Security Directory

M

MTF Solutions AG

mtf.ch

10

MTF Solutions AG is a Swiss IT company specializing in digital transformation, consulting, cloud solutions, and holistic IT services tailored for small and medium-sized enterprises (SMEs). With a strong regional presence across Switzerland and Liechtenstein, the company positions itself as a trusted partner for future-oriented digitalization, offering a comprehensive portfolio including IT management, cybersecurity, modern workplace solutions, business applications, professional services, and cloud infrastructure. Their market position is solid within the Swiss SME segment, emphasizing competence, innovation, and regional proximity. Technically, the website employs modern web technologies such as Google Tag Manager, Cookiebot for consent management, and SVG graphics for scalable visuals. The presence of remote support links via TeamViewer indicates operational readiness to assist clients efficiently. The site is mobile-optimized with lazy loading for performance, though accessibility features could be enhanced. SEO practices are good, supported by structured data and meta tags. From a security standpoint, the website enforces HTTPS with strong SSL configuration and includes essential security headers. Cookie consent mechanisms comply with GDPR, and no exposed sensitive data or vulnerable libraries were detected. However, explicit incident response contacts and vulnerability disclosure policies are not found, representing areas for improvement. Overall, MTF Solutions AG demonstrates a mature digital presence with strong business credibility and compliance posture. The risk profile is low, but strategic enhancements in security transparency and accessibility would further strengthen trust and operational resilience.

N

NaturinForm GmbH

naturinform.com

50

NaturinForm GmbH is a medium-sized German manufacturer specializing in wood-plastic composite (WPC) products such as patio decks, facade cladding, and fences. The company emphasizes sustainability and quality, holding certifications like PEFC and ISO standards. Their website is professionally designed, multilingual, and includes interactive tools like a terrace configurator and retailer locator, targeting specialist retailers, architects, and end consumers. Technically, the site is built on TYPO3 CMS with modern tracking and consent management tools, offering good performance and accessibility. Security posture is strong with HTTPS and security headers, though no explicit security policy or incident response contacts are published. The absence of WHOIS data is a concern but the overall digital presence supports legitimacy. Strategic recommendations include publishing security policies and improving domain registration transparency.

M

M. DESAX AG

mdesaxag.ch

54

M. DESAX AG is a Swiss family-owned company established in 1999 specializing in the sale, rental, and installation of construction elevators and transport platforms. The company serves the Swiss construction and event markets with a broad product range including transport platforms, material elevators, and rope winches. Their market position is solid with a large rental fleet and references from significant projects, indicating reliability and expertise. Technically, the website uses a proprietary CMS (admiralCX) with modern technologies such as jQuery, FontAwesome, Google Analytics, and Cookiebot for cookie consent management. The site is well-structured, mobile-optimized, and provides clear contact information. Security posture is good with HTTPS and standard security headers, but lacks explicit security policies or incident response contacts. Privacy compliance is supported by a detailed cookie consent mechanism, though no dedicated privacy policy page was found in the provided content. Overall, the website is professional, trustworthy, and suitable for its target audience.

24 Stops is a cultural and artistic project focused on guided walks, events, and installations, supported by regional partners such as Fondation Beyeler and others. The website provides information about the project, event registration, and partner links, targeting a general audience interested in culture and art. The technical infrastructure includes common web technologies such as jQuery, Cookiebot for consent management, Google Tag Manager, and Vimeo for video content. The site is hosted behind AWS Cloudfront CDN, ensuring reasonable performance and availability. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks explicit security headers and uses an outdated jQuery version, which could pose risks. Privacy compliance is good with a visible privacy policy and cookie consent mechanism. Overall, the website is professionally presented with consistent branding and trustworthy partner associations, but could improve in technical security and contact transparency.

B

BKK24

bkk24.de

60

BKK24 operates as a statutory health insurance provider in Germany, offering a wide range of healthcare services with a focus on comprehensive coverage and customer support. The website positions itself as a reliable and accessible insurer with nationwide presence and 24/7 service availability. The business model centers on statutory health insurance, targeting insured individuals and employers within Germany. The website content is professionally presented, consistent with the healthcare industry standards, and compliant with GDPR regulations. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Bootstrap for responsive design and user interaction. Cookiebot is integrated for cookie consent management, reflecting a mature approach to privacy compliance. Hosting is managed via kasserver.com, with secure HTTPS connections and moderate performance. SEO and accessibility are adequately addressed, though some improvements in accessibility could be beneficial. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. The absence of a public security policy or incident response contact suggests room for improvement in transparency and readiness. Analytics usage is moderate, primarily via self-hosted Matomo and etracker, with clear data retention policies. Overall, BKK24's website demonstrates a solid digital presence with good privacy and security practices aligned with its business sector. Strategic enhancements in security headers, incident response disclosure, and accessibility would further strengthen its posture. The site is trustworthy, professional, and suitable for its target audience.

