Security Directory

O

OCHSNER SPORT

ochsnersport.ch

67

OCHSNER SPORT is a prominent Swiss sports retail company operating a comprehensive e-commerce platform offering over 30,000 sports articles and top brands. The website targets sports enthusiasts in Switzerland, providing a broad range of sportswear and equipment with value-added services such as free shipping and free in-store returns. The business model is focused on online retail complemented by physical stores, positioning itself as a leading player in the Swiss sports retail market. Technically, the website leverages modern web technologies including Vue.js and Nuxt.js frameworks, styled with Tailwind CSS, and integrates marketing and analytics tools such as Google Tag Manager and Dynamic Yield. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks visible security headers and explicit security policies. Cookie consent is managed via a consent manager, indicating some privacy compliance efforts. No critical vulnerabilities or blocking mechanisms were detected, suggesting a stable security posture but with opportunities for enhancement. Overall, the website is professional and trustworthy with a strong business presence. However, it would benefit from publishing clear privacy and terms of service policies and implementing additional security headers to strengthen its security and compliance posture.

A

Andermatt Sedrun Disentis

disentis-sedrun.ch

66

Andermatt Sedrun Disentis operates as a regional tourism destination website promoting the Disentis Sedrun area in Switzerland. The site targets tourists interested in mountain sports, cultural events, and leisure activities. The business model focuses on destination marketing and providing information and services related to tourism. The website is built on modern web technologies including Nuxt.js and integrates Google Analytics and Tag Manager for tracking. The technical infrastructure is moderately optimized for performance and mobile responsiveness. Security posture is good with HTTPS and security headers implemented, but lacks visible privacy and cookie policies, which impacts compliance. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and explicit contact information. Strategic recommendations include adding comprehensive privacy and cookie policies, improving accessibility, and publishing security and incident response information.

B

Beisheim Stiftung

beisheim-stiftung.com

62

Beisheim Stiftung is a non-profit foundation operating primarily in Germany and Switzerland, providing funding and support for various projects. The website serves as an informational portal offering downloadable resources such as funding criteria and application guidelines. The foundation targets applicants and partners interested in its funding programs. Technically, the website is built using the Nuxt.js framework and integrates Cookiebot for cookie consent management, ensuring compliance with privacy regulations. The site employs HTTPS and uses Piwik Analytics for visitor statistics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks visible security headers and explicit security policies. The absence of WHOIS data and contact information slightly reduces trustworthiness. Overall, the website is professional and functional but could improve transparency and security documentation.

Sportabzeichen-Digital is a German digital platform dedicated to managing and facilitating the German Sports Badge program. It provides users with registration, login, and access to sport badge events and information, targeting sports participants and organizers within Germany. The platform leverages modern web technologies such as Nuxt.js and Vue.js and is hosted on Hetzner infrastructure, ensuring reliable performance and availability. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, including opt-in for analytics via Matomo. Security posture is adequate with HTTPS enforced and anti-bot measures in place, though improvements are recommended in implementing security headers and publishing incident response information. Overall, the website is professional, user-friendly, and trustworthy, serving a niche sports community effectively.

K

Kontainer

kontainer.com

62

Kontainer is a Denmark-based technology company specializing in digital asset management, product information management, and image bank solutions. Established in 2000, it serves businesses seeking efficient digital content management through a B2B SaaS platform. The website reflects a professional and consistent brand image with a focus on user experience and mobile responsiveness. Technically, the site leverages modern frameworks such as Nuxt.js and Vue.js, ensuring a contemporary and performant digital presence. Security posture is solid with HTTPS enabled and domain protections in place, though improvements like DNSSEC and explicit security policies could enhance trust further. Overall, Kontainer presents a credible and mature digital footprint suitable for its market segment.

Orms is a London-based architecture firm focused on delivering ultrapractical, deeply functional, and generous architectural solutions. Their website reflects a professional and modern digital presence built with Nuxt.js and Tailwind CSS, targeting clients seeking architectural design and consultancy services. The firm positions itself as an established player in the real estate sector with a clear focus on quality and client engagement. Technically, the website is well-structured, mobile-optimized, and uses modern frameworks, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS data and domain registration details introduces some trust concerns, though the website content and contact information support business credibility. Overall, the site is professional but would benefit from enhanced privacy compliance and security best practices.

L

Lundhagem

lundhagem.no

57

Lundhagem is a small, award-winning architecture and urban design practice based in Oslo, Norway. The website presents a professional image focused on showcasing their design work and company identity. The business targets clients seeking architectural and urban design services, positioning itself as a specialized and reputable firm in its sector. The website uses modern web technologies such as Nuxt.js and Imgix for image optimization, indicating a moderate level of digital maturity. However, the site lacks visible contact information, privacy policies, and security headers, which impacts its overall security posture and compliance stance. No WHOIS data is publicly available, suggesting privacy protection for the domain registration, which is typical for small professional firms. Overall, the website is functional and professional but could improve in security and compliance transparency.

