60

responsiblo s.r.o. operates a specialized smart education platform targeting businesses in regulated sectors such as alcohol, gambling, tobacco, pharmaceuticals, and financial services. The platform offers interactive, customizable educational content designed to promote responsible product use and help companies meet CSR and regulatory compliance requirements. The company is positioned as an innovative leader in responsible business education with a focus on leveraging AI and machine learning for tracking and analytics. Technically, the website uses modern web technologies including Vue.js and is well-optimized for mobile and SEO, though some security headers and cookie consent mechanisms are missing. The security posture is solid with HTTPS enabled and no exposed sensitive data, but improvements in DNS security and explicit security policies are recommended. Overall, the website is professional, trustworthy, and mature-audience oriented due to the nature of the industries served.

P

Projekt LIFE COALA

lifecoala.cz

53

Projekt LIFE COALA is a government-backed environmental initiative focused on increasing climate resilience and sustainable development in the Moravian-Silesian region of the Czech Republic. The project is co-financed by the European Union LIFE program and involves multiple regional government and institutional partners. The website provides detailed information about project activities, partners, events, and public engagement efforts. The target audience includes local residents, farmers, public authorities, and stakeholders interested in climate adaptation. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and integrates Matomo analytics for privacy-conscious user tracking. The site is mobile optimized, accessible, and well-structured with good SEO practices. However, no CMS or hosting provider details are evident, and performance is moderate. From a security perspective, the site uses HTTPS and secure forms but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. The absence of WHOIS data reduces domain trustworthiness, though the EU co-financing and partner ecosystem provide strong legitimacy signals. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and serves its public mission well. Strategic improvements in security headers, cookie consent, and domain registration transparency would enhance its security posture and compliance.

DIFFERENT.VISION is a small Czech Republic based web development agency operated by provocation s.r.o., founded in 2018. The company specializes in creating websites and applications, targeting businesses or individuals seeking web presence and custom applications. The website is minimalistic, providing basic contact information and service description without extensive content or policies. Technically, the site uses modern web standards including HTTPS, Google Fonts, and Google Analytics for tracking. However, it lacks advanced security headers and privacy compliance mechanisms such as cookie consent or privacy policies. The domain registration data is consistent with the business location and entity, indicating legitimacy. Overall, the digital maturity is moderate with room for improvement in security and compliance.

The Stiftung Jugendsozialwerk Blaues Kreuz BL operates as a Swiss non-profit organization providing a broad range of social services focused on youth and community support. Their offerings include employment assistance, housing, leisure activities, school support, and counseling, targeting children, adolescents, and families primarily in the Basel-Landschaft region. The organization maintains a professional online presence with clear navigation, multilingual support in German, and active social media engagement. Technically, the website is built using modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Bootstrap, supported by the webIQ 5.0 framework. It features responsive design optimized for mobile devices and integrates Google Analytics with IP anonymization, reflecting a moderate level of digital maturity. However, some security best practices such as security headers and incident response disclosures are absent. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is justified for a non-profit entity, though it limits transparency. Certifications such as ZEWO and SQS Swiss Made enhance trustworthiness. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with an overall AI score of 81. Strategic improvements include adding security headers, publishing a vulnerability disclosure policy, and enhancing accessibility features to further strengthen security posture and compliance.

The website at f24.org currently serves as a placeholder or offline page displaying the Chrome T-Rex runner game, with no visible business-related content or contact information. The domain is registered to One-Check GmbH, a Swiss company established in 2002, indicating a legitimate and longstanding registration. However, the website itself lacks any meaningful content, policies, or security features that would support a professional business presence. From a technical perspective, the site uses basic HTML, CSS, and JavaScript to deliver the offline game experience. There is no evidence of modern frameworks, CMS, or analytics tools. The hosting is provided by hostpoint.ch, a known hosting provider. Mobile optimization and accessibility are basic, and SEO is poor due to lack of metadata and content. Security posture is weak, with no HTTPS enforcement or security headers detected in the provided content. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is available. The WHOIS data is consistent and trustworthy, but the website content does not reflect an active or professional business presence. Overall, the website appears to be either inactive, under construction, or repurposed as a placeholder page. This results in a low AI score and poor trust indicators. Strategic recommendations include developing a proper business website with clear content, implementing security best practices, and publishing necessary compliance policies.

