Security Directory

V

Vergic AB

psplugin.com

60

Vergic AB operates the Vergic Engage platform, a digital-first customer engagement solution designed to improve customer experience and revenue through personalized digital interactions. The company targets businesses and public organizations seeking to enhance their digital customer service and sales channels. The platform offers a comprehensive suite of tools including live chat, chatbots, video, digital voice, and collaboration features, supported by APIs and integrations with major CRM and contact center systems. Recently acquired by Puzzel, Vergic maintains a strong market presence with reputable clients primarily in Sweden and the Nordic region. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various marketing and analytics tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Hotjar. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site enforces HTTPS and uses several security best practices, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. However, the WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency. Overall, Vergic presents a professional and trustworthy digital presence with a solid business model and technical foundation. The main risk lies in the lack of WHOIS transparency, which should be investigated further. Strategic recommendations include enhancing security headers, verifying domain registration details, and maintaining rigorous third-party script audits to ensure ongoing security and compliance.

S

Grands Sites du Gout – Entrez dans l'univers des Grands Sites du Goût

swisstastes.ch

50

The website 'swisstastes.ch' presents itself as a culinary and gourmet portal focused on Swiss tastes and culture, targeting a general audience interested in food and travel. The site uses WordPress CMS with the Enfold theme and integrates plugins such as MapPress for Google Maps and Google Tag Manager for analytics. The technical infrastructure is moderately modern, with basic mobile optimization and SEO features. However, the site lacks visible privacy and cookie policies, contact information, and security best practices such as security headers and vulnerability disclosures. This indicates a low maturity in security and privacy compliance. Overall, the website is functional but requires improvements in security posture and compliance to enhance trust and professionalism.

S

STnet

stnet.ch

63

STnet AG is a Swiss company specializing in transport and mobility services, providing digital solutions and information primarily for public transport users in Switzerland. The company maintains a professional and well-structured website built on WordPress, incorporating modern web technologies and monitoring tools such as New Relic and Google Tag Manager. The website is accessible, mobile-optimized, and offers clear contact information, including email, phone, and contact forms, supporting user engagement and service inquiries. Security posture is solid with HTTPS enforced and standard security headers present, although explicit security policies and incident response details are absent. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a dedicated privacy policy and terms of service pages. Overall, the website reflects a trustworthy and professional digital presence aligned with the company's business focus.

S

SmartBear

smartbear.co

66

SmartBear is a well-established enterprise software company specializing in tools for software testing, API lifecycle management, and observability. The company offers a comprehensive suite of products targeting developers, testers, and software teams to improve software quality and performance. Their market position is strong, supported by a mature domain and consistent branding. Technically, the website employs modern JavaScript libraries, analytics, and monitoring tools, hosted on AWS infrastructure with Kentico CMS. The site is well-optimized for SEO, mobile, and accessibility. Security posture is good with HTTPS and domain protections, though DNSSEC is not enabled and security policy disclosures are limited. Overall, the site reflects a mature digital presence with professional content and strong business credibility.

H

HTML Codex

htmlcodex.com

60

HTML Codex is a specialized provider of free and premium HTML website templates, targeting web developers, designers, and businesses seeking customizable and developer-friendly templates. The company operates a WordPress-based website with a clear market position as a top designer and publisher of free HTML templates since its domain registration in 2019. The business model revolves around offering both free and paid templates, supported by advertising and premium sales. Technically, the website employs modern web technologies including Bootstrap, jQuery, and WordPress plugins such as Yoast SEO and Mailchimp integration, ensuring good SEO and user experience. Hosting and DNS are managed via Cloudflare, providing reliable performance and security.

D

Digital Partners Group

dpgroupcorp.com

54

Digital Partners Group is a technology company specializing in the development and production of proprietary technology-based products primarily focused on improving digital environments and fostering closer connections between companies and people. Founded in 2010, the company has evolved from mobile platform consultancy to multi-industry digital product development, offering solutions such as user analytics (Undato), subscription management (Sindyk Smart), mobile site optimization (Sindyk Speed), custom software development, and SEO services. The company targets digital actors and businesses seeking advanced technological solutions to enhance their digital presence and user engagement. Technically, the website employs modern front-end technologies including Bootstrap, jQuery, FontAwesome, and integrates Google Analytics for user tracking. Hosting and DNS services are provided via Cloudflare, ensuring good SSL configuration and moderate performance. The site is mobile optimized with a professional design and clear navigation, though accessibility features are basic. SEO optimization is good with proper meta tags and Open Graph data. From a security perspective, the website uses HTTPS and has domain-level protections such as clientDeleteProhibited status, but lacks DNSSEC and security headers like Content-Security-Policy. No privacy or cookie policies are published, and no incident response or security policy information is available. Google Analytics is used without visible cookie consent mechanisms, indicating privacy compliance gaps. Overall, the website is professional and trustworthy with a moderate security posture and good business credibility. However, improvements in privacy compliance, security headers, and explicit security policies are recommended to enhance trust and regulatory adherence.

