Security Directory

H

Help Scout

helpscout.com

64

Help Scout is a well-established technology company specializing in customer support software solutions, including shared inboxes, help centers, and live chat tools. The company targets businesses seeking efficient customer communication management and operates primarily on a SaaS business model. With a strong market position and certifications such as ISO 27001 and SOC 2 Type II, Help Scout demonstrates a commitment to security and compliance. The website reflects a mature digital infrastructure using modern technologies like React, Gatsby, and Contentful CMS, ensuring fast performance and excellent mobile optimization. Security best practices are evident through HTTPS enforcement, comprehensive security headers, and clear incident response contacts. Privacy policies and cookie consent mechanisms align with GDPR requirements, supporting user trust and regulatory compliance. Overall, the website presents a professional, trustworthy, and secure platform for its users.

G

GMI Pte Ltd

gawker.com

52

Gawker.com is a media website operated by GMI Pte Ltd, focusing on news and entertainment content. The site features articles such as tributes and current events, targeting a general audience. Its business model relies primarily on advertising revenue, leveraging Google AdSense and DoubleClick for monetization. The website uses modern web technologies including Next.js and React, indicating a contemporary technical infrastructure with moderate performance and mobile optimization. However, the content quality is basic with limited depth and minimal interactive features. Security posture is moderate with HTTPS enabled but lacks critical security headers and documented security policies. Privacy compliance is partial, with privacy and terms pages present but no cookie consent mechanism or GDPR compliance indicators. Contact information is minimal, limited to a single email address. Overall, the site is functional but would benefit from enhanced security, privacy, and user engagement features.

B

Bocoup

bocoup.com

63

Bocoup is a worker-owned technology consultancy specializing in the development of web standards, software tools, and digital projects with a strong emphasis on accessibility, privacy, and inclusivity. They serve a diverse clientele including tech companies, nonprofits, and institutions, positioning themselves as a niche player with a values-driven approach. Their market presence is supported by reputable clients such as Google, Mozilla, and Meta Accessibility, and they maintain a strong commitment to creating technologies that resist capture and safeguard user privacy. Technically, the website is built using modern frameworks such as Next.js and React, with a focus on performance, mobile optimization, and accessibility. The site integrates a headless WordPress CMS for blog content and uses minimal tracking via plausible.io, reflecting a privacy-conscious digital maturity. The technical infrastructure supports a fast, responsive, and user-friendly experience. From a security perspective, the site enforces HTTPS and employs secure forms but lacks explicit security headers and formal privacy or cookie policies. No vulnerability disclosure or incident response information is provided, which could be improved to enhance trust and compliance. The absence of WHOIS data for the domain is a notable anomaly, potentially indicating privacy protection or a data retrieval issue, but it introduces some uncertainty regarding domain legitimacy. Overall, Bocoup presents a professional and trustworthy online presence with strong technical and business foundations. Strategic improvements in transparency around privacy, security policies, and domain registration details would further strengthen their security posture and business credibility.

Bleacher Report is a well-established sports media platform founded in 2005, offering sports news, highlights, expert analysis, and scores to a broad audience of sports fans. The website demonstrates a strong market position as a recognized brand in the sports media industry. Technically, the site leverages modern web technologies including React and Next.js, hosted on AWS infrastructure, and incorporates GDPR-compliant cookie consent mechanisms. The site performs moderately well with good mobile optimization and SEO practices. Security-wise, HTTPS is enforced and domain registration includes protective status flags; however, security headers and explicit security policies are not evident, indicating room for improvement. Overall, the website is professional, trustworthy, and safe for general audiences, with no adult or explicit content detected.

K

Kirche in Not

kirche-in-not.ch

63

Kirche in Not is a Swiss-based Catholic non-profit organization dedicated to supporting persecuted and impoverished Christians worldwide. The website serves as an informational and awareness platform, highlighting their mission and activities. The organization appears established with consistent branding and a clear focus on charitable aid. Technically, the website is built on modern frameworks such as Next.js and React, with integration of Google Maps and Google Tag Manager for enhanced user experience and analytics. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy and cookie policies, which are critical for compliance and user trust. No signs of blocking or WAF interference were detected, allowing full content access. Overall, the site demonstrates a good level of professionalism and credibility, though improvements in privacy compliance and security best practices are recommended.

S

Showtime

sho.com

55

Paramount+ with Showtime is a major subscription streaming service combining content from Paramount+ and Showtime, offering popular original series and live TV. The website is professionally designed, mobile-optimized, and targets a general audience interested in entertainment media. The platform is positioned as a leading streaming service under the parent company Paramount Global. Technically, the site uses modern JavaScript frameworks such as React, integrates advanced monitoring tools like New Relic, and employs consent management solutions from Ketch and OneTrust, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, comprehensive security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, although WHOIS data is unavailable likely due to privacy protection, which is justified for this business type.

