Medium-risk security reports

Jovìn.ai is a specialized AI chatbot service tailored for the tourism and hospitality sector, providing intelligent answers to questions about leisure activities, accommodations, weather, and events within a destination. The website presents a professional and consistent brand image, targeting tourism stakeholders and travelers. The technical infrastructure is built on the Framer platform and integrates Google Analytics and Tag Manager for user tracking and analytics. While HTTPS is properly configured, the site lacks important security headers and privacy compliance mechanisms such as privacy and cookie policies. The absence of WHOIS data due to privacy protection limits the ability to fully verify domain legitimacy, but the website content and contact information suggest a legitimate small business operation. Overall, the security posture is moderate but could be improved with additional security best practices and compliance documentation.

Ritzy.ch is a specialized education and training platform serving the hospitality, gastronomy, and tourism sectors in the Wallis region of Switzerland. The company, represented as 'Nachtleben' in structured data, offers a blend of in-person and online courses including webinars, e-learning modules, and quizzes. Their market position is that of a regional leader in continuing education tailored to the local industry needs. Technically, the website is built on WordPress with modern plugins such as Elementor and Slider Revolution, ensuring a responsive and performant user experience. Security-wise, the site enforces HTTPS, employs security headers, and avoids exposing sensitive data, though it lacks explicit published security policies and GDPR cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained but could improve privacy compliance and incident response transparency.

TouristDataShop AG operates as a specialized provider for the distribution, support, and management of Holidu Smart Destination services within Switzerland's tourism sector. The company targets destinations, cities, and accommodation providers, offering a suite of services including booking solutions, shared backoffice services, product data management, and customer support. Their market position is that of a niche player focused on enabling tourism businesses to make their offerings bookable online efficiently. Technically, the website is built on the Contao CMS platform, leveraging modern web technologies such as jQuery, Google Tag Manager, and YouTube APIs for multimedia content. The site is mobile-optimized with good SEO practices and moderate performance. However, there is room for improvement in accessibility and security headers implementation. From a security perspective, the website enforces HTTPS and uses trusted third-party analytics and tag management tools. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, and cookie consent mechanisms indicates gaps in compliance and security maturity. Overall, TouristDataShop AG presents a professional and trustworthy online presence with solid business credibility. Strategic enhancements in privacy compliance and security posture would further strengthen their risk profile and customer trust.

Feratel Medien Technologien AG is a Swiss-based technology company specializing in tourism and media solutions. The company offers a range of B2B services including marketing, upselling, service platforms, data strategies, communication, and interface development. Positioned as an established player in the DACH region, Feratel targets tourism industry professionals and media companies with a comprehensive suite of technology-driven services. The website reflects a professional and consistent brand image with clear navigation and good content quality. Technically, the website is built on TYPO3 CMS and integrates modern tools such as Cookiebot for consent management and Google Tag Manager for analytics. The site is mobile optimized and employs standard web technologies including JavaScript and CSS. Performance is moderate with good SEO and basic accessibility features. Security is well addressed with HTTPS enforcement and multiple security headers, though explicit security and incident response policies are not publicly documented. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. The site uses extensive tracking and marketing tools but manages user consent effectively. Overall, the website demonstrates a high level of trustworthiness and professionalism. Strategically, Feratel should consider publishing explicit security and incident response policies to enhance transparency and trust. Accessibility improvements and regular audits of third-party scripts would further strengthen the security and user experience. The domain registration data aligns well with the business claims, supporting legitimacy and credibility.

Davos Klosters is a prominent tourism organization promoting holidays and outdoor activities in the Swiss Alps, specifically in the Graubünden region. The website offers comprehensive information and booking options for skiing, hiking, biking, and cultural events, targeting tourists seeking alpine experiences. The company holds a strong market position as a leading alpine destination with a professional online presence and integrated e-commerce capabilities. Technically, the site is built on modern frameworks like Nuxt.js and Vue.js, ensuring fast performance, mobile optimization, and good SEO practices. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although dedicated security and incident response policies are not explicitly found on the site. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, professional, and well-aligned with its business goals.

TSO AG is a Swiss-based company specializing in digital transformation services for the tourism sector, including associations, destinations, transport companies, and hotels. Their business model revolves around providing shared-service digital solutions to automate processes and improve performance. The website reflects a professional and consistent brand image with a clear focus on tourism digitalization. Technically, the site uses Contao CMS, integrates modern analytics and consent management tools like Cookiebot and Google Tag Manager, and employs HTTPS with good security practices. However, explicit contact information and security policies are not prominently available, which could be improved. The security posture is solid with no visible vulnerabilities, but the absence of a security.txt or incident response information is a gap. Overall, the site is trustworthy, compliant with GDPR via Cookiebot, and well-positioned in its niche.