U

University of Fribourg

unifr.ch

56

The University of Fribourg is a well-established public educational institution founded in 1889, offering a broad range of academic programs including Bachelor, Master, and Doctorate degrees. It serves a diverse audience including students, researchers, and employees, with a strong regional and international presence. The website reflects the university's bilingual and multicultural identity, providing comprehensive information about studies, research, campus life, and support services. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and various analytics tools, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and explicit incident response information. Privacy compliance is basic, lacking cookie consent mechanisms and detailed GDPR indicators. Overall, the site is professional, trustworthy, and well-maintained, supporting the university's mission and reputation.

T

Taberg Media Group

tabergmediagroup.se

44

Taberg Media Group is a well-established Swedish media and communication company founded in 2005, offering a broad range of services including print production, expo solutions, profile products, creative marketing, and digital solutions. The company operates across multiple Swedish cities, positioning itself as a full-service communication partner for businesses seeking integrated marketing and print services. Their website reflects a mature digital presence with professional design, clear service segmentation, and active marketing integrations. Technically, the site is built on WordPress with the Divi theme and leverages modern JavaScript libraries and marketing tools such as HubSpot, Google Tag Manager, and Facebook Pixel. Security posture is generally good with HTTPS enabled and no critical vulnerabilities detected, though some security headers like Content-Security-Policy are missing, and DNSSEC is not enabled. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism in place, aligned with GDPR requirements. Contact information is primarily via web forms, with no explicit emails or phone numbers visible on the homepage. Overall, the site is trustworthy, professional, and well-suited for its business purpose.

S

Stockholm Waterfront

stockholmwaterfront.com

45

Stockholm Waterfront is a well-established event venue located in central Stockholm, offering flexible spaces for conferences, congresses, corporate events, exhibitions, concerts, and banquets. The venue caters to a diverse audience including event organizers and corporate clients, with capacity for up to 3,000 participants. The website reflects a professional and consistent brand presence with detailed information about services and event spaces. Technically, the site is built on WordPress using Elementor and includes common plugins for SEO and cookie management. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR principles, although no explicit privacy policy or terms of service were found in the provided content. Security posture is moderate with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and security headers. No contact emails or phone numbers were found in the analyzed content, which limits direct contact transparency. Overall, the domain registration data is consistent and supports the legitimacy of the business.

B

Bauer Media Outdoor

clearchannel.se

68

Bauer Media Outdoor is a leading outdoor advertising company in Sweden, operating under the Bauer Media Group umbrella. The company offers extensive outdoor advertising solutions including digital and classic billboards, programmatic advertising, and campaign planning services. Their market position is strong, with a wide geographic reach and a focus on impactful brand communication. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, and OneTrust for privacy compliance, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in publishing explicit security policies and vulnerability disclosures. Overall, the website is professional, user-friendly, and compliant with GDPR, but the absence of WHOIS data for the domain raises some concerns about domain registration legitimacy that should be addressed.

A

ASB Deutschland e.V.

wuenschewagen.de

43

Der Wünschewagen is a non-profit project operated by ASB Deutschland e.V. that fulfills last wishes of terminally ill people by providing free transportation to their desired locations. Established in 2014, it operates 23 regional vehicles across Germany, supported by nearly 2,000 volunteers and funded exclusively through donations. The website is professionally designed, mobile-optimized, and provides comprehensive information about the project, donation options, volunteer opportunities, and regional contacts. Technically, the site uses Concrete CMS with modern libraries like jQuery, Bootstrap, and Vue.js, and implements cookie consent and third-party content blocking mechanisms. Security posture is good with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Overall, the site demonstrates high trustworthiness and strong alignment between domain registration and business claims.

S

SAGAFLOR AG

gruen-erleben.de

70

SAGAFLOR AG operates the website gruen-erleben.de, a well-established German retail platform focused on gardening products, tips, and services. The company emphasizes quality rooted in gardening tradition and offers a variety of services including product sales, gardening inspiration, a job board for the green sector, and gift vouchers. The website targets gardening enthusiasts and consumers interested in horticulture, positioning itself as a trusted and quality-focused brand in the German retail gardening market. Technically, the website employs modern web technologies such as Bootstrap for responsive design, jQuery, and Splide.js for interactive sliders. It integrates multiple analytics platforms including Google Analytics 4 and Matomo, and uses marketing tools like Elfsight widgets and UserWay for accessibility enhancements. Hosting appears to be managed via Deutsche Telekom infrastructure, ensuring reliable performance and security. The site is mobile-optimized and includes accessibility features, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism compliant with GDPR. While explicit security headers are not visible in the HTML, the overall security posture is good with no exposed sensitive data or vulnerable libraries detected. The site lacks a published security policy or incident response contact, which could be areas for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It provides a positive user experience with clear navigation and relevant content. The domain registration data aligns well with the business identity, supporting legitimacy. Strategic recommendations include enhancing security header implementation, publishing a security policy, and continuous monitoring of third-party scripts to maintain security and compliance.