C

Connox AG

connox.ch

11

Connox AG operates a well-established e-commerce platform specializing in design furniture, accessories, and lighting products primarily targeting consumers in Switzerland and German-speaking Europe. The company maintains a strong market position with multiple regional sister sites and a broad product catalog exceeding 29,000 items. The website demonstrates a mature digital infrastructure leveraging modern web technologies such as React, PayPal SDK, and advanced consent management tools like Usercentrics, ensuring compliance with GDPR and cookie regulations. Security posture is robust with HTTPS enforcement, comprehensive security headers, and secure payment integrations. Privacy policies and contact information are clearly presented, supporting trust and transparency. Overall, Connox AG presents a professional, secure, and user-friendly online retail experience.

N

NOVASOL

novasol.se

63

NOVASOL is a well-established European holiday rental company offering a wide range of cottages, houses, and apartments across 19 countries. With a history dating back to 1968 and a large inventory of over 50,000 properties, NOVASOL positions itself as a trusted and comprehensive provider in the hospitality sector. The website reflects a mature digital presence with modern technologies such as React and Next.js, integrated analytics, and marketing tools. Security measures including HTTPS, CSP, and reCAPTCHA Enterprise are implemented, indicating a strong security posture. However, explicit security policies and incident response information are not publicly available, which could be improved to enhance trust. Overall, the site is professional, user-friendly, and compliant with privacy regulations, serving a broad consumer audience seeking holiday rentals in Europe.

N

NOVASOL

novasol.no

64

NOVASOL is a well-established European holiday home rental company with a strong market presence, offering a wide range of vacation properties across 19 countries. The website is professionally designed, mobile-optimized, and uses modern web technologies including React and Next.js. Security measures such as HTTPS, Content Security Policy, and Google reCAPTCHA Enterprise are implemented, indicating a mature security posture. However, explicit security policies and incident response contacts are not publicly available, which could be improved. Overall, the site is trustworthy, compliant with GDPR, and provides a good user experience.

N

NOVASOL

novasol.it

65

NOVASOL is a well-established European vacation rental company with over 50 years of experience, offering a wide range of holiday homes and apartments across 22 countries. The company operates under the parent organization Awaze, headquartered in Denmark. The website is professionally designed, mobile-optimized, and provides comprehensive information for both vacationers and property owners. It features strong branding consistency and trust indicators such as privacy policies and social media presence. Technically, the site uses modern frameworks like Next.js and React, integrates Google Tag Manager and New Relic for analytics and performance monitoring, and employs security best practices including HTTPS and content security policies. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. Overall, the site demonstrates a mature digital presence with good security posture and compliance with GDPR.

N

NOVASOL

novasol.dk

67

NOVASOL is a well-established European vacation rental company specializing in summer houses and holiday homes across 18 countries. Founded in 1968, it operates under the parent company Awaze and offers a broad portfolio of unique properties tailored to diverse customer needs. The website demonstrates a mature digital presence with modern technologies such as React and Next.js, integrated performance monitoring via New Relic, and marketing tools like Google Tag Manager. Privacy and cookie policies are present, indicating GDPR compliance. Security posture is strong with HTTPS, security headers, and CAPTCHA integration. However, the absence of WHOIS data and explicit contact information on the main site limits full trust verification. Overall, NOVASOL presents a professional and trustworthy platform for vacation rentals in Europe.

N

NOVASOL

novasol-vacances.fr

63

NOVASOL is a well-established European vacation rental company offering a wide range of holiday homes including villas, houses, and apartments across multiple European countries. The website is professionally designed with a clear focus on user experience, mobile optimization, and accessibility. It leverages modern web technologies such as React and Next.js, and integrates advanced analytics and monitoring tools including Google Tag Manager, New Relic, and Usercentrics for privacy compliance. Security measures are robust, with HTTPS enforced, content security policies, and reCAPTCHA Enterprise implemented to protect user interactions. However, the absence of publicly available WHOIS data suggests privacy protection, which is justified for this business type. Overall, the site demonstrates a mature digital presence with good compliance and security posture.

N

NOVASOL

novasol.co.uk

65

NOVASOL is a well-established European holiday villa rental company founded in 1968 and operating under the parent company Awaze. The website offers a comprehensive collection of holiday villas, apartments, and chalets across multiple European destinations, targeting holidaymakers seeking villa rentals. The business model is focused on online bookings with a strong market presence in the hospitality and real estate sectors. The website is professionally designed with consistent branding and good content quality, supporting a positive user experience.