The Amadeu Antonio Stiftung is a German non-profit foundation dedicated to strengthening democratic civil society and combating right-wing extremism, racism, and antisemitism. The website presents a professional and content-rich platform offering information about their projects, publications, events, and initiatives. Their target audience includes civil society actors, activists, and supporters of democratic culture. The organization maintains an active presence on major social media platforms and provides a newsletter subscription for ongoing engagement. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WPML for multilingual support. It uses Borlabs Cookie for GDPR-compliant cookie consent management and integrates Google Analytics via Google Tag Manager, respecting user consent. The site is hosted on servers indicated by the agenturserver nameservers, suggesting a professional hosting environment. Mobile optimization and SEO practices are good, though accessibility could be improved. Security posture is adequate with HTTPS enforced and cookie consent implemented. However, no explicit security headers were detected, and no public security or incident response policies are published. No vulnerabilities or exposed sensitive data were found. The WHOIS data is limited but does not raise concerns about legitimacy. Overall, the site is trustworthy and professionally managed. Recommendations include adding a clear privacy policy and terms of service links, publishing a security policy or incident response contact, implementing security headers, and enhancing accessibility features to improve compliance and user experience.

ING-DiBa AG operates as one of Germany's leading digital and universal banks, serving over 9 million customers. The company offers a broad range of financial products including current accounts, loans, investment services, and mortgage financing. The website reflects a strong market position with a focus on customer satisfaction and digital innovation. The target audience includes private customers and business banking clients, emphasizing ease of use and accessibility through digital channels such as the ING app. The business model centers on providing comprehensive banking services with a digital-first approach, supported by a robust online presence and customer engagement.

IcanDo e.V. is a small German non-profit organization dedicated to educational and social projects, including school initiatives and volunteer services. The organization has a recognized market position within its community, evidenced by awards such as the 'Großer Stern des Sports 2020 in GOLD'. Their website is built on the Squarespace platform, leveraging standard web technologies and providing a visually consistent and mobile-optimized user experience. However, the site lacks explicit privacy and cookie policies, which are critical for GDPR compliance in the EU. Security posture is basic with HTTPS enabled but missing important security headers and incident response contact information. Overall, the website is safe, professional, and trustworthy for general audiences but could improve in privacy compliance and security best practices.

RheinFlanke gGmbH operates as a German non-profit organization specializing in youth work, educational programs, and social integration services. The organization maintains a professional and accessible website built on WordPress, featuring multiple locations and a clear focus on community impact. Their digital presence includes active social media channels and a cookie consent mechanism, reflecting awareness of privacy regulations. Technically, the site employs modern plugins and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and some best practices, though explicit privacy policies and vulnerability disclosures are missing, representing areas for improvement. Overall, RheinFlanke presents a credible and trustworthy digital footprint aligned with its mission and audience.

Musik Basel is a regional media platform focused on providing news, event information, and venue details related to the music scene in Basel, Switzerland. The website targets music enthusiasts and residents interested in cultural events and music news within the Basel region. It operates primarily as a content publishing platform with a focus on local music culture and events. Technically, the website is built using modern web technologies including the Nuxt.js framework and Vue.js, with integrations such as Google Tag Manager and Google Maps API for enhanced user experience and analytics. The site demonstrates good mobile optimization, SEO practices, and a professional design consistent with its regional media focus. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers, indicating a solid security posture. However, it lacks a cookie consent mechanism despite using tracking scripts, and there is no publicly available security policy or incident response information. No vulnerabilities or suspicious content were detected. Overall, Musik Basel presents a trustworthy and professional online presence for its niche audience. Strategic improvements in privacy compliance and transparency around security policies would further enhance its credibility and user trust.

BURGUNDER is a small Swiss-based e-commerce retailer specializing in semi-professional outdoor gear. The website is built on the Shopify platform, leveraging its e-commerce capabilities and integrations. The product catalog includes various outdoor gear items, targeting outdoor enthusiasts seeking quality equipment. The business appears to be relatively young, founded around 2020, consistent with the domain registration date. The website presents a professional design with clear navigation and product presentation, although direct contact details such as emails or phone numbers are not provided, relying instead on a contact form. Privacy and cookie policies are minimal, with only a terms page detected that may contain some privacy information. The site uses common marketing and analytics tools including Meta pixel and Mailchimp, indicating moderate user tracking.