B

BALIK Farm (Switzerland) AG

balik-kitchen.ch

48

BALIK Farm (Switzerland) AG operates BALIK Kitchen, a hospitality and retail food service business with multiple urban kitchen bars and shops located in major Swiss cities such as Bern, St. Gallen, Luzern, and Zürich. The website serves as a digital presence to promote their culinary offerings, events, and recipes, targeting general consumers interested in urban dining experiences. The company maintains a consistent brand image and provides clear contact information and social media engagement channels. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates marketing and analytics tools such as Facebook Pixel, Google Analytics, and Mailchimp for newsletter management. The site is hosted behind Cloudflare infrastructure, utilizing Turnstile captcha for bot protection, indicating a moderate level of digital maturity. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses anti-bot measures but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic with a cookie consent banner and a privacy policy page in German, aligned with GDPR requirements. Business credibility is strong with verified contact details and consistent WHOIS data. Overall, the website presents a professional and trustworthy digital front for BALIK Kitchen, with room for improvement in security policy transparency and enhanced privacy compliance. The risk level is low, but strategic enhancements in security headers and incident response readiness are recommended.

S

Strähl Käse AG

straehl.ch

47

Strähl Käse AG is a well-established Swiss cheese manufacturer with over 90 years of family tradition, specializing in a variety of cheese products including raclette and fondue. The company targets both retail consumers and B2B clients, offering customized cheese solutions. Their market position is strong within the Swiss cheese industry, supported by consistent branding and a professional online presence. Technically, the website employs modern web technologies including Facebook Pixel and Google Analytics for marketing and analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of explicit security headers and detailed security policies suggests room for improvement. Overall, the website is trustworthy, professional, and compliant with GDPR requirements, reflecting a credible business entity.

R

RAUSCH

rausch.ch

70

RAUSCH is a Swiss-based company specializing in natural scalp, hair, and body care products. The company leverages proprietary herbal extraction techniques combined with modern active ingredients to deliver effective personal care solutions. Positioned as a trusted natural care brand, RAUSCH targets consumers who value natural and efficacious products. The website operates on the Shopify platform, integrating multiple marketing and analytics tools such as Trustpilot, Klaviyo, and Microsoft Clarity, reflecting a mature digital infrastructure. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms, although a dedicated security policy and incident response information are not publicly available. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, supporting RAUSCH's market position as a reputable natural care brand.

P

Pädagogische Hochschule Thurgau

phtg.ch

61

Pädagogische Hochschule Thurgau (PHTG) is a Swiss educational institution specializing in scientifically grounded teacher training and continuing education for all levels of primary and secondary education. The institution offers a broad range of study programs, professional development courses, and research projects, targeting educators and education professionals. The website reflects a strong regional presence with collaborations such as with the University of Konstanz, emphasizing cross-border educational opportunities. Technically, the website is built on modern web standards, leveraging Google Tag Manager and CookieYes for consent management, and is likely hosted on Wix, as indicated by certain cookies. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks explicit security policy and incident response information. Overall, the domain registration details align with the institution's identity, supporting legitimacy and trustworthiness.

G

Goba AG

goba-welt.ch

52

Goba AG is a small, independent Swiss mineral water producer with a strong local market presence. The company operates a professional e-commerce platform offering a variety of beverages and specialty products, including mineral water, limonade, and syrups. Their website reflects a well-established brand with clear contact information, multiple physical locations, and active social media engagement. Technically, the website employs modern web technologies such as Google Tag Manager, Facebook Pixel, and lazy loading for images, ensuring a good user experience and performance. Security posture is strong with HTTPS enforced and appropriate security headers, although there is room for improvement in publishing dedicated security policies and incident response information. Privacy compliance is well addressed with visible cookie consent mechanisms and a comprehensive privacy policy. Overall, the website is trustworthy, professional, and well-aligned with the business's offline presence.