Davos Klosters is a prominent tourism organization promoting holidays and outdoor activities in the Swiss Alps, specifically in the Graubünden region. The website offers comprehensive information and booking options for skiing, hiking, biking, and cultural events, targeting tourists seeking alpine experiences. The company holds a strong market position as a leading alpine destination with a professional online presence and integrated e-commerce capabilities. Technically, the site is built on modern frameworks like Nuxt.js and Vue.js, ensuring fast performance, mobile optimization, and good SEO practices. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although dedicated security and incident response policies are not explicitly found on the site. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, professional, and well-aligned with its business goals.

H

HEK (Haus der Elektronischen Künste)

hek.ch

61

HEK (Haus der Elektronischen Künste) is a well-established Swiss cultural institution and museum specializing in digital and electronic arts. It serves as a platform for interdisciplinary projects, exhibitions, and workshops, connecting art, science, and technology. The website reflects a professional and modern digital presence with multilingual support and a rich program offering. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and privacy compliance including cookie consent mechanisms. However, some areas like explicit security policies, incident response contacts, and terms of service are missing or not publicly visible. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy entity.

C

Home – catapult

catapultbasel.ch

56

The website catapultbasel.ch represents a youth-focused funding platform based in Basel, Switzerland. It aims to support young people by providing a platform for project submissions and community engagement. The site is built using modern web technologies including Vue.js and Nuxt.js, with multimedia support via Video.js and audio recording libraries. Google Analytics is used for visitor tracking, though no visible consent mechanism is present. The website content is primarily in German and targets the local youth demographic. Security posture is basic with no advanced headers or policies detected, and privacy compliance is minimal due to the absence of privacy and cookie policies. WHOIS data confirms the domain's legitimacy and local registration, supporting the trustworthiness of the platform.

K

KAWAHARA KRAUSE ARCHITECTS

kawahara-krause.com

62

KAWAHARA KRAUSE ARCHITECTS is a small, specialized architectural practice based in Germany, founded in 2007. The firm offers architectural design services, academic research, exhibitions, and publications, targeting clients interested in innovative and contextually rich architecture. The website is professionally designed using modern technologies such as Nuxt.js, Vue.js, Tailwind CSS, and Sanity CMS, providing a good user experience and mobile optimization. However, the site lacks explicit privacy and cookie policies, contact information, and security headers, which are important for compliance and security. The domain registration is consistent with the business claims, indicating legitimacy and stability. Overall, the website is safe, professional, and moderately secure but would benefit from enhanced privacy compliance and security practices.

A

Amadeu Antonio Stiftung

swipeaway.de

50

SwipeAway is an educational self-learning tool designed to raise awareness about recognizing hostile narratives on social media platforms and to promote digital civil courage. The project is operated by the Amadeu Antonio Stiftung, a reputable non-profit foundation in Germany, and is supported by Stiftung Mercator. The website targets a general audience interested in social media literacy and digital rights education. The business model is non-commercial, focusing on social impact and education. Technically, the website is built using modern web technologies including Nuxt.js, JavaScript, HTML5, and CSS3. It is hosted on servers associated with agenturserver, with good mobile optimization and moderate performance. The site uses HTTPS with an excellent SSL configuration but lacks some security headers that could enhance protection. The site employs minimal user tracking via the privacy-conscious Umami analytics platform. From a security perspective, the website demonstrates a solid baseline with HTTPS enabled and no exposed sensitive data. However, it lacks security headers and a cookie consent mechanism, which are important for GDPR compliance and security best practices. No incident response or security policy information is provided, and no contact information is readily available on the main page, which could impact user trust and compliance. Overall, the website is professional, trustworthy, and focused on educational content without any adult or questionable material. The domain registration data aligns well with the website's stated purpose and parent organization, indicating legitimacy. Strategic recommendations include implementing security headers, adding a cookie consent mechanism, publishing security and incident response policies, and providing clear contact information to enhance trust and compliance.

The website 'Tajas Welt 2053' offers an interactive exploration experience themed around a futuristic world in the year 2053. It targets a general audience, including children, providing an educational and engaging map-based interface. The site is built using modern web technologies such as Nuxt.js and Leaflet.js, indicating a moderate level of digital maturity. However, the absence of business contact information, privacy policies, and security headers suggests limited compliance and security posture. The WHOIS data is incomplete due to TLD restrictions, which affects domain trustworthiness assessment. Overall, the site is functional and content-rich but lacks critical security and compliance elements.