HEK (Haus der Elektronischen Künste) is a well-established Swiss cultural institution and museum specializing in digital and electronic arts. It serves as a platform for interdisciplinary projects, exhibitions, and workshops, connecting art, science, and technology. The website reflects a professional and modern digital presence with multilingual support and a rich program offering. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and privacy compliance including cookie consent mechanisms. However, some areas like explicit security policies, incident response contacts, and terms of service are missing or not publicly visible. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy entity.

kühne wicki GmbH is a Swiss-based interdisciplinary futures research and consulting firm specializing in Futures Research, Development, Implementation, and Futures Literacy. Founded in 2017, the company serves organizations and individuals interested in strategic foresight, scenario planning, and transformative future-oriented processes. Their market position is that of a specialized boutique consultancy with a strong focus on innovation and future competencies, supported by a professional team and reputable clients. The website reflects a high level of professionalism, with detailed project case studies and team profiles, indicating a mature business presence. Technically, the website is built using modern JavaScript frameworks (Nuxt.js/Vue.js) and integrates Google Analytics and Tag Manager for tracking. Hosting is provided by Hostpoint AG, a reputable Swiss hosting provider. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. SEO practices are good with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS but lacks important security headers and DNSSEC is not enabled. No privacy or cookie policies are present, which is a compliance gap especially under GDPR. No incident response or security contact information is provided. The site does not show signs of vulnerabilities or malicious content but could improve its security posture by implementing recommended headers and policies. Overall, the website is trustworthy and professional with minor gaps in privacy compliance and security hardening. Strategic recommendations include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and publishing incident response information to enhance trust and compliance.

The website catapultbasel.ch represents a youth-focused funding platform based in Basel, Switzerland. It aims to support young people by providing a platform for project submissions and community engagement. The site is built using modern web technologies including Vue.js and Nuxt.js, with multimedia support via Video.js and audio recording libraries. Google Analytics is used for visitor tracking, though no visible consent mechanism is present. The website content is primarily in German and targets the local youth demographic. Security posture is basic with no advanced headers or policies detected, and privacy compliance is minimal due to the absence of privacy and cookie policies. WHOIS data confirms the domain's legitimacy and local registration, supporting the trustworthiness of the platform.

Kunsttage Basel is a well-established cultural event organizer focused on contemporary and modern art in Basel, Switzerland. The website showcases a comprehensive program of exhibitions, workshops, talks, and performances involving over 60 institutions. The event targets art enthusiasts and the local cultural community, providing rich content and multiple engagement channels including social media and newsletters. Technically, the site is built on modern frameworks such as Nuxt.js and integrates Mapbox for location services, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and security headers, though cookie consent and explicit security policies are lacking. Overall, the site is professional, trustworthy, and compliant with GDPR, but could improve privacy compliance and incident response transparency.

Polit-Forum Bern is a small non-profit organization based in Bern, Switzerland, dedicated to fostering political education and dialogue through events, exhibitions, and educational programs. The website serves as a platform to inform the public about upcoming debates, exhibitions, and offers for schools and youth. It maintains a consistent brand presence and targets a broad audience interested in political discourse and democratic engagement. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WPML for multilingual support. It integrates Google services including Analytics, Tag Manager, and reCAPTCHA, indicating a moderate level of digital maturity. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. From a security perspective, the site uses HTTPS and includes reCAPTCHA to protect forms, but lacks explicit security policies and a cookie consent mechanism, which are important for GDPR compliance. No critical vulnerabilities or suspicious elements were detected, and the domain registration details align well with the organization's identity, supporting legitimacy. Overall, the website presents a professional and trustworthy image with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

The website 'LiveSurface' presents a professional front focused on product visualization and design tools, as indicated by the page title and styling. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy or recent registration status. The technical infrastructure includes use of Google Tag Manager for analytics, but lacks visible security headers and privacy compliance documentation. No contact information or business details are provided, limiting trust and transparency. Overall, the site appears functional and visually coherent but lacks critical security and compliance elements.

Hostpoint AG is the largest Swiss web hosting provider, managing over 1.2 million domain names and offering a broad range of services including domain registration, web hosting, managed servers, and email solutions. The company targets businesses and individuals primarily in Switzerland, leveraging a strong local market presence and a reputation for reliability and modern infrastructure. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, indicating a high level of digital maturity. Technically, the site uses modern tools such as Hugo for static site generation, Google Tag Manager, Google Analytics, and Hotjar for analytics and user behavior tracking, all integrated with a cookie consent mechanism to comply with privacy regulations. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. The company holds ISO 27001 certification, reinforcing its commitment to information security. Overall, the website and domain registration details align well, supporting the legitimacy and trustworthiness of the business.

