Security Directory

C

CLOCKSS

clockss.org

61

CLOCKSS is a well-established non-profit organization founded in 2006, specializing in digital preservation services for academic publishers and research libraries worldwide. The organization operates a sustainable online archive to ensure the long-term survival of scholarly content, leveraging award-winning LOCKSS technology. CLOCKSS assigns Creative Commons Open Access licenses to triggered content, ensuring permanent open access. The website reflects a strong market position as a global leader in digital preservation, targeting academic and research communities.

L

Lucky Orange Heatmaps, Recordings, Surveys | Conversion Funnel Tools

luckyorange.com

66

Lucky Orange provides website optimization tools including heatmaps, session recordings, surveys, and conversion funnel analytics aimed at helping businesses improve their online presence and customer satisfaction. The website is built using modern web technologies including Framer CMS and integrates multiple third-party analytics and advertising platforms such as Google Analytics, Facebook Pixel, and Bing Ads. The technical infrastructure appears modern and moderately optimized for performance and mobile devices. Security posture is generally good with HTTPS enabled and use of Google Tag Manager for script management; however, the absence of security headers and explicit privacy and cookie policies indicates room for improvement. The lack of WHOIS data raises concerns about domain registration legitimacy, which should be verified to ensure trustworthiness. Overall, the website is professional and business-focused but would benefit from enhanced privacy compliance and clearer contact and security information.

F

Flodesk

flodesk.com

68

Flodesk is a technology company founded in 2018 that offers intuitive email marketing and sales page design software targeted primarily at small business owners and entrepreneurs. The company operates a SaaS subscription model and positions itself as a niche player in the email marketing space with a focus on design and ease of use. The website is professionally designed with excellent content quality and user experience, optimized for mobile devices and SEO. Technically, the site uses modern frameworks such as Next.js and React, with Cloudflare DNS and multiple analytics tools including Google Analytics, Amplitude, Matomo, and FullStory, indicating a mature digital infrastructure. Security posture is good with HTTPS enabled and domain registration protections in place, though there is room for improvement by enabling DNSSEC and publishing security policies. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy and professional but should enhance privacy transparency and security documentation to improve compliance and user trust.

H

Hrvatsko dizajnersko društvo / Croatian Designers Association

dizajn.hr

42

Hrvatsko dizajnersko društvo (Croatian Designers Association) is a non-profit organization dedicated to promoting design culture, education, exhibitions, and discourse in Croatia. The website serves as a portal for design professionals, students, and enthusiasts, providing information on events, workshops, publications, and membership. It holds a reputable position in the Croatian design community, supported by government and cultural sponsors, and is a member of international design associations.

R

ReStyloh

restyloh.hr

47

ReStyloh is a Croatian e-commerce platform focused on the buying and selling of second-hand clothing and footwear. The website targets general consumers interested in sustainable fashion and offers a marketplace model where users can list and purchase used apparel. The platform is positioned as a niche player in the local market, emphasizing unique fashion finds and environmental consciousness. The website features clear navigation with categorized product listings and search capabilities for both products and users. Technically, the site employs common web technologies including jQuery, Bootstrap, Owl Carousel, and Select2 for UI components, along with Google Fonts for typography. Analytics are implemented via Google Analytics and Clicky, indicating a moderate level of digital maturity. The site uses HTTPS, ensuring encrypted communication, but lacks visible advanced security headers and formal privacy or cookie policies. From a security perspective, the site demonstrates basic good practices such as HTTPS usage and no visible exposure of sensitive data. However, the absence of security headers, privacy policies, and incident response information suggests room for improvement in compliance and security posture. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, ReStyloh presents a functional and professional e-commerce platform with a focus on second-hand fashion in Croatia. To enhance trust and compliance, the site should implement comprehensive privacy and cookie policies, security headers, and clear contact information. These improvements would strengthen the site's security posture and user confidence.

S

Srednja.hr

srednja.hr

56

Srednja.hr is a Croatian news portal primarily targeting students and high schoolers, providing educational news, articles, and community features. The website holds a strong position in the Croatian education media sector, offering key services such as news updates, educational content, quizzes, and subscription options. The business model revolves around content delivery and advertising revenue, supported by a medium-sized operation founded in 2016. Technically, the site is built on WordPress with a modern tech stack including jQuery, Stripe for payments, and multiple analytics and advertising integrations. The site demonstrates good mobile optimization and SEO practices but could improve accessibility features. Security-wise, the site enforces HTTPS and employs standard security headers, with no evident vulnerabilities or exposed sensitive data. However, the absence of visible privacy and cookie policies, as well as contact information, indicates gaps in privacy compliance and user transparency. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures and user contact options.