A

AFTRAL

aftral.com

64

AFTRAL is a leading French organization specializing in professional training and education in the transport and logistics sectors. The website offers a comprehensive catalog of courses ranging from CAP to BAC+6 levels, supported by a network of over 120 training centers and multiple campuses. The business targets professionals and students seeking qualifications and certifications in transport, logistics, and supply chain management. The site is well-structured, with clear navigation and a professional design consistent with its market position. Technically, the website is built on Drupal 7 with a variety of contributed modules and libraries such as jQuery UI and Apache Solr for search functionality. It integrates modern tracking and consent management tools including Google Tag Manager, TikTok Pixel, and Cookiebot, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though some technical debt is implied by the use of older jQuery versions. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security or incident response policies. The absence of WHOIS domain registration data raises concerns about domain legitimacy, though the website content and branding strongly suggest a legitimate and established entity. No critical vulnerabilities or exposed sensitive data were detected. Overall, AFTRAL's website presents a professional and trustworthy front for its educational services, but would benefit from enhanced transparency in privacy policies, contact information, and domain registration details to strengthen trust and compliance.

F

Feratel Medien Technologien GmbH

feratel.de

67

Feratel Medien Technologien GmbH is a medium-sized technology company specializing in comprehensive tourism marketing and data management solutions. The company operates multiple country-specific domains, indicating a strong international presence in the tourism sector. Their business model focuses on providing B2B software and services tailored to tourism marketing, upselling, service, data strategies, communication, and interfaces. The website content is professionally presented, targeting tourism industry stakeholders and marketing professionals. Technically, the site is built on TYPO3 CMS, integrates Cookiebot for GDPR-compliant cookie management, and uses Google Tag Manager and Facebook Pixel for analytics and marketing. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not found. Privacy compliance is well addressed with detailed cookie policies and consent mechanisms. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements.

F

Feratel Medien Technologien AG

feratel.it

69

Feratel is a medium-sized technology company specializing in providing digital solutions primarily for the tourism and media sectors. Their offerings include marketing, up-selling, assistance, data strategy, communication, and interface development services. The company has an established market presence with a professional and consistent brand image. The website is built on TYPO3 CMS and integrates modern tools such as Cookiebot for GDPR-compliant cookie management and Google Analytics for traffic analysis. The technical infrastructure is solid with good SSL configuration and security headers, ensuring a secure browsing experience for users. Privacy compliance is well addressed with clear policies and consent mechanisms. However, the site lacks visible contact information and a terms of service page, which could be improved to enhance business credibility and user trust. Overall, the website reflects a mature digital presence aligned with business goals and regulatory requirements.

F

Feratel

feratel.fr

67

Feratel is a medium-sized technology company specializing in providing comprehensive, customized tourism marketing and data management solutions. The company has a strong market presence in France and other European countries, supported by multiple regional domains and multilingual content. Their business model focuses on B2B services targeting tourism industry professionals and destination managers. The website is professionally designed, well-structured, and optimized for mobile devices, reflecting a mature digital infrastructure. Technically, the website is built on TYPO3 CMS and integrates modern cookie consent management via Cookiebot, ensuring GDPR compliance. The use of HTTPS and inclusion of detailed cookie categories demonstrate a commitment to privacy and security. However, some security headers are not explicitly detected, and no dedicated security or incident response pages are found, indicating room for improvement in security posture. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but the absence of WHOIS data limits full domain trust assessment. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and granular user consent options. Overall, the website and business appear legitimate and professional, with a good balance of content quality, technical implementation, and privacy compliance. Strategic recommendations include enhancing security headers, publishing explicit security policies, and providing clear contact information for incident response to further strengthen trust and security.

F

feratel media technologies AG

feratel.at

67

Feratel media technologies AG is a specialized provider of digital destination management and marketing solutions primarily serving the tourism industry. The company offers a comprehensive suite of services including marketing, upselling, service, data strategies, and communication tailored to enhance digital tourism experiences. Positioned as a key player in Austria and surrounding markets, Feratel targets tourism stakeholders and destination managers with B2B digital solutions. The website reflects a mature digital presence with multilingual support and professional branding. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies and third-party tools such as Cookiebot and Google Tag Manager to manage consent and analytics. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response contacts are absent. Overall, the site demonstrates good compliance with GDPR through detailed privacy and cookie policies. The domain registration data aligns well with the business claims, reinforcing legitimacy and trustworthiness.

D

Deutscher Tennis Bund

mypadel.de

75

mypadel.de is an official platform dedicated to the sport of Padel in Germany, operated under the Deutscher Tennis Bund. It provides comprehensive information including news, club and coach directories, event details, and partner information, serving players, coaches, clubs, and partners. The website is professionally designed with consistent branding and clear navigation, targeting the German Padel community. Technically, the site is built on Adobe Experience Manager with modern JavaScript frameworks and integrates third-party services for analytics, advertising, and cookie consent management. Security posture is strong with HTTPS enforced and secure form implementations, though some security headers could be improved. Privacy compliance is well addressed with accessible privacy and cookie policies and GDPR consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness with official federation backing and partner endorsements.