Avacon AG operates the Avacon Shop, an e-commerce platform specializing in energy-related products and services including electromobility, photovoltaic systems, energy storage, and electrical installations. The website targets consumers and businesses in Germany seeking comprehensive energy solutions. The platform is built on the Shopware CMS and hosted by Hetzner, leveraging modern web technologies and marketing tools such as Google Tag Manager and Facebook Pixel. The site features a professional design with good navigation and mobile optimization, supporting customer account management and product browsing. Security posture is adequate with HTTPS and secure forms, though lacks explicit security headers and published privacy or cookie policies. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate business presence.

Avacon Wasser GmbH is a regional water utility company based in Germany, providing safe and sustainable water supply services to households, businesses, and municipalities. The company emphasizes environmental protection, climate initiatives, and customer engagement through digital portals and consulting services. Their market position is that of a medium-sized regional utility with a strong focus on sustainability and customer service. Technically, the website is built on Adobe Experience Manager with modern UI components and consent management tools, indicating a mature digital infrastructure. Security posture is good with HTTPS and consent mechanisms, though some security headers and explicit incident response policies are missing. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with clear contact information and social media presence.

Avacon Natur GmbH is a German energy company specializing in sustainable and renewable energy solutions, including heat, cold, and regenerative energy technologies. The company targets municipalities, businesses, private customers, and the housing industry with integrated energy solutions such as district heating, photovoltaic systems, and innovative quarter concepts. Their market position is that of an innovative regional energy provider focused on sustainability and digital energy futures. Technically, the website is built on Adobe Experience Manager with modern UI components and integrates Google Tag Manager and Usercentrics for analytics and consent management. The site is hosted behind Cloudflare, ensuring robust infrastructure and security. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, well-structured, and trustworthy, reflecting a mature digital presence for a medium-sized energy company.

PsychJOB.ch is a specialized online job board operated by Hogrefe AG, focusing on psychology-related employment opportunities primarily in Switzerland. It serves both job seekers and employers within the psychology sector, offering job listings, company profiles, and resume management services. The platform is positioned as a leading niche job board in its market segment, leveraging a professional and consistent brand identity linked to its parent company, Hogrefe AG. Technically, the website is built on Drupal CMS with integrations including Google Tag Manager, Google Maps API, and Usercentrics for cookie consent management. The site demonstrates good digital maturity with mobile optimization, accessibility features, and SEO best practices. Performance is moderate, with room for improvement in hosting and speed optimizations. From a security perspective, the site enforces HTTPS, employs multiple security headers, and integrates a consent management platform, reflecting a solid security posture. However, it lacks a dedicated security policy or incident response contact information, which are recommended for enhanced transparency and readiness. Overall, PsychJOB.ch presents a trustworthy and professional online presence with strong business credibility and compliance with privacy regulations such as GDPR. Strategic improvements in security documentation and incident response readiness would further strengthen its risk profile.

The Federal Ministry of Food and Agriculture (BMLEH) operates an official government website providing comprehensive information on topics such as food and nutrition, consumer protection, farming, animal welfare, rural regions, forests, fisheries, international affairs, and digitalisation. The site targets the general public, stakeholders in agriculture and food sectors, and international partners, serving as a key communication and service platform for the ministry. The website is well-structured, professionally designed, and consistent with government branding standards. Technically, the website is built on the Government Site Builder CMS platform, utilizing modern web standards including HTML5, CSS3, and SVG graphics. It incorporates Matomo analytics for anonymous visitor statistics and implements a granular cookie consent mechanism compliant with GDPR. Mobile optimization and accessibility features are well addressed, ensuring a good user experience across devices. From a security perspective, the site enforces HTTPS with excellent SSL configuration and includes standard security headers such as Content-Security-Policy and Strict-Transport-Security. The cookie consent banner clearly distinguishes necessary cookies from optional tracking and third-party content cookies. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, representing areas for improvement. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. The domain appears legitimate and consistent with official government use. No WAF or content blocking was detected, allowing full content accessibility. Strategic recommendations include publishing detailed security policies, providing incident response contact channels, and establishing a vulnerability disclosure process to enhance security posture and transparency.

