Security Directory

Fonds du sport is a Geneva-based non-profit organization dedicated to supporting local sports clubs and athletes by providing news, event information, and resources. The website serves as a regional hub for sports-related activities and community engagement, targeting sports enthusiasts and organizations within the canton. Technically, the site is built on WordPress using the Avada theme, incorporating common web technologies such as jQuery and Google Tag Manager for analytics. The site demonstrates moderate performance and good mobile optimization, with a professional design and clear navigation. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies, which should be addressed to meet GDPR standards. Overall, the website is trustworthy and professionally maintained, but could improve in privacy and security transparency.

Stade Genève is a well-established athletics sports club based in Geneva, Switzerland, offering a wide range of services including training, competitions, camps, and community engagement. The website reflects an active organization with regular updates, event calendars, and social media presence, targeting athletes and sports enthusiasts in the region. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and plugins to provide a good user experience and mobile responsiveness. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and published security policies, indicating room for improvement in security maturity. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy policy or terms of service pages found. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness. Strategic recommendations include enhancing privacy and security disclosures, implementing security headers, and publishing incident response information to improve compliance and trust.

A

Aeschbach

aeschbach-chaussures.ch

58

Aeschbach is a Swiss-based e-commerce retailer specializing in shoes, clothing, and accessories for women, men, and children. The website offers a broad selection of products from over 300 leading brands, emphasizing quality customer service, free shipping, and returns. The platform targets consumers interested in fashion and footwear, positioning itself as a trusted and established player in the Swiss retail market. The business model is primarily online retail with a focus on brand partnerships and customer satisfaction.

UBS is a globally recognized financial services firm operating in over 50 countries, including Finland. The website targets private, corporate, and institutional clients, offering wealth management, asset management, and investment banking services. The site is professionally designed, consistent with UBS branding, and provides comprehensive information about its capabilities and corporate governance. Technically, the site is built on Adobe Experience Manager, leveraging Adobe Analytics and modern JavaScript frameworks, ensuring a fast, accessible, and mobile-optimized user experience. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and vulnerability disclosure mechanisms could be improved. Overall, the site reflects a mature digital presence of a large financial institution with high trustworthiness.

E

Europe 2

europe2.fr

55

Europe 2 is a French pop radio station offering digital streaming, podcasts, news, and contests targeting French-speaking audiences interested in pop music and entertainment. The website is built on WordPress with a modern tech stack including jQuery, JWPlayer, and a comprehensive advertising ecosystem. It employs GDPR-compliant cookie consent management via Didomi and integrates major advertising networks such as AppNexus and Rubicon Project. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, which is justified given the media nature of the business. Overall, the site is professional, user-friendly, and compliant with privacy regulations.

R

Rouge

rouge.ch

49

Rouge is a Swiss regional media company operating a radio station with a strong digital presence including live streaming, podcasts, and mobile applications. The website targets the general public in the Canton of Vaud, offering entertainment, news, and contests. The business model revolves around media broadcasting and digital content delivery. Technically, the site is built on WordPress using the Extra theme and integrates common plugins such as Gravity Forms and Google Tag Manager. Hosting appears to be with Infomaniak, a reputable Swiss provider. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced but lacks security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is partially available via social media and a WhatsApp link, but no direct company emails are published. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

T

The Process Automator

theprocessautomator.com

54

The Process Automator is a small technology consulting business specializing in Robotic Process Automation (RPA) and low-code/no-code automation solutions. The company leverages over twelve years of experience to help businesses increase cashflow by automating repetitive tasks. The website presents a professional image with clear descriptions of services and client success stories, targeting companies seeking automation expertise. Technically, the site is built on the Webflow CMS platform, uses modern web technologies including jQuery and CSS3, and is hosted on Amazon CloudFront, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and secure forms, though it lacks explicit security headers and published security policies. Privacy compliance is basic with privacy and cookie policies present but no active consent mechanism. Business credibility is supported by social media presence and client project references, though direct contact emails and phone numbers are not provided. Overall, the site is trustworthy and well-constructed but could improve in privacy and security transparency.

S

Sun Spray Technologies LLC

mtcaptcha.com

68

MTCaptcha, operated by Sun Spray Technologies LLC, is a GDPR-compliant enterprise captcha service designed to protect websites from bots, human abuse, and fraud. Positioned as a privacy-focused alternative to reCAPTCHA, it offers advanced AI security, accessibility compliance (WCAG 2.1 AAA), and multi-region availability including China. The service targets enterprises, startups, and small businesses, providing customizable themes, adaptive risk engines, and enterprise dashboards with multi-user management. The website demonstrates strong branding consistency, professional design, and clear navigation, supporting a positive user experience and trustworthiness. Technically, the website leverages modern web technologies including jQuery, Webflow CMS, Google Tag Manager, Mouseflow analytics, and Swiper.js for UI components. Hosting is via Webflow's CDN, ensuring fast performance and mobile optimization. Security best practices are observed with HTTPS enforcement, sandboxed captcha iframes, and no exposed sensitive data. Analytics usage is moderate and privacy compliant, with cookie consent mechanisms in place. Security posture is strong with appropriate headers and SSL configuration, though explicit security policy and incident response contacts are not published. No vulnerabilities or suspicious domains were detected. WHOIS data confirms legitimacy and consistency with the business identity. Overall, MTCaptcha presents a mature, secure, and privacy-conscious captcha solution with a solid market position. Strategic recommendations include publishing a dedicated security policy, providing incident response contacts, adding vulnerability disclosure mechanisms, and enhancing admin portal security. These steps will further strengthen trust and compliance.