D

Deutscher Tennis Bund

dtb-tennis.de

72

The Deutscher Tennis Bund (DTB) operates the official tennis federation website for Germany, providing comprehensive information on national teams, training programs, membership offers, and tennis events. The site targets tennis enthusiasts, players, coaches, and fans within Germany, positioning itself as the authoritative source for tennis-related content in the country. The business model is non-profit and focused on sports promotion and community engagement. Technically, the website leverages Adobe Experience Manager (AEM) as its CMS, hosted on Adobe's cloud infrastructure, and integrates modern technologies such as Cookiebot for consent management, Google Tag Manager for analytics, and Smart AdServer for advertising. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses secure cookies, and implements consent mechanisms aligned with GDPR. While explicit security headers are not fully visible in the HTML, the use of reputable third-party services and secure hosting suggests a strong security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and compliance with privacy regulations. Strategic recommendations include enhancing visible security policies, publishing incident response contacts, and verifying security headers to further strengthen trust and security culture.

B

Beisheim Stiftung

beisheim-stiftung.com

62

Beisheim Stiftung is a non-profit foundation operating primarily in Germany and Switzerland, providing funding and support for various projects. The website serves as an informational portal offering downloadable resources such as funding criteria and application guidelines. The foundation targets applicants and partners interested in its funding programs. Technically, the website is built using the Nuxt.js framework and integrates Cookiebot for cookie consent management, ensuring compliance with privacy regulations. The site employs HTTPS and uses Piwik Analytics for visitor statistics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks visible security headers and explicit security policies. The absence of WHOIS data and contact information slightly reduces trustworthiness. Overall, the website is professional and functional but could improve transparency and security documentation.

A

aha - Zweckverband Abfallwirtschaft Region Hannover

aha-region.de

62

The website www.aha-region.de represents the regional public waste management authority 'aha - Zweckverband Abfallwirtschaft Region Hannover' in Germany. It provides comprehensive waste disposal services for private households and businesses, including container services, recycling, composting, and special waste management. The site targets a broad audience including residents and commercial customers within the Hannover region. The business model is focused on public service delivery in the environmental sector, positioning itself as a key regional player in waste management and sustainability. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and integrates modern tools such as Google Tag Manager, Google Analytics, and Cookiebot for cookie consent management. The site is hosted on German servers (htp-tel.de) and demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, indicating a commitment to user privacy and data protection. However, explicit security headers and detailed security policies are not evident in the provided data. No vulnerabilities or exposed sensitive data were detected. The absence of a published privacy policy or terms of service page is a notable gap in compliance documentation. Overall, the website is professional, trustworthy, and safe for general audiences. It effectively communicates its public service mission but could improve transparency by publishing comprehensive privacy and security policies and providing clear contact information. Strategic recommendations include enhancing security headers, incident response readiness, and compliance documentation to strengthen trust and regulatory adherence.

S

Stiftung Nationale Anti Doping Agentur Deutschland

gemeinsam-gegen-doping.de

39

GEMEINSAM GEGEN DOPING is a German government-supported non-profit network focused on anti-doping education and prevention in sports. It operates under the Stiftung Nationale Anti Doping Agentur Deutschland and collaborates with national and international partners such as NADA, WADA, and the German Olympic Sports Confederation. The website serves as an information hub offering workshops, e-learning, quizzes, and community engagement to promote clean sports. Technically, the site is built on TYPO3 CMS with modern JavaScript integrations, uses hCaptcha for form security, and employs Matomo for analytics with a strong emphasis on privacy compliance via Cookiebot. Security posture is solid with HTTPS and spam protection, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for accessibility and SEO.

S

Schule für Gestaltung Basel

sfgbasel.ch

70

Schule für Gestaltung Basel is a well-established educational institution based in Basel, Switzerland, specializing in design and art education. The website presents a comprehensive range of courses and programs targeting talented young individuals, experienced professionals, and anyone interested in developing their creative skills. The institution offers foundational courses, vocational training, higher education, and public continuing education, positioning itself as a key regional player in design education. Technically, the website is built on modern frameworks such as Next.js and uses DatoCMS for content management, ensuring a responsive and user-friendly experience. Cookie consent is managed via Cookiebot, reflecting awareness of privacy regulations. However, the site lacks explicit privacy policies, terms of service, and security policies, which are important for compliance and trust. From a security perspective, the site uses HTTPS with excellent SSL configuration but does not implement common security headers or publish incident response contacts or vulnerability disclosure policies. No signs of WAF or blocking mechanisms were detected, and no analytics or tracking scripts beyond cookie consent were found, indicating a privacy-conscious approach. Overall, the website is professional, trustworthy, and content-rich, but it would benefit from enhanced privacy and security documentation to improve compliance and user trust.

