Security Directory

I

Ideogen AG

ideogen.com

49

Ideogen AG is a Switzerland-based pharmaceutical partner specializing in specialty therapeutics, orphan and rare disease care, and medical concierge services. The company targets healthcare professionals, biotech and pharmaceutical companies, and patient advocacy groups primarily across Europe, CIS, and MENA regions. Their business model focuses on providing managed access programs, regulatory support, and lifecycle management for specialty medicines. The website reflects a medium-sized, well-established company with a clear market niche and professional branding. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap, Slick Carousel, and animation frameworks like AOS and WOW.js, indicating a mature digital infrastructure. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and security. The site is mobile optimized with good SEO and accessibility basics, though some improvements are possible. From a security perspective, HTTPS is enforced, and no sensitive data is exposed. However, the absence of security headers and explicit incident response policies suggests room for improvement. Privacy compliance is adequate with clear privacy and cookie policies, though a cookie consent mechanism is missing. Contact information is comprehensive, enhancing business credibility. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing incident response details, and adding vulnerability disclosure information to strengthen security posture and compliance.

G

Gebro Pharma AG

gebro.ch

10

Gebro Pharma AG is a Swiss pharmaceutical company specializing in healthcare products targeting indications such as rheumatology, pain, cold and cough, dermatology, and rare diseases. The company maintains a professional web presence with clear contact information and product navigation, serving healthcare professionals and patients primarily in Switzerland. The website is well-structured, mobile-optimized, and uses modern web technologies including JavaScript libraries and Google Tag Manager for analytics and marketing. From a technical perspective, the site employs asynchronous script loading and modern UI components like sliders and form validation, indicating a mature digital infrastructure. However, it appears to use a custom or proprietary CMS platform rather than a common open-source CMS. Performance is moderate with good mobile responsiveness and accessibility features. Security posture is solid with HTTPS enforced and spam protection on login forms, but lacks visible security headers and a public security policy or incident response contact. Privacy compliance is partial; while a privacy policy and terms of service are present, there is no cookie consent mechanism detected, which is a GDPR compliance gap. Overall, the website is trustworthy and professional with a high legitimacy score based on WHOIS data consistency and business information alignment. Strategic improvements in privacy compliance and security transparency would enhance trust and regulatory adherence.

M

MSD Merck Sharp & Dohme AG

msd.ch

66

MSD Merck Sharp & Dohme AG operates as a leading pharmaceutical company in Switzerland, focusing on research, development, and distribution of medicines and vaccines. With a strong presence in Luzern and Zürich and a workforce of approximately 1000 employees, MSD serves patients, medical professionals, and researchers. The website reflects a mature digital presence with comprehensive content about the company, its products, research activities, and career opportunities. The business model centers on innovation in healthcare, clinical trials, and patient support services, positioning MSD as a key player in the Swiss pharmaceutical market under the global Merck & Co. umbrella. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Tiny Slider, ensuring good SEO and user experience. The site is mobile-optimized, accessible, and employs cookie consent mechanisms compliant with GDPR. Google Tag Manager is used for analytics and marketing, indicating a moderate level of user tracking balanced with privacy compliance. From a security perspective, the site enforces HTTPS, includes standard security headers, and uses a cookie consent banner to manage user privacy. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly available, which could be improved to enhance trust and compliance. Overall, MSD.ch is a professional, trustworthy, and well-maintained website representing a reputable healthcare company. The risk level is low, with recommendations focusing on enhancing transparency around security policies and incident response to further strengthen the security posture and user trust.

Johnson & Johnson Innovative Medicine is a division of the multinational healthcare giant Johnson & Johnson, focusing on pharmaceutical research and development of innovative medicines. The website serves as a professional platform targeting healthcare professionals, researchers, and stakeholders, providing information about their commitment to advancing healthcare solutions globally. The site demonstrates a mature digital presence with modern web technologies, including Google Tag Manager for analytics and OneTrust for cookie consent management. The technical infrastructure is robust, with good mobile optimization and accessibility features, although some security headers are not explicitly detected in the provided content. The security posture is strong with HTTPS enforced and no visible vulnerabilities, but the absence of explicit privacy policies and contact information for security incidents suggests room for improvement in transparency and compliance. Overall, the website reflects a high level of professionalism and trustworthiness consistent with a large enterprise healthcare organization.

I

IMK Ltd.

imk.ch

54

IMK Ltd. is a Swiss-based company specializing in organizing congresses and facilitating communication within the healthcare sector. Established in 1993 and headquartered in Basel, it serves as an intermediary promoting exchange between doctors, patients, and industry stakeholders. The company maintains a professional online presence with detailed event listings and active engagement in healthcare-related activities. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries and ensuring good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and incident response information are absent. Privacy policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the website and business demonstrate high credibility and trustworthiness within their niche.

The website www.perplexity.ai is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to its content. This prevents extraction of meaningful business, contact, or policy information. The domain WHOIS data is malformed and does not provide registrant or creation details, indicating privacy protection or data withholding. The site uses Cloudflare services for security and analytics, but no other technologies or CMS are detectable. Due to the blocked content, the security posture cannot be fully assessed, though the presence of Cloudflare WAF indicates some level of protection. Overall, the site lacks publicly visible compliance or business credibility indicators at this time.