Studentski.hr is a Croatian online portal dedicated to students and youth, operated by the organization Centar za razvoj mladih. The website serves as a comprehensive media platform offering news, job listings, educational materials, and information about projects and associations relevant to the academic community and young people in Croatia. It holds a strong market position as a leading student portal in the region, targeting primarily Croatian students and youth. The business model revolves around content provision and advertising revenue through partnerships with ad networks such as AdOcean and Google DoubleClick. Technically, the website is built on a Ruby on Rails framework, utilizing modern web technologies including Google Analytics, Facebook Pixel, and Gemius for analytics and user tracking. The site demonstrates good mobile optimization and basic accessibility features, with a moderate performance profile. Security-wise, the site enforces HTTPS and includes CSRF protections in forms, though explicit security headers were not detected in the HTML content. The site complies with GDPR requirements, featuring a privacy policy and cookie consent mechanism. The security posture is solid with no visible vulnerabilities or exposed sensitive data. The WHOIS data is privacy protected, which is common and justified for this type of media portal. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site is professional, trustworthy, and safe for general audiences. Strategic recommendations include enhancing security headers, auditing third-party scripts regularly, and improving accessibility compliance to further strengthen the website's security and user experience.

M

Mainstream Public Cloud Services d.o.o.

bizlife.rs

38

BIZlife.rs is a well-established Serbian business news portal operated by Mainstream Public Cloud Services d.o.o., founded in 2011. The site offers comprehensive business, entrepreneurship, IT/Tech, lifestyle, travel, and health news targeted at Serbian-speaking professionals and entrepreneurs. The platform uses WordPress with Elementor, integrating modern web technologies and analytics tools such as Google Analytics, Facebook Pixel, and Gemius Prism. The website demonstrates good content quality, professional design, and consistent branding, supported by active social media channels and a newsletter subscription service. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a comprehensive privacy policy but no explicit cookie consent mechanism. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

E

eIstra.info

eistra.info

52

eIstra.info is a Croatian regional business portal focused on the Istria region, providing a comprehensive directory of companies and trades, business news, event listings, and advertising opportunities. The site targets local entrepreneurs, businesses, and consumers seeking services and partners in Istria. It operates as an online platform facilitating business connections and information dissemination within the region. Technically, the website employs modern web technologies including Bootstrap, jQuery, and various third-party libraries for UI components and analytics. It is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is moderate with HTTPS enforced and form validation including CAPTCHA; however, explicit security headers and incident response policies are not evident. The WHOIS data is unavailable due to a malformed response, indicating privacy protection which is common for such business portals but reduces transparency. Overall, the site is professionally designed, content-rich, and trustworthy for its intended audience.

M

Mediakit

mediakit.hr

47

Mediakit.hr is a Croatian informational platform focused on marketing, PR, media, and the event industry. The website provides news, articles, and newsletters targeting professionals in these sectors. The platform is relatively new, with domain registration in April 2024, and positions itself as a niche media outlet serving the Croatian market. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, Modern Events Calendar Lite, and Complianz GDPR for cookie consent, indicating a moderate level of digital maturity. Google Analytics and AdSense are integrated for analytics and monetization purposes. Security-wise, the site enforces HTTPS and shows no signs of WAF or blocking mechanisms. However, explicit security headers are not detected, and there is no visible security policy or incident response information. Privacy compliance is partially addressed through cookie consent, but no privacy policy or terms of service pages were found. Overall, the site demonstrates a good level of professionalism and trustworthiness but would benefit from enhanced privacy and security disclosures.

M

Marketing Magazin

marketingmagazin.si

47

Marketing Magazin is a well-established Slovenian media outlet specializing in marketing, communications, and advertising industry news and insights. The website serves marketing professionals and industry stakeholders with news articles, interviews, event listings, and video content. The business model is primarily media publication supported by advertising and subscriptions. Technically, the site uses Drupal 9 CMS with standard analytics and advertising tools such as Google Analytics, Facebook Pixel, and Gemius. The site is mobile optimized and has good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies are not evident. No privacy policy or terms of service were found in the provided content, indicating room for compliance improvement. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

A

Advertiser Serbia

advertiser-serbia.com

43

Advertiser Serbia is a professional online media portal focused on the advertising, media, and marketing sectors in Southeast Europe, primarily Serbia. The website provides news, industry analysis, event announcements, and advertising content targeting media professionals, agencies, brands, and the general public interested in this sector. It positions itself as a leading and influential portal in the regional media and advertising landscape. Technically, the site is built on WordPress CMS with a modern tech stack including Yoast SEO, Google Analytics, and social sharing plugins, offering good mobile optimization and SEO practices. Security posture is decent with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and formal privacy or cookie policies, which are compliance gaps. The domain WHOIS data is missing or not found, raising concerns about domain legitimacy despite the professional and active website content. Overall, the site is functional and professional but would benefit from improved privacy compliance and clearer domain registration transparency.

A

A1 Hrvatska

a1.hr

61

A1 Hrvatska is a leading telecommunications provider in Croatia offering a comprehensive range of services including mobile phones, mobile tariffs, internet, and television. The website reflects a mature digital presence with consistent branding and a focus on consumer telecommunications services. The technical infrastructure is built on the Liferay CMS platform and integrates multiple modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, Visual Website Optimizer, and Exponea, indicating a sophisticated approach to user engagement and data-driven marketing. Security posture is strong with HTTPS enforced and use of security tokens and reCAPTCHA, although explicit security policies and vulnerability disclosures are not published on the homepage. Privacy compliance is moderate due to the absence of clearly accessible privacy and cookie policies, though a cookie consent mechanism is implemented. Overall, the website is professional, trustworthy, and safe for general audiences.