T

TITLIS Bergbahnen AG

titlis.ch

72

TITLIS Bergbahnen AG operates a leading mountain tourism website promoting the TITLIS mountain region in Central Switzerland. The site offers information on skiing, hiking, cable cars, accommodation, restaurants, and events, positioning itself as a premier destination for tourists and adventure seekers. The technical infrastructure is modern, leveraging Next.js and React frameworks, with integrated analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for consent management. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit privacy and terms of service pages are not detected in the provided content. Overall, the website is professional, well-branded, and trustworthy, supporting the business's market position.

V

Vestre

vestrehabitats.no

59

Vestre Habitats is a professional website representing Vestre, a company focused on enhancing biodiversity in urban green spaces through innovative furniture design and vegetation interventions. The site targets urban planners and environmental designers, positioning itself as a niche leader in sustainable urban furniture. Technically, the website employs modern technologies including Craft CMS, Cookiebot for consent management, and Google Tag Manager for analytics, delivering a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and cookie consent mechanisms, though some security headers are missing and no explicit security policy or incident response contacts are published. The domain WHOIS data is unavailable, which slightly reduces trustworthiness, but the website content and branding are consistent and professional. Overall, the site demonstrates a mature digital presence with good privacy compliance and moderate user tracking.

V

Vestre

vestrehabitats.com

59

Vestre Habitats is a specialized initiative focused on enhancing biodiversity in urban environments through innovative furniture design and vegetation interventions. The website presents a professional and well-structured digital presence, targeting urban planners, environmentalists, and city authorities. The technical infrastructure leverages modern web technologies including Craft CMS, Cookiebot for privacy compliance, and Google Tag Manager for analytics, indicating a mature digital setup. Security posture is strong with HTTPS enforcement, appropriate security headers, and CSRF protections, though the absence of explicit security policies and incident response contacts suggests room for improvement. The lack of WHOIS data transparency is a concern for domain legitimacy, but the website content and compliance mechanisms support a generally trustworthy profile. Strategic recommendations include publishing comprehensive security and incident response policies, improving domain registration transparency, and enhancing contact availability to bolster business credibility and user trust.

S

Staysville

staysville.no

52

Staysville is a small hospitality business specializing in serviced hotel apartments located in central Stavanger, Norway. Founded in 2023, it offers modern, fully furnished apartments with hotel-like services for short and long-term stays. The website presents a professional and consistent brand image targeting tourists and business travelers seeking flexible accommodation options. The business model focuses on providing personalized services such as easy self check-in, laundry facilities, and fully equipped kitchens, positioning itself as a niche apartment hotel provider in the Stavanger market. Technically, the website uses modern web technologies including JavaScript, CSS, SVG graphics, Google Tag Manager for analytics, and Cookiebot for GDPR-compliant cookie consent management. The site is mobile-optimized with good SEO and accessibility basics, though some accessibility enhancements could be made. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is evident through a privacy policy and cookie consent mechanism, though terms of service and security policies are absent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. No WAF or content blocking was detected, allowing full content analysis.

P

Promenaden

promenaden.no

64

Promenaden is a website dedicated to promoting a vibrant and inspiring area in the heart of historic Oslo, Norway. The site targets a general audience interested in cultural and historical experiences. The business model appears to focus on area promotion and cultural engagement, positioning itself as a local attraction. The website demonstrates a good level of digital maturity with modern technologies such as Google Tag Manager and Cookiebot for analytics and consent management. The design is professional, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. Privacy compliance is well addressed through detailed cookie consent mechanisms and GDPR-aligned practices. However, the absence of WHOIS registrant data and explicit contact information slightly reduces business credibility. Overall, the site is trustworthy and professionally maintained, suitable for its promotional purpose.

F

FCC Products AS

fccproducts.no

53

FCC Products AS is a Norwegian company specializing in outdoor cooking and lifestyle products, including grills, pizza ovens, fire pits, furniture, and accessories. The website presents a professional and well-structured digital presence with rich content such as recipes, articles, and product information targeting consumers interested in enhancing their outdoor cooking experience. The company is positioned as a reputable brand in Norway with a clear focus on quality and customer engagement through social media and newsletters. Technically, the website uses modern JavaScript frameworks, Google Tag Manager for analytics, and Cookiebot for privacy compliance, hosted on a CDN for performance optimization. The site is mobile-optimized and accessible, providing a smooth user experience. Security posture is good with HTTPS enforced and cookie consent implemented, though there is room for improvement by adding security headers and explicit incident response contacts. The absence of WHOIS data reduces domain trustworthiness, but the website's content and contact information support legitimacy. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a trustworthy and professional online presence.

W

Wellnesshotel Golfpanorama

golfpanorama.ch

67

Wellnesshotel Golfpanorama is a premium hospitality business located in Lipperswil, Switzerland, specializing in wellness, golf, and luxury accommodation services. The website presents a comprehensive range of offerings including hotel rooms, spa and wellness treatments, golf packages, restaurant services, and business seminar facilities. The business targets leisure travelers, wellness enthusiasts, and corporate clients, positioning itself as a 4-star superior hotel in the Bodensee region. The site is professionally designed with multilingual support and strong branding consistency. Technically, the website employs modern JavaScript libraries, Google Tag Manager, Cookiebot for consent management, and integrates third-party booking and chat services. The CMS appears to be Kirby, supporting a well-structured and responsive design optimized for mobile devices. SEO and accessibility features are well implemented, contributing to a positive user experience. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, with a solid security posture and effective business presentation. Strategic improvements in security headers and incident response disclosures could further enhance the security maturity and trustworthiness of the site.

