Security Directory

E

ESB Marketing Netzwerk AG

sportforumschweiz.ch

47

SPORT.FORUM.SCHWEIZ is a leading sport business congress in Switzerland organized by ESB Marketing Netzwerk AG. It serves as a premier networking and knowledge-sharing platform for top decision-makers in the Swiss sport industry, including clubs, associations, media, sponsors, and tourism destinations. The website provides detailed event information, speaker profiles, partner collaborations, and expert articles, positioning itself as the largest sport business event in the country. The business model revolves around event organization, sponsorship, and industry networking.

N

N1

n1info.si

50

N1 Slovenija is a well-established independent news portal founded in 2014, serving the Slovenian-speaking audience with up-to-date news, in-depth stories, interviews, and analyses. It operates as part of a regional network with sister sites in Serbia, Croatia, and Bosnia and Herzegovina, and maintains a partnership with CNN, enhancing its credibility and content quality. The portal offers diverse content including sports, podcasts, video, and magazine sections, targeting a broad general audience interested in current affairs and media content. Technically, the website leverages modern web technologies such as Cloudflare CDN for performance and security, OneSignal for push notifications, Google Tag Manager for analytics, and OneTrust for cookie consent management. The CMS appears to be Wagtail, a modern Python-based CMS, supporting good content management practices. The site is mobile optimized with good SEO and accessibility basics, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses Cloudflare for protection. Cookie consent and privacy policies are implemented in compliance with GDPR. While explicit security headers are not fully confirmed, the overall posture is strong with no exposed sensitive data or vulnerabilities detected. No WAF or blocking mechanisms interfere with content access. Overall, N1 Slovenija presents a trustworthy, professional, and user-friendly news portal with solid technical infrastructure and compliance with privacy regulations. Strategic recommendations include enhancing security headers, improving accessibility, and continuous monitoring of third-party scripts to maintain security and compliance.

N

netzpolitik.org

netzpolitik.org

72

netzpolitik.org is a well-established German online media outlet focused on digital rights, privacy, surveillance, and technology policy. Founded in 2003, it operates as a non-profit journalism platform funded primarily through donations. The website offers news articles, investigative journalism, podcasts, and newsletters targeting a general audience interested in digital freedoms and policy. The site maintains a consistent and professional brand presence with active social media engagement across multiple platforms. Technically, the site is built on WordPress, hosted by Hetzner, and uses modern web technologies including jQuery and CSS3. It is mobile-optimized and accessible, with good SEO practices. Security-wise, the site enforces HTTPS and uses some security-related scripts but lacks DNSSEC and explicit security headers, and does not publish a security.txt or vulnerability disclosure policy. Privacy compliance is moderate due to the absence of explicit privacy and cookie policies in the provided content. Overall, the site is trustworthy, content-rich, and professionally managed, with minor areas for improvement in security and privacy transparency.

The website sourceforge.net is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to the actual content. SourceForge is a well-known software development platform with a long-established domain registered since 1999. The provided HTML content contains no business information, contact details, or policy documents, limiting the ability to perform a full security and compliance analysis. The technical infrastructure includes Cloudflare security services, but no further technology stack details or CMS information are available. Security posture cannot be fully assessed due to the blocked content, but the domain registration data indicates a legitimate and well-managed domain. Overall, the site is rated low in content quality and user experience due to inaccessibility, but the domain trustworthiness is high.

T

The PostgreSQL Global Development Group

postgresql.org

66

The PostgreSQL website represents the official online presence of The PostgreSQL Global Development Group, a large and well-established open source community focused on developing and maintaining one of the world's most advanced open source relational database systems. The site provides comprehensive resources including downloads, documentation, community engagement, and event information, targeting developers, database administrators, and organizations seeking robust database solutions. The business model centers on open source software development supported by a global community, with a strong market position as a leading database technology. Technically, the website employs modern web technologies such as Bootstrap, FontAwesome, and Google Analytics, ensuring a responsive and user-friendly experience. The site is well-structured with good SEO and accessibility practices, and it loads quickly. Security is robust with HTTPS enforced and secure form handling, although explicit security headers are not visible in the HTML content. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but lacks a visible cookie consent mechanism. From a security perspective, the site demonstrates good practices including encrypted connections and no exposed sensitive data. However, the absence of explicit security headers and incident response contact details are areas for improvement. The WHOIS data is unavailable due to a malformed query response, limiting domain registration insights, but the website's content and branding strongly support its legitimacy. Overall, the website is professional, trustworthy, and well-maintained, with minor areas for enhancement in privacy compliance and security transparency. The risk level is low, and the site effectively supports its community and business objectives.

P

Phorum

phorum.org

51

Phorum is an established open source PHP and MySQL forum software project founded in 1998. It targets webmasters and developers seeking flexible, high-performance forum solutions. The website provides downloads, documentation, community forums, and development resources via GitHub. The business model is centered on open source software distribution with a niche market position as one of the original PHP forum software providers. Technically, the site uses PHP, MySQL, JavaScript, and Google Analytics, hosted on A2 Hosting. The site design is basic but functional, with moderate SEO and accessibility. Security posture is moderate; domain registration is consistent and long-standing, but the site lacks DNSSEC, visible security headers, and privacy or cookie policies. Incident response contact is provided via a security email. Overall, the site is trustworthy but could improve privacy compliance and security best practices.