Š

Škoda Auto Deutschland GmbH

skoda-auto.de

69

Škoda Auto Deutschland GmbH operates the official German website for the Škoda automotive brand, providing comprehensive information about their vehicle models, financing options, after-sales services, and electric mobility solutions. The company is a large, well-established player in the transportation sector in Germany, with a strong market presence and a broad portfolio including electric vehicles. The website targets both individual consumers and business customers, offering tools such as vehicle configurators, dealer locators, and financing calculators. Technically, the website employs a modern technology stack including React, Bootstrap, and jQuery, hosted on a reliable infrastructure likely powered by Microsoft Azure. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with extensive use of structured data and meta tags. Performance is moderate, with good loading times and responsive design. From a security perspective, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data. However, it lacks a public vulnerability disclosure policy and explicit incident response contact details. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Contact information is transparent and professional, enhancing business credibility. Overall, the website presents a low-risk profile with strong trust indicators and professional digital maturity. Strategic improvements could focus on enhancing security transparency and incident response readiness to further strengthen the security posture.

S

Grands Sites du Gout – Entrez dans l'univers des Grands Sites du Goût

sites-du-gout.ch

40

The website 'swisstastes.ch' presents itself as a platform dedicated to the 'Grands Sites du Goût', likely focusing on Swiss gastronomy and culinary heritage. The site targets a general audience interested in food culture and regional specialties. The technical infrastructure is based on WordPress using the Enfold theme, with integrations such as MapPress for Google Maps and FontAwesome for icons. Google Tag Manager is employed for analytics, indicating some level of user tracking and data collection. However, the site lacks visible privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture appears weak due to the absence of security headers and explicit security policies. No contact information or forms were detected, limiting user engagement and support options. Overall, the site is functional but requires improvements in privacy, security, and business transparency to enhance trust and compliance.

A

Association Vaud OEnotourisme (AVOE)

vaud-oenotourisme.ch

50

Vaud Oenotourisme is a Swiss non-profit association dedicated to the development and promotion of wine tourism in the canton of Vaud and Switzerland. The organization provides tools, training, networking, and certification to professionals in the oenotourism sector, aiming to enhance the regional wine tourism market. The website serves as a hub for professionals to access resources, events, and partnership information, positioning itself as a key regional player in this niche tourism industry. The content is primarily in French and targets industry stakeholders and partners.

U

UDITIS SA

uditis.ch

57

UDITIS SA is a Swiss IT company established in 2000, specializing in cloud and infrastructure services, IT service management, and online solutions. It serves a diverse clientele including SMEs and multinational corporations across sectors such as healthcare, finance, and industry. Since 2022, UDITIS has been part of the Sequotech group, enhancing its technological expertise and market reach. The company offers a broad portfolio of IT services and solutions, positioning itself as a trusted technology partner in Switzerland. The website demonstrates a solid technical infrastructure with modern web technologies including jQuery and a proprietary CMS (WebMaker). It features responsive design and good SEO practices, with integrated cookie consent management and Google Analytics for traffic analysis. The site is well-structured, professionally designed, and provides clear navigation and contact information, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS and implements secure forms with anti-CSRF tokens. Cookie consent mechanisms are in place, supporting GDPR compliance. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. No critical vulnerabilities or suspicious content were detected. Overall, UDITIS presents a trustworthy and professional online presence with a strong business foundation. Strategic enhancements in security transparency and incident readiness would further strengthen its security posture and client trust.

B

BOAS Gestion SA

bainsdesaillon.ch

50

Les Bains de Saillon, operated by BOAS Gestion SA, is a well-established hospitality and wellness business located in Valais, Switzerland. The company offers a 4-star hotel with 145 rooms, a thermal bath center, multiple themed restaurants, spa services, and event hosting facilities. The website reflects a professional and comprehensive digital presence with clear navigation, multilingual support, and integrated booking systems. The business targets tourists, families, and wellness seekers, positioning itself as a regional leader in hospitality and wellness services. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and policies could be improved. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

L

Lac Souterrain de Saint-Leonard

lac-souterrain.com

40

Lac Souterrain de Saint-Leonard operates a tourism website promoting the largest natural navigable underground lake in Europe, located in Switzerland. The site offers guided boat tours, group visits, school visits, private events, and concerts. The business targets tourists and visitors interested in unique natural experiences within the hospitality sector. The website is built on WordPress using Elementor and related plugins, with integrations for booking and chatbot services. The technical infrastructure is modern and moderately performant, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain protection flags, but lacks explicit security headers and formal privacy or security policies. No email contacts are publicly listed, but a clear phone contact is provided. The site includes a cookie consent mechanism, indicating some GDPR awareness, though no privacy policy was found. Overall, the website is professional and trustworthy, but could improve privacy compliance and security transparency. Hidden spam links found in the content should be addressed to maintain reputation.

V

VAUD

vaudplus-produits.ch

54

The website www.vaud.ch/terroir is an official government platform representing the Canton of Vaud in Switzerland. It focuses on promoting the region's rich terroir, local products, and quality certifications such as the VAUD CERTIFIÉ D’ICI label. The site targets residents, local producers, and visitors interested in regional gastronomy and culture. It serves as a comprehensive informational and promotional tool, reinforcing the Canton’s market position as a reputable and authentic source of local products and tourism information. Technically, the site is built on WordPress with modern integrations including Google Tag Manager, Matomo Analytics, and Facebook Pixel, ensuring robust tracking and marketing capabilities. The design is professional, mobile-optimized, and accessible with clear navigation and rich content. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site demonstrates high business credibility and trustworthiness, supported by consistent branding and official domain registration.