R

Realtrack Systems SL

wimucloud.com

52

Wimucloud.com is a technology-focused website representing the Wimu Fit product by Realtrack Systems SL, a company founded in 2017. The site appears to offer fitness tracking solutions leveraging real-time tracking technology. The technical infrastructure is based on JavaServer Faces with PrimeFaces UI components, hosted likely on AWS infrastructure. The site uses Google Analytics and Google Tag Manager for user tracking but lacks visible privacy or cookie policies, which impacts compliance. Security posture is moderate with domain registration protections but missing HTTP security headers and DNSSEC. No contact information or social media presence is visible, limiting direct user engagement. Overall, the site is functional but basic in content and security maturity.

V

Versicherung der Schweizer Ärzte Genossenschaft

va-genossenschaft.ch

51

Versicherung der Schweizer Ärzte Genossenschaft is a Swiss cooperative insurance provider specializing in pension and risk protection products tailored for medical professionals. Established in 1926, it holds a niche market position with a strong focus on the healthcare sector. The website reflects a mature digital presence with professional design, clear navigation, and relevant content targeting Swiss doctors. Technically, the site is built on WordPress with modern plugins and tracking tools, offering moderate performance and good mobile optimization. Security measures include HTTPS, reCAPTCHA on forms, and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site demonstrates high business credibility with multiple trust signals and comprehensive contact options.

B

bebold sàrl

bebold.ch

45

bebold sàrl is a Swiss-based digital agency specializing in web development, marketing, and design services primarily serving clients in Martigny and Lausanne. Their website presents a professional image with detailed service offerings across design, web, and marketing domains, targeting businesses seeking comprehensive digital solutions. The company positions itself as a creative and functional partner for digital projects, emphasizing user experience and strategic marketing. Technically, the website employs modern JavaScript libraries, Google Analytics for tracking, Google reCAPTCHA for form security, and a cookie consent mechanism via tarteaucitron.io, indicating a moderate level of digital maturity. The site is mobile-optimized with good navigation and design quality. Security posture is solid with HTTPS enforced and reCAPTCHA integration, but lacks visible security headers and published security policies, which are areas for improvement. Privacy compliance is partial due to the absence of a privacy policy and terms of service, though cookie consent is implemented. Overall, the website is trustworthy and professional but would benefit from enhanced transparency and security documentation.

S

Schweizer Bauernverband

agrimpuls.ch

57

Agrimpuls is a service platform operated by the Schweizer Bauernverband (Swiss Farmers Association) offering agricultural internships domestically and abroad, labor law information, language stays, packaging materials for direct marketing, and related services. The website is well-structured, professionally designed, and targets agricultural professionals and students interested in practical agricultural experience. Technically, the site is built on TYPO3 CMS, uses modern web technologies including Bootstrap and Slick Slider, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and accessible with clear navigation and content relevance. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers are not explicitly detected and no public security or incident response policies are published. WHOIS data aligns well with the business, confirming legitimacy. Overall, the site demonstrates good digital maturity and business credibility with room for security enhancements.

S

Schweizer Bauernverband

agriexpert.ch

57

Agriexpert operates as the legal and fiduciary department of the Schweizer Bauernverband (Swiss Farmers' Association), providing specialized services in agriculture-related legal, tax, real estate, and business planning domains. With approximately 40 employees, it serves agricultural clients in Switzerland, offering a comprehensive portfolio including valuation, legal advice, tax declarations, trust services, and real estate brokerage. The website reflects a mature digital presence with a professional design and clear navigation, targeting Swiss agricultural stakeholders. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies and SEO tools such as Yoast SEO. It integrates Google Analytics for visitor tracking and implements GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and accessible, with good performance metrics. From a security perspective, the website uses HTTPS and basic security best practices but lacks explicit security headers and incident response contact details. No vulnerabilities or suspicious domains were detected. WHOIS data confirms domain legitimacy and alignment with the business entity, enhancing trustworthiness. Overall, Agriexpert's website demonstrates a solid business and technical foundation with good privacy compliance and a trustworthy online presence. Minor improvements in security headers and incident response transparency could further strengthen its posture.

S

Schweizer Bauernverband

agriprof.ch

57

Agriprof.ch is a service platform operated by the Schweizer Bauernverband (Swiss Farmers' Association) focused on providing services and support for agricultural vocational education in Switzerland. The website targets stakeholders involved in agricultural professional training including vocational organizations, educational providers, and governmental bodies. It offers information and resources related to vocational training programs and acts as a partner in the Swiss agricultural education ecosystem. The site is well-branded and consistent with its parent organization, reflecting a medium-sized entity with a clear educational mission. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Google Analytics for tracking and responsive design for mobile users. The site demonstrates good SEO practices, accessibility, and performance. Cookie consent mechanisms and privacy policies are implemented, indicating a baseline compliance with GDPR requirements. However, some security best practices such as explicit security policies and incident response contacts are missing. From a security perspective, the site uses HTTPS with an excellent SSL configuration and no visible vulnerabilities or exposed sensitive data. The absence of advanced security headers and a formal vulnerability disclosure policy suggests room for improvement. The WHOIS data aligns well with the website's claims, reinforcing legitimacy and trustworthiness. Overall, agriprof.ch presents a professional, secure, and trustworthy online presence for its niche educational services. Strategic improvements in security policy transparency and incident response readiness would enhance its security posture and compliance maturity.