Cyberport is a well-established electronics and technology retailer operating primarily in German-speaking countries, with a strong online presence since 1998. The company offers a wide range of consumer electronics including notebooks, PCs, tablets, smartphones, TVs, and audio equipment at competitive prices. The website targets general consumers and provides comprehensive customer support channels. Technically, the site is built on modern frameworks such as Next.js and React, with Tailwind CSS for styling, and integrates Google Tag Manager for analytics and a consent manager for GDPR compliance. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit security policies and incident response contacts are not publicly available. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable due to quota limits, the domain age and business history align with the website claims.

U

Up Hellas

uphellas.gr

62

Up Hellas is a Greece-based company specializing in designing and delivering digital-first employee benefits solutions including meal cards, gift cards, multi-gym memberships, and corporate expense management. The company targets B2B clients and their employees, positioning itself as an established provider in the Greek market. The website reflects a professional and consistent brand image with clear messaging about its services. Technically, the site is built on modern frameworks such as Next.js and Material-UI, with integrations for analytics, marketing, and cookie consent. Security posture is strong with HTTPS and security headers implemented, though explicit security and privacy policies are missing. The WHOIS data aligns with the business claims, supporting legitimacy. Overall, the site is well-designed, functional, and moderately privacy compliant but could improve transparency around privacy and incident response.

P

Prellball | Prellball.de

prellball.de

54

Prellball.de is a German-language informational website dedicated to the sport of Prellball, providing comprehensive coverage of leagues such as Bundesliga and Regionalliga, championships, training resources, and news updates. The site targets Prellball players, clubs, and enthusiasts primarily within Germany, serving as a niche community and information hub. The business model is informational with community engagement through newsletters and social media. Technically, the website is built using modern web technologies including React and Gatsby, ensuring fast performance and good mobile optimization. Hosting appears to be managed by 1&1 IONOS, inferred from the nameservers. The site uses minimal tracking via Simple Analytics, respecting user privacy. SEO and accessibility are adequately addressed, though some improvements could be made. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, security headers are not evident, and no formal security or incident response policies are published. Privacy compliance is basic but present with a privacy policy; cookie consent mechanisms are missing. No critical vulnerabilities or suspicious WHOIS patterns were detected, though WHOIS data is minimal. Overall, Prellball.de is a well-maintained, niche sports information site with good technical implementation and moderate security posture. Strategic improvements in security headers, cookie consent, and formal policies would enhance trust and compliance.

Cyberport is a well-established German electronics retailer founded in 1998, offering a wide range of consumer electronics including notebooks, PCs, tablets, smartphones, TVs, and audio equipment. The company operates a professional e-commerce platform targeting general consumers in Germany and neighboring regions. The website demonstrates a modern technical infrastructure built on Next.js and React, with Cloudflare providing DNS and CDN services. Security posture is strong with HTTPS enforced and consent management implemented, although explicit security headers and formal security policies are not evident. Privacy compliance is partially addressed via cookie consent mechanisms but lacks visible privacy and terms of service documentation in the provided content. Overall, Cyberport presents a credible and professional online presence with good business and technical maturity.

T

Tom Tailor

tom-tailor.at

69

Tom Tailor operates a professional e-commerce platform specializing in fashion apparel and accessories for women, men, and children, primarily targeting the Austrian market. The website presents a well-structured, modern design with integrated video marketing and a strong brand presence across multiple social media platforms. The business model focuses on retail sales with additional services such as store location finder and customer loyalty programs. Technical infrastructure leverages modern web technologies including React and Next.js, with third-party integrations for consent management and personalization. Security posture is robust with HTTPS enforcement and appropriate security headers, though WHOIS data is unavailable due to privacy protection. Overall, the site demonstrates a mature digital presence suitable for a large retail brand.

B

Brille24

brille24.at

72

Brille24 is a well-established online optician platform primarily serving the German market, offering a wide range of eyewear products including prescription glasses, sunglasses, and progressive lenses. The website demonstrates a strong market position with a comprehensive product catalog, brand partnerships, and customer-friendly policies such as money-back guarantees and free returns. The target audience includes consumers seeking affordable and stylish eyewear online. Technically, the site leverages modern frameworks like Next.js and React, supported by Akamai CDN for performance and New Relic for monitoring, ensuring a fast and responsive user experience across devices. Security measures are robust with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is evident with GDPR-aligned policies and cookie consent mechanisms. Overall, the site presents a professional, trustworthy, and user-friendly e-commerce platform with moderate to high digital maturity.

U

Universal Versand GmbH

universal-versand.at

65

Universal Versand GmbH is a well-established Austrian e-commerce retailer specializing in furniture, fashion, and household goods. The company targets general consumers within Austria, offering a broad product range through a modern and user-friendly online platform. The website demonstrates a strong market position as a regional leader in online retail, supported by comprehensive customer service and delivery options. Technically, the website leverages modern frameworks such as Next.js and React, hosted on Google Cloud infrastructure, ensuring fast performance and excellent mobile optimization. Security measures are robust, with HTTPS enforced and multiple security headers implemented, although there is room for improvement in public security policy disclosures and incident response transparency. Privacy compliance is well addressed with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the website presents a professional and trustworthy digital presence with a high level of technical maturity and business credibility.