C

CalMatters

calmatters.org

62

CalMatters is a reputable nonprofit, nonpartisan newsroom dedicated to explaining California politics and policy. It operates a well-designed, content-rich website built on WordPress, leveraging modern SEO and analytics tools to reach its target audience effectively. The organization maintains a strong social media presence and offers various programs and newsletters to engage its audience. Technically, the site is hosted with Cloudflare DNS and uses HTTPS with good SSL configuration, ensuring secure communications. However, DNSSEC is not enabled, and no explicit cookie consent mechanism was detected, which are areas for improvement. Security policies and privacy policies are comprehensive and publicly accessible, reflecting a mature compliance posture. Overall, CalMatters demonstrates a strong business and technical foundation with a good security posture, suitable for its nonprofit media mission.

B

Site is undergoing maintenance

blackkidshack.com

38

The website blackkidshack.com is currently in maintenance mode and does not provide active business content. It directs visitors to its parent site blackgirlshack.org for further information. The domain was registered in 2021 and is hosted on dot5hosting.com using WordPress CMS with a maintenance plugin. The technical infrastructure is basic with jQuery and Open Sans font usage. Security posture is moderate with HTTPS enabled but lacks security headers and published policies. No privacy, cookie, or terms of service policies are present, and no contact information is provided on the site. Overall, the site appears to be a small-scale project or non-profit initiative currently offline for updates or redesign.

WeGotNextCyber is a cybersecurity educational initiative operated by the BlackGirlsHack Foundation, a 501(c)(3) non-profit organization focused on increasing diversity and inclusion in cybersecurity by training underserved Black women and girls. The website presents an 18-week Saturday school program targeting 9th-12th grade students in Virginia, providing ethical hacking education and preparation for the CompTIA Security+ certification. The program leverages a trusted curriculum from cyber.org and includes hands-on labs and certification vouchers to enhance employability in cybersecurity fields. Technically, the website is built on WordPress using the Elementor page builder and jQuery libraries. It is hosted on dot5hosting.com with HTTPS enabled, ensuring secure connections. Performance and mobile optimization are moderate to good, though accessibility and SEO optimizations are basic. The site uses Jetpack for analytics and tracking but lacks advanced privacy and cookie policies or consent mechanisms. From a security perspective, the site has HTTPS but lacks security headers and published security policies or incident response contacts. No vulnerabilities or malware indicators were detected, but improvements are recommended in security headers and privacy compliance. The WHOIS data shows a consistent and appropriate domain registration matching the organization's timeline and mission. Overall, the website is a credible and focused educational platform with good content quality and business credibility but requires enhancements in privacy compliance, security best practices, and contact transparency to improve trust and security posture.

M

Minorities in Cybersecurity

mincybsec.org

66

Minorities in Cybersecurity (MiC) is a U.S.-based 501(c)(3) nonprofit organization dedicated to developing leadership and career advancement opportunities for minority cybersecurity professionals. The organization offers structured programs tailored to different career stages, from aspirers to executive directors, aiming to build a strong community and address the cybersecurity talent shortage. Their services include leadership training, community engagement, an annual conference, and a job board. The website reflects a professional and consistent brand image with clear navigation and relevant content for its target audience. Technically, the website is built on Joomla CMS with MemberClicks integration, utilizing common JavaScript libraries such as jQuery and Mootools. The site is mobile-optimized and uses HTTPS with good SSL configuration, though it lacks some modern security headers and cookie consent mechanisms. Performance is moderate, and SEO and accessibility are basic but functional. From a security perspective, the site enforces HTTPS and uses secure form tokens, but it does not publish a security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. WHOIS data is unavailable, likely due to privacy protection, which is justified for this nonprofit. Overall, the site demonstrates a solid security posture but could improve transparency and compliance. The overall risk assessment is low, with recommendations to enhance security headers, implement cookie consent for GDPR compliance, and publish security policies to increase trust and compliance. The website is a credible and valuable resource for its community, with a good balance of content quality, technical implementation, and business credibility.