J

Jura & Three-Lakes Tourism

j3l.ch

69

Jura & Three-Lakes Tourism operates a comprehensive regional tourism website promoting outdoor activities, cultural experiences, and accommodations in the Jura & Three-Lakes region of Switzerland. The site serves as both an information portal and an online booking platform, integrating third-party services for marketing automation, analytics, and user engagement. The business targets tourists, families, and outdoor enthusiasts, positioning itself as a key regional destination marketing organization. Technically, the website employs modern JavaScript libraries, Google Tag Manager, Mapbox for geolocation, and Cookiebot for GDPR-compliant cookie management, hosted on a CMS specialized for tourism information. Security posture is strong with HTTPS enforced, standard security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the site lacks explicit security policies and incident response contacts, which could be improved. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO, making it a reliable resource for visitors planning trips to the region.

T

Top Light GmbH & Co.KG

orange-one.de

41

Orange One is a German-based lighting brand operating under the parent company Top Light GmbH & Co.KG. The company specializes in high-quality, innovative lighting solutions primarily targeting B2B customers such as architects, light planners, and retailers. Their product portfolio includes architectural and indoor lighting designed for both private and commercial applications. The website reflects a professional and consistent brand image with clear business contact information and a partner program to support business customers. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, and slick slider for UI elements. It is mobile responsive and provides a good user experience with clear navigation and relevant content. However, no CMS or hosting provider details are explicitly detected. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS (implied by domain and external links), but no explicit security headers were detected in the provided HTML content. Cookie consent is implemented, supporting GDPR compliance. No incident response or security policy pages were found. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website presents a trustworthy and professional business presence with moderate technical maturity and basic privacy compliance. Security posture can be improved by implementing recommended HTTP headers and formalizing security policies.

H

Hapag-Lloyd Cruises

denn-zeit-ist-luxus.com

51

The website 'Denn Zeit ist Luxus' serves as a login portal for a luxury cruise booking service affiliated with Hapag-Lloyd Cruises. It offers users access to E-Booking services and promotional materials, targeting travel agents and customers interested in premium cruise experiences. The site maintains a professional appearance with consistent branding and clear navigation, supporting a positive user experience. Technically, the site employs modern JavaScript libraries such as jQuery, Google Tag Manager, and Botfriends Webchat, alongside a cookie consent mechanism via OneTrust, indicating a mature digital infrastructure. Security posture is generally strong with HTTPS enforced and secure form inputs; however, the absence of explicit security headers and missing WHOIS registration data present areas for improvement. Privacy compliance is well addressed with accessible privacy and cookie policies, and GDPR adherence is evident. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced transparency in domain registration and security header implementation.

D

Daxa Nema

daxanema.com

38

Daxa Nema is a small technology company specializing in cloud-hosted eCommerce solutions, primarily developing Shopify apps under a SaaS model. The company has established a credible market presence since 2016 as a Shopify Partner with over 2,000 active users and a strong app rating. Technically, the website is built on WordPress using the Divi theme, leveraging common plugins for analytics and cookie consent. The site demonstrates moderate performance and basic SEO and accessibility features. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, but lacks visible direct contact emails or phone numbers on the homepage.

A

ActiveMedia, Digital Designers

activemedia.pt

61

ActiveMedia is a well-established digital agency based in Portugal, specializing in web design, UX/UI, content creation, and digital signage. With over 22 years of experience, the company positions itself as a trusted partner for brands seeking authentic and effective digital solutions. The website reflects a mature digital presence with professional design, clear branding, and comprehensive service offerings tailored to businesses and brands. Technically, the site is built on WordPress with modern integrations such as Weglot for multilingual support, Sendinblue for marketing automation, and Hotjar for user behavior analytics, indicating a good level of digital maturity. Security posture is strong with HTTPS enforced and appropriate security headers, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is professional, secure, and compliant with privacy regulations, making it a credible digital agency in its market.

F

FCCN, Unidade FCT

fccn.pt

68

FCCN, Unidade FCT is a Portuguese digital services unit under the Fundação para Ciência e Tecnologia (FCT), providing technological infrastructure and services to the scientific and academic community in Portugal. The organization manages the national research and education network (Rede RCTS) and offers key services such as online learning platforms, secure file sharing, and digital content publication. The website reflects a strong market position with strategic partnerships and a clear focus on supporting research and education through technology. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates analytics and user experience tools such as Google Analytics, Hotjar, and Cookie Script for compliance and tracking. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are not publicly detailed. Overall, the site is professional, accessible, and trustworthy, serving a specialized audience effectively.

S

Skenzo ltd

skenzo.com

64

Skenzo ltd operates as a global leader in the domain parking and traffic monetization industry, providing specialized services to domain portfolio holders, registrars, and web hosts. Founded in 2005, the company leverages proprietary technology and expert account management to maximize revenue opportunities for its clients. The website reflects a professional business model focused on monetization programs, custom parked pages, and traffic optimization solutions. Technically, the site employs standard web technologies including HTML5, CSS, JavaScript, and jQuery, with integration of ConsentManager for privacy compliance. Hosting is supported by Akamai CDN infrastructure, ensuring reliable performance and availability. Security posture is solid with HTTPS enforced and domain transfer protections in place, though improvements could be made by enabling DNSSEC and implementing additional security headers. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site presents a trustworthy and professional digital presence aligned with its business objectives.