B

Bielefeld Marketing GmbH

matchyourfuture.de

53

The website matchyourfuture.de is a professionally designed city marketing platform operated by Bielefeld Marketing GmbH, aimed at promoting the city of Bielefeld, Germany. It highlights the city's cultural, educational, economic, and recreational strengths through engaging content and an interactive quiz. The site targets potential residents, students, professionals, and tourists, positioning Bielefeld as a vibrant and attractive city. Technically, the site leverages modern web technologies including React and Next.js, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is well addressed with clear cookie consent and a comprehensive privacy policy. Overall, the site demonstrates high professionalism and trustworthiness, with strong social media integration and partner references.

B

Baumatpool

baumatpool.ch

63

Baumatpool is a Swiss online marketplace specializing in building materials and surplus stock, providing a platform for buyers and sellers within the construction sector. The website is well-positioned in the niche Swiss market, targeting construction professionals and individuals seeking building materials. It offers key services such as listing, searching, and advertising building materials. The business is linked to Agrarmedien AG, which appears to be the parent company managing related platforms. Technically, the site uses modern frameworks like Next.js and Chakra UI, with integrated analytics and consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS, security headers, and monitoring tools like Sentry, though explicit security policies and incident response contacts are not published. Overall, the site is professional, secure, and compliant with privacy regulations, though contact information is limited to forms and social media. Strategic recommendations include publishing dedicated security and incident response policies and enhancing direct contact options.

A

Agropool

agropool.ch

50

Agropool operates as a specialized online marketplace focused on new and used agricultural and municipal machinery, serving primarily the Swiss market. The platform offers a comprehensive catalog of machinery categories, facilitating easy search and purchase for farmers and related professionals. The website demonstrates a mature digital infrastructure leveraging modern web frameworks such as Next.js and React, complemented by Chakra UI for UI components. Analytics and error monitoring are implemented via Matomo and Sentry respectively, indicating a commitment to operational stability and user insights. Privacy and cookie compliance are well addressed with explicit policies and consent mechanisms. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and well-positioned in its niche.

P

pCon Solutions

pcon-catalog.com

47

The website catalogs.pcon-solutions.com serves as a digital catalog platform offering high-resolution 2D and 3D models and materials primarily targeted at architects, interior designers, and planners. The business appears to be a specialized technology provider in the architectural content space, delivering digital assets for integration into architectural plans. The site is professionally designed using modern web technologies such as React and Material-UI, providing a good user experience with responsive design and clear navigation. However, the lack of WHOIS registration data raises questions about domain legitimacy and ownership transparency. Security posture is moderate with HTTPS enforced and cookie consent implemented, but the absence of security headers and contact information for incident response are notable gaps. Privacy compliance is addressed with a cookie policy and privacy policy links, indicating awareness of GDPR requirements. Overall, the site is functional and professional but would benefit from improved transparency and security practices.

B

Bergbahn Aktiengesellschaft Kitzbühel

kitzski.at

50

Bergbahn Aktiengesellschaft Kitzbühel operates the KitzSki website, providing comprehensive mountain tourism services including summer hiking, trail biking, and winter skiing in the Kitzbühel region of Austria. The company is well-positioned as a leading ski and mountain resort with multiple certifications and a strong brand presence. Their website is modern, mobile-optimized, and offers multilingual support, enhancing accessibility for international visitors. The technical infrastructure leverages modern frameworks such as Next.js and React, ensuring good performance and user experience. Security posture is strong with HTTPS enforcement and standard security headers, though there is room to improve transparency by publishing dedicated security policies and incident response contacts. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website and business demonstrate high professionalism and trustworthiness, supporting their market leadership in mountain tourism.

마

마이페어(MyFair)

myfair.co

63

마이페어(MyFair) is a Korean-based online platform specializing in overseas exhibition booth reservation and comprehensive participation management services. The platform targets businesses, including SMEs, startups, and organizations seeking to participate in global trade shows. It offers key services such as exhibition search, booth reservation, professional partner matching, and management of exhibition-related tasks. The website is professionally designed with a clear structure and good user experience, primarily in Korean language, catering to the Korean market. Technically, the site uses modern frameworks like Next.js and React, integrates multiple marketing and analytics tools, and is hosted on a reliable CDN infrastructure. Security measures include HTTPS enforcement and standard security headers, although explicit privacy and cookie policies are missing. Overall, the site demonstrates a moderate to good security posture with room for improvement in privacy compliance and contact transparency.