N

NDK Wurzen

leerstellen-lkl.de

47

The website leerstellen-lkl.de is a well-structured non-profit project focused on documenting cases of right-wing violence in the Leipzig district. It provides a digital memorial and educational resource through a web documentary, peer networks, and workshops primarily targeting youth and affected communities. The project is funded by reputable organizations and operated by NDK Wurzen, indicating a credible and mission-driven initiative. Technically, the site uses modern frameworks like Nuxt.js and Vue.js, ensuring a responsive and user-friendly experience, though some improvements in accessibility and SEO could be made. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. Overall, the site is trustworthy, professional, and safe for general audiences.

K

kolle.dev

kolle.dev

50

Kolle.dev is a small digital collaboration service based in Germany, focusing on supporting digital projects through project management, design, programming, and long-term support. The website presents a professional and clean design using modern technologies such as Nuxt.js and Tailwind CSS, indicating a good level of digital maturity. The site is fast, mobile-optimized, and provides clear information about its services and partner projects. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies, which are important for compliance and trust. Overall, the risk is moderate with recommendations to improve privacy compliance and security headers to enhance trust and regulatory adherence.

S

Schweizer Tourismus-Verband

stv-fst.ch

62

The Schweizer Tourismus-Verband website represents a national umbrella organization for the Swiss tourism sector, focusing on interest representation and networking within the hospitality industry. The website content is primarily in German and targets tourism stakeholders in Switzerland. The business model is that of a membership and advocacy association with a medium-sized organizational footprint. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, with Tailwind CSS for styling, indicating a contemporary digital infrastructure. Performance and mobile optimization are good, though accessibility features are basic. Security posture is moderate, with HTTPS presumably enabled but lacking explicit security headers and policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy disclosures.

T

Toto-Lotto Niedersachsen GmbH

lotto-niedersachsen.de

53

LOTTO Niedersachsen operates as the official state-licensed lottery provider for Lower Saxony, Germany, offering a broad portfolio of lottery games including LOTTO 6aus49, Eurojackpot, and others. The company positions itself as a premium provider, emphasizing security, trust, and responsible gambling. The website is professionally designed, mobile-optimized, and provides comprehensive information about lottery products, results, and services such as subscription play and community participation. Technically, the site leverages modern frameworks like Nuxt.js and Vue.js, uses Cloudflare DNS, and integrates Piwik PRO for analytics with a cookie consent mechanism, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and trust seals displayed, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, compliant with GDPR, and targets adult users with clear age restrictions.

H

hello again

helloagain.at

65

hello again is a European provider of innovative digital customer loyalty solutions, targeting businesses primarily in retail and service sectors. Their platform offers customer loyalty programs, marketing automation, and CRM capabilities, serving over 1,000 companies across 25 countries. The website is professionally designed using modern web technologies such as Nuxt.js and Tailwind CSS, with good mobile optimization and user experience. The presence of detailed cookie consent mechanisms and privacy policies indicates a strong commitment to GDPR compliance. However, the absence of WHOIS registration data and explicit contact information slightly detracts from overall business credibility. Security posture is adequate with HTTPS and cookie consent, but lacks visible security headers and incident response details.

A

Alcova

alcovamilano.com

61

Alcova is a specialized platform focused on design exhibitions and collaborations, primarily operating in Milan and Miami. It serves designers, companies, institutions, and researchers interested in the future of living and making. The platform organizes recurring international exhibitions and maintains a design shop for curated products. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, with a headless CMS (Directus) and Shopify integration for e-commerce. The site is performant, mobile-optimized, and professionally designed, though accessibility and SEO could be improved. Security posture is adequate with HTTPS enforced but lacks important security headers and published security policies. Privacy compliance is limited, with no cookie consent mechanism and only a basic privacy policy. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

I

iart AG

iart.ch

11

iart AG is a Swiss-based innovative studio specializing in media architecture, creative engineering, and interactive visitor experiences. The company serves corporate clients, cultural institutions, and architectural sectors, positioning itself as a leader in digital and interactive architectural solutions. Their business model focuses on designing and building digital media architectures that create engaging multisensory experiences. The website reflects a mature and professional organization with strong market presence, evidenced by prestigious awards and notable clients such as Fondation Beyeler and CERN. Technically, the website is built on modern frameworks including Nuxt.js and Vue.js, powered by Craft CMS. It features embedded multimedia content, responsive design, and SEO best practices. The site loads quickly and is optimized for mobile devices, indicating a high level of digital maturity. From a security perspective, the site enforces HTTPS, implements standard security headers, and includes a cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policy and incident response disclosures, which could enhance trust and compliance. Overall, the website demonstrates a high level of professionalism, security, and compliance, with a strong business credibility score. Strategic recommendations include publishing security policies, incident response information, and adding a security.txt file to facilitate vulnerability reporting.