B

BSD Network

bsd.network

66

BSD Network operates a niche Mastodon instance focused on the *BSD community and adjacent users. The platform emphasizes a supportive, inclusive, and well-moderated social environment, currently operating in invite-only mode due to capacity constraints. The website provides clear information about its community goals, code of conduct, and administrative contacts, fostering trust and transparency within its user base. Technically, the site leverages Mastodon software with modern web technologies, including HTTPS and CSRF protections, ensuring a secure user experience. However, some security best practices such as explicit security headers and cookie consent mechanisms are absent, representing areas for improvement. Overall, the platform presents a trustworthy and community-oriented social network with a strong focus on privacy and moderation.

FreshSource is a specialized project focused on tracking source code changes, primarily for the FreeBSD operating system. It offers features such as watch lists and notifications for source tree changes, targeting developers and users interested in FreeBSD ports and source updates. The website is maintained by Dan Langille and includes affiliate marketing through Amazon Associates. The site content is technical and niche, serving a small but dedicated community.

N

NAVEX

navex.com

74

NAVEX is a well-established provider of governance, risk, and compliance (GRC) solutions, serving over 13,000 organizations globally. Their offerings include a comprehensive GRC platform (NAVEX One), whistleblowing and incident management software, ethics and compliance training, policy and procedure management, and risk governance services. The company targets enterprises and organizations seeking to streamline compliance and risk management processes. The website demonstrates a high level of professionalism, with clear navigation, rich content, and multiple engagement points such as demo request forms protected by reCAPTCHA. Technically, the site employs a modern technology stack including JavaScript frameworks, marketing automation tools like Marketo, analytics platforms such as Microsoft Clarity and Google Tag Manager, and consent management via TrustArc. The site is mobile-optimized, accessible, and SEO-friendly, contributing to a positive user experience. Security best practices are observed with HTTPS enforcement, security headers, and no visible sensitive data exposure. However, the WHOIS data for the domain www.navex.com is unavailable or missing, which is inconsistent with the active and professional website presence. This lack of domain registration transparency slightly impacts the overall trust assessment. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Overall, NAVEX presents a strong market position in the GRC space with a secure and user-friendly digital presence. Addressing the WHOIS data gap and publishing explicit security and incident response policies would further enhance trust and compliance posture.

N

NAVEX

navexglobal.com

75

NAVEX is a leading provider of governance, risk, and compliance (GRC) solutions, serving over 13,000 organizations worldwide. Their offerings include a comprehensive GRC platform (NAVEX One), whistleblowing and incident management software, ethics and compliance training, policy and procedure management, and risk and governance tools. The company targets enterprises and organizations seeking to simplify compliance and manage risk effectively. NAVEX demonstrates a strong market position with extensive customer trust and a broad portfolio of integrated solutions. Technically, the website employs modern web technologies including React, Marketo forms, Google Tag Manager, Microsoft Clarity, and TrustArc for consent management. The site is well-optimized for mobile and accessibility, with good SEO practices and performance. The use of multiple analytics and marketing tools indicates a mature digital marketing strategy. From a security perspective, NAVEX enforces HTTPS, uses security headers, and integrates reCAPTCHA on forms to mitigate abuse. Consent management aligns with GDPR requirements, and no obvious vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain is unusual and should be monitored, though it does not currently detract from the site's legitimacy. Overall, NAVEX presents a professional, trustworthy, and secure online presence consistent with its enterprise-grade compliance solutions. Strategic recommendations include enhancing transparency around domain registration, maintaining rigorous third-party script audits, and establishing a public vulnerability disclosure policy to further strengthen trust.

Carmignac is an independent asset management company targeting professional and private investors primarily in Switzerland and Europe. The company offers a broad range of investment funds including equity, fixed income, diversified, alternative, and private asset strategies. The website is professionally designed with comprehensive content, clear navigation, and a focus on investment insights and sustainable investment. Technically, the site uses modern web technologies such as Next.js and React, with Google Tag Manager for analytics and marketing. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are lacking. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency but does not detract from the professional presentation of the site. Overall, the website is trustworthy and well-suited for its target audience.

L

La Française

la-francaise.com

74

La Française is a large, professional asset management group based in France, offering a broad range of investment solutions including equity, fixed income, diversified, alternative, and real estate management. The company operates multiple subsidiaries and is part of the Crédit Mutuel Alliance Fédérale asset management division. The website reflects a mature digital presence with comprehensive content, structured data, and clear navigation targeting institutional investors, distributors, and individual clients. Technically, the site uses modern web technologies and provides a responsive experience, though accessibility compliance is basic. Security posture is good with HTTPS and cookie consent mechanisms, but lacks explicit security headers and detailed incident response contacts. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the site is trustworthy and professional, though the absence of WHOIS data slightly reduces domain trustworthiness.

T

Tolomeo Capital AG

tolomeo-capital.com

59

Tolomeo Capital AG is a Swiss-based systematic asset management firm specializing in quantitative, technology-driven investing strategies. Founded in 2011, the company manages its own fund with a fully audited track record since 2012 and holds a license from the Swiss Financial Market Supervisory Authority (FINMA). Positioned uniquely between high-frequency and long-term asset managers, Tolomeo leverages scientific and technological expertise to deliver market-neutral, uncorrelated returns to professional and institutional investors. Their offerings include proprietary funds, systematic investment strategies, advisory services, and risk management tools.