V

Vestre

vestre.com

73

Vestre is a well-established Norwegian manufacturer specializing in sustainable outdoor furniture with a strong focus on Scandinavian design for public spaces such as cities and parks. The company holds a leading position in its niche market, targeting municipalities, urban planners, and architects. Their website reflects a professional and consistent brand image, supported by a modern technical infrastructure including Craft CMS, Google Tag Manager, and Cookiebot for privacy compliance. Security measures such as HTTPS, CSRF tokens, and Google reCAPTCHA are implemented, indicating a mature security posture. However, some improvements are recommended, including enabling DNSSEC and publishing explicit security policies. Overall, the website demonstrates good digital maturity and compliance with GDPR, with extensive use of analytics and marketing tools to support business growth.

V

VegTech Norge

vegtech.no

59

VegTech Norge is a leading Nordic supplier specializing in green roofs, sedum roofs, and vegetation solutions. Founded in 2022, the company offers a comprehensive range of products and services including green roofing systems, vegetation for terrain and water environments, facade greening, and consulting. Their market position is strong within the Nordic region, supported by partnerships and participation in industry events. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, the site runs on WordPress with modern frameworks and integrates Cookiebot for GDPR-compliant cookie management. Security posture is good with HTTPS and secure forms, though it lacks explicit security headers and published security policies. Contact information is clearly presented with multiple channels including email, phone, and social media. Overall, VegTech Norge demonstrates a credible and trustworthy business with room for improvement in privacy and security transparency.

A

Asak Miljøstein AS

asak.no

64

Asak Miljøstein AS is a Norwegian manufacturing company specializing in environmental stone products, representing a long industrial history dating back to 1916. The company targets professional customers in the construction and related industries, offering nationwide production and quality assurance. The website reflects a professional business presence with consistent branding and relevant content focused on their manufacturing services. Technically, the website employs modern technologies such as FontAwesome for icons, Google Tag Manager for analytics, and Cookiebot for cookie consent management. Static assets are hosted on Microsoft Azure Blob Storage, indicating a cloud-based hosting approach. Security posture is moderate; while HTTPS is implied, no explicit security headers were detected, and no privacy or terms of service policies were found on the analyzed page. The absence of public WHOIS data suggests domain privacy protection, which is common for commercial entities but reduces transparency. Overall, the website is accessible, professional, and safe, but improvements in security headers, explicit privacy policies, and contact information would enhance trust and compliance.

R

Royal Institute of British Architects

architecture.com

73

The Royal Institute of British Architects (RIBA) is a leading professional body and membership organization dedicated to advancing architecture. The website serves architects, students, and related professionals by providing education, resources, awards, and advocacy. The site is well-branded, professionally designed, and offers comprehensive content relevant to its audience. Technically, it uses modern JavaScript frameworks, Umbraco CMS, and integrates multiple analytics and tracking tools with proper cookie consent mechanisms. Security posture is good with HTTPS enforced and secure forms, though some security headers and explicit policies could be improved. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, the website is trustworthy, professional, and compliant with privacy regulations.

The Royal Academy of Arts is a prestigious non-profit educational and cultural institution based in London, focused on art creation, exhibition, and debate. The website reflects a well-established organization with a clear mission to engage the public and art community through exhibitions, education, and events. The digital presence is built on modern web technologies including React and Next.js, with a strong emphasis on user experience and accessibility. The site employs comprehensive cookie consent management via Cookiebot, demonstrating good privacy compliance and GDPR adherence. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although security headers could be improved and a formal security policy published. The WHOIS data for the 'www' subdomain is unavailable due to domain naming rules, but this is a known limitation and does not detract from the legitimacy of the main domain. Overall, the website is professional, trustworthy, and well-maintained, serving a broad audience of art enthusiasts and the general public.

M

Malmö Konsthall AB

malmokonsthall.se

52

Malmö Konsthall AB operates one of northern Europe's largest and most beautiful contemporary art exhibition spaces located in Malmö, Sweden. The organization focuses on providing cultural and artistic experiences to the general public, hosting exhibitions and events that engage visitors with contemporary art. The website reflects this mission with clear branding, relevant content, and a professional presentation. Technically, the website is built on WordPress CMS with a modern tech stack including Yoast SEO Premium for search optimization, Cookiebot for cookie consent management, and event management plugins. The site is hosted by NMU Group, consistent with the domain registration data. Performance and mobile optimization are good, with basic accessibility features implemented. From a security perspective, the site uses HTTPS with a good SSL configuration and employs cookie consent mechanisms to comply with GDPR. However, security headers are not explicitly detected, and there is no visible security policy or incident response information published. No vulnerabilities or suspicious domains were found, indicating a generally secure posture. Overall, the website is trustworthy, professional, and compliant with privacy regulations. Strategic recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and considering a vulnerability disclosure program to further enhance security and trust.