D

Dachstiftung der Christoph Merian Stiftung

dachstiftung-cms.ch

57

The Dachstiftung der Christoph Merian Stiftung (DS-CMS) is a well-established non-profit foundation based in Basel, Switzerland, managing 35 sub-foundations to fund social, cultural, and natural projects in the region. It serves as an efficient vehicle for donors to implement their philanthropic goals. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its target audience of donors and project applicants. Technically, the site leverages modern frameworks such as Vue.js and Nuxt.js, hosted likely by cyon AG, and uses Craft CMS for content management. Analytics are implemented via Google Tag Manager, indicating moderate user tracking. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is adequate with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site is trustworthy and credible, aligned with its parent organization Christoph Merian Stiftung.

K

Karl der Grosse

karldergrosse.ch

60

Karl der Grosse is a well-established cultural and hospitality venue located in Zurich, Switzerland, offering a diverse range of services including a bistro, event space rentals, and a rich program of cultural events. The venue is municipally affiliated, enhancing its credibility and market position as a key cultural hub. The website reflects a professional and consistent brand image targeting a general audience interested in culture, dining, and event participation. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, ensuring good performance and mobile optimization. Security posture is strong with HTTPS and security headers implemented, though some compliance aspects like cookie consent and security policies could be improved. Overall, the site is trustworthy and professionally maintained, with moderate tracking and marketing tools in use.

A

Alcova

vocla.xyz

58

Vocla.xyz is a professionally designed website serving as a platform for design experimentation and social gatherings during Milan Design Week. The site showcases curated exhibitions and pop-up dining experiences, collaborating with notable design houses and restaurants. The technical infrastructure is modern, leveraging Nuxt.js and Cloudflare DNS, ensuring good performance and mobile optimization. However, the site lacks critical privacy and cookie policies, which impacts compliance. Security posture is adequate with HTTPS and domain transfer protection, but could be improved by enabling DNSSEC and security headers. Overall, the website is trustworthy and well-positioned within its niche event market, though it should address compliance and security best practices to enhance user trust and regulatory adherence.

R

Region Rapperswil-Jona Tourismus

rapperswil-zuerichsee.ch

60

The website rapperswil-zuerichsee.ch serves as the official travel guide for the Rapperswil and Zurichsee region in Switzerland, providing comprehensive tourism information including events, accommodations, and local attractions. It targets tourists and visitors seeking regional insights and services, positioning itself as a key regional tourism portal. The business model focuses on tourism promotion and visitor engagement, supported by clear contact information and official branding. Technically, the site is built using modern web technologies including Nuxt.js and Tailwind CSS, with integrations for Google Tag Manager, Facebook Pixel, and a consent management platform ensuring GDPR compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the website enforces HTTPS, employs standard security headers, and integrates cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy or incident response page, and no vulnerability disclosure mechanism is present, which could be areas for improvement. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing a formal security policy, establishing an incident response contact, and considering a vulnerability disclosure page to enhance transparency and trust.

C

Christoph Merian Stiftung

cms-basel.ch

61

The Christoph Merian Stiftung is a well-established non-profit foundation based in Basel, Switzerland, focused on promoting social cohesion, cultural diversity, and environmental stewardship within the city. The foundation operates through project funding, real estate development, and managing cultural institutions such as a publishing house, museum, and gardens. Their website reflects a strong local presence and commitment to community engagement. Technically, the site is built on modern frameworks including Vue.js and Nuxt.js, powered by Craft CMS, and integrates Google Tag Manager for analytics. The site is performant, mobile-optimized, and accessible, with clear navigation and professional design. Security posture is good with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and formal incident response policies. Privacy compliance is adequate with a comprehensive privacy policy but lacks an explicit cookie consent mechanism. Overall, the website and domain registration data align well, indicating a legitimate and trustworthy organization.

A

Alcova

alcova.xyz

53

Alcova is a specialized platform dedicated to designers, companies, institutions, and researchers focused on exploring the future of living and making. Established in 2018, it has positioned itself as an international platform hosting recurring exhibitions primarily in Milan and Miami, complemented by collaborations and a design shop. The website reflects a professional and consistent brand image, targeting a niche audience interested in design and art. Technically, the site leverages modern frameworks such as Nuxt.js and Vue.js, integrates Shopify for e-commerce, and uses Directus as a headless CMS, indicating a mature and scalable digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and incident response disclosures are recommended. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy, content-rich, and well-structured, supporting Alcova's market position as a credible design platform.

