Security Directory

V

Vasser AS

vasser.no

53

Vasser AS is a Norwegian design and technology company specializing in delivering bespoke digital solutions and design services that strengthen brand presence. The company positions itself as a small but powerful design agency focused on quality, creativity, and functionality, serving a diverse clientele including businesses in technology, energy, healthcare, and design sectors. Their service portfolio includes web design, UX/UI design, development, publishing solutions, and digital design manuals. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content in Norwegian. Technically, the site leverages modern technologies such as Craft CMS, Tailwind CSS, GSAP animations, Swiper.js, and integrates analytics tools like Google Analytics, Microsoft Clarity, and Plausible Analytics. Security posture is good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit cookie consent mechanisms are areas for improvement. WHOIS data is not publicly available due to registry policies, but the website content and business information indicate legitimacy. Overall, the site demonstrates a mature digital presence with strong business credibility and good technical implementation.

T

Ten4

ten4design.co.uk

72

Ten4 is a UK-based digital agency specializing in research, strategy, design, and development services for ambitious organizations. The company serves a diverse client base including prestigious institutions such as Royal Museums Greenwich, BAFTA, Channel 4, and University College London, positioning itself as a reputable player in the digital services market. Their offerings encompass UX/UI design, API integrations, content management, and secure hosting, reflecting a comprehensive digital service portfolio. The website demonstrates a high level of professionalism with rich multimedia content and clear navigation, targeting organizations seeking digital transformation and growth.

D

David Chipperfield Architects

davidchipperfield.com

63

David Chipperfield Architects is a well-established international architectural practice founded in 1985, with offices in multiple global cities. The company provides architectural design and related cultural and research services, targeting clients interested in high-quality architectural projects. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content about projects and news. Technically, the site uses modern web standards, is mobile optimized, and employs privacy-focused analytics. Security posture is good with HTTPS and domain protection measures, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with a clear privacy policy, but lacks a cookie consent mechanism. Overall, the website is trustworthy and professionally managed, supporting the company's market position as a leading architectural firm.

L

LPO Arkitekter

lpo.no

60

LPO Arkitekter is Norway's largest independent architectural firm specializing in architecture for cities, places, buildings, and spaces with a strong focus on innovation, sustainability, and inclusive design processes. The company positions itself as a leader in the Norwegian architectural market, serving a broad audience including municipalities, developers, and the general public interested in urban development. Their business model centers on delivering comprehensive architectural and urban planning services with an emphasis on human-centric solutions. Technically, the website employs modern web technologies such as jQuery, Google Analytics, Google Tag Manager, and Plausible Analytics for tracking, alongside lazy loading for performance optimization. The site is mobile-optimized and features good SEO practices, although some accessibility features could be enhanced. The infrastructure appears stable and professionally maintained, with no signs of outdated or vulnerable libraries. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not provide a visible cookie consent mechanism or detailed privacy and security policies, which are important for GDPR compliance. The WHOIS data is not publicly available due to Norid's policies, but the domain and website content align with a legitimate and professional business entity. Overall, the website presents a strong business credibility and technical foundation but would benefit from improved privacy compliance and security best practices to enhance trust and regulatory adherence.

B

Dein City-Guide & Stadt-Magazin mit Aktivitäten für Basel | BaselLive

basellive.ch

57

BaselLive.ch is a local media platform serving as a city guide and lifestyle magazine for Basel, Switzerland. It provides curated content including event listings, cultural stories, shopping guides, and culinary tips targeting residents and visitors interested in exploring Basel. The platform leverages social media channels and newsletters to engage its audience and promote city activities. Technically, the website uses modern web technologies with JavaScript modules, CSS, and integrates advertising via AdButler and analytics through Plausible and Google Tag Manager. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the site enforces HTTPS and uses asynchronous script loading but lacks explicit security headers and formal privacy or cookie policies. No contact emails or phone numbers are explicitly provided, and no vulnerability disclosure or incident response information is found. Overall, the website is safe, trustworthy, and well-positioned as a local media outlet but would benefit from enhanced privacy compliance and security transparency.

A

Aargau Tourismus AG

akb-freizeitportal.ch

54

The AKB Freizeitportal is a regional leisure and tourism platform operated in partnership with Aargau Tourismus AG and supported by the Aargauische Kantonalbank. It offers discounted leisure experiences, event information, and a newsletter service targeting residents and visitors of the Aargau region in Switzerland. The website is built on the nopCommerce platform, leveraging modern front-end technologies and analytics tools such as Google Tag Manager and Plausible Analytics. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Security posture is solid with HTTPS enforced and secure form handling, though some improvements in HTTP security headers and incident response disclosures are recommended. Overall, the site presents a professional, trustworthy, and user-friendly experience with clear business legitimacy and no suspicious content.