N

Nordic Office of Architecture

nordicarch.com

61

Nordic Office of Architecture is a well-established international architectural firm with studios in Norway, Denmark, and Iceland. The company serves a global clientele with a strong presence in the Nordic region, positioning itself as a leading architectural practice. Their website reflects a professional and modern design, showcasing key projects and providing comprehensive contact information for multiple office locations. The firm emphasizes transparency and compliance with privacy regulations, evidenced by a comprehensive privacy policy and cookie consent mechanism. Technically, the website employs modern JavaScript frameworks and analytics tools, ensuring a good user experience and performance. Security posture is solid with HTTPS enforcement and domain transfer protections, though there is room for improvement in security headers and incident response disclosures. Overall, the website and domain registration data indicate a credible and trustworthy business with a strong digital presence.

L

LINK Arkitektur

linkarkitektur.com

66

LINK Arkitektur is a well-established Scandinavian architectural firm operating primarily in Denmark, Norway, and Sweden. The company positions itself as a leading player in the architectural sector with a focus on sustainability and comprehensive architectural services. Their website reflects a professional and modern digital presence built on Drupal 10, with multi-language support and a clear content structure. The use of Cookiebot indicates a commitment to GDPR compliance and user privacy. Technically, the website is hosted behind Cloudflare DNS, uses HTTPS, and incorporates modern web standards, although DNSSEC is not enabled. Security posture is solid but could be improved by adding security headers and publishing explicit security policies. The absence of visible contact emails and phone numbers on the front page suggests contact information may be deeper in the site or via forms. Overall, the website is trustworthy, professional, and compliant with privacy regulations.

A

Annabelle

annabelle.ch

66

Annabelle.ch is a Swiss lifestyle and women's magazine website offering content on fashion trends, interior inspiration, travel tips, beauty stories, and social opinion pieces. The site targets a general audience interested in lifestyle and culture, positioning itself as an established media brand in Switzerland. Technically, the website is built on WordPress with modern integrations such as Yoast SEO Premium, Google Tag Manager, Microsoft Clarity, and Cookiebot for consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities, although explicit privacy and terms of service pages are missing. Overall, the site demonstrates good professionalism and trustworthiness but could improve compliance transparency and contact accessibility.

Wolzenalp is a small regional tourism business located in Switzerland, offering family-friendly hiking, biking, winter sports, and mountain railway services. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to tourists and families. Technically, the site uses the Contao CMS, integrates Google Tag Manager, Cookiebot for consent management, and Outdooractive API for outdoor activity information. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though some advanced headers like Content-Security-Policy could be added. Privacy compliance is well addressed with a comprehensive cookie policy and GDPR-aligned consent. However, no explicit terms of service, security policy, or incident response contacts are published, which could be improved. Overall, the website is trustworthy, secure, and well-suited for its business purpose.

A

ARI-SO

ari-so.ch

57

ARI-SO is a Swiss non-profit association dedicated to fostering innovation in Western Switzerland by supporting SMEs and startups through its network members. The website presents a professional and regionally focused platform with clear messaging about its mission and services. Technically, the site is built on WordPress using the Astra theme and Elementor page builder, incorporating modern web technologies and privacy-friendly analytics via Plausible. Security posture is strong with HTTPS enforced and appropriate security headers, although explicit privacy and terms policies are missing. No blocking or WAF challenges were detected, allowing full content access. Overall, the site demonstrates a moderate to good level of digital maturity and security readiness.

H

HRS

hrs.ch

69

HRS is a well-established Swiss real estate company with over 60 years of experience, specializing in development, implementation, and investment across Switzerland. The company operates as the largest owner-managed real estate service provider in the country, emphasizing regional roots, sustainability, and innovation. Their website reflects a professional and comprehensive digital presence, leveraging modern technologies such as Next.js and Storyblok CMS, with strong mobile optimization and SEO practices. Security posture is robust, with HTTPS enforced, security headers present, and a cookie consent mechanism implemented via Cookiebot. However, there is no explicit security policy or incident response information publicly available. Overall, the website and business information align well with the WHOIS data, indicating a legitimate and trustworthy entity.

W

Wilken Software Group

wilken.ch

53

Wilken Software Group is a German technology company specializing in software development and technology integration services. Their website presents a professional image with a focus on connecting technology, people, and visions for a sustainable future. The company targets business and technology professionals and operates primarily within the technology sector. The website is built on HubSpot CMS, uses Cloudflare for DNS, and integrates Google Analytics 4 and Cookiebot for analytics and privacy compliance. While the site is well-designed and mobile-optimized, it lacks explicit privacy policies, terms of service, and detailed contact information, which are important for full compliance and trust. Security posture is moderate with HTTPS enforced and cookie consent managed, but missing security headers and vulnerability disclosures reduce the security maturity. Overall, the website is trustworthy and professional but could improve transparency and security practices.