V

von Bartha

vonbartha.com

49

von Bartha is a well-established Swiss art gallery specializing in contemporary and modern art, operating since 1970 with locations in Basel and Copenhagen. The gallery represents a diverse roster of artists and hosts exhibitions, fairs, and publishes related materials. The website reflects a professional and polished digital presence, leveraging modern web technologies such as Nuxt.js and Vue.js, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS and no obvious vulnerabilities, though improvements in security headers and incident response transparency are recommended. Privacy compliance is good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a gap. Overall, the website is trustworthy and serves its target audience effectively.

C

Cartoonmuseum Basel

cartoonmuseum.ch

62

The Cartoonmuseum Basel is a specialized cultural institution in Switzerland dedicated exclusively to the art of narrative drawing, including cartoons, comics, and graphic novels. It holds a unique market position as the only Swiss museum focused on this art form, offering exhibitions, educational programs, events, and a shop. The website reflects a professional and well-structured digital presence, targeting art enthusiasts, educational institutions, and the general public interested in narrative art. The museum operates as a non-profit entity with a clear focus on cultural education and community engagement. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, with Craft CMS likely used as the content management system. It demonstrates good performance, mobile optimization, and accessibility. The site uses Google Analytics for visitor tracking and Campaign Monitor for newsletter management. Security best practices are observed, including HTTPS enforcement and secure form handling, although there is room for improvement in cookie consent mechanisms and explicit security policy disclosures. From a security standpoint, the site has a solid posture with appropriate security headers and no visible vulnerabilities or exposed sensitive data. The WHOIS data confirms the legitimacy of the domain registration, matching the museum's identity and location in Switzerland. No WAF or blocking mechanisms interfere with content accessibility, allowing full analysis. Privacy compliance is adequate with a comprehensive privacy policy, though cookie consent could be enhanced. Overall, the Cartoonmuseum Basel website is a trustworthy, professional, and well-maintained digital asset supporting the museum's mission. Strategic recommendations include implementing explicit cookie consent, publishing a security and incident response policy, and considering a vulnerability disclosure statement to further enhance trust and compliance.

K

Kanton Basel-Landschaft

bl.ch

58

Kanton Basel-Landschaft operates an official government website serving the residents and stakeholders of the Basel-Landschaft canton in Switzerland. The site provides governmental information, public services, and news updates relevant to its audience. The website is built using modern web technologies such as Nuxt.js and Vue.js, with a responsive design and good user experience. Security posture is adequate with HTTPS enabled and no visible exposed sensitive data, but lacks explicit security headers and formal security policies. Privacy compliance is limited due to the absence of clear privacy and cookie policies. Overall, the website is trustworthy and professional, reflecting its governmental nature.

C

CASABLANCA

casablanca.at

47

CASABLANCA is a small Austrian company specializing in hotel software solutions aimed at hospitality businesses. Their website presents a modern design built with Nuxt.js and Tailwind CSS, indicating a contemporary technical infrastructure. The site includes a cookie consent mechanism via Usercentrics, reflecting some privacy compliance efforts. However, critical compliance documents such as privacy policy and terms of service are missing, and no direct contact information is provided on the site. Security posture is moderate with HTTPS implied but lacking visible security headers and incident response information. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation to improve trust and compliance.

S

sayanythingstream.com

sayanythingstream.com

56

The website sayanythingstream.com appears to be a newly registered domain (April 2023) with minimal publicly accessible content. The site uses modern JavaScript frameworks such as Vue.js and Nuxt.js and is delivered via a fast CDN, indicating a contemporary technical infrastructure. However, the website lacks substantive business information, contact details, and any visible privacy or security policies, which limits its credibility and trustworthiness. Security posture is basic with HTTPS enabled but no advanced security headers or DNSSEC. Advertising and tracking scripts are present but without clear privacy compliance mechanisms. Overall, the site is accessible and safe but lacks maturity and transparency.

N

NABU (Naturschutzbund Deutschland)

nabu-wissen.de

48

NABU-Wissen is a German non-profit e-learning platform operated by NABU (Naturschutzbund Deutschland), focusing on environmental education and nature conservation. The platform offers free and member-exclusive courses to engage nature enthusiasts and NABU members in climate and habitat protection. The website is professionally designed, mobile-optimized, and uses modern technologies such as Nuxt.js and Tailwind CSS. It integrates Matomo analytics for privacy-conscious user tracking. Security posture is good with HTTPS enforced, but lacks some security headers and explicit incident response policies. Contact information and legal disclosures are clearly provided, enhancing trustworthiness.