F

Flight Safety Foundation

aviation-safety.net

60

The Aviation Safety Network (ASN) is a specialized information service focused on aircraft accidents and civil aviation safety issues. It operates as an exclusive service of the Flight Safety Foundation, a reputable organization in the aviation safety sector. ASN provides comprehensive accident databases, investigation details, safety statistics, and monthly email digests, targeting aviation professionals, researchers, and safety analysts worldwide. The website demonstrates a consistent brand identity aligned with its parent organization and maintains a professional presence with active social media channels. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and Google Charts for data visualization. It integrates Google Analytics for user tracking and offers a moderate level of mobile optimization and accessibility. While the site is functional and well-structured, it lacks some modern security headers and explicit cookie consent mechanisms, which are important for compliance and user trust. From a security perspective, the site uses HTTPS, ensuring encrypted communication, but does not visibly implement advanced security headers or publish detailed security policies. The absence of WHOIS registrant data limits domain trust assessment, though the affiliation with Flight Safety Foundation and the quality of content provide strong legitimacy signals. No critical vulnerabilities or exposed sensitive data were detected. Overall, ASN presents a trustworthy and authoritative resource in the aviation safety domain with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

I

Indep s.r.o.

indep.cz

56

Indep s.r.o. is an independent production agency based in Prague, Czechia, specializing in event management and audiovisual production. The company offers a range of services including corporate events, public space events, and professional audiovisual and photography production. Their business model focuses on personalized client relationships and creative, high-quality event execution. The website is professionally designed using the Squarespace platform, with good mobile optimization and clear navigation. Technical infrastructure is modern but lacks some security headers and privacy policy documentation. Security posture is generally good with HTTPS enabled and cookie consent implemented, though improvements are recommended in security headers and privacy transparency. Overall, the website presents a trustworthy and professional image consistent with a small, specialized service provider in the event production industry.

Gastromapa Lukáše Hejlíka is a Czech gastronomic map service that has discontinued its web presence in favor of mobile applications available on Android and iOS platforms. The website serves primarily as a redirect and informational page encouraging users to download the mobile apps. The business appears small and focused on providing gastronomic location services within the Czech Republic. The website content is minimal and basic, with limited business information and no visible privacy or cookie policies. Technically, the site uses modern web standards and Google Tag Manager for analytics but lacks advanced security headers and comprehensive compliance documentation. The security posture is moderate with HTTPS enabled but missing several best practices. The absence of WHOIS data reduces domain trustworthiness and raises concerns about domain registration transparency. Overall, the site is functional but limited in content and security maturity.

V

VITAMIN 2

vitamin2.ch

57

Vitamin 2 is a full-service advertising agency based in Eastern Switzerland, specializing in branding, design, web development, marketing, and communication services. The website showcases a professional portfolio with multimedia content and a strong client base, positioning the company as a reputable regional player in the media sector. The technical infrastructure is modern, leveraging frameworks like Livewire and Alpine.js, and integrates Google Tag Manager and Cloudflare Turnstile for performance and security. Security posture is solid with HTTPS and bot protection, but lacks visible privacy and cookie policies, as well as incident response contacts, which are important for compliance and trust. Overall, the site is well-designed, mobile-optimized, and user-friendly, reflecting a high level of digital maturity.

T

The Naked Watchmaker

thenakedwatchmaker.com

59

The Naked Watchmaker is a specialized online platform dedicated to providing in-depth educational content and insights into the art and craft of watchmaking. It offers a variety of services including detailed watch deconstructions, interviews with horological experts, book reviews, and an e-commerce shop selling watch-related products. The website targets watch enthusiasts, collectors, and professionals interested in horology. Technically, the site is built on the Squarespace platform, leveraging modern web technologies and integrating Google Analytics and Tag Manager for visitor tracking. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the website enforces HTTPS but lacks some advanced security headers such as HSTS and CSP, which are recommended for enhanced protection. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and ownership transparency. Overall, the site is trustworthy and professional but would benefit from improved domain registration transparency and enhanced security headers.