S

Schweizer Bauernverband

agristat.ch

56

The Schweizer Bauernverband (Swiss Farmers' Union) operates the Agristat service, which is the official statistical service for Swiss agriculture. Agristat provides comprehensive statistical data and analyses related to Swiss land and food economy, serving governmental bodies, agricultural organizations, and the public. The organization is well-established with a strong network including federal offices and industry partners, supported by a performance contract with the Swiss Federal Statistical Office. The website reflects a professional and consistent brand image, offering detailed content and resources relevant to its audience. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and analytics tools such as Google Analytics and Microsoft Clarity. It demonstrates good mobile optimization, accessibility, and SEO practices. The site uses HTTPS and cookie consent mechanisms, indicating attention to privacy compliance. However, some security headers are not explicitly present, and no public security or incident response policies are published. From a security perspective, the site shows a solid posture with no visible vulnerabilities or exposed sensitive data. The domain registration aligns well with the organization's identity, enhancing trustworthiness. The site is free from WAF blocking or content restrictions, allowing full content access. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility. Strategic recommendations include enhancing security headers, publishing a formal security policy and incident response contacts, and considering a vulnerability disclosure program to further strengthen trust and security posture.

A

Agrisano

agrisano.ch

49

Agrisano is a Swiss insurance provider specializing in tailored insurance solutions for farmers and agricultural workers. The company offers a comprehensive range of services including basic health insurance, supplementary insurance, pension plans, and employee global insurance. The website is professionally designed using TYPO3 CMS and targets the German-speaking Swiss agricultural community. The digital infrastructure includes privacy-conscious analytics via Matomo and Google Analytics, with a cookie consent mechanism in place. Security posture is solid with HTTPS and some security best practices observed, though there is room for improvement in security headers and incident response disclosures. Overall, the website is trustworthy, well-branded, and serves its niche market effectively.

S

Schweizer Bauernverband

sbv-usp.ch

58

The Schweizer Bauernverband (SBV) is the umbrella organization representing Swiss agriculture, focusing on supporting farming families through advocacy, market information, communication, and various services. The website reflects a well-established non-profit entity with a clear market position as the leading agricultural association in Switzerland. It offers comprehensive services including labor mediation, statistical publications, and policy guidance. The digital presence is mature, leveraging TYPO3 CMS, modern web technologies, and structured data to enhance SEO and user experience. Social media integration and multilingual support further demonstrate digital maturity. From a security perspective, the site employs HTTPS with good SSL configuration and includes cookie consent mechanisms, indicating compliance with privacy regulations such as GDPR. However, there is no explicit security policy or incident response information published, and security headers appear to be missing or not detected, which could be improved. No vulnerabilities or suspicious content were found, and the WHOIS data aligns well with the organization's identity, supporting legitimacy. Overall, the website is professional, trustworthy, and serves its audience effectively, though it could benefit from enhanced security disclosures and technical hardening. The risk profile is low, with no critical issues detected, making it a reliable source for stakeholders in Swiss agriculture.

N

National Restaurant Association

restaurant.org

60

The National Restaurant Association operates as a leading membership organization representing the restaurant and foodservice industry in the United States. Their website provides comprehensive resources including advocacy, education, research, membership benefits, and events. The association targets restaurant industry professionals, suppliers, and stakeholders, positioning itself as a key industry voice with a long-standing history since 1996. The business model centers on membership services and industry support, with multiple partner and subsidiary sites enhancing its ecosystem. Technically, the website is built on the Kentico CMS platform and integrates modern marketing and analytics tools such as Google Tag Manager, Marketo Munchkin, Microsoft Clarity, Facebook Pixel, and LinkedIn Insight Tag. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The infrastructure is professionally maintained with HTTPS enforced and secure login mechanisms. From a security perspective, the site shows a solid posture with HTTPS, client transfer prohibited domain status, and no visible vulnerabilities or exposed sensitive data. However, it lacks DNSSEC and explicit security headers, and does not implement a cookie consent mechanism, which are areas for improvement. No incident response or security policy pages were found, indicating potential gaps in transparency. Overall, the website is trustworthy, professional, and well-aligned with its business goals. The domain registration data supports legitimacy with consistent and long-term ownership. Recommendations include enhancing security headers, enabling DNSSEC, adding cookie consent for GDPR compliance, and publishing security policies to strengthen trust and compliance.

N

National Restaurant Association Educational Foundation

servsuccess.com

62

ServSuccess is a comprehensive restaurant industry training and certification platform operated under the National Restaurant Association Educational Foundation. It offers career development opportunities through online courses and professional certifications tailored for restaurant workers, operators, and educators. The website positions itself as a leading solution in the hospitality sector with strong industry partnerships and recognized certifications. Technically, the site uses modern web technologies including Kentico CMS, Bootstrap, and integrates marketing and analytics tools such as Marketo and Google Analytics. The site is mobile optimized and provides a professional user experience with clear navigation and rich content. Security posture is good with HTTPS enforced and domain transfer protections, though improvements like DNSSEC and explicit security policies could enhance trust. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high business credibility and trustworthiness with no signs of suspicious or adult content.