E

EKZ

energiefranken.ch

60

Energiefranken is a Swiss online platform operated by EKZ that provides a comprehensive database of funding programs related to energy and mobility. It serves Swiss companies and private individuals seeking financial support for energy efficiency and mobility projects, supporting the national Energy Strategy 2050. The platform is supported by reputable partners including Faktor Journalisten AG, EnergieSchweiz, and Energie-Experten, enhancing its credibility and data accuracy. Technically, the website uses modern JavaScript and privacy-focused analytics (Plausible), with good mobile optimization and accessibility features. Security posture is solid with HTTPS and CSRF protections, though additional security headers and explicit security policies could improve it. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

E

engage.ch

engage.ch

49

engage.ch is an online platform dedicated to enabling youth participation in political and social issues within Switzerland. It offers a user-friendly interface for young people to submit their concerns and ideas, facilitating engagement at municipal, cantonal, and national levels. The platform is closely affiliated with the Dachverband Schweizer Jugendparlamente (DSJ), which supports its credibility and mission. The website is multilingual, primarily in German, and provides news, campaigns, and contact options to its users. Technically, the site is built on Drupal 8 CMS, leveraging modern web technologies such as Google Fonts, Plausible Analytics for privacy-focused tracking, and EU Cookie Compliance modules. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Security is well-handled with HTTPS enforced and spam traps in forms, although explicit security policies and incident response contacts are not published. Overall, engage.ch presents a trustworthy and professional digital presence with strong privacy compliance and user engagement features. It serves a niche audience effectively, with clear business and social objectives aligned with youth civic participation in Switzerland.

TSO AG is a Swiss-based company specializing in digital transformation services for the tourism sector, including associations, destinations, transport companies, and hotels. Their business model revolves around providing shared-service digital solutions to automate processes and improve performance. The website reflects a professional and consistent brand image with a clear focus on tourism digitalization. Technically, the site uses Contao CMS, integrates modern analytics and consent management tools like Cookiebot and Google Tag Manager, and employs HTTPS with good security practices. However, explicit contact information and security policies are not prominently available, which could be improved. The security posture is solid with no visible vulnerabilities, but the absence of a security.txt or incident response information is a gap. Overall, the site is trustworthy, compliant with GDPR via Cookiebot, and well-positioned in its niche.

B

BSA Bund Schweizer Architekten

bsa-fas.ch

55

The Federation of Swiss Architects (BSA Bund Schweizer Architekten) is a prominent membership organization uniting over 950 members recognized for their achievements in architecture and urban development in Switzerland. The website serves as a comprehensive platform offering information about the federation, its local groups, awards, research grants, publications, and events. It targets architects, urban planners, and related professionals within Switzerland, providing multilingual support to cater to the diverse linguistic regions of the country. The business model is centered on membership services, professional networking, and advocacy within the architectural sector.

T

CMS und Webseiten Lösung speziell für Tourismus - TourismusWeb

tourismusweb.site

48

TourismusWeb is a specialized modular open-source CMS and website solution tailored specifically for the tourism industry. It offers a flexible content management system with integrated content hubs, image databases, AI tools, and various integrations designed to meet the needs of tourism organizations, destinations, associations, and related sectors. The platform leverages the Contao Open Source CMS and is supported by modern web technologies and analytics tools such as Google Tag Manager and Plausible Analytics. The website presents a professional and consistent brand image, targeting primarily tourism-related businesses in Denmark and possibly broader European markets.

T

TSO AG

digital.fitness

42

Digital.Fitness® is a Swiss-based software solution focused on providing digital maturity assessments and benchmarking tools for businesses. Operated by TSO AG, the platform offers a modular SaaS product that includes a digital fitness app, a 7-C model framework developed in partnership with Fachhochschule Westschweiz (HES-SO), and a network membership for consultants, system providers, and educational institutions. The website targets business consultants, system providers, and educational entities seeking to evaluate and improve digital transformation levels within companies. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and integrates analytics tools like Google Analytics and Plausible. The site is mobile-optimized and well-structured, providing a professional user experience.

S

Stafftastic GmbH

ausbildungsradar.de

56

Ausbildungsradar.de is a German educational platform focused on supporting companies and associations in retaining and recommending applicants within regional or association-based training programs. The platform is positioned as a niche service enhancing digital collaboration in apprenticeship and training sectors. The business is likely small-sized and operates primarily in Germany, with Stafftastic GmbH as the associated company. Technically, the website employs modern JavaScript technologies, Cookiebot for GDPR-compliant cookie management, and Plausible Analytics for privacy-friendly traffic analysis. Hosting is via Google Cloud DNS, indicating a reliable infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security policy or incident response contacts are published. Privacy compliance is strong, with a comprehensive privacy policy linked on a partner domain. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

TSO AG is a Swiss-based company specializing in digitalization services for the tourism sector, offering shared-service digital solutions to associations, destinations, transport companies, and hotels. Their business model focuses on automating processes and improving performance for tourism providers. The website reflects a professional and consistent brand presence with clear messaging targeted at tourism industry stakeholders. Technically, the site is built on the Contao CMS platform, leveraging modern technologies such as Cookiebot for consent management and Google Tag Manager for analytics, indicating a mature digital infrastructure. Security-wise, the website enforces HTTPS, implements standard security headers, and manages cookie consent effectively, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, compliant with GDPR, and demonstrates good privacy practices.