S

SINDYK

sindyk.com

59

Sindyk is a Colombian technology startup specializing in digital media solutions, focusing on audience growth, content monetization, and mobile site optimization for media companies across Latin America. With over 15 years of domain registration and 8+ years of active business presence, Sindyk offers a suite of products including Smart, Conecta, Speed, Turbo, and Codea to help clients manage subscriptions, optimize content delivery, and enhance user engagement. The company maintains a professional web presence with clear branding, client testimonials, and a dedicated team showcased with LinkedIn profiles. Technically, the website uses modern frameworks like Bootstrap and integrates Google Analytics and Adsense for marketing and tracking purposes. Security posture is adequate with HTTPS and Cloudflare DNS but lacks advanced security headers and published privacy policies, which are areas for improvement. Overall, the website is well-designed, mobile-optimized, and trustworthy, though privacy compliance needs enhancement.

S

SmartBear

bitbar.com

65

SmartBear's BitBar product offers a comprehensive cloud-based testing platform for browser and mobile app testing, targeting software development and QA teams. The company is well-established with a domain age of over 20 years and a strong market presence supported by notable customers and partners. The website demonstrates a mature digital infrastructure with modern technologies, good performance, and mobile optimization. Security posture is strong with HTTPS, security headers, and secure form handling, though explicit security policies and incident response information are limited. Overall, the site is professional, trustworthy, and aligned with enterprise software standards.

S

SmartBear

smartbear.com

66

SmartBear is a well-established enterprise technology company specializing in software testing, API lifecycle management, and observability tools. The company offers a comprehensive suite of products designed for developers, testers, and software teams to build, test, monitor, and optimize APIs and applications. With a strong market position and a portfolio of subsidiaries including Bugsnag, PactFlow, and Zephyr, SmartBear serves a global audience with enterprise-grade solutions. The website reflects a mature digital presence with excellent content quality, clear navigation, and professional branding. Technically, the website leverages modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Bugsnag for error monitoring. It is hosted on AWS infrastructure with a CMS platform identified as Kentico. The site is mobile-optimized, fast-loading, and SEO-friendly, with structured data enhancing search engine visibility. Privacy and cookie policies are present with consent mechanisms, indicating good compliance practices. From a security perspective, the site enforces HTTPS with strong SSL configuration and uses security headers, although explicit security policy and incident response contacts are not publicly disclosed. The domain WHOIS data is transparent and consistent with the company's business claims, showing a long registration history without privacy protection, which supports legitimacy. Overall, SmartBear's website demonstrates a high level of professionalism, security, and compliance suitable for an enterprise technology provider. Strategic recommendations include enabling DNSSEC, publishing a dedicated security policy, and adding a vulnerability disclosure program to further enhance trust and security posture.

Midvox is a German-based company specializing in modern book marketing and social media solutions aimed at promoting printed books. Their services include digital previews ('Blick ins Buch'), flippable covers, social media widgets, and virtual book shelves, targeting publishers and book retailers. The company has established a significant network with over 1,400 publishers and thousands of online and physical retailers, positioning itself as a key player in the German book marketing industry. Technically, the website employs a variety of older JavaScript libraries such as jQuery, MooTools, and Fancybox, indicating some technical debt and potential security risks. The site lacks visible privacy and cookie policies, and no HTTPS enforcement or security headers were detected, which weakens its security posture. Overall, the website is functional with moderate content quality but requires improvements in security and privacy compliance to enhance trust and user safety.

T

TECNOLUMEN GmbH & Co.KG

tecnolumen.de

44

TECNOLUMEN GmbH & Co.KG is a German company specializing in the manufacture and retail of Bauhaus and design classic lighting, fittings, and design objects. The company targets design enthusiasts, retailers, and businesses with a focus on high-quality, timeless design products. Their market position is that of a niche leader in Bauhaus lighting and design classics, supported by a dealer network and an online shop. The website reflects a mature digital presence with WordPress CMS, SEO optimization via Yoast, and privacy-conscious analytics using Matomo. The technical infrastructure is solid, hosted via kunde24.de, and includes modern web technologies such as jQuery and Bootstrap. Security posture is good with HTTPS enforced and secure data collection forms, though some security headers and explicit security policies are missing. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-structured, supporting the company’s business credibility and customer engagement.

T

Top Light GmbH & Co.KG

top-light.de

43

Top Light GmbH & Co.KG is a well-established German manufacturer and retailer specializing in premium bathroom lighting and illuminated mirrors. The company holds a strong market position as a leader in its niche, supported by multiple industry awards and a professional online presence. Their business model includes both B2B and B2C channels, with a dedicated online shop and comprehensive customer support. The website reflects a mature digital infrastructure utilizing modern web technologies and integrates Google Analytics for performance insights. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. Security posture is adequate but could benefit from explicit security headers and incident response information. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