Z

Zurich Invest Ltd

zurichinvest.ch

52

Zurich Invest Ltd is a Swiss-based financial services company specializing in investment opportunities for pension funds, institutional investors, and private customers. The website presents a professional and consistent brand image, targeting a medium-sized market segment within the finance industry. The company offers a range of investment services tailored to institutional and private clients, positioning itself as a reputable player in the Swiss financial market. Technically, the website leverages modern technologies including JavaScript, CSS, Azure Application Insights for analytics, and Tealium for tag management. Hosting appears to be on Microsoft Azure, indicating a robust infrastructure. The site is mobile-optimized with good SEO practices, although accessibility features are basic. From a security perspective, the site uses HTTPS with strong SSL configuration and sets secure cookies for tracking scripts. However, it lacks explicit security headers and visible security policies such as privacy or cookie policies. No vulnerability disclosure or incident response information is provided, which could be improved to enhance trust and compliance. Overall, the website is safe, professional, and trustworthy with moderate technical maturity. The absence of explicit privacy and cookie policies and contact information slightly reduces privacy compliance and user trust. Strategic improvements in these areas would strengthen the security posture and regulatory adherence.

F

FINANZ

finanz-ch.ch

65

FINANZ is a leading B2B event organizer in the Swiss financial industry, hosting a major congress featuring around 100 expert lectures, panels, and roundtables on current financial topics. The event provides a platform for professional networking and knowledge exchange in an exclusive atmosphere. The website is built on the Wix platform, leveraging Wix Thunderbolt technology, and presents a professional and consistent brand image. Technical infrastructure is modern and supports mobile optimization, though SEO and accessibility could be improved. Security posture is adequate with HTTPS and some security best practices, but lacks explicit security policies and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and legitimate, with room for improvement in privacy and security transparency.

C

Candriam

candriam.com

54

Candriam is a professional asset management firm offering investment solutions, funds, and market insights primarily targeting professional investors globally. The website is well-structured, multilingual, and designed to provide detailed regulatory and investor information. Technically, the site employs modern analytics tools such as Piwik PRO, Google Tag Manager, Microsoft Application Insights, and Optimizely, alongside a consent management platform (Usercentrics) and reCAPTCHA for security on login and registration forms. The security posture is strong with HTTPS enforced and secure form handling, though explicit security headers could not be fully verified from the provided data. The absence of WHOIS data for the domain is notable but may be due to privacy or registry policies. Overall, the site demonstrates a mature digital presence with good compliance and security practices.

L

LOUIS INTERNET

louis.info

71

LOUIS INTERNET is a German digital agency specializing in TYPO3-based corporate websites and online shops, with over 20 years of experience and a client base exceeding 140 customers. The company offers comprehensive digital solutions including web development, e-commerce, SEO, and SEA services, targeting businesses seeking tailored digital experiences. Their website reflects a professional and modern digital presence, emphasizing strategic, technological, and creative expertise. Technically, the site is built on TYPO3 CMS, employs modern JavaScript and CSS, and integrates advanced analytics tools such as Google Analytics 4, Matomo, and Microsoft Clarity, demonstrating a mature digital infrastructure. Security-wise, the website enforces HTTPS, implements cookie consent mechanisms, and avoids exposing sensitive data, though it lacks some advanced security headers and published security policies. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained, with room for improvement in explicit security disclosures and header configurations.

A

AllSecure

allsecure.rs

57

AllSecure is a Serbian-based company specializing in secure internet payment solutions, offering services primarily to businesses requiring reliable online payment processing. The website is built on a modern WordPress platform using Elementor and Yoast SEO, indicating a moderate level of digital maturity. The technical infrastructure includes Google Tag Manager for analytics and tracking, and the site is served over HTTPS with a domain registered since 2008, reflecting stability and legitimacy. However, the absence of explicit privacy and cookie policies, as well as contact information, limits the site's compliance and user trust. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response disclosures. Overall, the site presents a professional business front but would benefit from enhanced privacy compliance and security transparency.

A

AITO Ukraine

aitoukraine.org

53

AITO Ukraine is a small non-profit organization based in Kyiv, Ukraine, focused on community engagement and information dissemination. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as HTML5, CSS3, and JavaScript. The site presents basic content with consistent branding and moderate technical maturity. Security posture is adequate with HTTPS enabled and some script-based security hardening, but lacks important security headers and formal privacy or cookie policies. WHOIS data is unavailable or malformed, limiting domain trust verification. Overall, the website is functional and safe but requires improvements in privacy compliance and contact transparency to enhance trust and security.

