Medium-risk security reports

Al-Jawad Pike is a London-based architectural practice specializing in architectural design and project development. The website presents a professional portfolio showcasing various projects, including award-winning and shortlisted works recognized by RIBA. The business appears to be a small-sized firm founded in 2014, with a clear focus on the real estate and architectural sector. The website is well-structured with good design quality and navigation, targeting a general audience interested in architectural services. From a technical perspective, the site uses jQuery 3.4.1 and custom JavaScript, hosted on a domain registered with PDR Ltd. The site shows moderate performance and good mobile optimization but lacks advanced frameworks or CMS indications. SEO optimization is good with proper meta tags and Open Graph data, although accessibility features are basic. Security posture is moderate; the domain uses HTTPS (implied by canonical URLs), and domain transfer is protected. However, DNSSEC is not enabled, and no security headers were detected. There are no privacy or cookie policies, nor incident response or security policy disclosures, which limits compliance and trust. No contact information or forms are present, reducing direct user engagement and support options. Overall, the website is professional and credible but would benefit from enhanced security practices, privacy compliance, and clearer contact channels to improve trust and regulatory adherence.

Bureaux Andrew Phillips is a small architectural firm specializing in contemporary and sustainable architecture, primarily operating in Luxembourg and London. Their website serves as a professional portfolio showcasing their projects, including commercial office buildings and residential architecture. The firm targets clients seeking high-quality architectural and urban design services. Technically, the website is built on Squarespace, leveraging modern web technologies such as jQuery and Typekit fonts, and is hosted on Squarespace's CDN. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security-wise, the site enforces HTTPS with HSTS, employs standard security best practices, and does not expose sensitive data or use vulnerable libraries. However, it lacks explicit privacy policies, terms of service, and incident response information, which are important for compliance and trust. Overall, the website is professional and trustworthy but could improve privacy compliance and security transparency.

AKT II is a globally recognized interdisciplinary engineering design firm specializing in structural, civil, infrastructure, façade, bioclimatic, geotechnical, and transport engineering. The company operates multiple offices worldwide, including a recent expansion into Toronto, and is part of the Tyréns Group. Their website reflects a mature, professional business with a strong market position in the built environment sector, emphasizing sustainability through B Corporation certification. Technically, the website is built on WordPress with modern tracking and analytics tools such as Google Analytics, Google Tag Manager, and Hotjar, providing moderate user tracking and good performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit incident response policies suggests room for improvement. The WHOIS data is missing or unavailable, which is unusual for a professional entity and slightly reduces domain trustworthiness. Overall, the website is professional, trustworthy, and well-optimized for its audience.

Walters & Cohen Architects is a London-based architectural practice specializing in education, community, and cultural projects. The firm is recognized for its award-winning portfolio and serves clients primarily in the education sector. The website reflects a professional and consistent brand image with a clear focus on showcasing their projects and expertise. The target audience includes educational institutions and community organizations seeking architectural services. Technically, the website employs modern web technologies including Google Analytics and Google Tag Manager for tracking, and uses a CDN for asset delivery. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some technical improvements could be made, such as implementing security headers and expanding accessibility features. From a security perspective, the site uses HTTPS and has a cookie consent mechanism indicating basic privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data is a concern and lowers the domain trustworthiness score, though the active and professional nature of the website suggests legitimacy. No explicit contact or security incident response information is provided, which could be improved. Overall, the website presents a solid digital presence for a small architectural firm with room for enhancements in security posture and transparency. Strategic recommendations include improving WHOIS transparency, adding security headers, and providing clearer contact and privacy information to strengthen trust and compliance.

Orms is a London-based architecture firm focused on delivering ultrapractical, deeply functional, and generous architectural solutions. Their website reflects a professional and modern digital presence built with Nuxt.js and Tailwind CSS, targeting clients seeking architectural design and consultancy services. The firm positions itself as an established player in the real estate sector with a clear focus on quality and client engagement. Technically, the website is well-structured, mobile-optimized, and uses modern frameworks, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS data and domain registration details introduces some trust concerns, though the website content and contact information support business credibility. Overall, the site is professional but would benefit from enhanced privacy compliance and security best practices.

Maccreanor Lavington is a professional architecture and urbanism firm operating from London and Rotterdam, offering design and planning services. The website presents a well-structured portfolio of projects and clear contact information, targeting clients and professionals in the real estate and urban development sectors. The firm positions itself as an established medium-sized business with a consistent brand and professional online presence. Technically, the website is built on WordPress with modern libraries and CDN hosting, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and anonymized analytics, but lacks some security headers and cookie consent mechanisms. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy. Overall, the site is professional, trustworthy, and well-maintained.