The website www.onex.ch is the official digital presence of the Ville d'Onex, a municipal government entity in Switzerland. It provides information and services related to sports, education, social, and cultural infrastructure for approximately 19,000 residents. The site is primarily in French and targets local citizens and visitors. The business model is that of a government authority delivering public services and community information. The website demonstrates a consistent and professional brand image aligned with its municipal purpose. Technically, the site is built using modern web technologies including Nuxt.js and Tailwind CSS, with Google Tag Manager integrated for analytics. The site is mobile-optimized and performs moderately well. Security measures such as HTTPS and standard security headers are implemented, indicating a good security posture. However, there is a lack of explicit privacy and cookie policies, as well as no visible incident response or security contact information, which are areas for improvement. From a security perspective, the site shows no signs of vulnerabilities or malicious content. The WHOIS data confirms the domain is legitimately registered to the Ville d'Onex, consistent with the website's claims. The overall risk is low, but the absence of privacy compliance documentation and incident response details slightly reduces the trust score. Strategically, the website should prioritize publishing comprehensive privacy and cookie policies with consent mechanisms, establish clear security and incident response policies, and enhance accessibility features to meet compliance standards. These steps will improve user trust, legal compliance, and overall security posture.

M

Mediafilm

mediafilm.ca

61

Mediafilm.ca is a well-established French-language cinema content platform serving North American audiences with film reviews, ratings, and news. The website demonstrates a modern technical infrastructure leveraging Nuxt.js, Vue.js, Tailwind CSS, and PrimeVue, hosted with Cloudflare DNS and Google Cloud assets. The site is mobile-optimized and provides a good user experience with relevant and professional content. Security posture is adequate with HTTPS enabled and domain status protections, but lacks DNSSEC and security headers, which are recommended for enhanced security. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanisms. No direct contact or incident response information is available, limiting transparency. Overall, the domain is legitimate and consistent with the business profile, but improvements in privacy and security practices are advised.

S

SZA Schilling, Zutt & Anschütz Rechtsanwaltsgesellschaft mbH

sza.de

64

SZA Schilling, Zutt & Anschütz is a reputable German law firm specializing in economic and corporate law, including M&A, capital markets, litigation, compliance, and other legal fields. The firm serves national and international corporate clients and is recognized by prestigious legal directories such as Chambers Global and Legal500. The website reflects a professional and modern digital presence built on Nuxt.js and Vue.js frameworks, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some enhancements in HTTP security headers and explicit security policies could improve resilience. Overall, the site demonstrates strong business credibility, privacy compliance, and user experience, making it a trustworthy digital asset for the firm.

S

Salzburger Nachrichten

sn.at

10

Salzburger Nachrichten is a prominent regional news media company based in Austria, focusing on delivering news related to politics, economy, culture, and sports primarily for Salzburg and the broader Austrian audience. The website www.sn.at serves as their digital platform, featuring a professional and modern design built on contemporary web technologies such as Vue.js and Nuxt.js. The site integrates essential marketing and analytics tools including Google Tag Manager and CleverPush for push notifications, alongside a compliant cookie consent mechanism via OneTrust. Security posture is strong with HTTPS enforced and standard security headers likely in place, though explicit security policies and incident response contacts are not publicly available. Overall, the website demonstrates high content quality, good technical implementation, and strong business credibility, making it a trustworthy source for regional news.

E

Innovative Matratzen & Schlafprodukte | Emma Matratzen

emma-matratze.de

53

Emma Matratzen operates an e-commerce website focused on innovative mattresses and sleep products targeting the German market. The website uses modern web technologies including Vue.js and Nuxt.js frameworks, supported by a headless CMS (Contentstack) and Cloudflare for DNS and CDN services. The digital infrastructure indicates a moderate level of technical maturity with good mobile optimization and basic SEO features. However, the site lacks visible privacy and cookie policies, contact information, and explicit security policies, which are critical for compliance and user trust. Security posture is weak due to absence of security headers and incident response information. Overall, the site is accessible and safe for general audiences but requires improvements in privacy compliance and security transparency to enhance trust and regulatory adherence.