R

Regeringen och Regeringskansliet

regeringen.se

69

The website regeringen.se serves as the official digital portal for the Swedish government and its administrative offices, providing comprehensive information about government structure, policies, legal documents, and public communications. It targets the general public, government officials, and stakeholders interested in Swedish governance. The site is well-established with a domain age dating back to 1996, reflecting its longstanding role as a government information resource. Technically, the website employs modern web technologies including JavaScript, Matomo analytics for privacy-conscious tracking, and cookie consent management via Cookietractor. The site is hosted by ExcedoNetworksAB and uses HTTPS, ensuring secure communications. The design is professional, mobile-optimized, and accessible, with clear navigation and structured content. From a security perspective, the site demonstrates good practices such as HTTPS usage and cookie consent mechanisms. However, it lacks DNSSEC for DNS security and does not publish explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The security posture is solid but could be enhanced by adding security headers and formal vulnerability disclosure policies. Overall, the website is trustworthy, professional, and safe for general audiences. It effectively fulfills its role as a government information portal with high content quality and business credibility. Strategic improvements in security transparency and DNS security would further strengthen its posture.

T

Textalk AB

prenly.com

62

Prenly is a digital publishing platform operated by Textalk AB, specializing in transforming PDFs into modern e-papers and distributing various digital content such as newspapers, magazines, podcasts, and interactive features. The platform targets publishers and media companies, particularly in Sweden, where it holds a strong market position with 100% of Sweden’s daily newspapers as clients. The website demonstrates a professional and accessible design, with clear navigation and comprehensive content about its services and history. Technically, Prenly employs modern web technologies including React, Tailwind CSS, and Cookiebot for privacy compliance, ensuring a fast and mobile-optimized user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data is a notable anomaly, but the strong business branding and parent company association mitigate concerns. Overall, Prenly presents as a credible and mature digital publishing solution with room for enhanced security transparency.

S

Sourcegraph, Inc.

sourcegraph.com

66

Sourcegraph, Inc. is a well-established enterprise technology company founded in 2012, specializing in AI-powered software development tools that automate routine coding tasks and provide advanced codebase search capabilities. Their platform targets enterprise development teams, aiming to improve productivity and innovation through AI agents and contextual code understanding. The website reflects a mature digital presence with excellent design, clear navigation, and comprehensive content focused on their key products such as Cody (AI coding assistant) and Code Search. Technically, the site leverages modern web technologies including Webflow CMS, HubSpot forms, and multiple analytics and marketing tools, hosted behind Cloudflare DNS and CDN services. Security posture is strong with HTTPS enforced and secure cookie practices, though some advanced security headers are not explicitly detected. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. The domain registration data aligns well with the business profile, showing a consistent and legitimate presence. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity.

G

GitLab Inc.

gitlab.io

70

GitLab Inc. operates the website about.gitlab.com, presenting itself as a leading AI-powered DevSecOps platform that integrates planning, development, security, and operations in a single application. The company targets developers, DevOps, and security teams, offering SaaS and self-managed solutions to accelerate secure software delivery. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation. The technical infrastructure leverages modern JavaScript frameworks such as Vue.js and Nuxt.js, with integrations for privacy compliance and marketing tools, indicating a high level of digital maturity. Security posture is strong, with HTTPS enforced, Content Security Policy implemented, and multiple industry certifications including ISO 27001 and SOC 2. The site also features a vulnerability disclosure program and clear incident response contacts, demonstrating a proactive security culture. Overall, the website and domain are trustworthy and professionally managed, with no critical security or compliance issues detected.

N

Numberly

numberly.com

65

Numberly is a well-established marketing technology company founded in 2005 and operating primarily in France. The company specializes in data-driven marketing solutions including people-based marketing, programmatic advertising, CRM, and big data analytics. Their website reflects a mature digital presence with a professional design and clear business focus on B2B clients seeking to optimize marketing investments. Technically, the site uses modern frameworks such as Vue.js and is hosted with reputable providers, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain protections in place, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Numberly presents a credible and trustworthy business with a strong market position in marketing technology.

S

Sumo Group, Inc.

breezedoc.com

61

BreezeDoc is a newly founded (2024) SaaS company offering a streamlined e-signature and document signing platform targeted at freelancers, agencies, and small businesses. The platform emphasizes speed, ease of use, and affordability, positioning itself as an alternative to larger competitors like DocuSign. Key services include legally binding e-signatures, reusable templates, document tracking, invoicing, and payment integrations with Stripe and PayPal. The company is part of the Sumo Group, Inc. family and leverages partnerships with AppSumo for marketing and sales. Technically, BreezeDoc is hosted on Amazon AWS infrastructure, uses modern web technologies including Bootstrap 5 and Google Tag Manager for analytics and marketing. The website is well-optimized for mobile devices, has good SEO practices, and loads quickly. Security is generally strong with HTTPS enforced and CSRF tokens in forms, though some security headers are not visibly configured and no explicit cookie consent mechanism is present. From a security and compliance perspective, BreezeDoc lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy policy is present but cookie consent is missing, which may impact GDPR compliance. The domain registration is consistent with the business launch timeline and uses a reputable registrar. No suspicious WHOIS or technical indicators were found. Overall, BreezeDoc presents a professional and trustworthy online presence with solid technical foundations but could improve in privacy compliance and security transparency to enhance trust and regulatory adherence.

