Security Directory

A

Agicap

agicap.com

69

Agicap is a France-based SaaS company specializing in cash flow management software tailored for SMBs and mid-market companies across Europe. The platform offers comprehensive treasury management, accounts payable and receivable automation, and banking & ERP connectivity, positioning itself as a market leader with over 8000 clients and a 98% satisfaction rating. The website reflects a mature digital presence with modern technologies such as React, Gatsby, and integrations with major analytics and marketing platforms. Security posture is strong, with GDPR and ISO/IEC 27701 compliance, encrypted data storage on Google Cloud, and TLS for data in transit. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site is professional, well-structured, and trustworthy, with clear business and contact information.

C

Commune de Chalais

chalais.ch

50

The website www.chalais.ch is the official online presence of the Commune de Chalais, a small municipal government entity in Valais, Switzerland. It serves as an information portal for residents and visitors, providing access to local news, administrative services, community events, and partner resources. The site is primarily in French and targets local citizens and tourists interested in the region. The business model is public service with no commercial intent, focusing on transparency and community engagement. Technically, the website uses legacy JavaScript libraries such as jQuery 1.6.4 and Nivo Slider for UI elements, alongside Google Analytics and Google Tag Manager for visitor tracking. The site is served over HTTPS with a valid SSL configuration, but lacks modern security headers and uses outdated libraries that pose potential security risks. The site is moderately optimized for mobile devices and SEO, with a clear navigation structure and consistent branding. From a security perspective, the site benefits from HTTPS and cookie consent mechanisms, indicating some privacy awareness. However, it lacks explicit security policies, incident response information, and modern security headers. The use of outdated JavaScript libraries introduces vulnerabilities that should be addressed. No critical security issues or blocking mechanisms were detected, and the domain registration aligns well with the website's claims, supporting legitimacy. Overall, the website is a trustworthy and functional municipal portal with room for technical and security improvements. Strategic recommendations include updating legacy libraries, implementing security headers, publishing security and incident response policies, and enhancing privacy compliance to better protect users and improve trust.

F

Fundaziun svizra per uffants cun paralisa cerebrala

cerebral.ch

51

Fundaziun Cerebral is a well-established Swiss non-profit foundation dedicated to supporting children and families affected by cerebral palsy. With over 60 years of history and more than 9700 beneficiaries, it provides essential services including specialized mobility support, therapeutic interventions, and recreational opportunities. The foundation operates primarily through donations and public support, targeting individuals with cerebral palsy and their families across Switzerland. The website is multilingual, with the analyzed page in Romansh, and offers clear donation and contact information, reflecting a transparent and trustworthy organization. Technically, the website is built on TYPO3 CMS with modern web technologies such as Bootstrap and Google Tag Manager for analytics. The site is mobile-optimized and presents good design and navigation clarity. Security-wise, the site uses HTTPS and obfuscates email addresses to prevent spam, but lacks explicit security headers and published security policies. Privacy compliance is addressed with a cookie consent banner and a comprehensive privacy policy linked in German, indicating GDPR awareness. Overall, the website demonstrates a solid security posture with no visible vulnerabilities or blocking mechanisms. The domain registration details align well with the organization's claims, supporting legitimacy. The site scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a reliable and professional online presence for the foundation.

B

BOAS Gestion SA

boas-swiss-hotels.ch

53

BOAS Gestion SA operates the Boas Swiss Hotels group, a well-established Swiss hospitality company founded in 1989. The company offers a range of services including hotel accommodations, restaurants, leisure activities, and conference facilities, targeting tourists, business travelers, and event organizers. The website reflects a professional presence with multilingual support and integrated booking capabilities, positioning the company as a medium-sized player in the Swiss hospitality market. Technically, the website is built on TYPO3 CMS and incorporates modern tracking and consent management tools such as Cookiebot and Google Tag Manager, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs security headers, and uses reCAPTCHA to mitigate bot activity. Cookie consent is managed in compliance with GDPR, and advertising practices are transparent with user consent. However, the absence of a dedicated security policy, incident response contacts, and terms of service pages suggests areas for improvement in governance and transparency. Overall, the website is trustworthy, professionally designed, and compliant with privacy regulations, supporting the company's credibility in the hospitality sector.

T

Tooplate

tooplate.com

51

Tooplate is a small technology-focused website offering over 60 free, responsive HTML website templates primarily targeting web developers, small businesses, and individuals seeking easy-to-use website layouts. The business model centers on free distribution of templates built on Bootstrap frameworks, with no registration required. The website is professionally designed with good content quality and clear navigation, optimized for mobile devices. Technically, it uses modern web technologies including Bootstrap, Google Fonts, Google Analytics, and advertising networks such as Google AdSense and DoubleClick. The site implements GDPR consent mechanisms and a privacy policy, indicating awareness of privacy compliance. Security posture is moderate with HTTPS enforced but lacks visible security headers and explicit incident response contacts. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for this business type. Overall, the site is safe, reliable, and suitable for general audiences seeking free web templates.