F

Feratel Medien Technologien AG

feratel.ch

67

Feratel Medien Technologien AG is a Swiss-based technology company specializing in tourism and media solutions. The company offers a range of B2B services including marketing, upselling, service platforms, data strategies, communication, and interface development. Positioned as an established player in the DACH region, Feratel targets tourism industry professionals and media companies with a comprehensive suite of technology-driven services. The website reflects a professional and consistent brand image with clear navigation and good content quality. Technically, the website is built on TYPO3 CMS and integrates modern tools such as Cookiebot for consent management and Google Tag Manager for analytics. The site is mobile optimized and employs standard web technologies including JavaScript and CSS. Performance is moderate with good SEO and basic accessibility features. Security is well addressed with HTTPS enforcement and multiple security headers, though explicit security and incident response policies are not publicly documented. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. The site uses extensive tracking and marketing tools but manages user consent effectively. Overall, the website demonstrates a high level of trustworthiness and professionalism. Strategically, Feratel should consider publishing explicit security and incident response policies to enhance transparency and trust. Accessibility improvements and regular audits of third-party scripts would further strengthen the security and user experience. The domain registration data aligns well with the business claims, supporting legitimacy and credibility.

touristika GmbH is a Swiss-based company specializing in digital transformation and IT project management services tailored for the tourism sector. Established in 2013, the company positions itself as a trusted partner for tourism businesses seeking to leverage digital projects to attract more customers. Their service offerings include consulting and project management, focusing on the unique needs of the tourism industry. The website reflects a professional and consistent brand image, targeting tourism businesses primarily in Switzerland. Technically, the site is built on the Weebly platform, utilizing standard web technologies such as jQuery and Google Analytics, with a cookie consent mechanism compliant with GDPR requirements. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though improvements could be made by implementing security headers and updating legacy libraries. Overall, the site is well-structured, user-friendly, and trustworthy, with clear contact information and social media presence limited to LinkedIn.

TSO AG is a Swiss-based company specializing in digital transformation services for the tourism sector, including associations, destinations, transport companies, and hotels. Their business model revolves around providing shared-service digital solutions to automate processes and improve performance. The website reflects a professional and consistent brand image with a clear focus on tourism digitalization. Technically, the site uses Contao CMS, integrates modern analytics and consent management tools like Cookiebot and Google Tag Manager, and employs HTTPS with good security practices. However, explicit contact information and security policies are not prominently available, which could be improved. The security posture is solid with no visible vulnerabilities, but the absence of a security.txt or incident response information is a gap. Overall, the site is trustworthy, compliant with GDPR via Cookiebot, and well-positioned in its niche.

M

Migros

migrosgolf.ch

51

Migros Golf operates multiple golf parks in Switzerland, offering accessible golf memberships through the Migros GolfCard since 1995. The website is built on TYPO3 CMS and employs modern web technologies including jQuery and Cookiebot for cookie consent management. The site demonstrates good technical infrastructure with HTTPS and basic SEO and accessibility features. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not found. Overall, the domain registration aligns well with the business entity Migros, indicating high legitimacy and trustworthiness.

S

S AM Schweizerisches Architekturmuseum

sam-basel.org

49

S AM Schweizerisches Architekturmuseum is a Swiss cultural institution dedicated to architecture, located in Basel. The website provides information about exhibitions, events, educational programs, and a shop, targeting architecture enthusiasts and the general public interested in cultural heritage. The museum maintains a professional online presence with multilingual support and active social media channels. Technically, the site is built on Drupal 7 with modern JavaScript libraries and uses Cookiebot for GDPR-compliant cookie management. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though improvements are recommended in security headers and CMS updates. WHOIS data is unavailable due to privacy or query failure, but the website content and contact details support legitimacy. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

A

Alias Design

alias.design

57

Alias Design is a small Italian design company specializing in furniture and design furnishings, operating an e-commerce platform built on Drupal 10 with Commerce 2. The website presents a professional and consistent brand image targeting consumers interested in Italian furnishings. The technical infrastructure leverages modern CMS technology, integrates marketing and analytics tools such as Google Tag Manager, Hotjar, and Doofinder, and employs Cookiebot for cookie consent management. Hosting appears to be on Amazon AWS infrastructure. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy and terms policies. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. Overall, the domain registration is privacy protected but consistent with the business age and type, indicating legitimacy.

L

lernando

lernando.de

72

lernando.de is a German e-commerce website specializing in educational materials such as school books, learning aids, and exercise booklets for children of all school grades. The platform targets parents and children seeking verified publisher materials with convenient shipping options. Technically, the site is built on Drupal 11 with Commerce 3, leveraging modern web technologies including jQuery UI, Cookiebot for consent management, Google Tag Manager, and Meta Pixel for marketing and analytics. The website demonstrates good digital maturity with mobile optimization and SEO best practices. Security-wise, the site enforces HTTPS and employs a comprehensive cookie consent mechanism, but lacks explicit security policies or incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, though it could improve by adding Terms of Service and security disclosure information.