S

ServSafe

servsafe.com

72

ServSafe is a prominent provider of food safety training and certification programs targeting food service professionals, instructors, and administrators. Their offerings include Food Manager, Food Handler, Alcohol, Allergens, Academic, and Workplace training, positioning them as a leader in the food safety education sector in the United States. The website is professionally designed with clear navigation and consistent branding, supporting a large-scale educational business model focused on online certification and training services. Technically, the site leverages a mix of modern front-end frameworks like Bootstrap and jQuery, integrated with ASP.NET WebForms on the backend, and employs various marketing and analytics tools such as Google Analytics, Microsoft Clarity, Marketo, and OneTrust for cookie consent management. The site demonstrates good mobile optimization and accessibility compliance, although performance is moderate due to the complexity of scripts and integrations. From a security perspective, the website enforces HTTPS and includes CSRF protections in forms, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including GDPR considerations. However, no explicit incident response or vulnerability disclosure policies were found. Overall, the website presents a trustworthy and professional front for ServSafe's business operations. The absence of WHOIS registration data slightly reduces trust but is likely due to privacy protection. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving contact information visibility to further strengthen trust and compliance.

Y

Your Next Agency

yournextagency.com

71

Your Next Agency is a professional digital agency based in Amsterdam, specializing in design, development, and optimization of digital solutions. The company targets businesses globally seeking high-quality digital services and positions itself as a top-class agency with a strong brand presence and client portfolio. The website reflects a modern, well-structured, and mobile-optimized digital infrastructure leveraging contemporary technologies such as JavaScript frameworks, Google Analytics, and Cloudflare DNS services. Security posture is solid with HTTPS enforced and domain transfer protections in place, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website demonstrates high professionalism and trustworthiness suitable for its business domain.

S

Swiss National Science Foundation (SNSF)

snf.ch

65

The Swiss National Science Foundation (SNSF) is a prominent Swiss government-funded foundation dedicated to supporting excellent research across universities and institutions in Switzerland. It covers a broad spectrum of scientific disciplines and plays a pivotal role in shaping the national research landscape. The website reflects a professional, well-structured digital presence aimed at researchers, academic institutions, and policy makers. It offers comprehensive information on funding schemes, research initiatives, and organizational structure. Technically, the website leverages modern web technologies including Next.js and React, with integration of Google Analytics and Tag Manager for data insights. The site is hosted on reliable infrastructure with media assets served via Google Cloud Storage, ensuring fast performance and excellent mobile optimization. Security best practices are observed with HTTPS enforcement and a robust Content Security Policy. From a security standpoint, the site demonstrates a strong posture with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit privacy and cookie policies, as well as incident response and vulnerability disclosure information, which are recommended for enhanced compliance and transparency. The domain WHOIS data aligns well with the organization's identity, confirming legitimacy and trustworthiness. Overall, the SNSF website is a high-quality, trustworthy platform that effectively serves its target audience. Strategic improvements in privacy compliance and security transparency would further strengthen its position.

F

Fatsoma

fatso.ma

70

Fatsoma operates as an event discovery and ticketing platform, providing services to event organizers, venues, and consumers. The company offers a comprehensive ticketing and event marketing system trusted by over 40,000 organizers, alongside business and rep dashboards to facilitate event management. The website is built on modern web technologies including Ember.js and integrates multiple analytics and marketing tools such as Google Analytics, RudderStack, and Hotjar. Security posture is strong with HTTPS enforced and use of Cloudflare Turnstile captcha, though explicit security headers are not detected in the provided data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy. Overall, the website is professional, secure, and user-friendly, targeting a broad audience interested in events and ticketing.

F

Fatsoma

madebysoma.co

58

SOMA, part of the Fatsoma Group, is a specialized digital marketing agency focused on transforming events businesses by providing websites, apps, paid ads, branding, and enterprise solutions. They leverage their proprietary experience from building the Fatsoma event marketing system, trusted by over 40,000 event organizers, positioning themselves as industry experts with a strong market presence. Their target audience includes event organizers and hospitality businesses seeking to amplify reach and profitability. Technically, the website is built on Webflow, utilizing modern JavaScript libraries such as GSAP, Swiper.js, and analytics tools including Google Analytics, Google Tag Manager, RudderStack, and Facebook Pixel. The site is well-optimized for performance, mobile responsiveness, and SEO, with a clean, professional design and clear navigation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a visible privacy policy and cookie consent popup, indicating good adherence to GDPR requirements. Overall, SOMA presents a professional, trustworthy digital presence with strong business credibility and technical maturity. Strategic improvements in security policy transparency and incident response readiness would further enhance their security posture and trustworthiness.

O

O'Reilly Media

safaribooksonline.com

81

O'Reilly Media is a well-established technology and business training company founded in 1978, offering a comprehensive online learning platform that serves professionals, teams, enterprises, academic institutions, and government organizations globally. The company leverages a rich content library, expert practitioners, and advanced AI/ML technologies to deliver personalized learning experiences that drive business outcomes. Their market position is strong, supported by decades of industry presence and a broad service offering including subscription plans and mobile applications. Technically, the website employs modern web technologies including Google Tag Manager, Visual Website Optimizer, and jQuery, with structured data enhancing SEO and discoverability. The platform is mobile-optimized and provides a good user experience, though some accessibility features could be improved. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and includes no obvious vulnerabilities or exposed sensitive data. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests opportunities for strengthening security transparency and compliance. The WHOIS data is notably missing or inconsistent, which is unusual for a company of this stature and should be investigated further. Overall, O'Reilly Media presents a professional, trustworthy online presence with excellent content quality and business credibility. Strategic improvements in privacy compliance documentation, security policy publication, and WHOIS data transparency would enhance trust and regulatory alignment.