A

Anthropic

anthropic.com

62

Anthropic is a public benefit corporation specializing in AI safety research and the development of reliable, interpretable, and steerable AI systems. The company positions itself as a leader in AI safety, offering both research insights and commercial AI products such as Claude. The website reflects a professional and modern digital presence, targeting AI researchers, developers, and enterprises interested in safe AI technologies. Technically, the site leverages modern web technologies including Webflow CMS, advanced analytics platforms, and interactive Lottie animations, indicating a mature and well-maintained infrastructure. Security posture is strong with HTTPS enforcement and no visible vulnerabilities, though some improvements in security headers and cookie consent mechanisms are recommended. Overall, the site demonstrates high professionalism and trustworthiness, though the absence of WHOIS data introduces a minor uncertainty in domain legitimacy. Strategic recommendations include enhancing privacy compliance, publishing terms of service, and providing clearer contact channels for incident response.

M

Moosend

moosend.com

68

Moosend is a mature and reputable SaaS company specializing in email marketing and marketing automation solutions. Founded in 2009, it offers a comprehensive platform featuring email campaign management, marketing automation, landing pages, subscription forms, transactional emails, and AI-powered content generation. The company targets businesses and marketers seeking intuitive and effective digital marketing tools, positioning itself as a leading provider with a strong market presence and a consistent brand image. Technically, the website is built on WordPress and leverages modern web technologies including Google Tag Manager, Google Analytics, Microsoft Clarity, and various JavaScript libraries for enhanced user experience and analytics. Hosting is inferred to be on Amazon AWS infrastructure, ensuring reliable performance and scalability. The site is mobile-optimized, SEO-friendly, and demonstrates excellent design and navigation quality. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, with domain registration details indicating strong legitimacy and protection against unauthorized domain changes. However, DNSSEC is not enabled, and security headers are not explicitly detected, representing areas for improvement. Privacy compliance is generally good with a comprehensive privacy policy and terms of service, though a cookie consent mechanism is absent. Overall, Moosend's website reflects a professional, trustworthy, and secure digital presence suitable for its business model. Strategic recommendations include enabling DNSSEC, implementing security headers, and adding explicit cookie consent to enhance privacy compliance and security posture.

F

Fresenius Kabi, s.r.o.

nizkobilkovinnadieta.cz

52

The website nizkobilkovinnadieta.cz is an informational platform focused on dietary guidance for patients with chronic kidney disease (CKD), operated by Fresenius Kabi, s.r.o., a recognized healthcare company in the Czech Republic. It provides recipes, educational materials, and treatment options related to CKD nutrition. The site targets patients and healthcare professionals seeking specialized diet information. Technically, the site is built on WordPress with common plugins such as Yoast SEO and Complianz GDPR for SEO and privacy compliance. It uses HTTPS and includes a cookie consent mechanism, indicating a good level of privacy awareness. However, no advanced security headers were detected, and WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is understandable given the healthcare context. Overall, the site presents a professional and trustworthy resource with moderate technical sophistication and good compliance with privacy regulations.

M

Medworld AG

scs-congress.ch

61

The Swiss College of Surgeons Annual Meeting 2026 website is a professionally designed platform promoting a major surgical congress in Luzern, Switzerland. It targets medical professionals and surgeons, providing comprehensive event information, registration, and program details. The site is multilingual and well-structured, reflecting a mature digital presence for a specialized healthcare event. The business behind the site, Medworld AG, is a recognized professional congress organizer, enhancing the site's credibility. Technically, the website employs modern web technologies including Bootstrap 5, Font Awesome 6, and October CMS, ensuring responsive design and good user experience across devices. SEO is supported by structured data and proper meta tags. Analytics are implemented via Google Tag Manager with IP anonymization, indicating moderate user tracking. Security posture is solid with HTTPS enforced and secure form handling, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partial; a privacy policy is present but no cookie consent mechanism is detected, which is a gap for GDPR compliance. Contact information is clearly provided, supporting business credibility. Overall, the site is trustworthy, professional, and suitable for its audience, with recommendations to enhance privacy compliance and security headers to further strengthen its posture.

S

Swiss Visceral Surgeons

viszeralchirurgie.ch

50

Swiss Visceral Surgeons (SGVC) is a professional medical society dedicated to promoting and securing the field of visceral surgery within Switzerland. The organization provides education, certification, and advocacy services to medical professionals specializing in visceral surgery. Their website reflects a strong national presence with clear membership and educational offerings, including congresses, courses, and fellowships. The target audience is primarily healthcare professionals in Switzerland. Technically, the website employs modern web technologies such as Vue.js, Three.js for visual effects, and Flickity for carousels, hosted likely on a CMS platform (Statamic). The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements. However, explicit security headers and incident response policies are not present, representing areas for improvement. Overall, the domain registration data is consistent with the website's claims, indicating legitimacy and trustworthiness.