Fundación "la Caixa" is a well-established Spanish non-profit foundation with over a century of history dedicated to social, cultural, educational, and scientific initiatives. It operates as a key player in the non-profit sector in Spain, leveraging its strong brand and affiliation with CaixaBank. The website reflects a mature digital presence with comprehensive content aimed at beneficiaries, donors, and partners. Technically, the site is built on the Liferay CMS platform, utilizing modern JavaScript frameworks and integrates multiple analytics and marketing tools, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and domain protections in place, though improvements such as DNSSEC and enhanced security headers could be implemented. Privacy compliance is robust, with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the website and domain registration data indicate a trustworthy and professional organization with a strong market position in the non-profit sector.

F

Fiducial

fiducial.com

72

Fiducial is a financial services company providing a broad range of advisory and operational services including tax, payroll, bookkeeping, retirement planning, pension management, BPO, CFO outsourcing, and merger and acquisition advice. The company targets businesses and individuals seeking expert financial guidance and support. The website reflects a professional and consistent brand image with a focus on trust and reliability in the finance sector. Technically, the site employs modern web technologies such as React and service workers, indicating a moderate level of digital maturity. Google Tag Manager is used for analytics and tracking, but no advanced security headers or explicit privacy policies were detected, suggesting room for improvement in security and compliance. Overall, the security posture is moderate with no critical vulnerabilities detected, but the absence of privacy and cookie policies and security headers reduces the compliance score. The domain registration data aligns well with the business identity, supporting legitimacy. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and providing clear contact information for security incidents to improve trust and compliance.

C

Centrum Air

centrum-air.com

57

Centrum Air is a private airline company based in Uzbekistan, founded in 2023, offering affordable flight tickets primarily from Tashkent to various regional and international destinations. The website provides a modern booking platform built on Next.js and React, featuring multiple flight routes, schedules, and additional services such as extra baggage, seat selection, and wheelchair rental. The technical infrastructure is contemporary with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the business appears legitimate and focused on transportation services with a clear market presence in Uzbekistan and surrounding regions.

A

Venues | AXS Map

axsmap.com

57

AXS Map is an accessibility-focused online platform designed to help users find and map inclusive venues and community spaces. The website leverages modern web technologies including React and Google Maps API to deliver an interactive user experience. The platform supports community engagement through mapathons and team collaboration features, targeting individuals seeking accessibility information. The domain is well-established since 2010, indicating a mature presence in its niche. Technically, the website is built on a modern JavaScript framework with integration of Google services and is hosted with DNS managed by Cloudflare. Performance and mobile optimization are adequate, though accessibility features could be enhanced. Security posture is reasonable with HTTPS enforced and domain protections in place, but lacks DNSSEC and security headers which are recommended for improved security. From a compliance perspective, the site currently lacks visible privacy, cookie, and terms of service policies, which are important for GDPR and general privacy compliance. No contact or incident response information is provided, limiting transparency and user trust. Google Analytics is used for tracking without a visible consent mechanism, indicating potential privacy compliance gaps. Overall, AXS Map presents a focused and professional service with good technical foundations but would benefit from enhanced security practices and privacy compliance measures to strengthen trust and regulatory adherence.

C

cloudscale.ch Ltd.

cloudscale.ch

11

cloudscale.ch Ltd. is a Swiss-based Infrastructure-as-a-Service (IaaS) cloud provider specializing in scalable root servers with a strong emphasis on security, high availability, and performance. Their services target developers, engineers, tech leads, and CISOs who require reliable cloud infrastructure hosted entirely in Switzerland, ensuring data sovereignty and legal clarity. The company offers virtual servers, load balancers, object storage, and GPU servers with transparent pricing and developer-friendly tools such as API and control panel management. The website reflects a professional and trustworthy brand with clear contact information and customer testimonials. Technically, the website is built on a modern Next.js framework with React, optimized for fast performance and mobile responsiveness. The site uses standard SEO practices including Open Graph and Twitter Card metadata. No CMS is detected, indicating a custom-built platform. The hosting provider is not explicitly stated but is likely Swiss-based or self-hosted. Accessibility and SEO optimizations are good, contributing to a positive user experience. From a security perspective, the website enforces HTTPS and uses secure forms for user input. However, no explicit security headers were detected in the HTML content, and there is no published security policy or vulnerability disclosure page. The presence of an abuse contact email indicates some incident response readiness. Privacy compliance is mostly met with a comprehensive privacy policy and terms of service, but the absence of a cookie consent mechanism is a minor compliance gap. Overall, cloudscale.ch presents a secure, professional, and credible cloud service offering with strong Swiss data protection positioning. Strategic recommendations include implementing security headers, adding a cookie consent mechanism, publishing a vulnerability disclosure policy, and enhancing transparency around security frameworks and data protection officer contact details to further strengthen trust and compliance.