Worldsoft AG is a well-established Swiss technology company specializing in comprehensive web project solutions including domain registration, website building, email marketing, online shops, CRM, and hosting services. With over 25 years of experience, they serve a broad business audience across Europe, positioning themselves as a reliable and professional provider. Their website reflects a mature digital presence with clear branding, extensive product offerings, and strong customer trust indicators such as high Google review ratings and multiple certifications. Technically, the website employs modern web technologies including progressive web app capabilities, custom CMS, and third-party widgets for enhanced user engagement. The site is well-optimized for mobile devices, fast loading, and SEO-friendly. However, some security best practices like explicit security headers and published incident response policies could be improved. From a security perspective, the site uses HTTPS and shows no obvious vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Contact information is transparent and professional, supporting business credibility. Overall, the website and business demonstrate a strong security posture and digital maturity, though there is room for improvement in formalizing security policies and enhancing transparency around vulnerability disclosures. The domain WHOIS data is privacy protected, which is typical for this business type and does not raise immediate concerns. Strategic recommendations include implementing security headers, publishing incident response and vulnerability disclosure information, and maintaining ongoing security audits to sustain trust and compliance.

Kniv-Web GmbH is a Swiss-based digital agency specializing in web design, e-commerce solutions, SEO, and online marketing services. With over 25 years of experience, the company targets small and medium-sized businesses primarily in the March and Höfe districts of Switzerland. Their service offerings include professional website development, progressive web apps, online shops, branding, and video production, positioning them as a comprehensive digital partner for local businesses. Technically, the website leverages modern web technologies including PWA capabilities, Google Fonts, and integrates with analytics and cookie consent management tools. Hosting is provided by a Swiss company, Worldsoft AG, ensuring local infrastructure alignment. The site is mobile-optimized, SEO-friendly, and demonstrates good performance and accessibility standards. From a security perspective, the site enforces HTTPS and employs a robust cookie consent mechanism compliant with GDPR. However, explicit security policies and incident response contacts are not publicly disclosed, representing an area for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional, trustworthy, and compliant digital presence with strong business credibility. Strategic enhancements in security transparency and formal incident response processes would further strengthen their security posture and client trust.

Worldsoft AG is a well-established Swiss technology company specializing in comprehensive web project solutions including domain registration, website building, email marketing, online shops, CRM, and hosting services. With over 25 years of experience, the company targets businesses and professionals seeking integrated digital tools to enhance their online presence. Their market position is strengthened by strong customer satisfaction, certifications, and a broad product portfolio. Technically, the website demonstrates a modern and performant infrastructure using proprietary CMS technology, progressive web app features, and integration with third-party widgets for enhanced user engagement. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a published security policy or incident response contacts, which are recommended for further strengthening the security posture. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. Overall, the risk assessment is low with no indications of malicious activity or content safety concerns. Strategic recommendations include implementing security headers, publishing a vulnerability disclosure policy, and enhancing transparency around incident response to further build trust and resilience.

Worldsoft AG operates as a technology company specializing in smart internet business solutions, likely centered around content management systems and web services. The website currently displays a maintenance message with minimal content, including a user login form and a company contact email. The business appears to target other businesses or users seeking internet business solutions, positioning itself as a specialized provider in this niche. Technical infrastructure is basic, with HTML and CSS usage and no advanced frameworks or analytics detected. The site lacks modern security features such as HTTPS enforcement and security headers, which lowers its security posture. The absence of privacy and cookie policies indicates non-compliance with common data protection standards. Overall, the website presents a basic digital presence with room for significant improvements in security, compliance, and content richness.

Messen.de is a well-established online platform providing a comprehensive calendar and overview of trade fairs and exhibitions primarily in Germany, Austria, Switzerland, and the Netherlands. It serves exhibitors, visitors, event organizers, and service providers by offering detailed event information, ratings, and news updates. The platform positions itself as a key resource in the German-speaking trade fair market, leveraging structured data and a user-friendly interface to deliver relevant content without requiring login. Technically, the website employs modern JavaScript frameworks, integrates Google Tag Manager, and uses a consent management platform to comply with GDPR regulations. Advertising and tracking are managed through reputable networks such as Criteo and Sourcepoint. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response details are absent. Overall, the site is professional, trustworthy, and compliant with privacy standards, making it a reliable resource for its target audience.

Tobias Erlach operates a professional web presence focused on providing conversion-focused web design and marketing integration services under the brand The Web Accelerator. The website positions Tobias as a creative business consultant and designer, targeting businesses seeking to improve their online sales through effective website design. The site includes a portfolio, newsletter, and YouTube channel to engage the audience and share insights. Technically, the website is built on WordPress with a modern theme and uses Cloudflare DNS and Google Analytics for tracking. The site is well-optimized for SEO and mobile devices, with a cookie consent mechanism ensuring GDPR compliance. Security posture is good with HTTPS enabled, though DNSSEC is not enabled and security headers are not detected, representing areas for improvement. No explicit security or incident response policies are published, and no contact emails or phone numbers are listed, relying on a contact form instead. Overall, the website is professional, trustworthy, and safe for general audiences.