E

ENVIRIA Energy Holding GmbH

enviria.energy

81

ENVIRIA Energy Holding GmbH is a German-based company specializing in providing comprehensive photovoltaic solar solutions for commercial and industrial clients. Their services encompass the entire solar value chain from financing, planning, installation, to operation and maintenance. The company has established a strong market position with over 500 projects and 100+ MWp installed capacity, supported by multiple industry awards and certifications. The website is professionally designed, mobile-optimized, and rich in relevant content targeting businesses seeking sustainable energy solutions. Technically, the website leverages modern frameworks such as Nuxt.js and Vue.js, with Storyblok CMS for content management. It employs best practices in web performance, accessibility, and SEO. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, explicit privacy and cookie policies are not found, which is a compliance gap. Overall, the security posture is robust with good implementation of security best practices, but the absence of published privacy and incident response policies slightly reduces compliance confidence. The domain WHOIS data is privacy protected, which is justified for this business type, though it limits transparency. No WAF or blocking mechanisms were detected, allowing full content access. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, adding incident response and vulnerability disclosure information, and maintaining transparency to enhance trust and compliance.

A

Atlantic Labs

atlanticlabs.de

55

Atlantic Labs is a venture capital firm focused on supporting mission-driven founders working on transformative technology ventures. Their business model centers on early-stage investment and partnership, providing capital, tools, and networks to help startups grow in sectors such as Digital Health, Future of Work, Machine Learning, Decentralized Networks, Mobility, and Industrial Applications. The company positions itself as an important player in the technology investment space in Germany. Technically, the website is built using modern JavaScript frameworks like Vue.js and Nuxt.js, indicating a contemporary digital infrastructure with good mobile optimization and SEO practices. However, the site lacks explicit privacy, cookie, and security policies, which impacts its privacy compliance and security posture. No security headers or incident response information were found, suggesting room for improvement in security best practices. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security features.

P

Pinpoll

pinpoll.com

63

Pinpoll is a technology company specializing in providing software solutions for real-time data collection, management, and analytics primarily targeting publishers and advertisers. Their platform includes tools for creating polls, quizzes, and forms, a data management platform (DMP) for first-party data generation, and analytics services to visualize and understand audience data. The company positions itself as a niche player in the digital media and data analytics space with a focus on GDPR compliance and data-driven audience engagement. Technically, the website is built using modern JavaScript frameworks such as Vue.js and Nuxt.js, with optimized performance and mobile responsiveness. The site integrates third-party services like Intercom for customer engagement and uses lazy loading techniques for embedded content. The technical infrastructure appears mature and well-implemented, supporting a professional user experience. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a notable concern, potentially impacting trustworthiness, though the website content and business presence are professional. Overall, Pinpoll presents a credible and professional digital presence with strong business and technical foundations. However, improvements in transparency around domain registration and security policies would enhance trust and compliance posture.

H

HelloAmplo

helloamplo.be

52

The website 'HelloAmplo' appears to be a business portal or login page built with modern frontend technologies such as Vue.js, Nuxt.js, and Vuetify. The site includes tracking scripts from TikTok and Google Tag Manager but lacks visible privacy, cookie, or terms of service policies. The WHOIS data for the domain is inaccessible due to restrictive domain status 'NOT ALLOWED', which limits the ability to verify domain ownership, age, and legitimacy. This restriction, combined with the absence of contact information and legal disclosures, reduces the overall trustworthiness and compliance posture of the site. Technically, the site is moderately optimized with good mobile responsiveness and modern frameworks, but security best practices such as HTTPS verification and security headers could not be confirmed. Overall, the site presents a basic business presence but lacks critical transparency and compliance elements.

The Österreichischer Verband gemeinnütziger Bauvereinigungen - Revisionsverband is a non-profit association representing Austrian non-profit housing cooperatives. Their website provides comprehensive information about their mission to offer affordable and quality housing, along with services such as resident support, advisory, and community engagement. The site also supports members with a dedicated login portal and offers educational resources through the GBV-Akademie. Technically, the website is built on modern frameworks like Vue.js and Nuxt.js, with a custom CMS backend. It employs Google Tag Manager and Cookiebot for analytics and cookie management, ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for users.

V

VGBND

vagabondfilms.com

59

VGBND is a professional production network established in 2002, offering high-end production services across South America, Spain, Switzerland, and the USA. The company targets advertising agencies, filmmakers, and production companies seeking quality production facilitation and support. Their website showcases a portfolio of projects and emphasizes their mission to meet high expectations with inspiring industry collaborations. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, with embedded video content hosted on Vimeo and analytics via Microsoft Clarity and Google Tag Manager. The site is mobile optimized and presents a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. Privacy compliance is basic but includes a cookie policy with consent mechanisms. The domain is newly registered with privacy protection, which is typical for this business type, though the domain age is younger than the company's founding date, suggesting a recent rebranding or domain change. Overall, the website is professional, trustworthy, and suitable for its target audience.