B

Bühler Geigenbau

buehler-geigenbau.ch

51

Bühler Geigenbau is a specialized violin making atelier based in Winterthur, Switzerland, offering a range of services including instrument rental, sales, repairs, and restorations focused on string instruments such as violins, violas, cellos, and double basses. The business targets musicians and students seeking quality handcrafted and factory instruments along with accessories. The website is professionally designed using Webflow CMS and modern web technologies, providing clear navigation and relevant content. The technical infrastructure is solid with HTTPS enabled and minimal tracking via Plausible Analytics, reflecting a moderate digital maturity. Security posture is generally good with no visible vulnerabilities or exposed sensitive data; however, the absence of security headers and formal security policies indicates room for improvement. Privacy compliance is basic, lacking cookie consent mechanisms and detailed GDPR compliance indicators. Overall, the website presents a trustworthy and professional image appropriate for a small local business in the musical instrument sector.

stafftastic GmbH is a German-based recruiting company specializing in sourcing suitable talents for businesses. Founded in 2020, the company operates a professional website primarily in German, targeting companies seeking recruitment services. The website demonstrates a good level of digital maturity, employing modern technologies such as Bootstrap, FontAwesome, and Cookiebot for cookie consent management, alongside Plausible Analytics for privacy-friendly analytics. Hosting is supported by Google Cloud DNS infrastructure, indicating reliable hosting services. Security posture is solid with HTTPS enabled and cookie consent implemented, although additional security headers could enhance protection. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-aligned cookie consent mechanisms. Overall, the website is professional, trustworthy, and safe for general audiences.

Z

Zephir Software Design AG

zephir.ch

59

Zephir Software Design AG is a Swiss-based web agency specializing in web development services with a focus on innovative ideas and modern web technologies. The company targets businesses and organizations seeking professional web solutions, emphasizing Swiss quality and reliability. Their website showcases client references and projects, positioning them as a reputable regional player in the technology sector. Technically, the website uses modern JavaScript libraries such as fullPage.js and integrates privacy-friendly analytics via Plausible. The site is well-designed, mobile-optimized, and provides clear contact information, enhancing user experience and trust. However, the absence of privacy and cookie policies indicates a compliance gap that should be addressed. Security-wise, the site uses HTTPS but lacks visible security headers and incident response information, suggesting room for improvement in security posture. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

P

Praktikumswoche

praktikumswoche.at

58

Praktikumswoche is an Austrian educational service focused on providing internship week experiences to students during school holidays, helping them explore different companies and career paths. The website is professionally designed with good content quality and targets German-speaking students in Austria. The technical infrastructure includes modern web technologies such as Bootstrap, FontAwesome, and Cookiebot for cookie consent management, alongside Plausible Analytics for privacy-friendly user tracking. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response policies are not publicly documented. Overall, the website is trustworthy and compliant with GDPR requirements, with transparent domain registration consistent with its business purpose.

S

stafftastic GmbH

praktikumswoche.de

60

Praktikumswoche.de is a German educational platform operated by stafftastic GmbH that facilitates internship weeks for students across over 200 regions in Germany. The platform enables students to explore different companies and professions by participating in daily internships during the holidays. It serves both students and companies, offering free registration and participation. The website is well-positioned in the education sector with strong media recognition and a broad regional presence. Technically, the website employs a modern tech stack including Bootstrap, jQuery, FontAwesome, and Cookiebot for cookie consent management. Hosting is managed via Google Domains, and privacy-respecting analytics are implemented using Plausible Analytics. The site is mobile-optimized with good SEO and accessibility basics. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. Cookie consent is properly implemented, and privacy is respected with no-cookie YouTube embeds. However, security headers are not explicitly detected, and no public security policy or incident response contacts are provided, which could be improved. Overall, the website is trustworthy, professional, and compliant with GDPR. It lacks explicit contact information on the main page but provides social media links and a privacy policy. The domain registration is consistent and legitimate, supporting the platform's credibility.

G

GGG Voluntas

ggg-voluntas.ch

51

GGG Voluntas is a Swiss non-profit organization specializing in healthcare consultation services, particularly focusing on patient advance directives, health planning, and accompaniment services for the sick at home. The organization targets elderly individuals, patients, and caregivers primarily in Basel, Switzerland. Their website presents a professional and consistent brand image with clear navigation and relevant content including podcasts and interviews that enhance their community engagement. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Plyr.js for media playback, with hosting of audio content on Amazon S3. Analytics are handled via privacy-focused Plausible Analytics, reflecting a commitment to user privacy. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are not published. Overall, the site is well-structured, mobile-optimized, and trustworthy, though improvements in cookie consent and formal security disclosures are recommended.

F

FLINC CYCLES

flinccycles.com

43

FLINC CYCLES is a small Swiss-based company specializing in compact cargo bicycles designed for urban customers who need versatile transport solutions. The website presents a professional and consistent brand image with clear product information, a journal, and an online shop. The business model focuses on direct sales and customer engagement through test rides and detailed product specs. Technically, the site uses modern JavaScript frameworks such as Alpine.js and Flickity for UI components and employs Plausible Analytics for privacy-conscious visitor tracking. Hosting is provided by hosttech.ch, a Swiss hosting provider, ensuring local infrastructure. Security posture is generally good with HTTPS enforced and domain transfer protection, but lacks DNSSEC and some security headers. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, though no cookie consent mechanism is present. Overall, the site is trustworthy, well-designed, and suitable for its target audience.