A

All About Cookies

allaboutcookies.org

71

All About Cookies is an educational website dedicated to online privacy and digital security, focusing primarily on cookies and their management. Established in 2008, it serves a general audience seeking to understand online tracking and privacy issues. The site offers comprehensive guides and research-based content to empower users to navigate the internet safely. Technically, the website employs modern web technologies including JavaScript, TailwindCSS, and integrates Google Analytics and Tag Manager for analytics and marketing. It is hosted with Cloudflare DNS services, ensuring good performance and security. The security posture is strong with HTTPS enforced, security headers likely present, and active use of security monitoring tools like Sentry. However, there is room for improvement in DNS security by enabling DNSSEC and publishing explicit security policies or incident response contacts. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism that aligns with GDPR requirements. Business credibility is supported by the domain's long registration history and consistent WHOIS data, though direct contact information and formal security policies are not publicly available. Overall, the website is professional, trustworthy, and provides valuable privacy education with a solid technical and security foundation.

F

Fight Chat Control

fightchatcontrol.eu

57

Fight Chat Control is a citizen-led advocacy platform focused on opposing the EU's Chat Control proposal, which mandates scanning of all private digital communications including encrypted messages and photos. The website serves as an informational resource and a tool for EU citizens to contact their representatives to protect digital privacy and encryption rights. The platform positions itself as a non-profit entity advocating for fundamental privacy rights within the European Union. Technically, the website is built with standard web technologies including HTML5, CSS3, and JavaScript, without reliance on a CMS or complex frameworks. The site is mobile-optimized and accessible, with a clear navigation structure and multilingual support. However, there is no evidence of advanced analytics, tracking, or advertising technologies, reflecting a privacy-conscious design. From a security perspective, the site lacks explicit security headers and published security policies or incident response contacts. No cookie consent mechanism is present, which may impact compliance with EU regulations. The absence of contact information and vulnerability disclosure policies limits transparency. Nevertheless, the site is served over HTTPS and does not exhibit signs of WAF blocking or malicious content. Overall, the website presents a low-risk profile with a focus on advocacy and information dissemination. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security and incident response policies, and providing clear contact information to improve trust and compliance.

T

The FreeBSD Project

freebsd.org

67

The FreeBSD Project is a well-established open source operating system initiative powering servers, desktops, and embedded platforms globally. With over thirty years of continuous development by a large community, it holds a strong market position in the technology sector, particularly among developers and system administrators. The project is supported by the FreeBSD Foundation, which facilitates funding and community engagement. The website reflects a mature digital presence with comprehensive documentation, community resources, and regular security advisories. Technically, the site is built using modern static site generation (Hugo), employs HTTPS, and uses minimal tracking analytics, indicating a privacy-conscious approach. Security posture is strong with no visible vulnerabilities, though some security headers could be added to enhance protection. The absence of WHOIS data limits domain registration trust verification but does not detract from the evident legitimacy and professionalism of the project. Overall, the FreeBSD website demonstrates high quality, trustworthiness, and a strong community focus.

C

Codeberg e.V.

codeberg.org

59

Codeberg e.V. operates a non-profit, community-driven platform providing free Git hosting and related services to support free and open source software projects. Founded in 2018 and based in Berlin, Germany, Codeberg positions itself as a privacy-respecting alternative to commercial code hosting platforms, emphasizing no tracking, no third-party cookies, and user data protection. The platform is powered by Forgejo, a fork of Gitea, with custom modifications to suit community needs. Technically, the website demonstrates a modern and performant infrastructure using open source technologies such as Forgejo, JavaScript, and SVG graphics. The site is mobile optimized, accessible, and SEO friendly, with fast load times and a clean design. The domain registration is consistent with the organization's history and location, and the site uses HTTPS with a valid SSL configuration. However, DNSSEC is not enabled, and some security headers are missing, which could be improved. From a security perspective, Codeberg shows a strong commitment to privacy and security best practices, including CSRF protection and client transfer domain lock. There is no evidence of tracking or advertising, and the site provides clear channels for abuse reporting. While no formal security policy or vulnerability disclosure page is found, the organization maintains transparency and community engagement. Overall, Codeberg presents a trustworthy, professional, and privacy-conscious platform with a solid technical foundation and a clear mission to support the open source community. Strategic improvements in security headers, DNSSEC, and formal security documentation would further enhance its security posture and compliance.

O

Optimizely

idio.co

75

Optimizely is a leading enterprise technology company specializing in digital experience platforms that unify content management, digital commerce, and customer intelligence. The website highlights their product rebranding, with Idio now integrated as Optimizely Recommendations, focusing on real-time content personalization to drive revenue. The company targets businesses seeking to optimize customer touchpoints through experimentation and data-driven insights. Technically, the website leverages modern JavaScript frameworks like React, integrates with Azure Application Insights, and uses multiple marketing and analytics tools including Marketo, Google Analytics, and Microsoft Clarity. The site is well-structured, mobile-optimized, and includes comprehensive privacy and cookie policies, reflecting a mature digital presence. Security posture is strong with HTTPS enforced and use of nonce attributes in scripts, though explicit security headers and vulnerability disclosure mechanisms could be improved. WHOIS data is unavailable, likely due to privacy protection, but the overall trustworthiness and legitimacy of the domain and business are high based on content and branding.