C

Cybertorial

cybertorial.org

54

Cybertorial is a small non-profit organization dedicated to educating and empowering women, young adults, and underserved populations in cybersecurity and artificial intelligence awareness. Their mission is delivered through innovative edutainment methods including an animated series and educational content. The organization is positioned as a niche player in the cybersecurity education sector with a focus on diversity and inclusion. Technically, the website is built on WordPress using modern plugins like Elementor and All in One SEO, hosted by Liquid Web, and employs Google Analytics for user insights. Security posture is adequate with HTTPS enforced and domain protections in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and serves its educational mission effectively.

C

CartoJuraLéman

cjl.ch

51

CartoJuraLéman is a non-profit regional geoportal managed by the ARCAM association for the district of Morges in Switzerland. Founded in 2016, it provides cartographic data representation and integration services to 46 partners including 37 municipalities and 9 associations. The website serves as an information and access point for regional geographic data, targeting government entities and local associations. Technically, the site is built on WordPress using popular plugins such as Yoast SEO and Elementor, with Google Analytics integrated for traffic monitoring. The site is well designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS with a good SSL configuration but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is legitimate and trustworthy, with room for improvement in privacy and security documentation.

C

Course de l'Escalade

escalade.ch

59

Course de l'Escalade is a well-established event organizer focused on the popular running event held annually in Geneva, Switzerland. The website provides comprehensive information about the races, registration, schedules, and related activities, targeting runners, families, and the local community. The business model revolves around event management and promotion, supported by sponsorships and partnerships with notable Swiss companies. Technically, the website is built on WordPress with modern web technologies, including jQuery and Google Tag Manager, and integrates cookie consent via Axeptio. The site is mobile-optimized and offers good SEO and accessibility features. Security posture is strong with HTTPS enforcement and multiple security headers, although explicit security policies and incident response information are not publicly available. Overall, the website is professional, trustworthy, and compliant with GDPR, but could improve transparency by adding terms of service and vulnerability disclosure policies.

C

Columbus Travel Media Ltd

worldtravelguide.net

53

World Travel Guide is a well-established digital travel media brand operated by Columbus Travel Media Ltd, providing comprehensive travel destination guides, news, and features to a global audience. The website targets travelers and tourism enthusiasts with rich editorial content and affiliate services such as flights and accommodation bookings. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, WooCommerce, and various marketing and analytics tools. It demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers are not detected. The absence of WHOIS data is a notable gap, reducing trust slightly, but the brand's market presence and content quality support its legitimacy. Privacy and cookie policies are comprehensive and GDPR compliant, enhancing user trust.

R

RH-ISAC

rhisac.org

74

RH-ISAC is a specialized cyber intelligence community focused on the retail and hospitality sectors, providing a collaborative platform for cybersecurity professionals to share threat intelligence, conduct benchmarking, and access education and training. The website presents a professional and well-structured digital presence, leveraging WordPress and Elementor with modern web technologies and analytics tools. Security posture is solid with HTTPS enabled, domain locking, and anti-spam measures, though DNSSEC is not enabled and no explicit security policy or incident response information is published. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a visible privacy policy or terms of service. Overall, the site is credible and trustworthy, serving a medium-sized community of major brand members.

R

R Street Institute

rstreet.org

72

The R Street Institute is a well-established non-profit think tank founded in 2012, focused on classical liberalism and pragmatic policy solutions across sectors such as energy, government affairs, criminal justice, and technology. The organization operates nationally with multiple offices and a distributed staff. The website reflects a mature digital presence with comprehensive research, commentary, outreach, and event content targeting policymakers, academics, and the informed public. Technically, the site is built on WordPress with modern analytics and marketing integrations, including Google Analytics, HubSpot, and social media embeds. Security posture is good with HTTPS and reCAPTCHA protections, though explicit security headers could be improved. Privacy compliance is evident with privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, with no signs of malicious activity or content safety concerns.

N

National Governors Association

nga.org

70

The National Governors Association (NGA) is a well-established, bipartisan non-profit organization representing the governors of the 55 U.S. states, territories, and commonwealths. Founded in 1908, NGA serves as a leading forum for policy innovation, advocacy, and best practices sharing among state leaders. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation aimed at government officials and policy stakeholders. Technically, the site is built on WordPress with modern tools such as Google Tag Manager, Google Analytics, and Smart Slider 3, ensuring a responsive and accessible user experience. SEO and privacy compliance are well addressed, including a detailed privacy policy and cookie consent mechanisms. Security posture is strong with HTTPS enforced, though additional security headers and explicit vulnerability disclosure policies could enhance trust. Overall, the NGA website demonstrates high legitimacy and professionalism, with no signs of malicious activity or content safety concerns. The absence of WHOIS data limits domain registration insights, but the organization's long-standing reputation and consistent branding support its credibility. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and maintaining regular audits of third-party scripts.