S

Schweizer Gesellschaft für Chirurgie

sgc-ssc.ch

51

The Schweizer Gesellschaft für Chirurgie (SGC) is a professional medical society representing surgeons in Switzerland. The website serves as a comprehensive portal offering information on education, specialist examinations, events, and official publications such as the SwissKnife. It targets medical professionals and surgeons, providing them with resources and membership services. The organization holds a strong market position as a national professional association with a clear focus on continuing education and quality assurance in surgery. Technically, the website employs modern web technologies including JavaScript ES modules, Vue.js components, and Three.js for interactive WebGL effects. It uses Statamic CMS inferred from consent management keys and integrates privacy-focused analytics via Plausible. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with multi-language support enhancing its reach. From a security perspective, the site enforces HTTPS and implements a consent management system for cookies, reflecting good privacy practices. However, explicit security headers and a published security policy or incident response contact are absent, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It demonstrates a mature digital presence suitable for its audience. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a security.txt file to improve transparency and incident response readiness.

The Schweizerische Gesellschaft für Kinderchirurgie (SGKC) is a specialized medical society focused on pediatric surgery in Switzerland. It serves as a professional community for experts and practitioners, providing education, training, and collaborative opportunities. The website reflects a well-structured, professional organization with clear communication of its mission and activities, targeting medical professionals and members. Technically, the site is built on WordPress using modern themes and plugins, ensuring a good user experience and mobile responsiveness. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and formal vulnerability disclosure policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or explicit GDPR compliance indicators. Overall, the site is trustworthy and serves its audience effectively, though improvements in security and privacy practices are recommended.

S

Schweizerische Gesellschaft für Gefässchirurgie

swissvasc.ch

50

The Schweizerische Gesellschaft für Gefässchirurgie is a leading Swiss professional society dedicated to vascular surgery. It focuses on promoting excellent patient care, innovative research, and continuous education for vascular surgeons and medical professionals. The website serves as a comprehensive resource for members and interested parties, offering information on events, training, and the Swissvasc registry. Technically, the site employs modern web technologies including Vue.js and WebGL for interactive content, and uses privacy-respecting analytics (Plausible). The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and cookie consent mechanisms but lacks explicit security headers and a published security policy or incident response contacts. Overall, the domain registration aligns well with the organization's identity, indicating legitimacy and trustworthiness.

R

Reset Production e.K.

resetproduction.de

56

Reset Production e.K. is a German event production company specializing in live shows, musicals, and tribute performances across Germany. The company offers end-to-end services from concept to ticket sales, positioning itself as a key player in the German live entertainment market. Their website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins and frameworks, hosted on German infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the company demonstrates strong business credibility with clear contact information and compliance with GDPR.

Messe Husum & Congress GmbH & Co. KG operates a professional event venue located in Husum, Germany, specializing in hosting trade fairs, conferences, private celebrations, and stage programs. The company holds a strong regional market position in Schleswig-Holstein, offering versatile spaces and modern facilities for events ranging from small meetings to large-scale exhibitions. Their website reflects a well-established business with clear branding and comprehensive service offerings targeting event organizers and private clients. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and DNSSEC are recommended. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website and business demonstrate professionalism and trustworthiness, with room for technical and security enhancements.

C

CEC Praha a.s.

starcasinopruhonice.cz

65

Star Casino Průhonice is a well-established casino located near Prague, Czech Republic, operated by CEC Praha a.s. The casino offers a wide range of gaming options including over 120 modern slot machines, live card games, and American roulette with low minimum bets. Additional amenities include a fully stocked bar, private parking, and a VIP shuttle service. The business targets adult customers interested in gambling and entertainment, positioning itself as a regional leader with multiple sister casinos. Technically, the website uses modern JavaScript libraries and CSS frameworks, providing a responsive and visually appealing user experience. Security posture is solid with HTTPS and GDPR-compliant cookie consent, though it lacks some advanced security headers and explicit privacy and terms of service pages. Overall, the site is professional and trustworthy, but the absence of WHOIS data reduces transparency. The content is adult-oriented due to gambling services and includes appropriate age verification and warnings.

S

Nové online casino s výherními automaty | Starcasino.cz

star-casino.cz

63

Starcasino.cz is an online casino platform primarily targeting Czech-speaking adult users interested in gambling and slot machine games. The website emphasizes its 25 years of fair play and offers jackpots and a level system to engage players. The site is built using modern web technologies including Angular and integrates Google Tag Manager for analytics. However, the absence of WHOIS registration data and lack of visible privacy or cookie policies indicate gaps in transparency and compliance. Security headers and advanced security configurations are not evident, which may expose the platform to certain risks. Overall, the site presents a professional gambling service but would benefit from enhanced compliance and security measures to improve trustworthiness and regulatory adherence.

N

NetWork Team

nw-team.de

57

NetWork Team is a German-based small technology company specializing in full-service internet provision and network solutions. Their offerings include internet project development, hosting, cloud services, IT hardware and software licensing, IT consulting, and security services. The company targets small and medium enterprises as well as public institutions primarily in the Osnabrück region. The website is professionally designed, content-rich, and consistent with the company's branding and service portfolio. Technically, the site uses modern JavaScript libraries such as jQuery and Swiper.js and is built on the Sites-365 CMS platform. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Security posture is good with HTTPS enabled and no exposed sensitive data, but lacks some security headers and explicit incident response information. Privacy compliance is partially met with a comprehensive privacy policy but no cookie consent mechanism. Overall, the domain registration data aligns well with the website content, indicating legitimacy. Recommendations include adding cookie consent, security headers, and explicit contact information for security incidents to improve compliance and trust.