The domain unloadyourself.com currently serves a 404 Not Found error page with minimal content describing the role of Admiral as a service provider for digital publishers. Admiral provides copyright access control, privacy consent management including GDPR compliance, and supports subscriptions and donations. The website content is minimal and does not represent a standalone business site but rather a service endpoint or placeholder. The technical infrastructure is hosted on Google Cloud Platform with DNS managed by AWS Route53, indicating a modern cloud-based setup. Security posture is adequate with HTTPS enforced and frequent certificate rotation, but lacks DNSSEC and security headers. No forms, contact details, or social media links are present, limiting user engagement and transparency. Overall, the site is safe with no adult or explicit content detected but lacks substantive business or marketing content.

N

NAVEX Global Inc.

ethicspoint.com

73

NAVEX Global operates the EthicsPoint platform, providing anonymous and confidential incident reporting services to organizations worldwide. The website serves as a portal for users to file new reports or follow up on existing ones, emphasizing confidentiality and anonymity. NAVEX Global is positioned as a reputable enterprise-level service provider in the ethics and compliance sector, supported by trust seals such as SAS70 Type II and TRUSTe. The site offers extensive multilingual support, enhancing accessibility for a global audience. Technically, the website uses classic ASP pages with JavaScript and jQuery 3.7.1, indicating a mature but somewhat dated technology stack. The site is moderately optimized for performance and mobile use, with basic accessibility features. Security practices include HTTPS usage and secure form input configurations, though explicit security headers are not evident in the provided data. Privacy and cookie policies are clearly linked, supporting GDPR compliance. The security posture is solid but could be improved by adding security headers, explicit incident response contacts, and vulnerability disclosure mechanisms. The absence of WHOIS data is likely due to privacy protection, which is justified given the nature of the service. Overall, the website is trustworthy and professional, with a good balance of usability and security for its purpose.

M

MCH Group AG

mch-group.com

62

MCH Group AG is a well-established global company specializing in creating unique experiences through art fairs, exhibitions, and live marketing solutions. The company operates internationally with a strong presence in the art and event management sectors, offering services such as Art Basel fairs and innovative marketing platforms. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive business information. Technically, the site employs modern analytics and marketing technologies, including Google Analytics, Hotjar, and OneTrust for cookie consent, hosted likely behind Cloudflare infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies could be improved. The absence of WHOIS registration data is a notable concern, impacting domain legitimacy trust. Overall, the site is professional, secure, and compliant with privacy regulations, serving a broad business and art professional audience.

Luigi's Box is a technology company specializing in secure parcel delivery and collection solutions, primarily serving residential and commercial customers in the United Kingdom. Their business model focuses on providing smart parcel lockers to improve last-mile delivery efficiency and security. The website presents a professional and modern digital presence, leveraging WordPress with performance optimizations and standard tracking tools such as Google Analytics and Tag Manager. Security posture is strong with HTTPS enforcement and appropriate security headers, though there is room for improvement in CSP policies and incident response transparency. The absence of WHOIS data raises some concerns about domain registration legitimacy, but the overall website quality and business information suggest a legitimate and trustworthy operation. Strategic recommendations include enhancing security policies, adding vulnerability disclosure mechanisms, and clarifying domain registration details to improve trust.

S

Studio Piksel

studiopiksel.me

54

Studio Piksel is a technology service provider specializing in AI-powered automation, conversion-ready websites, and client funnels tailored for small and medium-sized businesses (SMBs). Their offerings include booking bots and eCommerce systems designed to help local businesses grow efficiently without excessive costs. The website presents a professional and consistent brand image, targeting SMBs seeking smart growth solutions. Technically, the site is built using the Framer platform, leveraging modern web technologies and JavaScript for interactive and responsive design. While the site is accessible and performs moderately well, it lacks comprehensive privacy and cookie policies, as well as explicit contact information, which are important for trust and compliance. Security-wise, HTTPS is enabled, but the absence of security headers and vulnerability disclosures indicates room for improvement. The WHOIS data is privacy protected or unavailable, which is common for small businesses but reduces transparency. Overall, the site demonstrates moderate security posture and business credibility but should enhance privacy compliance and security best practices to improve trust and regulatory adherence.

D

Domaća trgovina d.o.o.

aromamarketi.me

38

Aroma marketi is a medium-sized retail grocery business operating in Montenegro under the legal entity Domaća trgovina d.o.o. The company operates multiple market brands and offers a range of services including retail sales, loyalty programs, delivery, and employment opportunities. The website is well-structured, professionally designed, and targets general consumers in the region. Technically, the site is built on WordPress with modern tracking tools such as Google Tag Manager and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks advanced security headers and DNSSEC. Privacy compliance is limited, with no visible cookie consent or comprehensive privacy policy disclosures. Overall, the website is trustworthy and functional but could improve in privacy and security practices.

D

Domains By Proxy, LLC (registrar privacy proxy)

mneplay.me

51

MNE Play is a digital OTT streaming platform primarily serving the Montenegrin public media service RTCG and local broadcasters. It offers live TV and radio streaming, video on demand, and catch-up services accessible globally via internet and dedicated apps on multiple platforms including Android, iOS, smart TVs, and streaming devices. The platform is positioned as the official digital extension of RTCG, targeting general audiences interested in Montenegrin media content. Technically, the website is built on modern web technologies including Next.js and React, leveraging CDN-hosted media assets and optimized image formats like WebP. The platform supports a wide range of devices and operating systems, indicating a mature digital infrastructure. Performance is moderate with good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration and domain registration protections such as clientDeleteProhibited status. However, DNSSEC is not enabled and security headers are absent, which are areas for improvement. Privacy compliance is partially met with a comprehensive privacy policy and terms of service, but lacks a cookie consent mechanism. Contact information is limited to an email address for OTT support. Overall, MNE Play presents a professional and trustworthy media streaming service with solid business credibility and technical foundation. Strategic enhancements in security headers, DNS security, and privacy consent mechanisms would strengthen its security posture and compliance. The platform is safe for general audiences and does not contain adult or explicit content.