P

Produktgenuss GmbH

letscast.fm

69

LetsCast.fm is a German-based podcast hosting service operated by Produktgenuss GmbH, founded in 2020. The company provides a comprehensive platform for podcasters of all levels to host, publish, and monetize their podcasts across major platforms such as Spotify, Apple Podcasts, and YouTube. The service emphasizes ease of use, unlimited podcast and episode uploads, and extensive analytics. The website is professionally designed, mobile-optimized, and offers clear pricing tiers with transparent features. Social media and community engagement are active, enhancing brand trust and user support. Technically, LetsCast.fm employs modern web technologies including JavaScript frameworks, Tailwind CSS, and Podlove Web Player integration. Hosting appears to be on AWS infrastructure, with DNS managed via AWS nameservers. Analytics are implemented using Google Tag Manager and Plausible Analytics, balancing tracking needs with privacy considerations. The site enforces HTTPS and includes CSRF protection tokens, indicating good security hygiene. Security posture is solid with HTTPS, clientTransferProhibited domain status, and cookie consent mechanisms. However, DNSSEC is not enabled, and explicit security policies or incident response contacts are not publicly documented. No critical vulnerabilities or suspicious activities were detected. Privacy compliance is strong with comprehensive privacy and cookie policies, and GDPR adherence is evident. Overall, LetsCast.fm presents a trustworthy, professional, and user-friendly podcast hosting platform with a strong market position in the German-speaking podcast ecosystem. Strategic improvements in DNS security and published security policies could further enhance trust and compliance.

T

TIVENTS

tivents.de

60

TIVENTS is a German-based e-commerce platform specializing in the sale of event tickets, gift vouchers, and animal sponsorships. The website targets consumers interested in local events and unique gifting options, operating primarily within Germany. The platform leverages Shopware 6 technology and integrates payment solutions such as PayPal, providing a modern and functional user experience. The site is mobile-optimized and includes features like pagination and sorting to enhance usability. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and formal privacy or terms of service documentation. Overall, the website presents a moderate security posture with room for improvement in compliance and transparency.

M

Magistra, a.s.

magistra.cz

62

Magistra.cz is a Czech Republic based online pharmacy and retail pharmacy chain operating over 200 physical locations nationwide. The company offers a broad range of pharmaceutical and healthcare products through its e-commerce platform, supported by a loyalty program and a mobile application facilitating e-prescription reservations. The website is professionally designed with clear navigation and relevant content targeted at general consumers seeking pharmaceutical products and health-related services. Technically, the site uses modern web technologies including HTTPS, Google Tag Manager, and multiple analytics platforms, hosted partially on Microsoft Azure Blob Storage. Security posture is adequate with HTTPS enforced but lacks visible security headers and explicit privacy and cookie policies, which are important for compliance and user trust. The WHOIS data is unavailable, likely due to privacy protection, which is common and justified for this business type. Overall, the site demonstrates a strong business presence and trustworthy e-commerce platform in the healthcare sector.

Lenos Verlag AG is an independent Swiss book publisher specializing in literature from Switzerland and international works, with a particular focus on Arabic literature, thriller novels, and topical non-fiction. The company operates a professional website that showcases its book catalog, author information, upcoming events, and ordering options. The business targets readers interested in diverse literary genres and cultural topics, maintaining a niche market position within the Swiss and international publishing landscape. The website supports user engagement through newsletter subscriptions and social media channels, enhancing its community reach. Technically, the website employs a modern technology stack including jQuery, Bootstrap, FontAwesome, and Typekit fonts, managed via the Kirby CMS platform. It integrates privacy-respecting analytics (Plausible) and offers a responsive design optimized for mobile devices. While performance is moderate, the site provides clear navigation and good SEO practices. However, some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. Yet, it lacks several recommended security headers and does not provide explicit security policies or incident response contacts. Privacy compliance is strong regarding GDPR with a comprehensive privacy policy, but no cookie consent mechanism is present. Overall, the security posture is solid but could benefit from improvements in headers and transparency. The domain registration data aligns well with the business claims, showing consistency and legitimacy. No blocking or WAF mechanisms interfere with content access, allowing full analysis. The website is safe for general audiences, with no adult or questionable content detected. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and enhancing accessibility to further strengthen trust and compliance.

M

Medienberatung NRW

bildungsmediathek-nrw.de

59

Bildungsmediathek NRW is a regional educational media platform serving schools and educators in North Rhine-Westphalia, Germany. It offers a wide range of educational media, apps, and materials to support teaching and learning. The platform is supported by governmental and regional bodies, ensuring a trusted and authoritative source of educational content. The website is professionally designed with clear navigation and a strong focus on accessibility and user experience. Technically, it employs modern web technologies including JavaScript frameworks and privacy-focused analytics, hosted likely on specialized educational cloud infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with clear privacy and terms policies, but lacks a cookie consent mechanism. Overall, the site is trustworthy, well-maintained, and serves its educational mission effectively.