A

AFS Intercultural Programs

globalup.com

60

The Global Up website represents the AFS Intercultural Programs' Global Competence Certificate (GCC) initiative, a well-established non-profit educational program focused on developing global skills through blended learning. The site is professionally designed, content-rich, and targets students, educators, and professionals worldwide. It leverages modern web technologies including WordPress, Gravity Forms, and Google reCAPTCHA to provide a secure and user-friendly experience. The presence of multiple contact channels, social media integration, and downloadable resources enhances engagement and trust. However, the absence of WHOIS registration data for the domain www.globalup.com raises transparency concerns, although the website content and branding strongly align with the reputable AFS organization. Security posture is solid with HTTPS and CAPTCHA protections, but could be improved by implementing explicit security headers and formal incident response policies. Overall, the website is a credible and valuable resource for global competence education with moderate risk due to domain registration opacity.

H

HyperView Spółka z o.o.

hyperview.pl

60

HyperView Spółka z o.o. is a Polish IT company specializing in software systems for spatial data management and local government administration. Their product portfolio includes solutions such as ISDP, Geoportal Toolkit, and administrative workflow systems, targeting public sector clients and organizations managing spatial information. The company demonstrates a solid market position with multiple successful projects and a clear focus on delivering tailored IT solutions for spatial management. Technically, the website is built on a modern Angular framework with integration of mapping libraries like OpenLayers, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, though improvements are recommended in security headers and privacy compliance mechanisms. Overall, the website reflects a professional and trustworthy business presence with clear contact information and client testimonials, supporting a medium-sized enterprise profile in the technology sector.

e-line Systemy Internetowe is a small Polish technology company specializing in internet systems and software development, primarily serving business and local government clients. The website is currently under reconstruction, providing limited content but clear contact information and a professional business focus. The technical infrastructure is basic, utilizing HTML, CSS, and an outdated version of jQuery, with no detected CMS or advanced frameworks. Security posture is weak due to lack of visible HTTPS confirmation, missing security headers, and outdated libraries. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the website presents a modest digital presence with room for significant improvements in security, privacy, and technical modernization.

U

Urząd Miasta Zielona Góra

zielonagora.pl

60

The website www.zielona-gora.pl is the official online portal for the City Office of Zielona Góra, Poland. It serves as a government information hub providing residents, visitors, and businesses with access to city authorities, departments, local districts, public services, cultural events, and tourism information. The site is positioned as a trusted municipal government resource with clear branding and official social media presence. The business model is public service oriented, focusing on transparency and accessibility for the local community. Technically, the website is built on WordPress using the Avada theme, incorporating common plugins such as Contact Form 7, Cookie Notice, and WP Accessibility Helper. The site demonstrates moderate performance and good mobile optimization, with accessibility features implemented to support diverse users. SEO is basic but functional, and the site uses HTTPS with a valid SSL certificate ensuring secure communications. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks advanced security headers and a dedicated security policy page. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is basic with a privacy policy present and GDPR considerations addressed. Contact information is clearly provided, enhancing trust and credibility. Overall, the website is a safe, legitimate government portal with a solid foundation but could benefit from enhanced security policies and technical hardening. The risk level is low, with recommendations focusing on improving security headers, incident response transparency, and privacy documentation to strengthen compliance and user trust.

S

Stiftung Fledermausschutz

fledermausschutz.ch

57

The Stiftung Fledermausschutz website is a professionally designed and content-rich platform dedicated to the protection and conservation of bats in Switzerland. It serves as an educational and operational hub offering emergency rescue services, public awareness, and conservation projects. The organization is positioned as a leading Swiss non-profit in its niche, with clear communication channels and transparent donation mechanisms. Technically, the site is built on Drupal 9 with modern integrations such as Google Analytics and reCAPTCHA, ensuring a balance between usability and security. Security posture is solid with HTTPS and spam protection, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site reflects a trustworthy and credible non-profit entity with a strong digital presence.

D

DEGUM | Deutsche Gesellschaft für Ultraschall in der Medizin

degum.de

55

DEGUM (Deutsche Gesellschaft für Ultraschall in der Medizin) is a leading medical scientific society in Germany specializing in ultrasound in medicine. It serves a large membership base with over 13,000 members and 6,000 certified physicians, offering certifications, educational courses, scientific funding, and guidelines. The website is professionally designed using TYPO3 CMS, providing comprehensive content and resources targeted at medical professionals and researchers. The technical infrastructure is modern and well-structured, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and spam-protected emails, though some security headers and explicit policies could be improved. Privacy and cookie policies are present and GDPR compliant. Overall, the website reflects a mature, credible organization with strong trust indicators and a clear business model focused on education and certification in healthcare ultrasound.