SCHULBAU.online is a professional German platform focused on educational construction, offering a magazine, trade fairs, and events targeting architects, school authorities, and planners. The business is operated by Cubus Medien Verlag GmbH, a medium-sized company based in Hamburg, Germany, founded in 2025. The website is built on WordPress with modern plugins and SEO tools, providing a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though DNSSEC is not enabled and security headers could be improved. Privacy compliance is strong with accessible privacy and cookie policies. Overall, the site is trustworthy and well-positioned in its niche.

VTTrando.fr is a specialized French website dedicated to mountain biking enthusiasts and event organizers, offering a comprehensive calendar of VTT events and a platform for free event publication. The site is well-positioned in its niche market, providing valuable services such as interactive maps, regional event listings, and a blog with relevant content. Technically, it leverages WordPress CMS with modern libraries like Bootstrap and jQuery, integrates Google Maps and reCAPTCHA for enhanced user experience and security, and uses Matomo for analytics alongside Ezoic for advertising. The website demonstrates good SEO practices and mobile optimization, ensuring accessibility and usability for its audience. Security-wise, the site enforces HTTPS, uses consent management for cookies, and employs reCAPTCHA to protect forms, though it lacks explicit security policy and incident response disclosures. The absence of WHOIS data suggests privacy protection, which is typical for small niche sites and does not detract from its legitimacy. Overall, VTTrando.fr presents a professional, trustworthy, and user-friendly platform with moderate to good security and privacy compliance.

Cranio-Petra.ch is a website for Petra Müller, a small local healthcare provider specializing in craniosacral therapy in Rapperswil, Switzerland. The business offers complementary therapy services aimed at supporting physical and psychological wellbeing. The website is built on the cm4all CMS platform, hosted by Hostpoint, and uses older but functional web technologies such as jQuery 1.7 and Prototype 1.7.3. The site provides clear contact information and links to relevant professional associations, enhancing its credibility. However, it lacks advanced security policies and modern compliance features such as cookie consent mechanisms and incident response disclosures. The website is accessible without any WAF or blocking mechanisms, indicating open availability to users.

The website www.lionhearts.ch is currently inaccessible beyond a Cloudflare security challenge page, which prevents direct content analysis. The site appears to be protected by Cloudflare's Turnstile captcha, indicating a security posture that includes bot mitigation and access control. Due to this, no business-specific content, contact information, or policies are visible, limiting the ability to assess the company's market position, services, or compliance status. Technically, the site leverages Cloudflare's security infrastructure but lacks visible metadata or structured data for further analysis. Security posture is difficult to evaluate fully; however, the presence of Cloudflare protection suggests some baseline security measures. Overall, the site scores low on content quality, privacy compliance, and business credibility due to the lack of accessible information. Strategic recommendations include reducing access restrictions for legitimate users, publishing clear privacy and cookie policies, and providing transparent business contact details to improve trust and compliance.

Wirtschaftsförderung in der Region Hannover is a regional government economic development organization focused on supporting businesses, startups, and innovation in the Hannover area. The website provides comprehensive information on business location, financing, founding support, innovation, workforce development, and events. It targets entrepreneurs, companies, investors, and regional stakeholders, positioning itself as a key facilitator for economic growth in the region. Technically, the site uses a custom CMS with modern JavaScript libraries such as jQuery and Swiper.js, and employs Matomo for privacy-conscious analytics. The site is well-optimized for mobile and accessibility, with a clear navigation structure and professional design. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly documented. Overall, the site demonstrates a mature digital presence aligned with governmental standards and regional economic goals.

The website 'Herrenhäuser Gärten - Hannover.de' serves as the official online presence for the Herrenhäuser Gardens and the Museum Schloss Herrenhausen, operated by the Landeshauptstadt Hannover (City of Hannover). It provides comprehensive visitor information, event details, group tours, and ticketing services, targeting tourists, families, and cultural enthusiasts. The site is well-positioned as a leading cultural and botanical attraction in Hannover, supported by consistent branding and professional content. Technically, the website employs modern web standards including HTML5, CSS3, SVG graphics, and JavaScript, with Matomo analytics for user tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The CMS appears custom or proprietary, typical for government sites. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. No vulnerabilities or exposed sensitive data were detected. However, the site lacks a visible cookie consent mechanism and dedicated security or incident response policies, which are recommended for enhanced GDPR compliance and transparency. Overall, the website is trustworthy, professionally maintained, and provides a safe user experience. Strategic improvements in privacy consent and security transparency would further strengthen its compliance and user trust.