N

Nimbus Group GmbH

nimbus-lighting.com

52

Nimbus-lighting.com is the official website of Nimbus Group GmbH, a German company specializing in manufacturing and selling innovative LED lighting products for private and commercial sectors. The company has a strong market position with a focus on LED.next technology and offers a broad product portfolio including lighting families and project references. The website supports both German and English languages and provides comprehensive product and service information, including dealer support and downloadable resources. The business model centers on manufacturing and direct sales with a medium-sized company footprint founded in 2013. Technically, the website employs modern JavaScript libraries such as jQuery, Moment.js, and Pikaday, alongside marketing and analytics tools like Google Tag Manager and HubSpot. The site is mobile optimized with good navigation and content quality, though some SEO and accessibility features are basic. Hosting details are not explicit, but the domain is registered with COREhub, S.R.L. The site uses HTTPS with a good SSL configuration but lacks DNSSEC and some security headers. From a security perspective, the site demonstrates good practices including HTTPS enforcement, cookie consent via OneTrust, and opt-out functions for Google Analytics and Facebook tracking. However, it lacks a published security policy, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, Nimbus-lighting.com presents a professional and trustworthy online presence with moderate technical maturity and good business credibility. Strategic improvements in security headers, DNSSEC, and published security policies would enhance its security posture and compliance standing.

A

Artimeta BV

artimeta.nl

36

Artimeta BV is a Netherlands-based B2B company specializing in the distribution of design lighting products. Their clientele includes light, design, and furniture stores as well as project designers in sectors such as yachting and hotel interiors. The company has an established online presence with a domain registered since 1998, reflecting a mature business. The website showcases a curated collection of lighting products from various brands, targeting professional partners rather than end consumers. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, indicating a modern and flexible infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and professional design. However, some technical improvements are recommended, including enabling DNSSEC, adding security headers, and properly configuring analytics tools. From a security perspective, the site uses HTTPS but lacks advanced security headers and DNSSEC, which are important for enhancing protection against common web threats. The absence of a cookie consent mechanism and incomplete privacy compliance features indicate potential regulatory gaps, especially under GDPR. No incident response or security policy information is publicly available, which could be improved to enhance trust. Overall, Artimeta presents as a credible and professional business with a solid market position in the lighting distribution sector. Strategic improvements in security and privacy compliance would strengthen their digital maturity and reduce potential risks.

A

Artemide S.p.A.

artemide.de

61

Artemide S.p.A. is a well-established Italian company specializing in the design and manufacturing of high-end lighting products. The website showcases a broad range of collections including design and architectural lighting solutions, emphasizing innovation, sustainability, and collaboration with renowned designers and architects. The company targets architects, designers, retailers, and consumers seeking premium lighting solutions. The digital presence is mature, featuring modern technologies such as Bootstrap, jQuery, Owl Carousel, and Google Analytics, with good mobile optimization and accessibility features. Security practices include cookie consent management and anonymized analytics data, though explicit security headers and incident response information are not published. The WHOIS data is unavailable, which raises some concerns but the website's professional presentation and consistent branding support its legitimacy. Overall, the site is secure, compliant with privacy regulations, and professionally maintained.

The Fachverband Raumbegrünung und Hydrokultur im Zentralverband Gartenbau (ZVG) e.V. is a small German industry association focused on promoting indoor greening and hydroponics to improve human wellbeing in indoor environments. The website serves as an informational platform offering educational content, quality certifications, and industry networking opportunities. It targets professionals and enthusiasts in the indoor plant cultivation sector. Technically, the site is built on the Contao CMS platform and uses common JavaScript libraries for UI enhancements. While the site is functional and well-structured with good content relevance and navigation, it lacks advanced SEO optimization and mobile responsiveness is basic. Security posture is moderate with HTTPS enabled but missing important security headers and no cookie consent mechanism, which impacts GDPR compliance. No explicit contact emails or phone numbers are present on the homepage, but a contact form and privacy policy page exist. Overall, the site is trustworthy but could improve in security and privacy compliance to better serve its audience and meet regulatory requirements.

E

Element Green

element-green.com

58

Element Green operates as a network of 17 owner-managed companies specializing in interior and exterior greening solutions across Germany, Austria, and Switzerland. Their services include office greening, object greening, vertical and horizontal plantings, and professional plant care, positioning them as a collaborative and experienced player in the real estate and hospitality sectors. The website is professionally designed with comprehensive content, clear navigation, and good mobile optimization, reflecting a mature digital presence. Technically, the site is built on WordPress with Elementor and Yoast SEO, employing modern libraries and security best practices such as HTTPS and security headers. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and contact information suggest a legitimate business. Privacy compliance is strong with a detailed privacy policy, but the lack of a cookie consent mechanism and security incident response policy are areas for improvement. Overall, the site scores well on content quality and technical implementation but should address compliance and domain legitimacy issues to enhance trust and security posture.

J

Jungfreisinnige Stadt Bern

jfstadtbern.ch

51

The website jfstadtbern.ch represents the Jungfreisinnige Stadt Bern, a local youth political organization in Bern, Switzerland. The site focuses on political advocacy, membership engagement, and event organization targeted at residents and politically interested individuals in Bern. The business model is that of a small political organization with a local focus. Technically, the website is built on WordPress using the Avada theme and several event management plugins, indicating a moderate level of digital maturity. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. Security posture is weak, with no detected security headers, privacy policies, or incident response contacts. No analytics or tracking scripts were found, suggesting minimal user tracking. Overall, the site is safe for general audiences and does not contain adult or explicit content. The WHOIS data is consistent with the website's claims, supporting legitimacy. Strategic recommendations include implementing HTTPS with strong SSL, adding privacy and cookie policies with consent mechanisms, improving security headers, and providing clear contact information for security and data protection purposes.