E

European Federation of Societies for Ultrasound in Medicine and Biology

efsumb.org

58

The European Federation of Societies for Ultrasound in Medicine and Biology (EFSUMB) is a well-established non-profit organization focused on advancing ultrasound education, safety, and professional standards across Europe. The website serves as a comprehensive resource hub offering endorsed courses, webinars, publications, and guidelines tailored for medical professionals and ultrasound practitioners. With a domain age dating back to 1997 and a consistent branding presence, EFSUMB holds a strong market position within the healthcare education sector. Technically, the website is built on WordPress, leveraging modern plugins such as Modern Events Calendar Lite and Paid Memberships Pro, supported by Google Analytics and Tag Manager for performance monitoring. The site demonstrates good mobile optimization and SEO practices, though performance is moderate and accessibility features are basic. From a security perspective, the site employs HTTPS with a clientTransferProhibited domain status, indicating domain security awareness. However, DNSSEC is not enabled, and some advanced security headers are not detected. Privacy compliance is well addressed with clear privacy and cookie policies, though a cookie consent mechanism is absent. Contact information is available primarily through contact forms and social media channels. Overall, EFSUMB's website reflects a mature digital presence with strong business credibility and content quality. Strategic improvements in security headers, DNSSEC implementation, and enhanced privacy consent mechanisms would further strengthen its security posture and compliance standing.

D

Dreiländertreffen Davos 2025 - SGUM

ultraschall2025.ch

45

The website ultraschall2025.ch represents the 48th Dreiländertreffen Ultraschall 2025, a prominent ultrasound medicine congress scheduled in Davos, Switzerland. It is organized by the Swiss Society for Ultrasound in Medicine (SGUM) and supported by related German and Austrian societies. The site provides detailed information about the event's dates, program highlights, and participation options, targeting medical professionals and researchers in the ultrasound field within the German-speaking region. The business model centers on event organization and professional education in healthcare ultrasound. Technically, the website is built on WordPress using the Kadence theme and Elementor page builder, leveraging modern web technologies such as jQuery and Google Fonts. The site is responsive and optimized for mobile devices, with good SEO practices and moderate performance. However, no hosting provider details were identified, and accessibility features are basic. From a security perspective, the site uses HTTPS with an excellent SSL configuration but lacks security headers such as Content-Security-Policy or X-Frame-Options. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Contact information is limited to a single official email address, with no phone numbers or social media links. Overall, the website is professional and trustworthy for its purpose but should improve privacy compliance and security headers to enhance user trust and regulatory adherence.

S

SACE

sace.it

74

SACE is a leading Italian financial and insurance services company specializing in credit insurance, investment protection, and financial guarantees for enterprises and banks. The website reflects a mature digital presence with a professional design, clear navigation, and targeted content for business clients. Technically, the site uses modern frameworks and CMS (Sitefinity), integrates analytics and marketing tools responsibly, and maintains good performance and mobile optimization. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not publicly disclosed. Overall, the site is trustworthy and compliant with privacy regulations, serving as a credible digital front for a large financial institution.

E

EuSEN asbl

eusencongress.org

6

The website eusencongress.org represents the EuSEN Nursing Congress 2025, organized by EuSEN asbl, a European society focused on emergency nursing. The site currently displays a notice that the congress has been cancelled for reasons beyond the organizers' control. The business operates as a small non-profit entity targeting healthcare professionals in emergency nursing, providing congress events and professional networking opportunities. The website content is minimal and primarily serves as an informational placeholder with contact email and social media links to official EuSEN pages. Technically, the website is built on WordPress and uses common front-end libraries such as jQuery, Bootstrap, and Font Awesome. The hosting provider is OVH sas. The site is currently offline using a site-offline plugin, with no active forms or data collection mechanisms. Mobile optimization and SEO are basic, and no advanced accessibility features are detected. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which reduces its security posture. No privacy, cookie, or terms of service policies are present, indicating poor privacy compliance. The WHOIS data is consistent with the website's purpose and timeline, showing a legitimate registration with no suspicious patterns. Overall, the site has a moderate trustworthiness level but requires improvements in security and privacy compliance. The overall risk is low given the limited functionality and content, but the lack of privacy policies and security headers should be addressed to improve compliance and trust. Strategic recommendations include enabling DNSSEC, implementing security headers, adding privacy and cookie policies, and enhancing the site's technical and content quality to better serve its audience.

R

Revmaporadna

revmaporadna.cz

10

Revmaporadna is a specialized psychological counseling service based in Prague, offering both in-person and online consultations. The service targets patients diagnosed with systemic sclerosis, myositis, and systemic lupus, providing free psychological support tailored to these groups. The website is professionally designed using WordPress with the Kadence theme and includes GDPR-compliant cookie consent mechanisms, reflecting a commitment to privacy and regulatory compliance. The absence of explicit contact emails or phone numbers suggests a preference for controlled communication via contact forms, which aligns with privacy considerations in healthcare. Technically, the website employs modern web technologies and plugins, ensuring good performance and mobile optimization. Security measures such as HTTPS enforcement and standard security headers are in place, although there is room for improvement in accessibility and explicit security policy disclosures. The lack of WHOIS data limits the ability to fully verify domain registration legitimacy, but the professional presentation and content quality indicate a trustworthy operation. From a security perspective, the site demonstrates a solid baseline posture with no detected vulnerabilities or exposed sensitive information. However, the absence of a vulnerability disclosure policy and incident response contacts suggests areas for enhancement to improve transparency and readiness. Overall, the website presents a low-risk profile with good privacy compliance and business credibility, suitable for its healthcare service context.