Morris+Company is a professional architecture and design firm with a strong portfolio covering housing, workplace, community, education, healthcare, placemaking, tall buildings, interiors, re-use, hospitality, and mission-critical projects. The firm operates primarily in the UK and Europe, with offices in London and Copenhagen, targeting clients seeking sustainable and innovative architectural solutions. The website reflects a medium-sized, established company with consistent branding and a professional online presence. Technically, the website employs modern web technologies including jQuery, SimpleBar, Google Analytics, Google Tag Manager, and Google Maps API. Hosting of media assets on Amazon S3 indicates a scalable infrastructure. The site is mobile-optimized with good design quality and navigation, though accessibility and SEO optimizations are basic. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and privacy compliance elements such as privacy and cookie policies. No vulnerability disclosures or incident response contacts are provided. WHOIS data is unavailable due to privacy protection, which is common and likely justified for this business type. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

Hopkins Architects is an established architectural practice with over 40 years of experience, focusing on clear and logical design, material honesty, and contextual respect. The website showcases a broad portfolio of architectural projects across various sectors including education, healthcare, hospitality, and civic culture. The technical infrastructure employs modern JavaScript libraries such as jQuery, HeadJS, and lazy loading techniques, indicating a moderate level of digital maturity. However, the site lacks visible privacy and cookie policies, and no contact emails or phone numbers are explicitly provided on the homepage, which may impact user trust and compliance. Security posture is moderate with no detected security headers and incomplete WHOIS data due to domain naming rules, though the site is accessible without WAF or blocking mechanisms. Overall, the site is professional and content-rich but would benefit from enhanced privacy compliance and security best practices.

Hawkins\Brown is a UK-based architecture firm focused on societal impact and human-centered design. The website presents a professional and modern digital presence with rich content including conversations, projects, and thought leadership. The firm holds a B Corp certification, indicating commitment to social and environmental performance. Technically, the site is built on WordPress with modern JavaScript and analytics integrations, optimized for performance and accessibility. Security posture is good with HTTPS enforced and secure forms, though explicit security policies and incident response details are absent. The lack of WHOIS data for the domain is a notable anomaly, reducing trust slightly despite the professional site content. Overall, the website reflects a mature business with strong branding and digital maturity.

David Chipperfield Architects is a well-established international architectural practice founded in 1985, with offices in multiple global cities. The company provides architectural design and related cultural and research services, targeting clients interested in high-quality architectural projects. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content about projects and news. Technically, the site uses modern web standards, is mobile optimized, and employs privacy-focused analytics. Security posture is good with HTTPS and domain protection measures, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with a clear privacy policy, but lacks a cookie consent mechanism. Overall, the website is trustworthy and professionally managed, supporting the company's market position as a leading architectural firm.

Zaha Hadid Architects is a globally recognized architecture and design firm with a large portfolio of projects across multiple sectors including cultural, corporate, and residential. The website serves as an interactive archive showcasing their work and provides contact information and social media links. Technically, the site is built on WordPress with jQuery and includes embedded Vimeo videos and Mixpanel analytics for user tracking. The security posture is generally good with HTTPS enabled and no obvious vulnerabilities, but lacks security headers and formal privacy or cookie policies. The WHOIS data is missing or unavailable, which is unusual and warrants further investigation. Overall, the site is professional and trustworthy but could improve privacy compliance and security best practices.

Foster + Partners is a globally recognized architecture and design firm specializing in sustainable architecture, urbanism, engineering, and design services. Founded in 1967 by Norman Foster, the company positions itself as a leader in innovative and sustainable building solutions. The website reflects a professional and modern digital presence, leveraging advanced web technologies such as Angular, Google Analytics, Hotjar, and CookiePro for user experience and compliance. The site is well-structured, mobile-optimized, and provides a seamless user experience with clear branding and relevant content focused on their core services. From a technical perspective, the website employs modern frameworks and tracking tools, indicating a mature digital infrastructure. Hosting appears to be on Microsoft Azure, and the site uses HTTPS with good SSL configuration. However, some security best practices such as explicit security headers and published security policies are missing. The cookie consent mechanism is implemented, but no explicit privacy policy or terms of service pages were detected in the provided content. Security posture is generally good with HTTPS and consent management, but the absence of WHOIS data and lack of published security or incident response policies reduce overall trust slightly. No vulnerabilities or exposed sensitive data were detected. The website does not appear to be blocked or protected by a WAF, allowing full content access. Overall, the website is professional and trustworthy from a business and technical standpoint, but improvements in transparency regarding privacy, security policies, and domain registration information are recommended to enhance credibility and compliance.