FDP Frauen Stadt Bern is a small, non-profit political association of women based in Bern, Switzerland, with a long history dating back to 1935. The organization focuses on political advocacy and engagement for women in the local community. The website is built on WordPress using Elementor and Yoast SEO, providing a modern and moderately optimized digital presence. The site is well-structured with good navigation and mobile optimization but lacks comprehensive privacy and cookie policies. Security posture is adequate with HTTPS enabled but missing important security headers and incident response information. Contact information is limited to an email address and Facebook social media link, with no phone or physical address provided. Overall, the website is professional and trustworthy but could improve in privacy compliance and security best practices.

F

FDP.Die Liberalen Kanton Bern

bernwaehlt.ch

43

FDP.Die Liberalen Kanton Bern is a regional political organization representing liberal interests in the Canton of Bern, Switzerland. The website serves as an information hub for voters, providing details about the party's liberal compass, electoral districts, and candidates. It targets residents and voters in the region interested in liberal political representation. The business model is non-profit and focused on political engagement and information dissemination. Technically, the website is built on WordPress using the Elementor page builder, leveraging common web technologies such as jQuery and PHP. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. Hosting details are not explicitly identified. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is addressed with a privacy and cookie policy that includes consent mechanisms, aligning with GDPR requirements. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a professional and trustworthy front for the political party, with moderate technical sophistication and a solid security posture. Recommendations include implementing security headers, adding a vulnerability disclosure policy, and enhancing accessibility and incident response information to further strengthen trust and compliance.

F

FDP Stadt Zürich

mehblau.ch

60

FDP Stadt Zürich operates a political party website focused on promoting liberal political positions and candidates for local elections in Zürich. The site provides downloadable political agenda documents, blog posts, podcasts, and donation options, targeting residents and voters interested in liberal politics. The website uses a modern technical stack including ASP.NET WebForms, Bootstrap, jQuery, and integrates social media and tracking tools such as Facebook Pixel and Google Analytics. Security posture is moderate with HTTPS enforced and CAPTCHA on forms, but lacks some security headers and a vulnerability disclosure policy. Privacy compliance is limited due to absence of a privacy policy and terms of service, though a cookie consent banner is present. Overall, the site is professional, trustworthy, and well-branded, serving its political communication purpose effectively.

B

Blumen Au Bouquet AG

aubouquet.ch

36

Blumen Au Bouquet AG is a well-established family-run florist business based in Basel, Switzerland, operating since 1953. The company offers a wide range of floristry services including flower subscriptions, orchids, cacti, succulents, green plants, creative workshops, and event floristry, supported by an online shop. Their market position is strong locally, recognized as a leading address for elevated floristry in Basel. The website reflects a professional retail business model targeting general consumers interested in quality floral products and services. Technically, the website is built on the Contao Open Source CMS platform and uses jQuery for interactive elements. The site is mobile optimized with good SEO practices and clear navigation, though performance is moderate. The absence of advanced security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. The site uses HTTPS with a good SSL configuration, and forms are secured via POST methods. From a security perspective, the website demonstrates a solid baseline with HTTPS and secure form handling but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent banner. Business credibility is high, supported by consistent WHOIS data, clear contact information, and a professional online presence. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced security headers, explicit cookie consent, and published security policies to improve compliance and user trust.

The website e-latts.lv operates as an online grocery retail platform serving primarily Latvian consumers. It offers a wide range of food and household products with a focus on convenience through online ordering and delivery services. The business is represented by Latvijas tirgotaju savieniba, SIA, a Latvian legal entity, indicating a legitimate commercial presence in the local market. The website's content is rich with product listings, promotions, and categories tailored to grocery shopping needs. From a technical perspective, the site employs common web technologies including Bootstrap, jQuery, FontAwesome, and Owl Carousel for UI components and animations. It integrates Google Tag Manager, Google Analytics, and Facebook Pixel for marketing and analytics purposes. The site appears moderately optimized for performance and mobile usage, though accessibility features are basic. No CMS or hosting provider details were identified. Security posture shows room for improvement. While HTTPS is presumably enabled (not explicitly confirmed), no security headers were detected in the provided data, and no explicit privacy or cookie policies are visible. The WHOIS data is incomplete but consistent with the business entity and location. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site presents a professional and functional e-commerce platform with moderate technical maturity and business credibility. Enhancements in security headers, privacy compliance, and transparency would strengthen trust and compliance posture.

F

Freemius

freemius.com

67

Freemius is a technology company providing an all-in-one SaaS platform that simplifies software sales by managing payments, subscriptions, and taxes globally. The company positions itself as a merchant of record for software businesses, enabling developers to focus on product innovation while handling complex sales operations. The website is professionally designed, leveraging WordPress with Elementor and Yoast SEO, indicating a mature digital presence. The platform targets software developers and businesses seeking streamlined monetization solutions. Technically, the site uses modern web technologies and is hosted with Cloudflare as registrar and DNS provider, ensuring reliable infrastructure. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and explicit security headers. Privacy compliance is limited as no clear privacy or cookie policies are found in the analyzed content. Overall, the website is trustworthy and professional but could improve transparency and security practices.