LifeSmarts is a well-established consumer education program operated by the National Consumers League, focusing on educating students through competitions and resources. The website serves multiple audiences including students, educators, coaches, coordinators, and alumni, providing access to competitions, quizzes, and educational materials. The program has a strong market position with a domain age dating back to 1997, reflecting its long-standing presence in the education sector. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder, Contact Form 7, and MonsterInsights for analytics. It leverages Cloudflare for DNS and uses Google Analytics for user tracking. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and explicit security headers, and no published security or incident response policies were found. Privacy compliance is basic, with a privacy policy present but no cookie consent banner or GDPR-specific indicators. The WHOIS data aligns well with the website's claims, showing consistent and legitimate registration. Overall, the website is professional, trustworthy, and serves its educational mission effectively. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance its security posture and user trust.

I

Internet Security Research Group

abetterinternet.org

73

The Internet Security Research Group (ISRG) is a nonprofit organization dedicated to improving internet security and privacy by reducing barriers to secure communication. Their flagship project, Let's Encrypt, provides free TLS certificates to over 500 million websites globally, positioning ISRG as a leader in internet security infrastructure. Additional projects like Prossimo and Divvi Up focus on memory safety and privacy-preserving telemetry, respectively, reinforcing their commitment to advancing secure and privacy-respecting technologies. The organization is supported by reputable sponsors including Mozilla, EFF, and Google, enhancing its credibility and market position. Technically, the website is built using the Hugo static site generator, leveraging modern frameworks such as Bootstrap and jQuery. The site is well-optimized for performance and mobile responsiveness, with clear navigation and professional design. Security best practices are observed with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, explicit security headers and cookie consent mechanisms are absent, representing areas for improvement. From a security posture perspective, ISRG demonstrates strong maturity with secure infrastructure and privacy-conscious practices. The absence of WHOIS transparency is mitigated by the organization's nonprofit status and strong trust signals on the site. No incident response or vulnerability disclosure information is publicly available, suggesting potential gaps in transparency. Overall, the risk profile is low, but enhancements in security policy publication and compliance mechanisms would strengthen trust. Strategically, ISRG should prioritize implementing explicit security headers, cookie consent, and publishing incident response and vulnerability disclosure policies. These steps will enhance compliance with privacy regulations and improve stakeholder confidence. Continued transparency and engagement with the community will support ISRG's mission and market leadership in internet security.

G

Geena Davis Institute

geenadavisinstitute.org

56

The Geena Davis Institute is a well-established non-profit organization focused on improving gender representation and authenticity in media through research and advocacy. The website reflects a professional and consistent brand presence, targeting media professionals, researchers, and advocates. The technical infrastructure is based on WordPress with Elementor and includes modern SEO and cookie consent mechanisms, indicating a mature digital presence. Security posture is generally good with HTTPS enabled and some security cookies in use, though there is room for improvement in DNSSEC and security headers. Privacy compliance is partially met with a cookie consent banner but lacks a visible privacy policy or terms of service. Overall, the site is trustworthy and safe for general audiences.

G

Gate 15

gate15.global

63

Gate 15 is a specialized service provider offering a threat-informed, risk-based approach to analysis, resilience, and operations. The company targets organizations seeking to enhance their security posture and operational resilience through expert analysis and consulting services. The website is built on WordPress using the Divi theme, indicating a standard CMS infrastructure with moderate digital maturity. The technical setup includes common libraries such as jQuery and FontAwesome, but lacks advanced security headers and comprehensive privacy policies. Security posture is basic with room for improvement in SSL configuration and security best practices. Overall, the site is accessible and professional but lacks depth in compliance and contact transparency, which impacts trust and credibility scores.

E

Electronic Frontier Foundation

eff.org

71

The Electronic Frontier Foundation (EFF) is a well-established nonprofit organization dedicated to defending digital privacy, free speech, and innovation. With over 35 years of advocacy, EFF operates primarily in the technology and digital rights sector, providing legal support, educational resources, and tools to empower users and activists. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding, targeting technology users and privacy-conscious individuals globally. Technically, the site is built on Drupal 7 with modern JavaScript libraries and follows good practices in mobile optimization and accessibility. While performance is moderate, the site is well-structured and SEO optimized. Security posture is strong with HTTPS enforced and secure forms, though the absence of explicit security headers and vulnerability disclosure policies suggests room for improvement. The WHOIS data is unavailable or malformed, limiting domain registration trust analysis. However, external trust signals such as a 4-star Charity Navigator rating, active social media presence, and transparent donation mechanisms support the legitimacy of the organization. Privacy compliance is good with a comprehensive privacy policy, though the lack of a cookie consent banner is a minor gap. Overall, EFF's website demonstrates a high level of professionalism, trustworthiness, and commitment to digital rights advocacy, with recommendations to enhance security headers, publish incident response policies, and improve cookie consent mechanisms to further strengthen user trust and compliance.