A

Arena Verlag

arena-verlag.de

72

Arena Verlag is a reputable German publishing company specializing in high-quality children's and youth books. The website reflects a professional digital presence with a focus on book publishing and e-commerce, targeting children and youth audiences. The company leverages modern technologies including Drupal 11 CMS and integrates marketing and analytics tools such as Facebook Pixel and Google Ads. The website demonstrates good mobile optimization and SEO practices, enhancing user experience and accessibility. Privacy compliance is well addressed through a comprehensive cookie consent mechanism powered by Cookiebot, ensuring GDPR adherence. However, explicit contact information and terms of service are not readily found, which could be improved to enhance transparency and user trust. Security posture is solid with HTTPS enforced, but the absence of security headers and a security.txt file suggests room for improvement in security best practices.

G

Get a Newsletter: Skapa och skicka snygga nyhetsbrev

getanewsletter.com

62

Get a Newsletter is a Swedish-language focused SaaS platform that enables users to create and send visually appealing newsletters. The website is built on WordPress using Elementor and integrates Cookiebot for cookie consent management and Google Tag Manager for analytics. The domain is well-established since 2007, indicating a mature presence in the newsletter service market. However, the site lacks explicit privacy policies, terms of service, and direct contact information, which are important for trust and compliance. Technically, the site is moderately optimized with good mobile responsiveness and SEO practices but could improve security by enabling DNSSEC and adding security headers.

P

Praktikumsjahr GbR

praktikumsjahr.de

54

Praktikumsjahr GbR operates an educational platform focused on providing school leavers in Germany with the opportunity to explore multiple professions through a structured internship year. The platform facilitates digital management of applications, offers monthly stipends, and partners with over 100 companies, positioning itself as a niche leader in practical career orientation. The website is professionally designed, mobile-optimized, and rich in relevant content, including testimonials, partner logos, and press references, enhancing its credibility and trustworthiness. Technically, the site employs modern web technologies such as Bootstrap, Font Awesome, Google Analytics, Hotjar, and Cookiebot for consent management, hosted on Google Cloud infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though it lacks explicit security headers and a published security policy. Privacy compliance is strong with comprehensive GDPR-aligned policies and clear contact information. Overall, the site presents a low-risk profile with no detected vulnerabilities or suspicious content.

S

Stafftastic GmbH

ausbildungsradar.de

56

Ausbildungsradar.de is a German educational platform focused on supporting companies and associations in retaining and recommending applicants within regional or association-based training programs. The platform is positioned as a niche service enhancing digital collaboration in apprenticeship and training sectors. The business is likely small-sized and operates primarily in Germany, with Stafftastic GmbH as the associated company. Technically, the website employs modern JavaScript technologies, Cookiebot for GDPR-compliant cookie management, and Plausible Analytics for privacy-friendly traffic analysis. Hosting is via Google Cloud DNS, indicating a reliable infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security policy or incident response contacts are published. Privacy compliance is strong, with a comprehensive privacy policy linked on a partner domain. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

TSO AG is a Swiss-based company specializing in digitalization services for the tourism sector, offering shared-service digital solutions to associations, destinations, transport companies, and hotels. Their business model focuses on automating processes and improving performance for tourism providers. The website reflects a professional and consistent brand presence with clear messaging targeted at tourism industry stakeholders. Technically, the site is built on the Contao CMS platform, leveraging modern technologies such as Cookiebot for consent management and Google Tag Manager for analytics, indicating a mature digital infrastructure. Security-wise, the website enforces HTTPS, implements standard security headers, and manages cookie consent effectively, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, compliant with GDPR, and demonstrates good privacy practices.

S

Südwestmetall

suedwestmetall.de

64

Südwestmetall is a prominent industry association representing the metal and electrical sectors in Baden-Württemberg, Germany. The organization focuses on shaping the present and future of work within this strong industrial sector by providing advocacy, information, and member services. Their website reflects a professional and consistent brand image, targeting industry stakeholders and companies within the region. The business model centers on supporting member companies through information dissemination and industry representation.

D

DINGFO | Donau-Iller-Nahverkehrsverbund-GmbH

dingfo.de

45

DINGFO is a digital magazine operated by Donau-Iller-Nahverkehrsverbund-GmbH, focusing on public transportation and regional stories within the DING area in Germany. The website serves as an information portal providing news, fun facts, and travel destinations related to the local public transport network. It holds a niche regional market position with a medium-sized audience. Technically, the site is built on WordPress using popular plugins such as Yoast SEO and Elementor, with integrated cookie consent management via Cookiebot and analytics through Google Analytics. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses a consent mechanism for cookies, but lacks some security headers and explicit security policies, which could be improved. Overall, the website is trustworthy, compliant with GDPR, and safe for general audiences.