Visit Hannover is an official tourism portal managed by Hannover Marketing und Tourismus GmbH, providing comprehensive information on hotels, sightseeing, events, congresses, and regional attractions in Hannover, Germany. The website targets tourists, business travelers, and event attendees, offering booking options and cultural highlights. Technically, the site uses modern JavaScript libraries, Matomo analytics, and Google advertising scripts, with a likely CMS based on eZ Platform. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS and consent management, though explicit security headers and policies are missing. WHOIS data is unavailable, which slightly reduces trust but the website content and branding indicate legitimacy. Overall, the site is professional, user-friendly, and compliant with GDPR.

Swiss Golf Managers (SGM) is a Swiss-based professional network focused on connecting and strengthening golf businesses across Switzerland. The organization aims to foster collaboration, information exchange, and sustainable development of the Swiss golf sport sector. Their website provides information about membership, events, and news relevant to golf club managers and related stakeholders. The site is built on the Webflow CMS platform with multilingual support via Weglot, indicating a modern and flexible technical infrastructure. The website is well-designed, mobile-optimized, and provides a good user experience, though some accessibility and SEO improvements are possible. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the domain registration data aligns well with the website's Swiss golf focus, supporting legitimacy and trustworthiness.

Migros Golf operates multiple golf parks in Switzerland, offering accessible golf memberships through the Migros GolfCard since 1995. The website is built on TYPO3 CMS and employs modern web technologies including jQuery and Cookiebot for cookie consent management. The site demonstrates good technical infrastructure with HTTPS and basic SEO and accessibility features. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not found. Overall, the domain registration aligns well with the business entity Migros, indicating high legitimacy and trustworthiness.

Swiss Golf is the official umbrella organization for golf sports in Switzerland, providing comprehensive services including player development, tournament organization, and sustainability initiatives. The website is well-structured, professionally designed, and targets golf players and enthusiasts across all levels in Switzerland. It features clear navigation, rich content, and strong branding supported by reputable sponsors such as Rolex and Helsana. Technically, the site uses modern JavaScript frameworks like Vue.js and libraries such as Axios and Chart.js, ensuring a dynamic and interactive user experience. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security-wise, the website enforces HTTPS and implements a cookie consent mechanism, but lacks visible security headers and an explicit security policy or incident response contact. The WHOIS data aligns well with the website's claims, indicating a trustworthy domain registration. Overall, the site scores highly on content quality, business credibility, and privacy compliance, with minor technical and security enhancements recommended.

The website 'Homeland' is a small business or brand site created in 2020, built using the Framer platform. It presents minimal content focused on marketing slogans emphasizing customer satisfaction but lacks detailed business descriptions, contact information, or legal policies. The technical infrastructure relies on Framer hosting and content delivery, with basic HTTPS security but missing advanced DNS and HTTP security features. No privacy or cookie policies are present, indicating low compliance with data protection regulations. The absence of contact details and security disclosures limits trust and business credibility. Overall, the site is functional but minimalistic, suitable for a startup or brand awareness but requires enhancements for professional and secure online presence.

Der Sparkasseblog is a professional German-language financial blog focused on the Sparkasse banking ecosystem, targeting private customers, young people, and business clients. The site provides educational content and advice related to banking, investments, taxes, and personal finance. It is positioned as a niche content provider within the finance sector, leveraging the trusted Sparkasse brand. Technically, the website is built on WordPress with a modern tech stack including jQuery, Yoast SEO, and Google Tag Manager, ensuring good SEO and moderate performance. The site is mobile optimized and offers clear navigation and search functionality. Security-wise, the site uses HTTPS with valid SSL certificates and employs Google Tag Manager for analytics. However, it lacks visible security headers, explicit privacy and cookie policies, and contact information for security or general inquiries, which are areas for improvement. Overall, the website is trustworthy and professional but could enhance its privacy compliance and security posture.

Bauhaus-Universität Weimar is a medium-sized public university in Germany specializing in architecture, civil engineering, design, media, and related disciplines. The website serves students, researchers, and academic partners with comprehensive information about study programs, research, and university news. The university maintains a strong brand presence and offers a well-structured, accessible, and mobile-optimized website built on TYPO3 CMS with modern web technologies. Security posture is solid with HTTPS and privacy-conscious analytics (Matomo) but lacks explicit cookie consent and published security policies. The domain registration aligns with academic networks, supporting legitimacy. Overall, the site is professional, trustworthy, and suitable for its educational mission.