B

BugSnag

bugsnag.com

60

BugSnag is a leading SaaS provider specializing in real-time application performance and error monitoring, helping software development teams maintain stable and performant applications. As part of the SmartBear portfolio, BugSnag serves enterprise clients including Amazon, Netflix, and Shopify, positioning itself as a trusted solution in the developer tools market. The website demonstrates a mature digital presence with professional design, clear navigation, and comprehensive content focused on its core services of error monitoring, performance monitoring, and distributed tracing. Technically, the site leverages modern frameworks like Astro, integrates analytics via Google Tag Manager, and employs best practices in security with HTTPS and security headers. However, the absence of publicly available WHOIS data and explicit security policies slightly reduces transparency. Overall, BugSnag presents a strong security posture with room for improvement in incident response communication and direct contact information availability.

A

Armstark GmbH

armstark.com

60

Armstark GmbH is a well-established Austrian family business specializing in wellness products such as whirlpools, lagoon spas, swim spas, infrared cabins, and saunas. Founded in 1994, the company positions itself as a quality-focused retailer with a strong customer service orientation. Their website reflects a mature digital presence with e-commerce capabilities and extensive product information targeting wellness consumers in Austria and surrounding regions. Technically, the site is built on WordPress with WooCommerce and employs modern SEO and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS domain registration data is a notable concern, slightly impacting trustworthiness. Overall, the site is professional, compliant with GDPR, and safe for general audiences.

D

Daxa Nema

modules4u.biz

44

Daxa Nema is a small eCommerce technology company specializing in cloud-hosted SaaS solutions for Shopify merchants. Their business model focuses on providing easy-to-use Shopify apps that require no installation or maintenance, allowing merchants to focus on their core business. The company has established itself as a Shopify partner since 2016, serving over 2,000 active users with a strong app rating. Technically, the website is built on WordPress using the Divi theme, with standard plugins for analytics and cookie compliance. While the site is functional and professionally designed, there is room for improvement in SEO, accessibility, and security headers. Security posture is adequate with HTTPS and cookie consent but lacks DNSSEC and advanced security headers. Overall, the site is safe, trustworthy, and compliant with GDPR, though it lacks explicit incident response and vulnerability disclosure policies.

S

SVTI Schweizerischer Verein für technische Inspektionen

svti.ch

57

SVTI Schweizerischer Verein für technische Inspektionen is a well-established Swiss organization dedicated to the safety and inspection of technical installations and devices. With a history spanning over 150 years, SVTI operates under mandates from the Swiss federal government, cantons, and private clients, providing critical services such as boiler inspections, market surveillance of pressure equipment, elevator inspections, pipeline inspections, and nuclear inspections. The organization also offers training and certification through its academy, positioning itself as a leading authority in technical safety supervision in Switzerland. Technically, the website is built on Drupal 10, leveraging modern web technologies including jQuery, FontAwesome, and Plyr for video content. The site is well-optimized for mobile devices, accessible, and SEO-friendly, reflecting a mature digital infrastructure. The presence of multiple external integrations such as Google Analytics and HubSpot indicates a moderate level of user tracking balanced with privacy compliance. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. While explicit security headers are not fully visible, the overall security posture is strong with no exposed sensitive data or vulnerabilities detected. The WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's identity and Swiss location. Overall, SVTI's website demonstrates a high level of professionalism, trustworthiness, and compliance, serving its target audience of government bodies, private sector clients, and technical professionals effectively. Strategic recommendations include enhancing security headers, publishing a formal security policy, and adding a vulnerability disclosure mechanism to further strengthen security transparency.

b-on is a Portuguese digital knowledge platform operated by the Fundação para a Ciência e a Tecnologia (FCT) and developed by FCCN. It provides access to scientific journals, e-books, and other academic resources primarily targeting students, researchers, health professionals, and publishers within Portugal. The platform is positioned as a key national resource for academic content access and open access initiatives. Technically, the website is built on WordPress with modern JavaScript libraries and integrates analytics tools such as Google Analytics and Hotjar. The site is mobile optimized and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and secure forms, but lacks visible security headers and vulnerability disclosure mechanisms. Privacy compliance is basic, with no cookie consent banner detected and limited explicit GDPR indicators. Overall, the website is trustworthy and professionally maintained, with strong government and research institution affiliations.

C

CIÊNCIAVITAE

cienciavitae.pt

66

CIÊNCIAVITAE is a Portuguese national platform dedicated to managing scientific curricula, providing visibility and integration of researchers' academic and scientific information. The platform serves students, researchers, and institutions, offering tools for CV creation, visualization, and institutional management. It is supported by Portuguese governmental and European funding entities, positioning it as a trusted and authoritative resource in the national scientific ecosystem. Technically, the website is built on WordPress with modern web technologies including jQuery, Bootstrap, and Google Fonts, and incorporates GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS and uses cookie consent management but lacks explicit security headers and published incident response policies. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional, trustworthy, and compliant digital presence aligned with its governmental and scientific mission.