C

CyberWA, Inc.

cyberwa.com

65

CyberWA, Inc. is a boutique cybersecurity firm specializing in elite concierge cyber protective services tailored for high-value individuals and organizations. Established in 2014, the company positions itself as a personal guardian offering customized cyber protection solutions, leveraging decades of international cybersecurity experience. Their key services include personal cyber protection, organizational cyber protection, and a proprietary Cyber Audit Platform (CAP). The website reflects a professional and consistent brand image targeting discerning clients who require high confidentiality and integrity in cybersecurity services. Technically, the site is built on WordPress with Elementor and WooCommerce, hosted by IONOS SE, and integrates Google Analytics and MonsterInsights for tracking. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enforced and domain transfer protections, but DNSSEC is not enabled and security headers are absent. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms and GDPR indicators. Contact information is limited to a postal address and a contact form, with no direct emails or phone numbers listed. Overall, the domain registration details align with the business claims, supporting legitimacy. The site is safe with no adult or explicit content detected.

C

CyberPeace Institute

cyberpeaceinstitute.org

72

CyberPeace Institute is a specialized non-profit organization dedicated to protecting vulnerable entities in cyberspace by providing cybersecurity assistance, tracing cyberattacks and disinformation, and advocating for accountability and cyberpeace. The organization operates multiple projects and initiatives aimed at underserved organizations, humanitarian actors, and policymakers. Their market position is that of a trusted advocate and service provider in the cybersecurity non-profit sector. Technically, the website is built on a modern WordPress platform with popular plugins and frameworks, hosted behind Cloudflare for DNS and CDN services, and incorporates GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enabled and domain transfer protections, though improvements such as DNSSEC and security headers are recommended. The site lacks explicit privacy policy and terms of service pages, as well as direct contact information for security incidents, which are areas for enhancement. Overall, the website is professional, trustworthy, and well-branded, serving a general audience interested in cybersecurity and cyberpeace advocacy.

C

Cyber Collective

cybercollective.org

66

Cyber Collective is a nonprofit organization focused on empowering individuals and communities with digital safety education and resources. Their flagship program, Internet Street Smarts, along with workshops and a comprehensive resource library, positions them as a leader in grassroots digital safety advocacy. The website reflects a professional, accessible, and community-oriented approach, with strong calls to action for donations and partnerships. Technically, the site leverages modern web technologies including Webflow CMS, Stripe for payments, and privacy-respecting analytics. Security posture is strong with HTTPS and CAPTCHA protections, though some security headers could be enhanced. Privacy compliance is good with a comprehensive privacy policy, but lacks a visible cookie consent mechanism. WHOIS data is unavailable, likely due to privacy protection, which is typical for nonprofits. Overall, the site is trustworthy, well-designed, and serves its mission effectively.

C

Center for Internet Security

cisecurity.org

81

The Center for Internet Security (CIS) is a reputable nonprofit organization dedicated to improving cybersecurity for public and private entities by leveraging a global IT community. Their website reflects a professional and well-structured digital presence, offering resources, collaboration opportunities, and cybersecurity best practices. The organization targets IT professionals, businesses, and government agencies seeking to enhance their security posture. Technically, the website employs modern web technologies including Vue.js, jQuery, and Sitecore CMS, supported by analytics and marketing tools such as Matomo, Cookiebot, and Optimizely. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and integrates privacy-compliant analytics. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers should be verified and a security.txt file could enhance vulnerability disclosure. Overall, CIS presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include enhancing security header implementation, formalizing vulnerability disclosure, and continuous monitoring of third-party scripts to maintain security integrity.

C

Campaign Verify™

campaignverify.org

60

Campaign Verify™ is a nonprofit organization providing identity verification services to U.S. political campaigns, parties, and PACs. Their service aims to preserve trust in elections by issuing authorization tokens that prevent spoofing and disinformation, and facilitate compliance with wireless carrier messaging regulations such as A2P 10DLC. The organization targets political entities registered with federal, state, local, or tribal election authorities. The website is professionally designed, mobile-optimized, and uses modern web technologies including Webflow, Google Fonts, Google Tag Manager, and reCAPTCHA to ensure usability and security. The presence of demo videos and detailed FAQs enhances user understanding and engagement. However, the WHOIS data is malformed and lacks transparency, which slightly impacts trustworthiness.

B

BlackGirlsHack

blackgirlshack.org

71

BlackGirlsHack is a nonprofit organization dedicated to increasing diversity in cybersecurity by providing training, mentoring, and community support primarily for Black girls and women, though open to all. The organization offers a variety of services including career resources, educational outreach, networking events, and training programs. Their market position is strong within the diversity and cybersecurity training space, supported by partnerships with major tech companies and a growing community platform. Technically, the website is built on the WildApricot CMS platform, uses modern JavaScript libraries, and integrates Google reCAPTCHA for security on forms. The site is moderately optimized for performance and mobile use, with good content quality and navigation. Security posture is adequate with HTTPS enforced and CAPTCHA usage, but lacks some advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the organization.