V

VSIA "Latvijas Vēstnesis"

lv.lv

57

VSIA "Latvijas Vēstnesis" operates as the official publisher of the Republic of Latvia, providing authoritative access to official publications and legal acts. The organization supports legal awareness and development of legal thought through its multiple portals and the "Jurista Vārds" journal. The website serves a broad audience including Latvian citizens, legal professionals, and government entities, positioning itself as a trusted and official source of legal information in Latvia. The business model revolves around official publication services, legal information dissemination, subscription services, and advertising within its legal journal and portals. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party libraries such as Google Analytics for tracking, Swiper.js for sliders, and Flatpickr for date inputs. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. Privacy and cookie policies are implemented with GDPR compliance in mind. From a security perspective, the site enforces HTTPS and uses CSRF tokens, but lacks some advanced security headers and does not publicly disclose a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain WHOIS data aligns with the official nature of the entity, showing consistent registration and no privacy protection, enhancing trustworthiness. Overall, the website is a high-quality, professional, and secure platform serving an essential government function. Strategic improvements in security headers and transparency around incident response could further enhance its security posture and trust.

Virgin Atlantic Airways Limited is a major UK-based international airline specializing in passenger air travel primarily to the US and other global destinations. The company is part of the Virgin Group and operates with a strong brand presence and a focus on customer experience, including onboard amenities such as food, drinks, entertainment, and WiFi. The website reflects a mature digital presence with modern technologies and excellent design quality. The technical infrastructure leverages Next.js and React frameworks, hosted likely on Akamai's CDN, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement, comprehensive security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website and business demonstrate high professionalism and trustworthiness.

M

Multisistema Riga SIA

ms.lv

55

Multisistema Riga SIA operates the website ms.lv, an established Latvian online retailer specializing in computer hardware, electronics, and related accessories. The company has a strong local presence with a physical store located at KR.VALDEMĀRA IELA 25/4, Rīga, and offers a broad range of products including Apple devices, computer components, and office supplies. The website targets general consumers and businesses seeking technology products in Latvia. The business model is primarily e-commerce with additional service offerings such as technical support and repair services.

S

stoz werbeagentur ag

stoz.ch

59

Stoz Werbeagentur AG is a Swiss-based fullservice advertising agency specializing in creative print and digital marketing solutions. Established in 1987 and operated as a family business, it serves a diverse clientele ranging from SMEs to international companies. The website reflects a strong brand identity emphasizing creativity, quality, and emotional engagement. Technically, the site uses modern web technologies including Alpine.js and Google Tag Manager, with good mobile optimization and fast performance. Security posture is solid with HTTPS and cookie consent implemented, though lacking explicit security headers and public security policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

The website www.stops.lt provides comprehensive public transport route schedules and trip planning services primarily for Vilnius, Lithuania. It offers detailed information on bus, trolleybus, express bus, and night routes, targeting local commuters and visitors. The site supports multiple languages and includes interactive features such as maps and route planners. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates third-party analytics and social media SDKs. While the content quality and user experience are good, the site lacks visible privacy and cookie policies, which impacts compliance with GDPR and privacy best practices. Security posture is moderate with no evident advanced security headers or policies, and WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency. Overall, the site is functional and informative but would benefit from enhanced security and privacy measures.

S

Sweden Abroad

swedenabroad.se

56

Sweden Abroad is an official Swedish government website providing comprehensive information about Sweden's embassies and consulates worldwide. It serves Swedish citizens abroad with travel advice and assistance information, as well as non-Swedish citizens interested in traveling or moving to Sweden. The site is well-positioned as a trusted government resource with a large global footprint through its network of over 100 foreign missions. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for consent management, and Microsoft Application Insights for telemetry, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a good user experience across devices. Security-wise, the site enforces HTTPS and uses privacy-compliant tracking mechanisms, though it could improve by adding explicit security headers and publishing a security policy or vulnerability disclosure. Overall, the website demonstrates a strong security posture and high trustworthiness consistent with its government affiliation.