N

Next AG

abashop-adieu.ch

64

Next AG is a Swiss internet agency specializing in online shops, websites, and ERP interface solutions, particularly focused on the Ostschweiz and St.Gallen region. The company offers a range of services including CMS-based websites, e-commerce platforms, web design, and individual software development. They are certified partners of Shopware and Abacus, positioning themselves as a trusted development partner for businesses transitioning from AbaShop, which is reaching end-of-life in 2025. The website demonstrates a professional and consistent brand presence with clear contact channels and client references.

P

Proyecto Ututo

ututo.org

38

Proyecto Ututo is a small, community-driven free software project focused on developing and distributing 100% free GNU/Linux distributions and related simulation software for solar and thermal energy systems. The project has historical recognition and aims to promote knowledge sharing and digital inclusion, especially in developing countries. The website content is primarily in Spanish and provides resources, downloads, and community information related to the Ututo project and SimuSol software. Technically, the site uses CMSimple_XH CMS, older JavaScript libraries, and is hosted on DigitalOcean. Google Analytics and Tag Manager are used for user tracking. Security posture is moderate with some gaps such as lack of DNSSEC and missing security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data is consistent with the project’s claims and history, supporting legitimacy.

P

Privacy Tools

privacytools.com.br

74

Privacy Tools is a Brazilian technology company specializing in privacy management solutions, focusing on LGPD compliance, GRC, and ESG frameworks. Positioned as a pioneer in the Brazilian privacy market, it offers a comprehensive SaaS platform with modules for cookie management, consent management, DSAR handling, auditing, incident management, data mapping, data discovery, ESG controls, and AI governance. The company targets enterprises and organizations seeking to accelerate their compliance with Brazil's data protection laws. The website reflects a mature digital presence with professional branding, client endorsements, and extensive service descriptions. Technically, the website is built on WordPress, leveraging modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and Cloudflare DNS services. The site is mobile-optimized and SEO-friendly, with structured data enhancing search engine visibility. Security posture is solid with HTTPS enforced and use of reCAPTCHA on forms, though explicit security headers and formal security policies are absent. Overall, the security posture is good with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Contact information is comprehensive, including email, phone, physical address, and contact forms with consent checkboxes. The domain WHOIS data is consistent with the business claims, enhancing trustworthiness. Strategic recommendations include implementing explicit security headers, publishing a formal security and incident response policy, and adding a vulnerability disclosure mechanism. These steps would further strengthen the security and compliance posture, enhancing customer trust and regulatory alignment.

T

T3CH.com LLC

status.io

63

Status.io, operated by T3CH.com LLC, is a mature SaaS provider specializing in hosted system status pages for applications, web services, and developer APIs. Founded in 2011 and based in the US, the company offers a customizable platform with incident tracking, subscriber notifications, and extensive integrations, positioning itself as a transparent and developer-friendly market player. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the site leverages modern web technologies including jQuery, Bootstrap, and Google Analytics, hosted on AWS infrastructure. The platform demonstrates good performance, mobile optimization, and SEO practices. Security measures include HTTPS enforcement, security headers, and client transfer protection on the domain, although DNSSEC is not enabled. Security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. However, the site lacks explicit security policy documentation and vulnerability disclosure channels, which could enhance trust further. Overall, Status.io presents a low-risk profile with a solid technical foundation and business credibility. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and adding a vulnerability disclosure mechanism to strengthen security transparency and compliance.

4

404 d.o.o.

somoborac.com

44

SoMo Borac is a well-established digital media event and conference organized by 404 d.o.o., focusing on digital awards and industry trends in the Croatian and regional market. The website presents a professional and consistent brand image, targeting digital professionals and stakeholders. The technical infrastructure is based on WordPress with modern front-end libraries and analytics tools, supporting multilingual content and good mobile responsiveness. Security posture is adequate with HTTPS and domain transfer protections, though improvements in DNSSEC and security headers are recommended. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy, but terms of service and security policies are absent. Overall, the site is trustworthy and professionally maintained, with strong industry partnerships and media presence.

Clutch operates as a leading online marketplace that connects businesses with service providers globally. The platform offers a comprehensive database of over 280,000 verified providers, enabling users to search, find, and make informed decisions based on authentic reviews. The website's design is professional, user-friendly, and optimized for mobile devices, reflecting a mature digital presence suitable for its large audience of business clients. Technically, the website employs modern web technologies including Google Analytics, Heap Analytics, Hotjar for user behavior tracking, and Cookiebot for GDPR-compliant cookie consent management. The site uses HTTPS with strong SSL configuration, ensuring secure data transmission. However, some security best practices such as implementing additional security headers and publishing explicit security policies are areas for improvement. From a security standpoint, the site demonstrates a good posture with encrypted connections and consent mechanisms but lacks publicly available incident response or vulnerability disclosure policies. The absence of explicit privacy and terms of service documents in the analyzed content is a notable gap in compliance and transparency. Overall, Clutch presents a trustworthy and professional platform with strong business credibility and technical infrastructure. Strategic enhancements in privacy documentation and security transparency would further solidify its market position and user trust.