K

Kontainer

konform.com

63

Kontainer is a well-established Danish technology company specializing in digital asset management, product information management, and image bank solutions. With a domain age of over 24 years, the company demonstrates a stable market presence and targets businesses requiring efficient content and media management. The website reflects a professional B2B SaaS model with a modern, responsive design and clear navigation. Technically, the site leverages modern frameworks such as Nuxt.js and Vue.js, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and appropriate domain status flags, though there is room for improvement in publishing explicit security policies and vulnerability disclosure mechanisms. Overall, the website is trustworthy, compliant with GDPR, and provides comprehensive contact information, supporting a positive business credibility profile.

V

VGBND

vgbnd.tv

59

VGBND is a media production network established in 2002, offering high-end production services across South America, Spain, Switzerland, and the USA. The company targets media professionals and advertising agencies, positioning itself as a quality-focused service provider with an international footprint. The website showcases a portfolio of projects with rich multimedia content, reflecting a professional and consistent brand image. Technically, the site is built on modern JavaScript frameworks (Vue.js and Nuxt.js) and integrates analytics tools such as Google Tag Manager and Microsoft Clarity. Hosting details are not explicit, but DNS is managed via NS1.net. Security posture is adequate with HTTPS enforced, though improvements are recommended in DNSSEC and security headers. Privacy compliance is supported by a cookie consent mechanism and a basic cookie policy, with GDPR considerations evident. Contact information is primarily via a web form and social media channels, with no direct emails or phone numbers disclosed. The domain is newly registered in 2024 with privacy protection, which contrasts with the company's founding year, suggesting a recent domain acquisition or rebranding. Overall, the website is professional, secure, and compliant, with room for enhanced security policies and transparency.

H

Hostinger

hostinger.in

71

Hostinger is a globally recognized web hosting provider offering a wide range of services including shared hosting, VPS, cloud hosting, domain registration, and AI-powered website building tools. The company targets individuals, small to medium businesses, and agencies seeking reliable and scalable online presence solutions. Their website demonstrates a mature digital infrastructure with modern frameworks such as Vue.js and Nuxt.js, and integrates advanced analytics and marketing tools like Google Tag Manager and Amplitude. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data is noted but likely due to registry restrictions or privacy measures common among large hosting providers. Overall, Hostinger's website reflects a professional, trustworthy, and technically sound platform suitable for its market segment.

B

BIC

bic.com

66

BIC is a globally recognized manufacturer of stationery, lighters, and shavers. The eu.bic.com website serves as a regional portal targeting European English-speaking customers, providing product information and brand presence. The site uses modern web technologies such as Vue.js and Nuxt.js, integrating marketing and tracking tools like Google Tag Manager and Facebook Pixel. While the site is professionally designed and mobile-optimized, explicit privacy and cookie policies were not detected in the provided content, indicating room for improvement in compliance transparency. Security posture is moderate with HTTPS usage but lacks visible security headers and detailed security policies. Overall, the site is trustworthy and aligns with the brand's global reputation, but enhancing privacy disclosures and security headers would strengthen compliance and security.

Z

Zemtu OG

zemtu.com

7

Zemtu OG operates a website offering an all-in-one shared mobility software solution designed to manage cars, bikes, and scooters within a single app. The platform targets businesses and organizations aiming to implement ambitious mobility concepts, providing vehicle access control, journey documentation, and data analytics for statistics and accounting. The website is professionally designed using modern web technologies such as Nuxt.js and BootstrapVue, and integrates Google Analytics and Google Tag Manager for tracking and marketing purposes. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with no visible security headers or policies, and privacy compliance is poor due to missing privacy and cookie policies. Contact information and incident response details are not provided, limiting transparency and user trust.

A

ANIMAL Design

anm.al

53

ANIMAL Design is a small, professional digital design agency based in Austria, specializing in planning, development, and growth of digital products. Their market position is focused on delivering custom, technically sophisticated solutions without shortcuts, targeting businesses in the DACH region and beyond. The website showcases a strong portfolio and client base, emphasizing quality and creativity. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, leveraging a custom headless CMS. It demonstrates excellent performance, mobile optimization, and SEO practices. The use of Plausible Analytics indicates a privacy-conscious approach to user tracking. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security policies, which are areas for improvement. Privacy compliance is limited due to the absence of privacy and cookie policies. Overall, the website presents a trustworthy and professional business with a solid technical foundation. Strategic enhancements in privacy and security documentation would further strengthen their compliance and trustworthiness.

W

Wiener Konzerthaus

konzerthaus.at

67

Wiener Konzerthaus is a prominent cultural institution based in Austria, specializing in hosting classical music concerts and cultural events. The website serves as a portal for event information, ticket sales, subscriptions, and visitor services, targeting a broad audience interested in music and culture. The organization maintains a strong market position as a key venue in Vienna's cultural landscape. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, with integrations for analytics and media content, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response details. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.