B

BCVoices Inc.

bcvoices.org

46

BCVoices Inc. is a small non-profit organization dedicated to telling the stories of women's rights struggles and achievements from America's founding to the present day. Their key services include producing online docuseries, documentary shorts, and maintaining an oral history collection to educate and advocate for gender equity and women's autonomy. The organization targets a general audience interested in women's rights history and social justice. Technically, the website is built on WordPress using Elementor, with standard plugins for e-commerce and image optimization. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy with strong social media presence and award recognition.

A

Atlantic Council

atlanticcouncil.org

82

The Atlantic Council is a well-established nonpartisan think tank focused on shaping global policy, particularly in transatlantic relations and global security. The organization provides in-depth research, expert analysis, and hosts events to influence public policy and international cooperation. Their website reflects a mature digital presence with comprehensive content and professional branding, targeting policymakers, academics, and global affairs stakeholders. Technically, the site is built on WordPress and leverages modern marketing and analytics tools such as Google Tag Manager, Marketo, HubSpot, and New Relic for performance monitoring. The site is mobile-optimized, SEO-friendly, and employs HTTPS with good security headers, indicating a solid technical infrastructure. From a security perspective, the website follows best practices including HTTPS enforcement and content security policies. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, which could be improved to enhance transparency and trust. Overall, the Atlantic Council website demonstrates a high level of professionalism, security, and compliance suitable for a large non-profit organization. The absence of WHOIS data is likely due to privacy protection, which is justified for this entity. Strategic recommendations include publishing detailed security and incident response policies and implementing a vulnerability disclosure program to further strengthen their security posture.

A

Arkone - Agence mobile et web

arkone.fr

44

Arkone is a French-based agency specializing in bespoke web and mobile application development, targeting businesses and startups primarily in France. Founded in 2021, the company positions itself as a 100% French, custom solution provider with a focus on quality and client satisfaction. Their key services include mobile app development, web development, event-related digital services, and startup accompaniment. The website reflects a professional and consistent brand image, supported by active social media channels and structured data for SEO. Technically, the website is built on WordPress using the Divi theme, enhanced with Yoast SEO and Google Analytics for performance and marketing insights. Hosting is provided by OVH, a reputable French hosting provider, with DNS managed via Cloudflare. The site is mobile optimized and performs moderately well, though accessibility features are basic. The presence of a cookie consent mechanism indicates some level of privacy compliance. From a security perspective, the site enforces HTTPS and uses Cloudflare DNS, but lacks several recommended security headers and does not publish a security policy or vulnerability disclosure. No critical vulnerabilities or WAF blocking were detected, but improvements in security headers and incident response transparency are advised. Overall, Arkone's website demonstrates a solid business and technical foundation with room for enhancement in privacy and security compliance. The risk level is moderate with no immediate critical issues, making it a trustworthy digital presence for a small technology agency.

A

APEF

apef.ch

40

APEF is a well-established non-profit association founded in 1983 that supports the parents of students at Institut Florimont in Switzerland. The organization focuses on volunteer coordination, organizing school and charitable events, and providing resources to families. The website is professionally designed using WordPress and WooCommerce, with modern plugins such as Yoast SEO and Breakdance. It features multilingual support (French and English) and integrates social media channels for community engagement. Security measures include HTTPS, Google reCAPTCHA on forms, and standard security headers, although there is room for improvement in cookie consent and public security policies. Overall, the website reflects a trustworthy and credible organization with a clear mission and active community involvement.

R

REPUBLIC Marketing & Media Solutions

republic.de

59

REPUBLIC Marketing & Media Solutions is a German media marketing company specializing in content solutions, print and digital media advertising, and thematic marketing environments. The company represents major German newspapers and magazines such as Süddeutsche Zeitung and Frankfurter Allgemeine Zeitung, targeting advertisers and marketers seeking quality media placements. The website is built on TYPO3 CMS with modern frontend technologies, providing a professional and mobile-optimized user experience. Privacy compliance is strong with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Security posture is good with HTTPS and form protections, though some security headers and policies could be improved. Overall, the website is trustworthy and well-positioned in the German media marketing sector.

F

F.A.Z. Konferenzen

faz-konferenzen.de

52

F.A.Z. Konferenzen is a professional conference organizer associated with the Frankfurter Allgemeine Zeitung brand, focusing on providing exclusive platforms for decision makers in business, politics, and society. The website presents a professional image with good content quality and targets a specialized audience seeking high-level exchange and insights. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. Overall, the site is trustworthy and well-positioned in its niche but would benefit from enhanced privacy and security disclosures.

A

Advertising Week

advertisingweek.com

68

Advertising Week is a well-established global media and events company specializing in marketing, advertising, and technology sectors. It operates multiple international events and content hubs, targeting marketing professionals and brand marketers worldwide. The website demonstrates a mature digital infrastructure built on WordPress, enhanced with modern marketing and analytics tools such as HubSpot, Facebook Pixel, Google Analytics, and Reddit Pixel. The site is hosted with Cloudflare DNS services, ensuring reliable performance and security. Security posture is solid with HTTPS enforced and domain protections in place, though there is room for improvement in security headers and public security policies. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms implemented. Overall, the website is professional, trustworthy, and aligned with industry standards.