A

Antares Project GmbH

edupool.de

48

Edupool.de is a German educational digital media platform operated by Antares Project GmbH, serving over 800,000 teachers with a comprehensive media library and marketplace aggregating content from major publishers. The platform offers regional and school-specific access, emphasizing secure, privacy-compliant, and ad-free user experience. Technically, the site is built on Webflow with modern JavaScript libraries and uses privacy-focused analytics (Plausible). The website is well-designed, mobile-optimized, and provides clear navigation and relevant content for its target audience. Security posture is adequate with HTTPS usage and no exposed sensitive data, though security headers and incident response information are lacking. Privacy compliance is good with a clear privacy policy and terms of service, but no visible cookie consent mechanism. WHOIS data is minimal but consistent with the business and hosting provider usage, indicating legitimacy. Overall, the site is professional, trustworthy, and well-positioned in the education sector.

1

10x Founders

10xfounders.com

65

10x Founders is a venture capital firm focused on early-stage investments in ambitious technology startups, primarily in Europe. The company positions itself as a leading early-stage investor with a strong network of over 200 entrepreneurs and investors, supporting founders to build global tech giants. Their portfolio includes notable companies such as Simpleclub and Ivy, and they emphasize their experience backing unicorns and successful exits. The website reflects a professional and modern digital presence built on Webflow, with fast performance and mobile optimization. Security posture is generally good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable, which raises some concerns about domain registration transparency. Overall, the business appears credible and well-positioned in the venture capital sector, but domain registration status should be monitored for legitimacy.

Z

Zentrum für Data-driven Empowerment, Leadership und Advocacy (zedela) gUG (haftungsbeschränkt)

zedela.org

58

zedela is a small non-profit think tank and research organization based in Germany, specializing in data-driven empowerment, leadership, and advocacy with a focus on anti-racism and BIPoC leadership. Their services include community-based research, representation and anti-discrimination data collection, leadership training programs such as the RISE Leadership Program, and advocacy to influence policy and organizational change. The organization is relatively new, founded in 2023, and is supported by reputable German federal ministries and foundations. Technically, the website is built using modern frameworks Astro and Svelte, with privacy-respecting analytics via Plausible. The site is well-designed, mobile-optimized, and accessible, reflecting a professional and trustworthy presence. Security posture is good with HTTPS and secure forms, though improvements like DNSSEC and security headers are recommended. Contact is primarily via email and social media, with no phone or physical address listed. Overall, zedela presents a credible, focused, and professional digital footprint aligned with its mission and audience.

I

International Security Ligue

international-security-ligue.org

57

The International Security Ligue is a well-established global organization representing leading private security companies since 1934. It focuses on enhancing professionalism, advocating for fair market conditions, and providing research and resources to the private security industry worldwide. The organization targets security companies, government agencies, and industry stakeholders, positioning itself as a key voice and forum for collaboration in the security sector. Technically, the website is built on the Webflow platform using modern web technologies and minimal tracking, delivering a good user experience with mobile optimization and clear navigation. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is unavailable, limiting domain trust verification, but the website content and contact information support legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy transparency.

V

Ville de Vernier

vernier.ch

52

Ville de Vernier operates as the official municipal government website for the city of Vernier, Switzerland, serving approximately 37,000 residents. The site provides comprehensive information on local administration, practical services, cultural activities, news, and events, targeting a broad audience including seniors, youth, families, new inhabitants, associations, and enterprises. The business model is centered on public service delivery and community engagement, positioning itself as a trusted local authority. Technically, the website is built on Drupal 10, leveraging modern JavaScript frameworks like Alpine.js and privacy-focused analytics via Plausible. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. The infrastructure reflects a mature digital presence suitable for a government entity. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a dedicated incident response contact, which are recommended best practices. Privacy compliance is partial, with a basic privacy policy present but no cookie consent mechanism, potentially impacting GDPR adherence. Overall, the website presents a low-risk profile with strong business credibility and technical implementation. Strategic improvements in privacy compliance and security hardening would enhance trust and regulatory alignment.

C

coolLabs Technologies Bt.

safetyper.com

50

Safetyper is a technology startup offering a privacy-focused alternative to Grammarly, emphasizing user ownership of typed content. The website presents a clean, modern design built with the Astro framework, hosted on Hetzner infrastructure. It is mobile optimized and uses privacy-friendly analytics (Plausible). The site is currently in a pre-launch or coming soon state, with limited content and no active forms or user data collection. Security posture is basic but adequate, with HTTPS enabled and no critical vulnerabilities detected. However, the site lacks privacy and cookie policies, contact information, and security incident response details, which are important for trust and compliance. The domain registration is consistent with the business entity and startup age, indicating legitimacy.

C

coolLabs Technologies Bt.

jata.app

50

Jata.app is a minimalist todo list web application developed by coolLabs Technologies Bt., a small technology company based in Hungary. The app focuses on providing users with a simple, bloat-free interface to manage daily tasks and organize todos using hashtags. The website demonstrates a clean, modern design with good mobile optimization and fast performance, leveraging the Astro framework and custom fonts. The company maintains an active community presence on Discord and social media, enhancing user engagement and support. However, the website lacks formal privacy, cookie, and security policies, which are critical for compliance and user trust. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and incident response information indicates room for improvement. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency.