Eric Parry Architects Ltd is a well-established architectural practice founded in 2000, with studios in London and Singapore. The company specializes in sustainable and creative architectural design, serving clients in commercial, cultural, healthcare, and hospitality sectors. Their website reflects a professional and consistent brand image, showcasing a portfolio of projects and providing clear contact information. The business targets clients seeking high-quality architectural services and maintains a reputable market position with an international presence. Technically, the website is built on WordPress with modern JavaScript libraries such as Glide.js and LazySizes, offering good mobile optimization and user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and published security policies. Overall, the website is trustworthy, compliant with GDPR, and free from suspicious content or vulnerabilities.

Derwent London is a prominent British property investment and development company headquartered in London, recognized as the largest London office-focused Real Estate Investment Trust (REIT) and a constituent of the FTSE 250 Index. The company manages a substantial portfolio of commercial real estate valued at £5.2 billion as of mid-2025, focusing on long-term value creation through property regeneration. Their services include office and retail space leasing, flexible furnished workspaces, and community-focused DL/Members lounges. The website reflects a mature digital presence with comprehensive content targeting investors, tenants, and partners. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and cookie consent management, ensuring compliance with privacy regulations such as GDPR. The site is mobile-optimized, accessible, and SEO-friendly, although no CMS or hosting provider details are explicitly identified. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms with granular controls. However, no explicit security headers were detected in the HTML source, and there is no published security policy or vulnerability disclosure program. The absence of WHOIS data limits domain trust verification, but the professional presentation and multiple industry certifications support legitimacy. Overall, Derwent London’s website demonstrates strong business credibility and privacy compliance, with room for improvement in security best practices and transparency. The domain’s WHOIS data absence warrants monitoring but does not currently undermine the site’s trustworthiness.

Ben Chernett is a freelance web developer operating primarily in the UK, with over 10 years of experience. The website serves as a professional portfolio showcasing bespoke web development services, primarily using WordPress as a CMS. The business targets UK-based organizations seeking custom web solutions and ongoing site maintenance. The site demonstrates a solid market position with a portfolio of reputable clients in architecture and cultural sectors. Technically, the website is built on modern frameworks such as Next.js and React, with Cloudflare providing DNS and likely CDN services, resulting in fast performance and excellent mobile optimization. Security posture is generally good with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and security headers, which are recommended improvements. Privacy compliance is weak due to absence of privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the website is professional, trustworthy, and technically sound, but could improve in privacy and security policy transparency.

Robly Ltd. is a well-established company specializing in email marketing automation solutions targeted primarily at small and medium-sized businesses. The company offers a comprehensive suite of services including proprietary technologies like OpenGen and Robly AI, along with features such as landing page builders, email templates, A/B testing, and integrations with popular platforms like Shopify and WordPress. The website demonstrates strong market positioning supported by numerous customer testimonials and industry awards, reflecting a reputable and trusted brand in the email marketing space. Technically, the website employs a modern technology stack with extensive use of analytics and marketing tools, hosted on AWS infrastructure, and built with responsive design principles to ensure good user experience across devices. Security posture is solid with HTTPS enforced and domain transfer protections in place, though there is room for improvement by enabling DNSSEC and publishing explicit security policies. Privacy compliance is partially addressed with a comprehensive privacy policy, but lacks a cookie consent mechanism despite extensive tracking technologies. Overall, the website is professional, trustworthy, and well-optimized, with minor gaps in privacy and security transparency that should be addressed to enhance compliance and user trust.

LPO Arkitekter is Norway's largest independent architectural firm specializing in architecture for cities, places, buildings, and spaces with a strong focus on innovation, sustainability, and inclusive design processes. The company positions itself as a leader in the Norwegian architectural market, serving a broad audience including municipalities, developers, and the general public interested in urban development. Their business model centers on delivering comprehensive architectural and urban planning services with an emphasis on human-centric solutions. Technically, the website employs modern web technologies such as jQuery, Google Analytics, Google Tag Manager, and Plausible Analytics for tracking, alongside lazy loading for performance optimization. The site is mobile-optimized and features good SEO practices, although some accessibility features could be enhanced. The infrastructure appears stable and professionally maintained, with no signs of outdated or vulnerable libraries. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not provide a visible cookie consent mechanism or detailed privacy and security policies, which are important for GDPR compliance. The WHOIS data is not publicly available due to Norid's policies, but the domain and website content align with a legitimate and professional business entity. Overall, the website presents a strong business credibility and technical foundation but would benefit from improved privacy compliance and security best practices to enhance trust and regulatory adherence.