H

HC24 GmbH & Co. KG

hc24.de

55

HC24 GmbH & Co. KG operates an online platform specializing in furnished temporary housing rentals across Germany. The website offers a user-friendly search and booking experience for furnished apartments, rooms, and houses, targeting individuals seeking flexible living arrangements. The company positions itself as a trusted intermediary with verified listings and customer support. Technically, the website is built on modern frameworks such as Next.js and React, with media assets hosted on Amazon S3, ensuring a moderate to good performance and mobile optimization. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism, though lacks visible security headers and explicit security or privacy policy pages. Overall, the site is professional, trustworthy, and compliant with basic privacy regulations, but could improve transparency and security posture by publishing detailed policies and contact information.

P

Poper

showpopup.com

72

Poper is a technology company offering an AI-powered onsite engagement platform that enhances user interactions, retention, and conversion rates through smart popups, widgets, notifications, and gamification tools. The company targets website owners, e-commerce stores, and marketers seeking to improve engagement and sales. Their market position is supported by serving over 2000 brands and providing a comprehensive suite of AI-driven marketing tools. Technically, the website is built on modern frameworks such as Next.js and React, with good SEO, mobile optimization, and performance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although no explicit security policy or incident response contacts are published. Overall, the website is professional, trustworthy, and well-structured, with privacy and cookie policies in place. WHOIS data is privacy protected, which is justified for this SaaS business, but limits registrant transparency.

2

20 Minuten

20minuten.ch

77

20 Minuten is the largest Swiss news portal offering 24/7 news coverage, videos, and community features primarily targeting the German-speaking Swiss audience. The website demonstrates a mature digital infrastructure using modern frameworks such as Next.js and React, supported by various third-party analytics and advertising technologies. Security posture is solid with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed through cookie consent mechanisms and a comprehensive privacy policy. Overall, the website presents a professional, trustworthy, and user-friendly platform with extensive content and good technical implementation.

A

Alexis Regnaud

alexisregnaud.com

60

Alexis Regnaud is a freelance web and mobile developer with over 10 years of experience, including 5 years at Samsung. The website showcases his expertise in creating custom web and mobile interfaces using modern technologies such as React, Next.js, and React Native. The business model is focused on freelance services with collaboration from trusted partners, targeting clients seeking high-quality digital solutions. Technically, the site is built on a modern stack with excellent performance and mobile optimization. Security posture is good with HTTPS and reCAPTCHA integration, though it lacks some security headers and formal privacy policies. The absence of WHOIS registration data is a concern for domain legitimacy but does not detract from the professional presentation of the site. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security documentation.

C

Clean my Calanques

cleanmycalanques.fr

56

Clean my Calanques is a Marseille-based non-profit association founded in 2017, dedicated to environmental preservation and raising awareness about ecological issues. The organization focuses on organizing regular clean-up events, educating youth, and fostering partnerships with local businesses and communities. Their website reflects a strong local presence with clear mission statements and community engagement metrics. Technically, the site is built using modern web technologies such as React and Gatsby, hosted via OVH, and integrates Google Tag Manager for analytics. Security posture is solid with HTTPS enabled and no critical vulnerabilities detected, although some security headers could be improved. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission.

A

Axon Enterprise, Inc.

axon.com

70

Axon Enterprise, Inc. is a leading technology company specializing in public safety solutions, including TASER devices, police body cameras, cloud-based evidence management, AI-powered tools, and drone detection systems. The company targets law enforcement, federal agencies, enterprise, fire, EMS, corrections, and campus safety sectors, positioning itself as a market leader with a comprehensive ecosystem designed to protect life and enhance public safety operations. The website reflects a mature digital presence with modern technologies such as React and Next.js, hosted on AWS with strong performance and mobile optimization. Security posture is robust with HTTPS, security headers, and privacy policies in place, though explicit vulnerability disclosure and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting Axon's reputation as a credible enterprise in the public safety technology market.

TransPak AG is a well-established German packaging supplier with over 50 years of experience, serving business customers across Germany, Austria, and Switzerland. The company offers a broad range of over 40,000 packaging products and related services including logistics, eProcurement, and packaging machine support. Their market position is strong, supported by multiple physical locations and certifications such as ISO 9001 and 14001. Technically, the website is built on modern frameworks like Next.js and React, with good performance, mobile optimization, and SEO practices. Security posture is robust with HTTPS, security headers, and secure forms, though incident response details are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations.