S

Summit

globalgoalssummit.cz

50

Global Goals Summit 2024 is a professionally organized event focused on sustainability and the UN Sustainable Development Goals, hosted in Prague by Asociace společenské odpovědnosti in partnership with DVTV and other reputable organizations. The website demonstrates a mature digital presence with detailed speaker profiles, program schedules, ticketing options, and strong partner engagement. Technically, it is built on WordPress with modern tracking and analytics tools, optimized for mobile and accessibility. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear GDPR and cookie policies. Overall, the site is trustworthy and well-positioned in its niche.

T

test

giving-tuesday.cz

58

Giving Tuesday Czechia is a well-established non-profit platform promoting global generosity and good deeds, organized locally by the Association of Social Responsibility. The website provides comprehensive information about the movement, ways to participate, and showcases registered charitable challenges and activities. The platform targets a broad audience including individuals, families, NGOs, schools, municipalities, and businesses. Technically, the site uses modern web technologies including Google Tag Manager, Facebook Pixel, and Typekit fonts, with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and a detailed privacy policy page. WHOIS data is unavailable, which slightly reduces trustworthiness, but the professional content and social media presence mitigate concerns. Overall, the site is a credible and effective tool for promoting charitable engagement in Czechia.

H

Health Food Manufacturers' Association

hfma.co.uk

50

The Health Food Manufacturers' Association (HFMA) is a UK-based trade association representing companies in the health food and supplement manufacturing sector. The website serves as an informational and advocacy platform for its members, providing industry representation and support. The domain is well-established, dating back to 1999, indicating a mature presence in the market. Technically, the site is built on WordPress using the Elementor page builder, with standard web technologies and fonts loaded from trusted sources. Google Tag Manager is employed for analytics, reflecting moderate digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published policies, which are areas for improvement. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency to improve compliance and user trust.

S

SIGVARIS GROUP

sigvaris.com

66

SIGVARIS GROUP is a well-established Swiss family-owned company specializing in medical compression products with a history spanning over 160 years. The company offers a broad portfolio including compression stockings, bandages, and postoperative compression clothing, serving both healthcare professionals and consumers primarily in Switzerland. The website reflects a mature digital presence with multilingual support and comprehensive product and service information. Technically, the site leverages modern monitoring and analytics tools such as Google Tag Manager, Raygun, Azure Application Insights, and Elastic APM, hosted likely on Microsoft Azure, and built on the EPiServer CMS platform. Security posture is strong with HTTPS enforced and use of error monitoring, though explicit security headers could be verified further. Privacy and cookie policies are present and GDPR compliant, supporting good privacy practices. The WHOIS data is unavailable, which is common for corporate privacy but reduces transparency. Overall, the website is professional, secure, and trustworthy, supporting SIGVARIS GROUP's market position as a leader in medical compression therapy products.

O

Ostschweizer Verein für das Kind

ovk.ch

54

The Ostschweizer Verein für das Kind (OVK) is a well-established non-profit organization based in Switzerland, dedicated to supporting the healthy psychological and physical development of children in the preschool age group. With over 100 years of history, OVK offers a range of advisory services including mother and father counseling, parenting coaching, and family accompaniment programs. The organization targets families, parents, and early childhood professionals, providing multilingual consultation and community events. The website reflects a professional and trustworthy presence with clear contact information and a strong emphasis on privacy compliance. Technically, the website employs modern web technologies including JavaScript, CSS, and Bootstrap framework, with a cookie consent mechanism powered by CookieYes. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a good user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some recommended security headers are not explicitly confirmed. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent banner with granular controls. Overall, the website demonstrates a mature digital infrastructure suitable for a non-profit organization, with strong business credibility and user trust. There are no indications of malicious content or security risks. However, the absence of a publicly stated security policy or incident response contact is a minor gap. Strategic recommendations include enhancing security headers and publishing incident response information to further strengthen trust and compliance.