Add arkitekter AS is a Norwegian architectural firm established in 1998, specializing in architectural design and urban development. The company recently rebranded to Add arkitekter and serves clients primarily in Norway, including municipalities and private sector entities. Their website reflects a professional and consistent brand image with clear contact information and relevant project articles. Technically, the site is built using modern frameworks such as Next.js and React, with some creative use of p5.js for visual effects. The site is mobile optimized and has good SEO practices, though accessibility could be improved. From a security perspective, the website uses HTTPS as indicated by the Open Graph URL, but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No WHOIS data is publicly available due to .no domain privacy restrictions, which is typical but reduces transparency. No signs of malicious content or tracking scripts were found, indicating a low-risk profile. However, the absence of privacy and cookie policies and security headers are notable gaps. Overall, the website is professional and trustworthy from a business perspective but could improve its security posture and privacy compliance to meet modern standards. The domain registration information is not publicly accessible, which is common for Norwegian domains but should be considered when assessing transparency.

DRMA AS is a Norwegian architecture and planning firm established in 2006, specializing in community-focused architectural design, planning, placemaking, and landscape architecture. The company positions itself as a local expert with a global outlook, demonstrated by participation in international exhibitions and collaborations. Their website showcases multimedia content highlighting their projects and approach, targeting clients interested in innovative and community-driven architectural solutions. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Mapbox GL JS for mapping features. The site is mobile-optimized with good design quality and user experience, though some accessibility and SEO optimizations could be improved. No CMS or hosting provider details were identified. From a security perspective, the site uses HTTPS with good SSL configuration but lacks security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No forms or analytics scripts were detected, indicating minimal data collection and tracking. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, DRMA's website is professional and trustworthy but would benefit from enhanced privacy compliance, security headers, and accessibility improvements to strengthen its security posture and regulatory adherence.

Lundhagem is a small, award-winning architecture and urban design practice based in Oslo, Norway. The website presents a professional image focused on showcasing their design work and company identity. The business targets clients seeking architectural and urban design services, positioning itself as a specialized and reputable firm in its sector. The website uses modern web technologies such as Nuxt.js and Imgix for image optimization, indicating a moderate level of digital maturity. However, the site lacks visible contact information, privacy policies, and security headers, which impacts its overall security posture and compliance stance. No WHOIS data is publicly available, suggesting privacy protection for the domain registration, which is typical for small professional firms. Overall, the website is functional and professional but could improve in security and compliance transparency.

Nordic Office of Architecture is a well-established international architectural firm with studios in Norway, Denmark, and Iceland. The company serves a global clientele with a strong presence in the Nordic region, positioning itself as a leading architectural practice. Their website reflects a professional and modern design, showcasing key projects and providing comprehensive contact information for multiple office locations. The firm emphasizes transparency and compliance with privacy regulations, evidenced by a comprehensive privacy policy and cookie consent mechanism. Technically, the website employs modern JavaScript frameworks and analytics tools, ensuring a good user experience and performance. Security posture is solid with HTTPS enforcement and domain transfer protections, though there is room for improvement in security headers and incident response disclosures. Overall, the website and domain registration data indicate a credible and trustworthy business with a strong digital presence.

Norske landskapsarkitekters forening (NLA) is a well-established Norwegian professional association for landscape architects, founded in 1929. The website serves as the official platform for disseminating news, events, project showcases, and member services to professionals and the public interested in landscape architecture in Norway. The association holds a recognized position within its niche, providing valuable resources and fostering community engagement. Technically, the website employs a modern technology stack including jQuery, Leaflet.js for mapping, Materialize CSS framework, and Google Analytics for user tracking. Security measures such as HTTPS and Google reCAPTCHA are implemented, though some security headers are missing. Privacy compliance is basic with a cookie policy present but no explicit consent mechanism. Overall, the site is professional, trustworthy, and well-maintained.

Arkitektbedriftene i Norge AS is a professional association and employer organization representing architectural offices and practitioners in Norway, including architects, landscape architects, and interior architects. The organization provides membership services, quality tools such as MAKS and MAKS-søk, legal guidelines, statistical data, webinars, and an architect search portal. Their market position is that of a key industry association supporting architectural professionals in Norway. The website is well-structured, professionally designed, and targets architectural firms and professionals within Norway. The business model revolves around membership and providing value-added services to its members.