D

Direktoratet for forvaltning og økonomistyring (DFØ)

doffin.no

67

Doffin.no is an official Norwegian government website operated by the Direktoratet for forvaltning og økonomistyring (DFØ). It serves as a comprehensive database for public procurement announcements, enabling public sector entities and suppliers to access procurement data to improve transparency and decision-making. The platform holds a strong market position as the national official source for public procurement information in Norway, targeting government agencies and suppliers. The website is well-branded, consistent, and professionally designed with a focus on usability and accessibility. Technically, the site leverages modern web technologies including React and Matomo analytics, ensuring a responsive and accessible user experience. The site is served over HTTPS with appropriate security headers, reflecting a good security posture. However, it lacks visible cookie consent mechanisms and published security or incident response policies, which are areas for improvement to enhance privacy compliance and transparency. Security-wise, the platform demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. The absence of a vulnerability disclosure policy and incident response contact reduces transparency but does not indicate immediate risk. Overall, the site is trustworthy and secure for its intended audience. The overall risk assessment is low, with recommendations focusing on improving privacy compliance by implementing cookie consent, publishing security policies, and adding terms of service. These steps will strengthen user trust and regulatory adherence while maintaining the platform's role as a critical government service.

I

IngenCO2.dk

co2neutralwebsite.de

54

IngenCO2.dk operates the CO2-neutral website certification platform, www.co2neutralwebsite.de, providing brands and website owners with a service to offset their websites' carbon footprint by supporting global CO2 reduction projects certified by the Gold Standard. The platform is well-positioned in the sustainability market with over 32,000 websites certified, trusted by notable partners and audited by BDO for CO2 compensation accuracy. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content in German, targeting environmentally conscious businesses and organizations. Technically, the site leverages modern frameworks such as Next.js and React, integrates Google Analytics and Tag Manager for analytics, and uses Cloudflare for DNS and likely CDN services, ensuring fast and secure delivery. Security posture is strong with HTTPS enforced and bot protection via Google reCAPTCHA, though explicit security headers and incident response policies could be improved. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

C

codin GmbH

codin.ch

76

codin GmbH is a Swiss-based managed IT service provider specializing in comprehensive IT solutions for small and medium-sized enterprises (KMU). Their offerings include IT support, Microsoft 365 services, cybersecurity, procurement, training, and backup management, all provided at a fixed monthly price. Positioned as an external IT department, codin GmbH aims to simplify and secure IT operations for SMEs, allowing clients to focus on their core business. The website reflects a professional and modern digital presence, leveraging Next.js and Vercel hosting for performance and scalability. Cookie consent is managed effectively through Cookiebot, ensuring compliance with data privacy norms. Security posture is strong with HTTPS and appropriate security headers, though explicit privacy policy and terms of service pages are currently missing, representing areas for improvement. Overall, codin GmbH demonstrates a credible and trustworthy business with a clear market focus and solid technical infrastructure.

Schleswig-Holstein Netz GmbH operates as a regional energy network operator serving Schleswig-Holstein and parts of Nordniedersachsen in Germany. The company provides essential services including electricity and gas network connections, energy feed-in, and customer support portals. The website is professionally designed, well-structured, and targets both residential and commercial customers in the energy sector. The presence of multiple customer portals and detailed service information indicates a mature digital presence. Technically, the site leverages modern JavaScript frameworks like React, integrates consent management via Usercentrics, and uses analytics tools such as Matomo and Google Tag Manager, reflecting a good level of digital maturity. Security posture is strong with HTTPS enforced, consent mechanisms in place, and no obvious vulnerabilities detected. However, the absence of publicly available WHOIS registration data for the domain www.sh-netz.com raises concerns about domain legitimacy and ownership transparency. This discrepancy should be addressed to improve trust. Overall, the site is a reliable and professional resource for energy network customers but would benefit from clearer domain registration information and enhanced security policy disclosures.

VDMA is a prominent German and European industry association representing approximately 3,600 companies in the machinery and plant engineering sector. The organization focuses on innovation, export orientation, and supporting medium-sized enterprises. Their website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to industry professionals and stakeholders. The technical infrastructure is based on the Liferay CMS platform, leveraging modern JavaScript frameworks and analytics tools, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforcement, consent management, and use of security best practices, although explicit security headers could be enhanced. Overall, the site demonstrates compliance with GDPR and provides clear contact and privacy information, supporting trust and credibility.

I

Inigo

inigo.com

66

Inigo is a specialized UK-based estate agency focusing on the sale and marketing of historic and architecturally significant homes. The company targets discerning buyers and sellers interested in authentic British homes with rich stories and heritage. Their market position is niche but well-defined, supported by professional branding and trust indicators such as accreditation by The Property Ombudsman and Trading Standards. The website offers comprehensive property listings, editorial content, and customer engagement tools such as newsletters and property alerts. Technically, the website is built on modern frameworks including Next.js and React, with integrations for analytics (Google Analytics) and marketing automation (Klaviyo). The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some improvements in security headers and incident response transparency are recommended. The SSL configuration is excellent, ensuring secure communications. From a security perspective, the site enforces HTTPS and provides cookie consent mechanisms aligned with GDPR requirements. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. No security.txt or incident response information is published, which could be improved to enhance security posture and customer trust. Overall, Inigo presents a professional and trustworthy online presence for its real estate business, but domain registration opacity and minor security best practice gaps suggest areas for improvement. Strategic recommendations include verifying domain registration details, implementing security headers, publishing security policies, and enhancing incident response readiness.