O

OOUX

ooux.com

73

OOUX is a specialized educational platform focused on Object-Oriented UX, providing training, certification, and community resources to UX professionals and product teams. The website is well-designed, mobile-optimized, and uses modern web technologies including Webflow CMS, Google Analytics, Memberstack for membership management, and Stripe for payment processing. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Security posture is good with HTTPS, security headers, and secure payment integration. However, the absence of WHOIS registration data raises concerns about domain legitimacy. No direct contact information or terms of service are published, which slightly impacts business credibility. Overall, the site is professional and trustworthy but would benefit from improved transparency in domain registration and contact details.

Q

Quable

quable.com

67

Quable is a specialized SaaS provider offering a comprehensive Product Information Management (PIM) platform designed to help brands and manufacturers centralize and optimize their product data across multiple sales channels. The company has established a strong market presence with over 300 clients globally, including notable brands in fashion, luxury, and industrial sectors. Their platform integrates advanced features such as AI-driven data enrichment, asset management, brand portals, and analytics, positioning them as a competitive mid-market leader. Technically, the website is built on Webflow with modern integrations for analytics, marketing, and multilingual support, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response details are absent. The absence of public WHOIS data slightly impacts domain trust but is mitigated by strong business signals and customer testimonials. Overall, Quable presents as a credible and professional business with a well-executed online presence.

I

Ibexa

ibexa.co

72

Ibexa is a technology company specializing in digital experience platforms (DXP) designed to help brands and businesses transform their digital presence through AI capabilities, personalization, and integration automation. The company offers a suite of products including Ibexa DXP, Headless content engine, Commerce, Connect (iPaaS), and Customer Data Platform among others. Positioned as a next-generation platform, Ibexa targets enterprises and medium-sized businesses seeking to enhance their digital transformation efforts. The website reflects a mature digital marketing strategy with extensive use of analytics and tracking tools, and a professional, well-structured design that supports user engagement and conversion through interactive demos and contact forms.

G

Groupe Medecine & Hygiene

planetesante.ch

55

Planète Santé is a well-established French-language health media platform serving the Swiss Romand public. Operated by Groupe Medecine & Hygiene, it offers a comprehensive range of health-related content including medical news, health education, and event information. The platform is positioned as a trusted regional health information source with a broad topical coverage and a professional presentation. Technically, the website uses the eZ Publish CMS and integrates common analytics and event marketing tools, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy and cookie policies, indicating room for compliance and security improvements. Overall, the site is safe, professional, and credible but would benefit from enhanced privacy compliance and security best practices.

C

Curtiss-Wright Defense Solutions

pacstar.com

76

Curtiss-Wright Defense Solutions, featuring the PacStar brand, is a leading provider of advanced tactical and enterprise communications systems tailored for complex defense and government applications. The company operates under the larger Curtiss-Wright Corporation umbrella, positioning itself as a key player in defense technology with a focus on interoperability and secure communications. The website reflects a mature digital presence with comprehensive product information and professional branding. Technically, the site is built on Drupal 11 and leverages modern analytics and consent management tools, indicating a well-maintained infrastructure. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data for the domain is a notable concern, potentially indicating recent registration or privacy protection, which slightly impacts trustworthiness. Overall, the site is professional, secure, and compliant with privacy regulations, serving a specialized government and defense audience.

T

Trust Alliance New Zealand

trustalliance.co.nz

43

Trust Alliance New Zealand operates as a membership consortium focused on creating a trusted and verifiable data sharing ecosystem for New Zealand's primary sector including producers, growers, exporters, and retailers. The website presents a professional image with clear messaging about its mission to enable secure data sharing and compliance with evolving global standards. The business model centers on collaboration and data interoperability projects such as the Digital Wallet and Digital Farm Environment Plan. The target audience is primarily New Zealand agricultural stakeholders and related service providers.

U

University Frames

universityframes.com

68

University Frames operates a professional e-commerce platform specializing in handcrafted custom diploma frames for colleges, universities, and professional institutions across the United States. The website showcases a broad product range with detailed customization options, targeting graduates and educational institutions. The company emphasizes quality craftsmanship and customer service, positioning itself as a leading provider in this niche market since 1990. Technically, the website employs modern web technologies including Bootstrap, jQuery, and multiple analytics and marketing tools, ensuring a responsive and engaging user experience. Security posture is strong with HTTPS and no visible vulnerabilities, though the absence of security headers and explicit privacy policies indicates room for improvement. The lack of WHOIS registration data is a notable anomaly that impacts trustworthiness and requires further investigation. Overall, the site is professional, well-branded, and safe for general audiences.