NIL (Norske interiørarkitekters og møbeldesigneres landsforening) is a well-established Norwegian professional association representing interior architects and furniture designers. The organization focuses on promoting the professions, providing member services, organizing events, and publishing industry-related materials. The website is built on Drupal 10, featuring modern web technologies and a comprehensive content structure that supports member engagement and public information. Privacy and cookie policies are clearly presented and GDPR compliant, with a consent management system in place. Security posture is adequate but could be improved with additional security headers and explicit incident response information. Overall, the website reflects a mature digital presence consistent with the organization's history and professional standing.

Arkitektur.no is a well-established Norwegian architecture media portal operated by Norske arkitekters landsforbund. It provides comprehensive news, project showcases, opinion pieces, and job listings targeted at architects and design professionals in Norway. The website demonstrates a strong market position within the Norwegian architecture sector, supported by consistent branding and professional content. Technically, the site employs modern web technologies including Vue.js, hCaptcha for form security, and integrates advertising via Adnuntius. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a positive user experience. Security posture is solid with HTTPS enforcement and CAPTCHA protection, although explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant with GDPR, and maintains good privacy practices.

Statsbygg is a Norwegian government agency responsible for managing major construction projects and state-owned properties. The website presents comprehensive information about their projects, sustainability efforts, innovation initiatives, and public services. It targets government entities, contractors, suppliers, and the general public interested in public infrastructure and property management. The site uses modern web technologies including React and Matomo analytics, and embeds multimedia content such as Vimeo videos. The website is well-designed, mobile-optimized, and professionally maintained, reflecting a high level of digital maturity. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not published. WHOIS data is unavailable, which is unusual but may be due to registry policies. Overall, the site is trustworthy and authoritative for its domain.

LINK Arkitektur is a well-established Scandinavian architectural firm operating primarily in Denmark, Norway, and Sweden. The company positions itself as a leading player in the architectural sector with a focus on sustainability and comprehensive architectural services. Their website reflects a professional and modern digital presence built on Drupal 10, with multi-language support and a clear content structure. The use of Cookiebot indicates a commitment to GDPR compliance and user privacy. Technically, the website is hosted behind Cloudflare DNS, uses HTTPS, and incorporates modern web standards, although DNSSEC is not enabled. Security posture is solid but could be improved by adding security headers and publishing explicit security policies. The absence of visible contact emails and phone numbers on the front page suggests contact information may be deeper in the site or via forms. Overall, the website is trustworthy, professional, and compliant with privacy regulations.

Transborder Studio is a small architecture practice founded in 2013, specializing in architecture, urbanism, and interior design with a focus on sustainable and cultural projects. The website serves as a portfolio showcasing key projects primarily located in Norway and Venice. The business targets clients interested in green living and cultural spaces, positioning itself as a niche player in the architecture sector. Technically, the website uses modern web standards with HTML5, CSS3, and JavaScript, and images are delivered via the imgix CDN. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, and no contact information or incident response details are provided, which impacts trust and compliance. Overall, the site is professional and functional but could improve in transparency and security best practices.

Snøhetta is a globally recognized transdisciplinary architecture and design firm focused on creating meaningful places that connect societies and the environment. Their website showcases a broad portfolio of projects across architecture, landscape, interior, product, and brand experience disciplines, targeting clients and partners in the design and real estate sectors. The digital infrastructure is modern, leveraging lazy loading, video loops, and a likely Craft CMS backend, hosted on a CDN for performance. Security posture is moderate with HTTPS and CSRF tokens present but lacking explicit security headers and formal privacy or cookie policies. The absence of WHOIS data reduces domain trustworthiness, though the professional content and social media presence support legitimacy. Overall, the site is well-designed and user-friendly but would benefit from enhanced privacy compliance and security transparency.

NTNU (Norges teknisk-naturvitenskapelige universitet) is Norway's leading technical and natural sciences university with campuses in Trondheim, Gjøvik, and Ålesund. The institution serves approximately 40,000 students and holds primary responsibility for higher technology education in Norway. The website reflects a mature digital presence with comprehensive educational content, research information, and student life resources. It is built on a modern technology stack including Liferay CMS, Bootstrap, and various analytics tools, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response details are not publicly disclosed. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site demonstrates high professionalism, trustworthiness, and alignment with the institution's mission.