V

Visa S.p.A.

visarent.it

67

Visa Rent, a division of Visa S.p.A., is a well-established provider of rental power generation equipment and lighting towers in Italy. With a fleet exceeding 500 machines and four operational sites, the company offers comprehensive energy solutions tailored for temporary and emergency needs. Their services include advanced generator sets with parallel synchronization capabilities, accessories, and 24/7 technical support. The website demonstrates a mature digital presence built on Drupal 10, with good SEO, accessibility, and privacy compliance. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, Visa Rent presents a trustworthy and professional business with strong market positioning in the energy rental sector.

L

Leucine Rich Bio Pvt Ltd.

rychbiome.com

43

Rychbiome.com represents Leucine Rich Bio Pvt Ltd., a small healthcare company specializing in probiotic and synbiotic products tailored for the Indian population based on microbiome research. The company positions itself as South Asia's first microbiome company with a research-driven approach and offers products through e-commerce platforms. The website is professionally designed, mobile-optimized, and includes customer testimonials and certifications that enhance trust. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and integrates Google reCAPTCHA and Google Maps for user interaction and security. However, there is room for improvement in security posture, particularly in enabling DNSSEC and security headers, and in privacy compliance by adding privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency.

L

Leucine Rich Bio Pvt Ltd

bugspeaks.com

47

BugSpeaks, operated by Leucine Rich Bio Pvt Ltd, is a pioneering South Asian healthcare company specializing in clinically validated microbiome testing kits for gut, skin, oral, and vaginal health. The company leverages scientific research and expert consultation to provide personalized health insights and probiotic recommendations. Their market position is strong in South Asia with expanding international presence. Technically, the website employs modern frameworks and analytics tools, offering a good user experience with mobile optimization and interactive features like chat widgets and sample report downloads. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and published incident response policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy, with room for improvement in security and privacy transparency.

V

Ville de Morges

morgesavenir.ch

48

The website 'Morges Avenir' serves as an official information portal for the city of Morges, Switzerland, focusing on public works, infrastructure projects, and urban environment updates. It targets residents and users of the city, providing timely updates on construction, traffic disruptions, and public announcements. The site is positioned as a government service platform, offering transparency and communication about municipal projects. Technically, the website employs a modern tech stack including HTML5, CSS, JavaScript with jQuery and Bootstrap frameworks, and mapping technologies such as OpenLayers and proj4. It is mobile responsive and provides a moderate performance experience. The site integrates Google Analytics and Google Tag Manager for user tracking but lacks visible privacy and cookie policies, which is a compliance gap. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks visible security headers and formal security or incident response policies. The absence of privacy and cookie policies reduces its privacy compliance score. Overall, the security posture is moderate but could be improved with better header implementation and transparency. The overall risk assessment is low, given the official nature and trustworthy domain registration. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and publishing vulnerability disclosure and incident response information to enhance trust and compliance.

P

Patinoire des Eaux Minérales

patinoiremorges.ch

48

Patinoire des Eaux-Minérales is a local public ice rink facility in Morges, Switzerland, offering recreational ice skating, events, and group activities. The website serves as an information portal for schedules, pricing, regulations, and contact details, targeting local residents and visitors interested in ice sports. The business operates as a small-scale public service with a focus on community engagement and sports promotion. Technically, the site is built on WordPress using the Divi theme, with common plugins for GDPR compliance and analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is moderate with HTTPS enabled and some security plugins in use, but lacks explicit security headers and published security policies. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the website is trustworthy and safe for general audiences, with room for improvement in security and compliance documentation.

M

Media One Group

mesradios.ch

53

MesRadios.ch is a digital platform operated by Media One Group, the leading private radio group in French-speaking Switzerland. The platform provides centralized account management for multiple radio brands under Media One Group, targeting regional listeners in the Lake Geneva area. The website offers social login options and integrates Google reCAPTCHA for secure authentication. The business is well positioned in the regional media market with a focus on radio broadcasting and digital content delivery.

Media One Group is a prominent private media company operating in the French-speaking region of Switzerland, specializing in radio and television broadcasting. The group manages multiple radio stations and TV channels, serving a diverse audience with music, entertainment, and regional news. Their business model includes advertising sales, event sponsorship, and production services, positioning them as a leading media entity in the Lake Geneva area. Technically, the website is built on WordPress with modern plugins and tracking tools, offering a good user experience and mobile optimization. Security posture is adequate with HTTPS and CAPTCHA usage, but lacks advanced security headers and explicit privacy policies. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

M

Maxi-Rires | Festival d'humour international

maxi-rires.ch

51

Maxi-Rires is an international humor festival website primarily targeting a general audience interested in comedy events. The site is built on WordPress using the Divi theme and includes WooCommerce, suggesting some e-commerce capabilities, likely for ticket sales or merchandise. The technical infrastructure is standard for small to medium event organizations, with moderate performance and good mobile optimization. However, the site lacks critical privacy and cookie policies, and no contact information or security policies are evident, which impacts its trustworthiness and compliance posture. The Google Analytics plugin is present but not configured, indicating limited user tracking at this time. Security headers are absent, and no incident response or vulnerability disclosure information is provided, which suggests a low security maturity level. Overall, the website is functional and professionally designed but requires significant improvements in privacy, security, and compliance to enhance trust and reduce risk.