C

coolLabs Technologies Bt.

coollabs.io

59

coolLabs Technologies Bt. operates a privacy-focused technology website offering free and open-source applications designed to help users control their digital footprint and enhance online privacy. The company targets a general audience interested in privacy and self-hosting solutions, positioning itself as a niche provider with a strong community presence and open-source ethos. Key services include Coolify, a self-hosting platform, and other privacy-friendly tools such as Fonts and Safetyper. The business model revolves around open-source software, community engagement, and sponsorships. Technically, the website is built using modern frameworks like Astro, hosted with Cloudflare DNS and CDN services, and employs privacy-respecting analytics via Plausible. The site demonstrates good performance, mobile optimization, and accessibility, with a clean and professional design. However, some improvements could be made in security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS with a strong SSL configuration and domain transfer protections. The WHOIS data shows privacy protection consistent with the company's privacy focus and domain age appropriate for its business maturity. No critical vulnerabilities or exposed sensitive data were detected, though the absence of security headers and explicit security policies suggests room for enhancement. Overall, coolLabs presents a trustworthy and professional online presence with a solid technical foundation and privacy-centric approach. Strategic recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, and publishing formal security and incident response policies to further strengthen compliance and user trust.

T

TIVENTS

tivents.com

49

TIVENTS is a German-based e-commerce platform specializing in the sale of event tickets, gift vouchers, and sponsorships, particularly focusing on wellness, cultural events, and animal sponsorships at nature parks. The platform targets consumers primarily in Germany and offers a user-friendly marketplace with sorting and pagination features. Technically, the website is built on the Shopware CMS platform, hosted on Hetzner servers, and integrates PayPal for payment processing. The site is mobile-optimized and uses modern web technologies including JavaScript and Plausible Analytics for tracking. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is minimal, with no explicit privacy or cookie policy pages found, though a cookie consent mechanism is present. Contact information is available via phone and contact form but lacks direct email addresses. Overall, the website is professional and trustworthy but could benefit from enhanced privacy and security disclosures.

T

Table.Media GmbH

table.media

55

Table.Media GmbH operates a professional media platform called Table.Briefings, providing specialized news briefings, research articles, podcasts, and events primarily targeting professionals and decision makers in Germany. The company positions itself as a niche media provider offering subscription-based services to deliver timely and relevant information for competitive advantage. The website is well-branded, professionally designed, and consistently maintained with up-to-date content across multiple briefing categories. Technically, the website employs modern frontend technologies including Alpine.js and Glide.js for interactive UI components, and uses Plausible Analytics for privacy-conscious user tracking. The site is mobile-optimized, fast-loading, and SEO-friendly, indicating a mature digital infrastructure. However, explicit CMS or hosting details are not disclosed. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, but lacks visible security headers and published security policies or incident response contacts. The WHOIS data is privacy-protected, which is justified for this media business, though it limits direct verification of domain registration details. Overall, the site demonstrates a solid security posture with room for improvement in transparency and formal security disclosures. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, publishing privacy and security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and compliance.

C

Cherry Ventures

cherry.vc

57

Cherry Ventures is a well-established European venture capital firm founded in 2012, with offices in Berlin, London, and Stockholm. The firm focuses on early-stage investments in technology startups across diverse sectors including SaaS, mobility, gaming, and space technology. Their team comprises former entrepreneurs and operators with experience in scaling companies like Zalando and Spotify, positioning them as trusted partners for founders. The website reflects a professional and modern digital presence, leveraging Next.js and Sanity CMS for content management and performance optimization. Analytics are implemented via Plausible, indicating a privacy-conscious approach to user tracking. Security posture is strong with HTTPS enforcement and modern security headers, although explicit privacy and cookie policies are absent, representing an area for compliance enhancement. No direct contact information or incident response policies are publicly disclosed, which could be improved to increase transparency and trust. Overall, the website and domain registration data align well with the company's business claims, supporting a high legitimacy score.

B

Berliner Philharmoniker

digitalconcerthall.com

67

The Digital Concert Hall is a specialized streaming platform operated under the brand of the Berliner Philharmoniker, a world-renowned classical orchestra based in Germany. The platform offers live and on-demand streaming of concerts, films, interviews, and other classical music content, targeting classical music enthusiasts globally. The business model is subscription-based, with options for monthly or annual access, positioning it as a niche leader in classical music digital media. Technically, the website leverages modern web technologies including React and Theoplayer for video streaming, with good mobile optimization and accessibility features. The presence of structured data and SEO best practices enhances discoverability. Security posture is strong with HTTPS enforced and multiple security headers present, though the absence of a visible cookie consent mechanism and published security policies are areas for improvement. The lack of WHOIS data is a notable anomaly, potentially indicating privacy protection or a recent domain registration, which slightly reduces trustworthiness. Overall, the site is professional, trustworthy, and well-positioned in its market segment.