P

platforma.one - Changing the way e-commerce is made

platforma.one

9

platforma.one is an e-commerce platform focused on enabling small businesses such as cafes, florists, and ceramic studios to easily set up online stores with a pay-when-you-sell model. The platform offers key services including digital gift cards, selling physical and digital products, paid bookings, and scheduling delivery slots. The website is professionally designed with good content quality and targets a niche market of small business owners seeking accessible e-commerce solutions. Technically, the site uses modern JavaScript modules, Google Fonts, and Google Tag Manager for analytics, hosted on Google Cloud DNS infrastructure. The site is mobile optimized and SEO friendly but lacks some accessibility features and security headers. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Business credibility is supported by domain age and consistent content, though contact information is not provided on the homepage. Overall, the site is functional and professional but would benefit from improved privacy and security practices.

A

Atlaseek

atlaseek.com

9

Atlaseek hub is a specialized online marketplace platform designed to connect travel destinations with travel creators and influencers to facilitate marketing collaborations. The platform targets travel brands and tourism marketing teams seeking to leverage influencer marketing to reach Gen Z and millennial travelers. It offers verified metrics, campaign management, and a travel calendar to streamline collaboration scheduling. Technically, the website uses modern JavaScript modules, Vue.js framework, Google Fonts, Stripe for pricing, and Google Tag Manager for analytics. The site is mobile optimized and presents a professional design with good user experience. Security posture is moderate with HTTPS likely enabled but lacks visible security headers and explicit privacy or cookie policies. No WHOIS data is available for the subdomain hub.atlaseek.com, which is typical for subdomains, but limits domain registration trust signals. Overall, the site is safe, professional, and credible within its niche but would benefit from improved privacy compliance and security best practices.

S

SESAR Deployment Manager

sesardeploymentmanager.eu

70

SESAR Deployment Manager is a European intergovernmental entity responsible for coordinating the deployment of SESAR (Single European Sky ATM Research) solutions to modernize air traffic management across Europe. The organization serves a critical role in harmonizing efforts among various aviation stakeholders, including air navigation service providers and regulatory bodies, to improve efficiency and safety in European airspace. The website reflects a professional and authoritative presence consistent with its governmental affiliation, featuring comprehensive information about its mission, projects, and stakeholder engagement. Technically, the website is built using modern web technologies such as React and Gatsby, ensuring fast performance, mobile responsiveness, and good accessibility. The use of OpenLayers indicates interactive map features relevant to its domain. Security posture is strong with HTTPS enforced and appropriate security headers present, although there is room for improvement by adding a public security policy and vulnerability disclosure information. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. Contact information is readily available, including official emails, phone numbers, and physical address, enhancing business credibility. No suspicious or malicious content was detected, and the site is free from advertising or affiliate marketing, focusing solely on its core mission. Overall, SESAR Deployment Manager's website demonstrates a high level of professionalism, security, and compliance suitable for a European governmental entity. Strategic recommendations include publishing a dedicated security policy, establishing a vulnerability disclosure channel, and enhancing incident response transparency to further strengthen trust and security posture.

J&J MedTech operates as a global healthcare technology provider specializing in medical devices and solutions for healthcare professionals. The website serves as a multilingual portal offering localized content across multiple regions including North America, Asia Pacific, Europe, Middle East & Africa, and Latin America. The company is positioned as a large enterprise under the Johnson & Johnson corporate umbrella, targeting healthcare professionals with a B2B business model. The site demonstrates consistent branding and professional content quality, supporting its market position as a leading medical technology provider. Technically, the website leverages modern web technologies including Drupal 10 as its CMS and React for dynamic components, supported by analytics and tracking tools such as Google Tag Manager and Hotjar. The site is mobile optimized and accessible, with good SEO practices evident from meta tags and structured content. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR compliance. However, explicit security headers are not evident in the HTML content, and no public security policy or incident response information is provided. The absence of WHOIS data for the domain is a notable anomaly that reduces trustworthiness and warrants further investigation. Overall, the website presents a professional and trustworthy front for J&J MedTech, but improvements in transparency around security policies, contact information, and domain registration details are recommended to enhance credibility and compliance.

S

Swiss College of Surgeons

swisscollegeofsurgeons.ch

52

The Swiss College of Surgeons (SCS) is a prominent professional organization in Switzerland dedicated to advancing surgical competencies and education. The website serves as a comprehensive platform offering information on surgical training, certification, projects, events, and membership benefits. It targets surgeons and medical professionals within Switzerland, positioning itself as a leading authority in the surgical field. The content is well-structured, multilingual, and professionally presented, reflecting a mature digital presence.

M

Medela

medelahealthcare.com

10

Medela is a globally recognized healthcare specialist providing pioneering solutions in healthcare technology, focusing on surgical wound care and breastfeeding products. The company targets healthcare professionals, hospitals, and patients, positioning itself as a leader in the healthcare technology sector with a strong emphasis on innovation and professional education. The website reflects a mature digital presence with comprehensive content, professional design, and multilingual support, indicating a large enterprise with global reach. Technically, the site uses modern JavaScript frameworks, integrates third-party services like Bazaarvoice for reviews, and employs Google Tag Manager and OneTrust for analytics and privacy compliance. The security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response information are not publicly available. Overall, the website is trustworthy and professionally maintained, but the absence of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include publishing a dedicated security policy, vulnerability disclosure, and incident response contacts to enhance transparency and trust.