The website code.no represents a small Norwegian technology entity named 'Code' with a domain age dating back to 2000, indicating a long-standing presence. The site is built on WordPress using common technologies such as Bootstrap 3, jQuery, and LiteSpeed Cache, with a basic level of mobile optimization and SEO. The content is minimal and primarily technical, with limited business or contact information available. No privacy, cookie, or terms of service policies are present, and no contact details or social media links are provided on the homepage. Security posture is moderate with HTTPS enabled but lacking security headers and formal security policies. Overall, the site appears legitimate but lacks comprehensive compliance and trust signals.

Finsk-norsk kulturinstitutt (FINNO) is a small, non-profit cultural institute dedicated to strengthening cultural exchange between Finland and Norway. The website is professionally designed using WordPress CMS with multilingual support for Norwegian, Finnish, and English, targeting cultural communities and government/non-profit sectors. The site includes key services such as cultural exchange facilitation and event organization, positioning itself as a niche cultural entity. Technically, the website employs modern tools including Google Tag Manager and Yoast SEO, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and cookie consent implemented, though it lacks advanced security headers and formal privacy and terms of service documentation. Overall, the domain registration details align well with the website's claims, indicating legitimacy and trustworthiness.

Design og arkitektur Norge (DOGA) is a Norwegian non-profit foundation dedicated to promoting sustainable value creation and innovation through design and architecture in both the private and public sectors. The organization offers innovation programs, awards, courses, and tools aimed at fostering design-driven innovation and urban development. The website reflects a well-established entity with government ties, targeting Norwegian businesses and public institutions interested in design and architecture innovation. Technically, the website is hosted on Microsoft Azure, built with ASP.NET technologies, and employs modern tools such as Cloudflare for performance and security, Google Tag Manager and Analytics for tracking, and Cookie Information for GDPR-compliant cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is robust with detailed cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with relevant regulations.

BaselLive.ch is a local media platform serving as a city guide and lifestyle magazine for Basel, Switzerland. It provides curated content including event listings, cultural stories, shopping guides, and culinary tips targeting residents and visitors interested in exploring Basel. The platform leverages social media channels and newsletters to engage its audience and promote city activities. Technically, the website uses modern web technologies with JavaScript modules, CSS, and integrates advertising via AdButler and analytics through Plausible and Google Tag Manager. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the site enforces HTTPS and uses asynchronous script loading but lacks explicit security headers and formal privacy or cookie policies. No contact emails or phone numbers are explicitly provided, and no vulnerability disclosure or incident response information is found. Overall, the website is safe, trustworthy, and well-positioned as a local media outlet but would benefit from enhanced privacy compliance and security transparency.

Bolero is a Swiss online magazine operated by Ringier Magazine AG, focusing on fashion, culture, beauty, and premium lifestyle content targeted primarily at women with style. The website is professionally designed with consistent branding and good content quality, serving as a reputable media outlet within the Swiss market. The technical infrastructure leverages modern web technologies including Ring Publishing CMS, Google Tag Manager, and OneTrust for cookie compliance, ensuring a moderate to good performance and user experience across devices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are not publicly available. Overall, the website demonstrates a solid digital maturity with good SEO and advertising transparency. The domain registration is privacy protected but consistent with the brand's legitimacy. No adult or questionable content is present, making it safe for general audiences.

Annabelle.ch is a Swiss lifestyle and women's magazine website offering content on fashion trends, interior inspiration, travel tips, beauty stories, and social opinion pieces. The site targets a general audience interested in lifestyle and culture, positioning itself as an established media brand in Switzerland. Technically, the website is built on WordPress with modern integrations such as Yoast SEO Premium, Google Tag Manager, Microsoft Clarity, and Cookiebot for consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities, although explicit privacy and terms of service pages are missing. Overall, the site demonstrates good professionalism and trustworthiness but could improve compliance transparency and contact accessibility.

Caddy for Life is a non-profit charity initiative organized by the Golfclub Bodensee Weissensberg, focused on hosting golf tournaments to raise funds for social projects in the Austria region. The website provides detailed information about past and upcoming charity events, supported projects, and sponsors, targeting golf enthusiasts and community members interested in charitable causes. The business model relies on sponsorships and donations collected during these events. Technically, the website is built on WordPress using Elementor and related plugins, ensuring a modern and responsive user experience. Security-wise, the site enforces HTTPS and implements GDPR-compliant cookie consent mechanisms, though it lacks a dedicated security policy or incident response information. Overall, the site is trustworthy, professionally maintained, and compliant with privacy regulations, with room for improvement in security transparency and accessibility.