P

Pinterest

pinterest.dk

74

Pinterest is a globally recognized visual discovery and social media platform that enables users to find and share ideas such as recipes, home decor, and style inspiration. The Danish localized site (dk.pinterest.com) reflects the company's commitment to regional markets with tailored content and language support. Pinterest operates primarily on an advertising-based business model, leveraging user engagement to deliver targeted ads. The website demonstrates a mature technical infrastructure using modern JavaScript frameworks like React, advanced security measures including HTTPS and Content Security Policy, and integrations with reputable third-party services for advertising and fraud prevention. The security posture is strong, with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive policies and consent mechanisms aligned with GDPR requirements. Overall, the site presents a professional, trustworthy, and user-friendly experience suitable for a broad audience.

G

Gatsby

gatsbyjs.com

68

Gatsby is a leading React-based open source framework designed for building performant, scalable, and secure websites and applications. It targets developers and enterprises seeking fast web development with modern technologies such as React and GraphQL. The company is positioned strongly in the web development ecosystem, supported by its parent company Netlify, which provides deployment and hosting services. The website reflects a mature digital presence with excellent design, mobile optimization, and SEO practices. Technically, Gatsby leverages modern JavaScript frameworks and integrates with reputable platforms, ensuring a robust infrastructure. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly documented. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including GDPR considerations. Overall, the website and business demonstrate high professionalism and trustworthiness, though WHOIS data is unavailable likely due to privacy protection, which slightly impacts business credibility scoring.

M

Milka

milka.com

66

Milka.com is the official website for the Milka brand, a well-known confectionery company specializing in chocolate products. The site targets German-speaking consumers, offering product information, promotions, and community engagement. The website is built using modern web technologies such as React and Gatsby, with a responsive design optimized for mobile devices. Security posture is strong with HTTPS enforced and standard security headers present, though no explicit incident response or vulnerability disclosure policies are found. The absence of WHOIS data is unusual but the website's professional presentation and brand consistency support its legitimacy. Overall, the site is well-constructed, secure, and user-friendly, though improvements in transparency and contact information could enhance trust.

S

Senab Eikeland

senabeikeland.no

71

Senab Eikeland is a Norwegian company specializing in furniture and interior solutions with a strong emphasis on sustainability and circular economy principles. The company offers a range of services including furniture sales, refurbishment, flexible leasing, and digital portfolio management. Their market position is that of a medium-sized, reputable player in the Norwegian real estate and interior design sector, targeting businesses and organizations seeking tailored and sustainable furniture solutions. Technically, the website is built on modern frameworks such as Next.js and uses Sanity CMS, ensuring a good level of digital maturity and performance. Security-wise, the site employs HTTPS and Google reCAPTCHA v3, with standard security headers, but lacks explicit security policies and incident response information. Overall, the website is professional and trustworthy, though improvements in privacy compliance and contact transparency are recommended.

S

SED Digital

seddigital.co.uk

60

SED Digital is a UK-based digital agency specializing in web build and development, UI & UX design, and digital marketing services. Founded in 2024, it operates as a division of Steve Edge Design and targets businesses seeking creative and data-driven digital solutions. The company offers a broad range of services including e-commerce, SEO, CRO, paid media, and digital analytics, positioning itself as a comprehensive partner for digital growth across multiple sectors such as real estate, professional services, hospitality, legal, technology, retail, design & architecture, and banking & finance. The website reflects a professional and modern digital presence with excellent design and user experience. Technically, the website is built on a modern stack using Next.js and React, with WordPress likely serving as a headless CMS. It is hosted by Fasthosts Internet Ltd, a reputable provider. The site demonstrates good performance, mobile optimization, and SEO practices. Analytics are implemented via Google Tag Manager, and a cookie consent mechanism is present, indicating attention to privacy compliance. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and a published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. The domain registration is recent but consistent with the company's founding date and registrar information, supporting legitimacy. Overall, SED Digital presents a trustworthy and professional digital agency with a strong technical foundation and good privacy practices. Enhancements in security policy transparency and incident response readiness would further strengthen its security posture.

M

Milka

milka.de

67

Milka is a well-established confectionery brand specializing in chocolate products, with a strong market presence primarily in Germany and Europe. The website serves as a brand engagement platform offering product information, promotions, and community interaction. The technical infrastructure is modern, leveraging React and Gatsby frameworks with Tailwind CSS for styling, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced, appropriate security headers, and GDPR-compliant privacy and cookie policies. However, WHOIS data is unavailable, which is common for large brands using privacy protection services. Overall, the website is professional, trustworthy, and secure, supporting Milka's brand reputation effectively.