M

Meister ConCept GmbH

meister-concept.ch

10

Meister ConCept GmbH is a Swiss-based small enterprise specializing in society and association management as well as congress and event organization. Established since 2010, the company leverages expertise and personalized service to cater to business clients primarily in the Aarau region. Their key offerings include congress organization, event management, association management, and consulting services. The website reflects a professional and consistent brand image targeting organizations seeking comprehensive event and association management solutions. Technically, the site employs modern web technologies including Matomo analytics and Typekit fonts, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and formal security policies suggests room for improvement. Privacy compliance is basic, lacking cookie consent mechanisms and detailed GDPR indicators. Overall, the website is trustworthy and well-structured, supporting the company's credibility in its niche market.

The website 'Demokratisk bæredygtighed' is a professional initiative by VELUX FONDEN focusing on the intersection of democracy and sustainability. It serves as a platform for research, knowledge sharing, and community engagement around democratic sustainability challenges and solutions in Denmark. The site is well-structured, content-rich, and targets researchers, practitioners, and citizens interested in sustainable democratic transformation. Technically, it is built on Drupal 10 with a custom theme, includes multimedia content, and uses privacy-friendly analytics (Plausible). However, it lacks explicit privacy, cookie, and terms of service policies, and no direct contact information is provided on the site. Security headers are not detected, and the WHOIS data shows an unusual future domain creation date, which may be a data anomaly or pre-registration. Overall, the site is credible and trustworthy but would benefit from enhanced privacy compliance and security best practices.

B

Bundesamt für Justiz

bundesjustizamt.de

11

The Bundesamt für Justiz (BfJ) is a large German federal government agency operating under the Federal Ministry of Justice. It serves as a central service provider for the justice system and international legal cooperation, offering a wide range of services including issuance of criminal records certificates, management of various legal registers, consumer protection, and judicial training. The website is professionally designed, accessible, and provides comprehensive information targeted at citizens, consumers, companies, courts, and authorities. Multilingual support and clear navigation enhance user experience. Technically, the site is built on the Government Site Builder CMS, uses modern web technologies including SVG graphics and JavaScript bundles, and is optimized for mobile devices. The presence of Matomo analytics indicates a privacy-conscious approach to user tracking. However, explicit security headers and cookie consent mechanisms are not evident, suggesting areas for improvement in security and privacy compliance. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. There is no visible incident response or vulnerability disclosure information, which could be enhanced to improve transparency and trust. The WHOIS data shows partial consistency with the official nature of the domain, and no suspicious patterns were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with government standards, though it could benefit from enhanced security headers and explicit privacy consent mechanisms.

C

Creative Heads

creativeheads.pl

9

Creative Heads is a small, Poland-based creative agency specializing in graphic design, web development, marketing, and multimedia services primarily serving the Trójmiasto region. The website presents a professional and visually appealing digital presence with a clear focus on creative solutions and client engagement. The technical infrastructure is built on WordPress with modern JavaScript libraries and tracking tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and reCAPTCHA implemented, but lacks advanced security headers and DNSSEC, which could be improved. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security measures.

S

Software House Webixa

webixa.pl

41

Software House Webixa is a Polish-based technology company specializing in web development, e-commerce solutions, SEO, and digital marketing services. Positioned as a local software house in Poznań, it offers a range of services including PrestaShop and WordPress store creation, SEO optimization, and paid advertising campaigns such as Google Ads and Meta Ads. The company targets businesses seeking to enhance their online presence and sales through modern, scalable digital solutions. Technically, the website is built on WordPress CMS with a modern tech stack including Yoast SEO, Google Tag Manager, Google Analytics, and CookieYes for consent management. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Hosting appears to be behind Cloudflare, providing additional security and performance benefits. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA to mitigate spam and bot attacks, and implements a detailed cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and published security or incident response policies, which are recommended for enhanced security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations regarding cookies, though it could improve transparency by publishing privacy and terms of service documents. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include adding security headers, publishing security and privacy policies, and providing direct contact information for incident response.

I

Iron Street Kraków

ironstreet.pl

9

Iron Street Kraków is a real estate investment website promoting a modern 4-story building with 86 service units located in the center of Kraków, Poland. The business targets property investors and young individuals seeking affordable housing in a prime location near major universities and business centers. The website provides detailed descriptions, visualizations, and location data to support its offerings. Technically, the site uses common web technologies including Google Analytics, Google Tag Manager, Swiper.js for sliders, and Google Maps API for location display. The site is mobile-optimized with good SEO practices but lacks visible privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS usage but no visible security headers or incident response information. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Recommendations include adding privacy and cookie policies, security headers, and incident response contacts to improve compliance and security.

E

EstiCRM

esticrm.pl

10

EstiCRM is a specialized CRM software provider targeting real estate agencies and developers in Poland. The company offers modern, intuitive CRM solutions designed to streamline client relationship management and enhance business operations within the real estate sector. Their market position is niche-focused, catering specifically to real estate and development companies with tailored software and web solutions. The website reflects a professional and consistent brand image, with clear messaging and relevant content for their target audience. Technically, the website is built using modern web technologies including Webflow CMS, Cloudflare CDN, and integrates multiple Google services such as Google Analytics and Tag Manager for analytics and marketing purposes. Cookiebot is used for comprehensive cookie consent management, ensuring GDPR compliance. The site demonstrates good mobile optimization and moderate performance, with a solid technical infrastructure supporting its operations. From a security perspective, the website enforces HTTPS, employs security headers, and uses cookies to protect against cross-site request forgery and bot traffic. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. No critical vulnerabilities or suspicious activities were detected, indicating a mature security posture appropriate for the business scale. Overall, EstiCRM presents a trustworthy and professional online presence with strong privacy and security practices. Strategic recommendations include publishing detailed security and incident response policies, enhancing accessibility features, and maintaining regular audits of third-party scripts to sustain security and compliance standards.