I

iudo

iudo.co

60

iudo is a small French company specializing in translating urban planning rules into accessible and actionable information to support real estate decisions, land evolution, and city renewal. The website is professionally designed using modern technologies such as Bootstrap and hosted on the Softr platform, indicating a moderate level of digital maturity. Analytics are implemented via Google Tag Manager and Plausible Analytics, showing an interest in user behavior tracking. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is functional and professional but would benefit from enhanced privacy and security measures.

T

Transparency International

transparency.org

75

Transparency International is a globally recognized non-profit organization dedicated to combating corruption and promoting integrity and accountability worldwide. The website serves as a comprehensive platform for advocacy, research, and public engagement on anti-corruption issues. It targets a broad audience including policymakers, civil society, and the general public. The organization maintains a strong market position as a leading authority in corruption research and policy influence. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Plausible Analytics, and Cookiebot for consent management. The site is well-optimized for mobile devices, has good SEO practices, and uses HTTPS with strong security headers, indicating a mature digital infrastructure. Performance is moderate with room for optimization. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, cookie consent, and security headers. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for transparency and trust. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations such as GDPR. The lack of WHOIS data is due to privacy protection, which is justified for this type of organization. Strategic recommendations include publishing a security policy, incident response information, and a vulnerability disclosure policy to enhance transparency and security posture.

L

LALA Slovak Music Export

musicexport.sk

61

LALA Slovak Music Export is a small non-profit organization dedicated to promoting Slovak music internationally. Their primary mission is to support and present the Slovak music scene abroad, targeting music industry professionals and artists. The website serves as an official platform for news, events, and information related to Slovak music export. Technically, the site is built on WordPress using common frameworks like Bootstrap and jQuery, with integrations for Google Analytics, Facebook Pixel, and Plausible Analytics. The hosting provider appears to be Websupport, a Slovak hosting company. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Overall, the website is professional, trustworthy, and well-branded, serving its niche cultural purpose effectively.

A

AlmavivA S.p.A.

almaviva.it

70

AlmavivA S.p.A. is a leading Italian Information & Communication Technology group with a strong presence in digital transformation services across multiple sectors including government, finance, energy, and telecommunications. The company offers a broad portfolio of services such as cloud computing, cybersecurity, ERP, big data, and AI-driven customer experience solutions. The website reflects a mature enterprise with consistent branding, professional content, and a clear focus on innovation and partnership. Technically, the site uses modern JavaScript libraries and frameworks, is mobile-optimized, and integrates privacy-respecting analytics tools like Matomo and Plausible. Security posture is good with HTTPS enforced and a voluntary vulnerability disclosure policy, though explicit privacy and security policies are not prominently found. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

S

SIGIC - The Slovenian Music Information Center

musicslovenia.si

41

Music Slovenia is a consortium of Slovenian musical institutions dedicated to promoting Slovenian music both nationally and internationally. The website serves as a platform to connect various stakeholders in the Slovenian music scene, offering news, event information, playlists, tours, and showcases. The organization targets musicians, cultural institutions, and music enthusiasts interested in Slovenian music. The business model focuses on cultural promotion and collaboration facilitation within the music industry niche. Technically, the website employs a modern but somewhat dated technology stack including jQuery 2.2.4, Bootstrap, and various UI libraries. It uses HTTPS with good SSL configuration but lacks security headers. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Analytics are handled via Plausible Analytics, indicating a privacy-conscious approach but lacking cookie consent mechanisms. From a security perspective, the site benefits from HTTPS and absence of exposed sensitive data but misses important security headers and formal security policies such as privacy, cookie, and incident response disclosures. No vulnerability disclosure or security contact information is provided, which could be improved to enhance trust and compliance. The domain registration data is consistent and appropriate for the business, supporting legitimacy. Overall, the website is professional and trustworthy with good content quality and business credibility but requires improvements in privacy compliance and security best practices to reach higher maturity levels.

T

Torggler

torggler.com

64

Torggler is a well-established manufacturing company specializing in technical materials for construction, window frames, and nautical sectors, boasting a history of over 160 years. The company offers a broad range of products including sealants, adhesives, polyurethane foams, waterproofing solutions, flooring, concrete restoration, and insulation materials. Their website is professionally designed, multilingual, and optimized for SEO, targeting professionals and businesses in relevant industries. Technically, the site is built on WordPress with WooCommerce and uses modern libraries such as jQuery and Owl Carousel, with analytics provided by Plausible. Security posture is generally good with HTTPS enabled, but lacks some security headers and explicit security policies on the site. WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy and reduces trustworthiness. Overall, the website is functional, professional, and content-rich but would benefit from improved transparency on privacy and security policies.