I

Inbox IT Solutions

itsinbox.com

47

Inbox IT Solutions is a medium-sized technology company specializing in IT services and software products such as content management systems, media management software, time tracking, and banner management systems. The company has a solid market presence with over 20 years of experience, more than 50 employees, and a broad client and partner base. Their website reflects a professional business focus, targeting other businesses seeking IT solutions and partnerships. Technically, the website employs a modern and diverse technology stack including Java, JavaScript frameworks, Microsoft technologies, and Linux platforms, indicating a mature and versatile infrastructure. The site is mobile optimized and well-structured, though some accessibility features could be improved. Security-wise, the website uses HTTPS but lacks advanced security headers and published security policies, which lowers its security posture. No privacy or cookie policies are present, indicating compliance gaps. Overall, the website is functional and professional but would benefit from enhanced privacy and security measures to improve trust and compliance.

H

風俗広告の法律とルール：安心して利用するために

helplinesnetworkni.com

30

The website helplinesnetworkni.com is a Japanese language informational site focused on the laws and rules surrounding adult entertainment advertising. It appears to serve a niche audience interested in legal compliance within the adult services sector. The site is built on WordPress and uses common web technologies and external ad and analytics services. While the domain is mature and registered with a reputable registrar, the site lacks key privacy and contact information, which impacts its trustworthiness and compliance posture. Security practices are basic, with HTTPS enabled but no DNSSEC or security headers detected. The content is adult-oriented, targeting an adult audience, and the site uses multiple advertising and tracking services.

I

Iterate

iteratehq.com

73

Iterate is a technology company specializing in Customer Insights Management (CIM) through a SaaS platform that enables businesses to collect, analyze, and act on customer feedback via mobile, email, and web surveys. The company is positioned as a leading provider in this niche, serving thousands of customers including well-known brands. Their platform integrates with popular business tools and offers AI-powered features to enhance insights extraction. Technically, the website employs modern web technologies, including Bootstrap, jQuery, and various analytics and marketing tools, hosted behind Cloudflare DNS. Security posture is strong with HTTPS enforcement and recognized certifications such as SOC2, GDPR, CCPA, and HIPAA, though some improvements are recommended in DNSSEC and security headers. Privacy compliance is generally good with a comprehensive privacy policy and terms of service, but lacks a cookie consent mechanism and explicit incident response contacts. Overall, the website is professional, trustworthy, and well-optimized, with moderate user tracking and good business credibility.

S

Schibsted Sverige

klart.se

66

Klart.se is a leading Swedish weather information portal operated under the Schibsted media group. It provides comprehensive weather forecasts, maps, warnings, pollen and ski weather information targeted primarily at the Swedish-speaking general public. The site integrates with major advertising networks and partners such as Aftonbladet, leveraging a robust digital infrastructure. Technically, the site uses modern JavaScript libraries and tracking tools with good mobile optimization and SEO practices. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Overall, Klart.se presents a professional, trustworthy, and content-rich platform with a high level of business credibility and technical maturity.

The website profolkhogskola.se currently serves a security challenge page that blocks direct access to its main content. This page includes a browser integrity check and an automatic redirect, indicating the presence of a Web Application Firewall or similar security mechanism, likely provided by BitNinja. Due to this blocking, detailed content and business information are not accessible, limiting the ability to fully assess the company's offerings or market position. The domain is registered since 2018 with BeebyteAB, consistent with the hosting provider, suggesting legitimacy but no further registrant details are available. Technically, the site uses outdated CMS technologies including Joomla 1.5 and WordPress 2.5, which are no longer supported and pose security risks. The site lacks visible security headers, HTTPS information, and modern SEO or accessibility features. The presence of a security challenge page improves protection but also limits user experience and content accessibility. From a security perspective, the site shows some basic best practices such as browser integrity checks and automatic redirects, but the lack of DNSSEC, outdated CMS versions, and absence of privacy or cookie policies are notable weaknesses. No contact or business information is presented, reducing trust and compliance posture. Overall, the site scores low on content quality, privacy compliance, and business credibility due to these factors. Strategically, the site should prioritize upgrading its CMS platforms, enabling HTTPS with proper SSL certificates, implementing comprehensive privacy and cookie policies, and improving transparency with contact and business information. Enhancing security headers and DNSSEC would further strengthen its security posture. Until these improvements are made, the site remains limited in trustworthiness and user engagement potential.