D

Dekores

dekores.eu

10

Dekores is a Polish brand under the Grupa REJS umbrella specializing in decorative and furniture materials such as Solid Surface (Krion), HPL laminates (Abet Laminati), wood panels (Panmar Wood), and acrylic boards (AGT). The company targets professionals like carpenters, designers, architects, and interior enthusiasts, offering both products and inspirational content. Their market position is solid within the manufacturing sector for interior materials in Poland. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates SEO and analytics tools effectively. Security posture is good with HTTPS and cookie consent implemented, though some security headers and explicit policies are missing. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and social media presence.

R

Rejs Sp. z o.o.

e-rejs.eu

10

Rejs Sp. z o.o. is a Polish manufacturer and online retailer specializing in furniture accessories such as kitchen drawers, cargo baskets, and handles. Established in 1993, the company has positioned itself as a leader in the furniture fittings market in Poland, serving both residential and commercial customers. Their e-commerce platform, built on Magento, offers a comprehensive product portfolio with a focus on quality and functionality. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in Polish. Technical infrastructure includes modern web technologies and integrations with Google Analytics, Facebook Pixel, and Google Maps API, supporting marketing and user experience. Security posture is strong with HTTPS enforcement, reCAPTCHA protection on forms, and cookie consent mechanisms, although no explicit security policy or incident response information is published. Overall, the site demonstrates good compliance with GDPR and industry best practices, reflecting a mature digital presence for a medium-sized manufacturing and retail business.

F

Fresenius Kabi s.r.o.

freseniuskabiforum.eu

48

Fresenius Kabi s.r.o. operates a specialized educational portal targeting healthcare professionals in the Czech Republic, focusing on clinical nutrition, pharmacotherapy, and related technologies. The platform offers accredited education, videos, manuals, and professional documents, positioning itself as a trusted resource within the healthcare education sector. The website is well-branded, consistent with the Fresenius Kabi corporate identity, and provides clear contact information and event updates, supporting its role as a professional knowledge hub. Technically, the website employs modern JavaScript libraries such as jQuery and Slick Carousel, and integrates Google Tag Manager for analytics. The site is mobile-optimized with a moderate performance profile and basic accessibility features. Security is adequately managed with HTTPS and secure form handling, though improvements are recommended in security headers and cookie consent mechanisms to enhance compliance and protection. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of explicit incident response contacts and terms of service pages suggests areas for enhancement. The WHOIS data is unavailable due to EURid privacy policies, but the domain usage and content strongly indicate legitimacy and alignment with the Fresenius Kabi brand. Overall, the site presents a low-risk profile with good business credibility and technical implementation.

W

Whistlelink

whistlelink.com

10

Whistlelink is a technology company specializing in providing a secure, anonymous, and compliant whistleblower system designed to help organizations meet EU whistleblower protection laws and other regulatory requirements. The company offers a SaaS platform that includes anonymous reporting channels and intuitive case management tools, targeting medium-sized to large organizations across multiple industries. The website is professionally designed, multilingual, and includes comprehensive privacy and cookie policies, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Calendly for marketing and scheduling. Security posture is strong with HTTPS enforced and no exposed sensitive data, though explicit security headers and incident response policies are not evident. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional site content and trust indicators such as G2 badges and social media presence. Overall, Whistlelink presents as a credible and professional compliance technology provider with room for improvement in transparency around security policies and domain registration details.

W

Webtemp

webtemp.no

60

Webtemp is a Norwegian-based software company specializing in providing a comprehensive web-based business system for staffing and recruitment firms. As part of Visma Talent Solutions, Webtemp offers a full suite of services including personnel recruitment, time tracking, invoicing, and digital resource allocation through modern web and mobile interfaces. The company positions itself as a market leader with over 25 years of experience, emphasizing secure and GDPR-compliant communication between clients and employees. The website reflects a professional and consistent brand image aligned with its parent company Visma.

V

Visma

visma.com

10

Visma is a leading enterprise software provider specializing in cloud-based business software solutions that simplify the work lives of entrepreneurs, businesses, and societies. The company operates primarily in the technology sector with a strong presence in Europe and recent expansion into Latin America through acquisitions such as Conta Azul. Visma offers a broad portfolio of services including cloud software, accounting, ERP, and public sector solutions, targeting small to large enterprises and partners. The website reflects a mature digital presence with excellent content quality, clear navigation, and professional branding. Technically, the site leverages modern web technologies such as Webflow CMS, Google Tag Manager, and reCAPTCHA, ensuring good performance, mobile optimization, and security best practices. Security posture is strong with HTTPS enforcement, security headers, and published security policies, although the absence of a security.txt file and incomplete WHOIS data slightly reduce transparency. Privacy compliance is robust with comprehensive policies and consent mechanisms aligned with GDPR. Overall, Visma demonstrates a high level of business credibility and digital maturity, though domain registration transparency should be improved to enhance trust further.