P

Pharow

pharow.com

63

Pharow is a French B2B SaaS platform specializing in lead generation and data enrichment for sales and marketing teams. It consolidates multiple data sources including intent data and business signals to provide segmented prospect lists enriched with professional emails and phone numbers. The platform integrates with popular CRMs like HubSpot and Pipedrive and outbound tools such as Lemlist and La Growth Machine, enabling seamless data export and synchronization. Pharow positions itself as a comprehensive and user-friendly solution for B2B prospecting in France. Technically, the website is built on Webflow CMS, leveraging modern web technologies and third-party services including Google Tag Manager, Crisp chat, Axeptio for cookie consent, and Plausible Analytics for privacy-focused tracking. The site is well-optimized for performance, mobile responsiveness, and SEO, with a professional design and clear navigation. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security or incident response policies. No WHOIS data is available for the domain, which raises some concerns about domain registration transparency, though the website content and integrations suggest a legitimate business. Overall, Pharow presents a mature and professional digital presence with strong business credibility and technical implementation. Recommendations include enhancing security headers, publishing a security policy, and improving domain registration transparency to bolster trust and compliance.

E

Enreda SCA

enreda.coop

58

Enreda SCA is a Spanish cooperative specializing in social transformation through digital participation, OpenData, and product design and development. The company targets public and private institutions seeking to enhance citizen participation, transparency, and sustainability. With over a decade of experience and certification from the Consul Democracy Foundation, Enreda holds a credible market position in the technology and non-profit sectors. Their key services include citizen participation processes, digital participation software, transparency and data visualization, and sustainability consulting. Technically, the website is built using the Eleventy static site generator, leveraging modern JavaScript modules and libraries such as Lunr.js for search and Plausible Analytics for privacy-focused user tracking. Hosting is provided by DigitalOcean, indicating a reliable infrastructure. The site is mobile-optimized with good SEO practices and fast performance, though accessibility features are basic. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks DNSSEC, security headers, and published security policies or incident response contacts, which are areas for improvement. Privacy compliance is limited due to the absence of privacy and cookie policies, which could pose regulatory risks. Overall, the website is professional, trustworthy, and content-rich, but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

A

Artisan Financial Planning

artisanfinancialplanning.com

60

Artisan Financial Planning is a specialized financial advisory firm offering flat-fee financial planning and investment management services tailored specifically for musicians, performing artists, and creatives. The company positions itself as an affordable, transparent, and client-aligned alternative to traditional asset-based fee advisors, emphasizing simplicity and empathy in its service delivery. The website content is professionally crafted, targeting a niche market segment with clear messaging and trust signals such as professional certifications and media features. Technically, the website is built on a modern stack including jQuery, Bootstrap, Font Awesome, and Zephyr CMS. It integrates marketing and analytics tools such as Google Tag Manager, MailerLite, and Plausible Analytics, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several recommended security headers and does not provide a cookie consent mechanism, which could impact privacy compliance. The absence of WHOIS registration data is a notable anomaly that reduces trustworthiness, though the professional presentation and certifications mitigate some concerns. Overall, the website presents a low-risk profile with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing security headers, adding cookie consent, publishing incident response policies, and clarifying domain registration details to enhance trust and compliance.

T

TPF

tpfingenieria.com

50

TPF is a large, international multidisciplinary engineering consultancy headquartered in Spain, with a presence in over 45 countries through multiple subsidiaries. The company offers a broad range of engineering services including consultancy, design, asset management, project supervision, and quality control, targeting businesses and public sector clients. Their market position is strong, supported by a diversified portfolio and global reach. Technically, the website is built on Drupal 10, uses modern JavaScript libraries such as jQuery and GSAP, and integrates privacy-conscious analytics via Plausible. The site is mobile-optimized and accessible, with good SEO practices. However, some security best practices such as DNSSEC and security headers are missing. Security posture is moderate with HTTPS enabled and no visible vulnerabilities, but lacks explicit security policies and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Overall, the website is professional and trustworthy, but improvements in privacy compliance and security hardening are recommended to enhance user trust and regulatory adherence.

T

TPF

tpf.ro

46

TPF is a well-established global multidisciplinary engineering consultancy headquartered in Belgium, active in over 40 countries with a strong portfolio in environment and water, transport and mobility, and building and cities sectors. The company offers a broad range of services including consultancy, design, technical asset management, and project management. It holds a reputable market position, evidenced by its ENR Top 50 ranking and BREEAM Excellent certifications. The website reflects a mature digital presence built on Drupal 10 with modern JavaScript libraries and a privacy-conscious analytics approach using Plausible. However, explicit privacy and cookie policies are missing, representing a compliance gap. Security posture is moderate with no visible security headers and no incident response or vulnerability disclosure information published. Contact information is clearly provided, enhancing business credibility.

M

Milan Chudoba

kennymax.sk

44

Kennymax.sk is the professional portfolio website of Milan Chudoba, a Slovak UI & UX freelance designer based in Prague, Czech Republic. The site showcases creative and unique digital design services, emphasizing originality and usability. The business operates as a small freelance entity, targeting clients seeking bespoke UI/UX design and photography services. The website is built on WordPress with modern SEO practices and integrates social media channels for broader engagement. Technically, the site uses a contemporary tech stack including WordPress 6.7.4, Yoast SEO, and Semplice theme, hosted likely by Websupport with DNSSEC and HTTPS enabled, ensuring a secure browsing experience. However, the site lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is solid with HTTPS and DNSSEC, but could be improved with additional security headers and vulnerability disclosures. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and explicit contact details.