Association de promotion mybuxi is a Swiss non-profit organization dedicated to promoting and expanding the demand-responsive transport service called mybuxi across rural Switzerland. Founded in 2019, the association supports operational deficits in structurally weak regions and funds technical development to enable mobility for people without private cars. The website is professionally designed using WordPress with Elementor and Yoast SEO, providing clear information about membership, projects, and the mission. The target audience includes Swiss rural communities, private individuals, and companies interested in sustainable mobility solutions. The organization positions itself as a niche promoter of innovative transport services with a growing footprint in Switzerland.

The website democracyday.ch serves as an informational and campaign platform dedicated to promoting democracy awareness in Switzerland. It targets the general public interested in civic engagement and democratic participation. The site provides multilingual content, event mapping, idea sharing, and partnership information, positioning itself as a niche non-profit campaign platform. Technically, the site is built on WordPress with modern JavaScript libraries such as jQuery, Foundation, and Isotope for layout and interactivity. It integrates Google Analytics and Facebook SDK for tracking and marketing purposes. The site is mobile optimized and shows moderate performance with basic SEO and accessibility features. Security-wise, the site enforces HTTPS and avoids exposing sensitive data but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information and incident response details are absent, which limits user trust and compliance. Overall, the site is functional and professional but could improve in privacy, security, and user engagement aspects.

Montebelo is a small creative studio and textile agency operating internationally with bases in Porto, A Coruña, Paris, and Stuttgart. The company focuses on graphic design, visual communication, and sustainable supply chain solutions within the textile industry. The website is hosted on the Cargo.site platform and employs modern web technologies including Google Analytics and Tag Manager for visitor tracking. The site is well-designed with good mobile optimization and clear navigation, presenting professional content relevant to its niche market. However, the website lacks explicit privacy, cookie, and terms of service policies, and does not provide direct contact information, which may impact user trust and compliance with privacy regulations. Security-wise, the site uses HTTPS but lacks visible security headers, suggesting room for improvement in hardening the web presence. WHOIS data is unavailable due to query failure or privacy protection, which is common for small agencies but reduces transparency. Overall, the site is functional and professional but would benefit from enhanced privacy and security disclosures.

Boussole21 is a Swiss government-supported online tool designed to assist project managers and organizations in evaluating the sustainability of their projects using a comprehensive set of 20 criteria. The platform offers a user-friendly interface with collaborative and modular features, enabling users to generate understandable and detailed sustainability reports. The website is professionally designed, mobile-optimized, and consistent with its branding, reflecting a niche but important role in sustainable development assessment within Switzerland. Technically, the site employs modern frontend technologies including jQuery, Bootstrap, and TinyMCE, built on a custom CMS likely using Laravel Blade templates. Performance is moderate with good mobile responsiveness, though accessibility and SEO optimizations are basic. Security practices include HTTPS usage but lack visible security headers and cookie consent mechanisms, indicating room for improvement in compliance and protection. From a security perspective, the website shows no signs of blocking or WAF interference, no exposed sensitive data, and no detected vulnerabilities. However, the absence of cookie policies, security headers, and incident response information suggests a moderate security posture. WHOIS data aligns well with the website's Swiss government affiliation, supporting legitimacy and trustworthiness. Overall, Boussole21 presents a trustworthy and professional online presence with a clear business focus but would benefit from enhanced privacy compliance, security hardening, and more transparent contact and incident response information to strengthen user trust and regulatory adherence.

Meilenweiss is a Swiss-based company offering an annual ski pass that grants access to multiple ski resorts and leisure activities. The website is built on WordPress with WooCommerce for e-commerce functionality, integrating payment processing via Saferpay. The digital infrastructure includes modern tracking tools such as Google Tag Manager and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and use of secure payment plugins, but lacks important security headers and formal policies such as privacy and cookie consent, which are critical for GDPR compliance. Overall, the website is professionally designed and mobile-optimized, targeting winter sports enthusiasts in Switzerland. However, the absence of privacy and security policies and contact information represents compliance and trust gaps that should be addressed.

Aargauische Kantonalbank is a leading financial services provider operating primarily in the Canton of Aargau and the Olten-Gösgen-Gäu region in Switzerland. The website reflects a professional banking institution offering a range of financial products and customer support services. The company maintains a strong market position as a regional bank with a clear focus on its local clientele. The digital presence is built on a modern technical infrastructure leveraging Liferay CMS, React, and Clay UI components, ensuring a responsive and user-friendly experience. Integration with Google Tag Manager and Jentis Analytics indicates a mature approach to user behavior tracking and marketing analytics. Security posture is robust with HTTPS enforcement, script nonce usage, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly visible. Overall, the website demonstrates a high level of professionalism and trustworthiness suitable for a financial institution.