P

Luxury Patek Philippe Replica Watches | Swiss Made, Buy Online

patekphilippereplica.io

59

The website www.patekphilippereplica.io operates as an e-commerce platform specializing in the sale of replica Patek Philippe luxury watches. It targets consumers interested in affordable luxury watch replicas, offering a broad catalog with multi-language support and a modern user interface. The business model is focused on direct online sales with no visible physical presence or detailed company information. Technically, the site employs a modern JavaScript framework (Vue.js) with supporting libraries such as Axios and Element UI, ensuring a responsive and user-friendly experience across devices. The site is secured with HTTPS and implements several security headers, indicating a good baseline security posture. However, the absence of WHOIS transparency and lack of explicit contact information reduce the overall trustworthiness. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is functional and professionally designed but lacks some critical trust and compliance elements.

M

MCH Group AG

swissbau.ch

73

Swissbau is a leading trade fair platform in Switzerland for the construction and real estate industry, operated by MCH Group AG. It serves as a major event connecting industry professionals, exhibitors, and partners to showcase innovations and trends. The website demonstrates a mature digital presence with good content quality, professional design, and clear navigation. Technically, it employs modern web technologies, security best practices including HTTPS and security headers, and integrates multiple analytics and marketing tools with user consent mechanisms. However, explicit security policies and incident response contacts are not prominently published, and no vulnerability disclosure program is evident. Overall, the site is trustworthy, GDPR compliant, and well-positioned in its market segment.

S

smartconext AG

smartconext-bau.ch

56

smartconext AG operates a digital platform focused on the Swiss construction and real estate market, providing filtered construction project data, digital application dossiers, and API integrations to facilitate efficient project acquisition for handworkers, manufacturers, and industry players. The company positions itself as a market leader in Switzerland with a comprehensive suite of services tailored to different customer segments. Technically, the website is built on SilverStripe CMS and integrates modern marketing and analytics tools such as Google Tag Manager, Google Analytics, and reCAPTCHA for bot protection. The site is mobile optimized and presents a professional user experience with clear navigation and relevant content. Security posture is good with HTTPS enforced and bot mitigation, but lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the website is trustworthy and professionally maintained, with room for improvement in compliance and security transparency.

T

TOI TOI AG

toitoi.ch

65

TOI TOI AG is a leading Swiss company specializing in the rental of mobile sanitation solutions including portable toilets, sanitary containers, and related accessories. Positioned as the market leader in Switzerland, the company serves both business and private customers with a comprehensive product range and a customer portal for enhanced service. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in multiple languages tailored for the Swiss market. Technically, the site is built on the Shopware CMS platform, leveraging modern web technologies and Google Tag Manager for analytics and marketing, with appropriate consent mechanisms in place. Security posture is strong with HTTPS enforcement, secure forms, and standard security headers, although incident response contact details and vulnerability disclosure information are not explicitly provided. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the site.

G

Giardina Society

giardina.ch

61

Giardina Society operates a prominent garden living event in Switzerland, recognized as the largest and most important in its sector. The website serves as an information and registration platform for exhibitors and visitors, showcasing event details, images, and related content. The technical infrastructure employs modern web technologies including JavaScript frameworks, Google Tag Manager, and OneTrust for cookie consent, indicating a mature digital presence. Security posture is strong with HTTPS and security headers implemented, though explicit privacy and terms policies are missing. Overall, the site is professional, well-branded, and trustworthy, targeting garden enthusiasts and industry participants.

W

Work-ID AG

skills-manager.ch

50

Work-ID AG operates the Skills-Manager platform, a B2B SaaS solution focused on effective competence management by enabling companies to identify and manage employee skills and talent pools. The website is professionally designed, targeting HR professionals and companies seeking to optimize recruiting and internal talent management. Technically, the site is built on WordPress with modern web technologies including Bootstrap, jQuery, and Google reCAPTCHA for security. SEO and accessibility are well implemented, and the site is mobile optimized. Security posture is solid with HTTPS enforced, security headers present, and a cookie consent mechanism in place, though a dedicated security policy and incident response information are absent. Overall, the domain registration aligns with the business identity, indicating legitimacy and trustworthiness.

C

Canonical, Ltd.

netplan.io

71

Canonical Netplan is a specialized utility developed by Canonical, Ltd. for simplifying network configuration on Linux systems through YAML-based abstraction. Positioned as part of the Ubuntu ecosystem, Netplan targets system administrators and cloud deployment professionals seeking streamlined network setup. The website reflects a professional and consistent brand image aligned with Canonical's reputation. Technically, the site employs modern web standards with JavaScript and CSS, and integrates Google Tag Manager for analytics. While the site is accessible and well-structured, it lacks explicit privacy and terms of service policies, and does not expose contact information or security policies. Security posture is moderate with HTTPS implied but missing security headers and DNSSEC. Overall, the domain registration is consistent and trustworthy, reinforcing the legitimacy of the business and website.

C

Canonical Ltd

charmed-kubeflow.io

74

Canonical Ltd operates the website canonical.com, providing enterprise-ready MLOps solutions centered around Charmed Kubeflow, a fully supported AI and machine learning platform deployable on any cloud or infrastructure. The company is a well-established leader in open source Linux and cloud infrastructure, with a strong market position and a comprehensive portfolio of services including security subscriptions and consulting. The website demonstrates a mature technical infrastructure with modern web technologies, fast performance, and excellent mobile optimization. Security posture is strong with HTTPS enforcement and domain locking, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is limited on this page, lacking visible privacy and cookie policies. Overall, the site is professional, trustworthy, and safe for general audiences.