V

Verba Software, Inc.

verbacompare.com

58

Verba Software, Inc. operates the Verba Compete platform, which integrates with VitalSource Manage accounts to provide user authentication services. The platform appears to target educational institutions or users requiring secure login for software competitions or related services. The website is primarily a login portal with minimal public-facing content, focusing on secure user access. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, Typekit fonts, and Zendesk for customer support. DNS is managed via Cloudflare, and the domain is registered with GoDaddy, indicating a stable technical infrastructure. Security practices include the use of authenticity tokens in forms and password masking; however, no DNSSEC or security headers are detected, which are areas for improvement. The absence of public privacy, cookie, or terms of service policies reduces privacy compliance and user trust. Overall, the site is functional but basic in content and security posture, with moderate risk due to missing security headers and privacy disclosures.

I

IAPP

myiapp.org

58

The website myiapp.org serves as a portal for managing IAPP (International Association of Privacy Professionals) member accounts. It primarily informs users about a required new login process starting in September 2025 and provides links to FAQs and support. The site is professionally branded and integrates modern technologies such as React, Google Analytics, Google Tag Manager, and OneTrust for cookie consent management. Hosting and domain registration are managed through Amazon Registrar and AWS infrastructure, indicating a reliable technical foundation. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are not published on this page. The domain WHOIS data shows an anomalous future creation date, likely a data error, but overall domain registration appears legitimate and consistent with the organization's branding. Privacy compliance is strong, with clear cookie policies and GDPR adherence. The site does not expose sensitive data or contain vulnerabilities visible from the content. Overall, the website is a secure, professional, and compliant platform for IAPP members to manage their accounts.

S

Schweizer Bauernverband

agriquali.ch

53

Agriquali is a service entity under the Schweizer Bauernverband (Swiss Farmers' Union) focused on managing quality assurance programs for Swiss agricultural products such as meat, fish, and veal. The website serves as an informational and service portal targeting Swiss agricultural producers, food industry stakeholders, and consumers interested in Swiss quality products. The organization holds ISO 9001:2018 certification and promotes Swiss quality labels like Suisse Garantie, positioning itself as a niche leader in agricultural quality management within Switzerland. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Bootstrap and Google Analytics for tracking. The site is mobile-optimized, accessible, and SEO-friendly with structured data and meta tags. Performance is moderate with no critical technical issues detected. Privacy compliance is basic but includes a cookie consent banner and a privacy policy page in German. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and does not publish a dedicated security policy or incident response contacts. No vulnerabilities or suspicious domains were detected. The WHOIS data aligns well with the organization's identity, showing a consistent and legitimate registration. Overall, the website is professional, trustworthy, and well-maintained with room for improvement in security policy transparency and contact information clarity.

Bahnhof Apotheke Langnau AG operates the Curaplant brand, specializing in herbal medicinal products rooted in a 2000-year tradition of Western medicine. The company positions itself as a regional pharmacy offering both retail pharmaceutical services and specialized plant-based medicines. The website reflects a professional and consistent brand image targeting customers interested in natural health remedies. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes a cookie consent mechanism compliant with GDPR. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit incident response policies. Overall, the site is trustworthy and well-maintained, with clear contact information and ISO 9001 certification enhancing credibility.

D

deinmagazin.ch

deinmagazin.ch

49

deinmagazin.ch operates as a specialized online editorial system platform designed to facilitate the creation and publication of digital magazines. The service targets organizations and businesses seeking flexible, multi-device optimized digital magazine solutions, positioning itself as a niche SaaS provider within the technology sector in Switzerland. The website presents a professional and consistent brand image with clear navigation and relevant content describing its offerings. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and Vimeo for video embedding. The site is mobile optimized and demonstrates good SEO practices. However, no explicit CMS or hosting provider details are evident. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, indicating basic compliance with privacy regulations such as GDPR. However, there is a lack of visible security policies, incident response contacts, or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected, but security headers could be enhanced to improve the security posture. Overall, deinmagazin.ch presents a trustworthy and professional online presence with a solid foundation in privacy compliance and technical implementation. Strategic improvements in security transparency and contact information disclosure would further strengthen its risk profile and user trust.

M

mfe Médecins de famille et de l’enfance Suisse

mfe-actu.ch

46

The website www.mfe-actu.ch serves as the official online magazine for mfe Médecins de famille et de l’enfance Suisse, a specialized organization focused on family and childhood medicine in Switzerland. It provides digital editions, articles, and resources targeted at medical professionals in this sector. The site offers subscription services and maintains a professional editorial team, positioning itself as a trusted source within the Swiss healthcare community. The content is primarily in French with links to German language resources, reflecting the multilingual nature of Switzerland.

H

hausformat GmbH

hausformat.com

53

hausformat GmbH is a Swiss digital agency specializing in web design, digital marketing, branding, and TYPO3 CMS development. With over 20 years of experience and a portfolio of more than 1000 web projects, the company serves a diverse clientele including organizations, schools, associations, municipalities, SMEs, and larger enterprises. Their business model focuses on providing full-service digital communication solutions from strategy to marketing execution. The website reflects a mature digital presence with professional design and comprehensive service offerings. Technically, hausformat employs TYPO3 CMS, integrates modern analytics tools like Google Analytics and Matomo, and uses Google Tag Manager for marketing. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers are not evident and no explicit security policy or incident response contacts are published. The WHOIS data is missing or indicates the domain may not be registered, which is inconsistent with the active and professional website presence, warranting further investigation. Overall, hausformat presents as a credible and professional digital agency with room for improvement in security transparency and domain registration clarity.