Recruiter Sites is a UK-based SaaS platform developed by HotLizard Limited, providing an instantly configurable recruitment website solution targeted at recruitment agencies and recruiters. The platform emphasizes rapid deployment, cost-effectiveness, and ongoing support with hosting and upgrades included. The website demonstrates a professional and consistent brand presence with clear contact information and social media engagement. Technically, the site is built on ASP.NET WebForms with modern integrations such as Google Analytics and reCAPTCHA v3, ensuring secure and user-friendly interactions. Security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers could be improved. WHOIS data is unavailable due to domain naming query issues but does not detract from the evident legitimacy of the business. Overall, the site is well-structured, secure, and compliant with privacy regulations, making it a trustworthy platform for its target audience.

E

Experimental Aircraft Association, Inc.

eaabuilderslog.org

46

EAABuildersLog.org is a niche online platform provided by the Experimental Aircraft Association, Inc. (EAA) to support its members in logging and sharing their experimental aircraft building projects. The website offers project tracking, search, and mapping features tailored to the aviation enthusiast community. It operates as a non-profit service with a focus on community engagement and project documentation. The platform is designed with Bootstrap and jQuery, providing a responsive and user-friendly experience, although some technologies are dated. The site is hosted on JustHost and secured with HTTPS, but lacks advanced security headers and DNSSEC, indicating room for security improvements. Privacy compliance is basic, with a privacy policy page but no cookie consent mechanism. Contact is primarily via a login popup and contact form, with no explicit emails or phone numbers listed. Overall, the website is functional, trustworthy, and serves its target audience well, but could enhance security and privacy features to align with best practices.

D

Druckerei Horisberger AG

druckerei-horisberger.ch

54

Druckerei Horisberger AG is a well-established Swiss printing company specializing in traditional and digital print media, marketing instruments, and packaging solutions. As part of the Schellenberg Gruppe, it benefits from a strong corporate network and offers comprehensive services including consulting, publishing, lettershop, offset and digital printing, finishing, logistics, and sustainability initiatives. The company targets business clients seeking high-quality print and marketing solutions and holds a strong market position as the largest family-owned printing company in its region with over 60 years of experience. Technically, the website is built on modern frameworks such as Vue.js and UKit, with a Cockpit CMS backend. It demonstrates good mobile optimization, moderate performance, and basic accessibility features. The site uses HTTPS with strong SSL configuration and includes security headers, reflecting a solid security posture. However, it lacks visible cookie consent mechanisms and explicit privacy or security policies, which are areas for improvement. Security-wise, the site shows good practices with no visible vulnerabilities or exposed sensitive data. Certifications like ISO 9001 and ISO 14001 reinforce trust and commitment to quality and environmental management. The absence of incident response contacts and vulnerability disclosure policies suggests room to enhance security transparency and readiness. Overall, Druckerei Horisberger AG presents a professional, trustworthy, and content-rich online presence aligned with its business stature. Strategic recommendations include implementing cookie consent, publishing security policies, and enhancing GDPR compliance to further strengthen privacy and security posture.

The Aircraft Owners and Pilots Association (AOPA) is a well-established US-based organization serving the general aviation community with advocacy, education, and resources. The domain aopa.org is registered since 1995 and aligns with the organization's history and location. However, the website content is currently inaccessible due to Cloudflare's Web Application Firewall (WAF) blocking access based on the visitor's ASN, resulting in an HTTP 1005 error. This blockage prevents a full analysis of the website's content, policies, and technical implementation. The technical infrastructure includes Cloudflare services for CDN and security, but no detailed security headers or policies are visible in the blocked content. The lack of accessible privacy, cookie, and contact information pages limits the assessment of compliance and user engagement features.