B

BAM - La Voie des Sens

lavoiedessens.ch

48

BAM - La Voie des Sens is a niche tourism operator in Switzerland offering unique gourmet experiences aboard the historic Bière Apples Morges (BAM) train. The company focuses on culinary outings such as gastronomic meals, fondue, beer and burgers, brunch, and wine pairings, targeting tourists and locals interested in regional terroir and heritage. The website is professionally designed using WordPress and the Divi theme, with good SEO and mobile optimization. However, it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing security headers. Contact options are limited to a newsletter subscription form, with no direct emails or phone numbers visible. Social media presence on Facebook and Instagram supports brand trust. Overall, the site is credible and well-positioned in its market niche but should improve privacy compliance and security headers to enhance trust and regulatory adherence.

N

Nanoxi Sàrl

nanoxi.com

59

Nanoxi Sàrl is a Swiss web agency based in Sion, Valais, specializing in web creation, ecommerce solutions, SEO/SEA, mobile applications, and Microsoft-based IT consulting. The company targets SMEs, associations, and local entities seeking digital transformation with a focus on quality and proximity. Their market position is strengthened by partnerships with Microsoft and Google certifications, offering a comprehensive digital service portfolio. Technically, the website uses modern web standards, Umbraco CMS, and integrates analytics tools such as Google Analytics and Mouseflow, indicating a mature digital infrastructure. Security posture is good with HTTPS and no visible vulnerabilities, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the website is professional, well-branded, and trustworthy, though privacy compliance needs enhancement.

E

ello Mail :: Welcome to ello Mail

ellomail.ch

55

ello Mail is a Swiss-based webmail service platform providing users with email access and management capabilities through a web interface. The website primarily serves as a login portal for users to access their email accounts. The platform uses the Roundcube webmail system with custom skins and scripts to deliver its service. The target audience is general users requiring secure and reliable email services. The business model is focused on providing webmail hosting and management, with no explicit information on market positioning or company size. Technically, the website employs standard web technologies including jQuery, Bootstrap, and Google Fonts, delivering a basic but functional user experience. Mobile optimization and accessibility are present but minimal, and SEO practices are basic. Security posture shows use of HTTPS and secure login forms with CSRF tokens; however, no advanced security headers or policies are detected, and privacy and cookie policies are absent, which may impact user trust and compliance. No contact information or social media presence is visible on the login page, limiting transparency. Overall, the website is functional but lacks comprehensive privacy, security, and business information disclosures.

I

ISP Solutions SA

isp-solutions.net

51

ISP Solutions SA is a Swiss-based telecommunications and IT infrastructure service provider specializing in colocation rack services, dedicated physical servers, network transit, leased lines, VPNs, firewall management, and consulting. The company targets businesses and IT professionals seeking reliable hosting and network solutions primarily in Switzerland. Their website is professionally designed, mobile-optimized, and provides comprehensive service descriptions and contact information. The presence of the Certified Swiss Hosting badge adds to their trustworthiness. Technically, the website uses modern frontend technologies including Bootstrap, jQuery, Font Awesome, and integrates Google Analytics and Tag Manager for user tracking. Security posture is moderate with HTTPS implied but lacks explicit security headers and formal privacy or cookie policies, which are compliance gaps. WHOIS data is incomplete and inconsistent, which raises some legitimacy concerns, though the website content and certifications suggest a legitimate business. Overall, the website scores well in business credibility and technical implementation but needs improvements in privacy compliance and WHOIS transparency.

H

HexaGroup SA

hexagroup.ch

57

HexaGroup SA is a Swiss-based consortium of five expert companies specializing in computer-aided design (CAD), product data management (PDM), and product lifecycle management (PLM) solutions, primarily serving manufacturing, construction, and engineering sectors in Switzerland and Liechtenstein. As an Autodesk Gold Partner, HexaGroup offers consulting, training, technical support, and software installation services, leveraging a strong partner network to cover multiple Swiss regions. The website is professionally designed, content-rich, and provides clear navigation, targeting business professionals and companies in relevant industries. Technically, the site uses modern JavaScript libraries and analytics tools but lacks some advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance and security posture. No direct contact emails or phone numbers are published, with contact primarily via forms. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the site presents a trustworthy and professional image with moderate technical maturity and security readiness.