The AKB Freizeitportal is a regional leisure and tourism platform operated in partnership with Aargau Tourismus AG and supported by the Aargauische Kantonalbank. It offers discounted leisure experiences, event information, and a newsletter service targeting residents and visitors of the Aargau region in Switzerland. The website is built on the nopCommerce platform, leveraging modern front-end technologies and analytics tools such as Google Tag Manager and Plausible Analytics. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Security posture is solid with HTTPS enforced and secure form handling, though some improvements in HTTP security headers and incident response disclosures are recommended. Overall, the site presents a professional, trustworthy, and user-friendly experience with clear business legitimacy and no suspicious content.

Hallwilerseelauf Gmbh operates a well-established Swiss running event website focused on the Hallwilerseelauf race series, offering multiple race formats including half marathon, 10 km, and team runs. The website targets runners, families, and sports enthusiasts, providing comprehensive event information and registration options. The company maintains a consistent brand presence with active social media engagement and partnerships with reputable sponsors. Technically, the site is built on WordPress with modern SEO and analytics tools, delivering a responsive and user-friendly experience. Security posture is strong with HTTPS and security headers implemented, though formal security policies and incident response details are not published. Privacy compliance is well addressed with clear cookie consent and privacy policy. Overall, the site is professional, trustworthy, and well suited for its audience.

Schlossrestaurant Habsburg is a hospitality business operating a historic castle restaurant and event venue in Switzerland. The company offers regional cuisine and hosts weddings, banquets, seminars, and private celebrations. It is positioned as a premium venue with a strong local heritage and scenic views, targeting individual guests and event organizers. The website is professionally designed using WordPress and the Avada theme, with modern SEO and analytics integrations. Security posture is good with HTTPS and security headers, though cookie consent mechanisms and explicit security policies are missing. Overall, the site is trustworthy and well-maintained, reflecting a small but established hospitality business under the parent company AARGAUHOTELS.CH.

Therme Zurzach is a Swiss-based wellness and hospitality business specializing in thermal baths, sauna, spa treatments, and fitness services. The website presents a professional and well-structured digital presence powered by HubSpot CMS, integrating modern marketing and analytics tools. The company targets families and wellness customers seeking relaxation and health benefits from thermal water and related services. The site includes rich content about services, events, and packages, supported by social media channels and online ticketing. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit privacy and security policies are not found. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website is trustworthy, user-friendly, and compliant with basic privacy standards, though improvements in explicit policy disclosures and incident response contacts are recommended.

Erlebnis Freiamt is a regional tourism and cultural promotion website dedicated to showcasing the Freiamt region in Switzerland. The site offers comprehensive information on local events, hiking and biking routes, gastronomy, cultural activities, and services aimed at tourists, families, and local residents. It positions itself as a key regional information hub with a focus on nature, culture, and community engagement. The business model revolves around promoting regional tourism and providing accessible, engaging content to attract visitors and support local businesses.

Planval AG is a Swiss consultancy specializing in sustainable development, policy design, and knowledge management for municipalities, regions, and businesses. Their website presents a professional and consistent brand image with clear contact information and multiple office locations in Switzerland. The company targets stakeholders involved in societal, ecological, and economic challenges, offering services that guide complex projects to successful outcomes. Technically, the website uses modern JavaScript frameworks (Vue.js), service workers, and responsive design, providing a moderate performance and good mobile optimization. SEO and accessibility are basic but adequate. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking formal security policies and headers. Overall, the site is trustworthy, safe, and compliant with GDPR, with no detected vulnerabilities or suspicious content. The WHOIS data aligns well with the business claims, reinforcing legitimacy. Strategic improvements could focus on enhancing security policies, incident response transparency, and accessibility features.

Standortförderung Zürioberland operates as a regional economic and cultural promotion organization for the Zürcher Oberland area in Switzerland. The website serves as a portal for businesses, residents, and visitors, offering information on economic opportunities, cultural events, regional products, and community initiatives. The organization positions itself as a key regional player fostering innovation, sustainability, and quality of life. Technically, the website is built on WordPress with modern JavaScript libraries and integrates multiple analytics and tracking services via Google Tag Manager. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. Overall, the domain registration data aligns well with the website's regional focus, indicating legitimacy and trustworthiness.