The website at js-aa.org is currently inaccessible, returning a 403 Forbidden error page with no additional content or metadata. This prevents any meaningful analysis of the business, services, or user engagement features. The domain is registered with GMO Internet Group, a reputable registrar, and has a reasonable age since 2018, but the lack of accessible content severely limits trust and credibility assessments. Technically, the site lacks DNSSEC and visible security headers, indicating room for security improvements. No privacy, cookie, or terms of service policies are present, and no contact information is available, which further reduces compliance and user trust. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a poor user experience and low security posture.

The website bestarchitects.de represents the 'best architects award', a prestigious European architecture award recognizing outstanding architectural achievements. The site serves architects, industry professionals, and enthusiasts by providing award results, news, and a bookshop for related publications. The business model centers on award organization and publication sales, positioning itself as a recognized authority in the European architecture sector. Technically, the site is built on depage CMS with modern web standards, includes responsive design, and uses Google Analytics for visitor insights. Security posture is solid with HTTPS, CSRF protection on forms, and cookie consent mechanisms, though it lacks explicit security headers and published security policies. Overall, the site is professional, trustworthy, and compliant with GDPR, but could improve transparency on security and incident response. No blocking or WAF interference was detected, allowing full content access and analysis.

DOM publishers is a specialized architecture book publisher established in 2005, offering a wide range of premium books and journals focused on architecture and design. The company targets architects, educators, and students globally, leveraging a Shopify-based e-commerce platform to distribute its products worldwide. The website demonstrates a professional and consistent brand presence with clear contact information and multilingual support. Technically, the site uses modern web technologies and Shopify's infrastructure, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and form protection via hCaptcha, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is trustworthy, well-maintained, and suitable for its niche audience.

The Federation of Swiss Architects (BSA Bund Schweizer Architekten) is a prominent membership organization uniting over 950 members recognized for their achievements in architecture and urban development in Switzerland. The website serves as a comprehensive platform offering information about the federation, its local groups, awards, research grants, publications, and events. It targets architects, urban planners, and related professionals within Switzerland, providing multilingual support to cater to the diverse linguistic regions of the country. The business model is centered on membership services, professional networking, and advocacy within the architectural sector.

Beer Merz AG is a small architecture firm based in Basel, Switzerland, specializing in architectural design, building renovations, and project competitions. The website presents a professional portfolio of projects primarily focused on real estate and urban development. The firm targets a general audience interested in architectural services within the Basel region. Technically, the website is built using React and modern JavaScript, with a custom CMS or framework. It shows moderate performance and good mobile optimization but lacks some accessibility features. Security posture is moderate; HTTPS is implied but no explicit security headers were detected. Cookie consent is implemented, and Google Analytics is used for tracking. However, no explicit contact information, terms of service, or security policies are present on the site. The domain uses privacy protection for WHOIS data, which is justified for this business type. Overall, the website is professional and trustworthy but could improve in security and compliance transparency.

Truwant + Rodet + is a small architecture and design studio based in Basel, Switzerland, specializing in innovative architectural projects, competitions, research studios, and exhibitions. Their portfolio includes a variety of projects primarily in Switzerland with some international collaborations, emphasizing adaptive reuse, artistic installations, and academic design studios. The website reflects a professional and artistic brand image targeting architecture professionals, clients, and academic institutions. Technically, the website employs modern JavaScript frameworks such as Alpine.js and GSAP, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies. The presence of Google Analytics without a configured tracking ID and absence of privacy compliance mechanisms indicate areas for improvement. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security practices.

820 is a Zurich-based architecture studio specializing in innovative designs that integrate technology and environmental considerations. Led by Nicolas König and Lewis Horkulak, the studio emphasizes techno-environmental synergies and speculative spatial scenarios to foster deeper environmental integration. Their portfolio showcases a range of projects, competitions, and installations, highlighting a strong presence in the architectural design community with multiple awards and exhibitions. Technically, the website is built on the Cargo Collective platform, utilizing modern web standards including HTML5, CSS3, and JavaScript. The site is well-optimized for mobile devices and presents a professional, visually rich portfolio. However, there is room for improvement in accessibility and SEO practices. From a security perspective, the site uses HTTPS and does not expose sensitive data or forms, reducing attack surface. Nonetheless, it lacks important security headers and does not provide explicit security policies or incident response contacts, which could be enhanced to improve trust and compliance. Overall, the website reflects a credible and professional architecture studio with a strong digital presence but would benefit from enhanced privacy, security, and compliance disclosures to align with best practices and regulatory requirements.