W

WeTransfer

we.tl

72

WeTransfer is a well-established technology company founded in 2007, specializing in providing a platform for fast and easy transfer of large files. The website presents a professional and modern design, targeting general users and professionals who need to share large files efficiently. The business model is primarily freemium, offering free file transfers with options for paid upgrades. The company holds a strong market position as a leading file transfer service globally. Technically, the website leverages modern frameworks such as Next.js and React, integrates payment processing via Stripe, and uses Google Analytics and Tag Manager for analytics and marketing. Hosting is provided through Amazon AWS infrastructure, ensuring good performance and scalability. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and visible security headers, which are recommended for enhanced security. No explicit privacy, cookie, or terms of service policies were detected in the provided content, indicating room for improvement in privacy compliance. No vulnerability disclosure or incident response information is publicly available. Overall, the website is trustworthy and professional with a good security posture but could enhance privacy compliance and security transparency. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and cookie policies, implementing security headers, and providing clear incident response contacts.

D

Domains By Proxy, LLC

judge.me

73

Judge.me is a well-established SaaS provider specializing in product and store review solutions for e-commerce merchants. The company offers tools to collect, showcase, and share reviews via high-converting widgets and seamless integrations, aiming to build trust and boost sales. The website is professionally designed using the Framer platform and includes modern web technologies such as Google Tag Manager for analytics. The domain is long-standing, registered since 2008, and uses privacy protection services typical for businesses of this nature. Security posture is adequate with HTTPS enabled and domain locks in place, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of explicit privacy and cookie policies on the analyzed page. Overall, the website is trustworthy and functional but would benefit from enhanced transparency and security documentation.

Rivella.ch is the official website of Rivella AG, a Swiss beverage company known for its unique soft drinks made from milk serum. The website primarily serves as a corporate and product information portal targeting general consumers in Switzerland and German-speaking regions. The business model focuses on manufacturing and retail distribution of beverages, with a strong local market presence. The website uses modern web technologies such as Gatsby for static site generation and integrates Google Tag Manager for analytics purposes. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The security posture is moderate but could be improved by implementing standard security headers and enhancing privacy compliance. Overall, the website is functional but basic in content quality and user experience, with room for improvement in transparency and security practices.

Rhône FM is a regional radio station based in the Valais region of Switzerland, providing local news and information primarily in French. The website serves as a digital presence for the station, targeting the general public in the region with news broadcasting services. The business model focuses on media broadcasting and information dissemination within a localized market. Technically, the website is built using modern web technologies including Nuxt.js and Tailwind CSS, with integration of Google Tag Manager for analytics and a consent management platform for cookie compliance. The site demonstrates good mobile optimization and a professional design, although some accessibility features are basic. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy and terms of service documentation. WHOIS data confirms the domain's legitimacy and consistency with the business's regional focus. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices.

M

Magic Pass

magicpass.ch

59

Magic Pass operates a subscription service providing free and unrestricted access to partner leisure and sports facilities primarily in Switzerland. The website presents a professional and consistent brand image with clear business focus on hospitality and leisure sectors. The technical infrastructure includes modern web technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance, supported by third-party widgets from Elfsight. Security posture is strong with HTTPS enforced and multiple security headers present, alongside a comprehensive cookie consent mechanism that aligns with GDPR requirements. However, the site lacks explicit contact information, terms of service, and a dedicated security policy page, which are areas for improvement. Overall, the website is trustworthy, well-structured, and compliant with privacy regulations, supporting a medium-sized business model in the hospitality industry.

S

STnet

stnet.ch

63

STnet AG is a Swiss company specializing in transport and mobility services, providing digital solutions and information primarily for public transport users in Switzerland. The company maintains a professional and well-structured website built on WordPress, incorporating modern web technologies and monitoring tools such as New Relic and Google Tag Manager. The website is accessible, mobile-optimized, and offers clear contact information, including email, phone, and contact forms, supporting user engagement and service inquiries. Security posture is solid with HTTPS enforced and standard security headers present, although explicit security policies and incident response details are absent. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a dedicated privacy policy and terms of service pages. Overall, the website reflects a trustworthy and professional digital presence aligned with the company's business focus.

S

Schweiz Tourismus

swisswinetour.com

71

The website www.myswitzerland.com/fr-ch/decouvrir/ete-automne/oenotourisme/ serves as an official tourism portal for Switzerland, focusing on wine tourism experiences. It targets luxury travelers and gourmets, offering rich content about wine-related activities, accommodations, and regional information. The site is multilingual and professionally designed, reflecting a strong market position as a national tourism authority platform. Technically, it employs modern web technologies including Google Tag Manager, Algolia search, and structured data for SEO, ensuring good performance and accessibility. Security posture is solid with HTTPS and controlled script loading, though it lacks explicit security headers and published privacy or cookie policies. The absence of WHOIS data is a concern for domain legitimacy but does not detract from the professional presentation and trustworthiness of the site content. Overall, the site is a reliable resource for travelers interested in Swiss wine tourism, with room for improvement in privacy compliance and security transparency.

The website www.myvaud.ch serves as the official tourism portal for the Canton of Vaud in Switzerland, providing comprehensive information on destinations, activities, practical advice, business events, and inspirational content for visitors and locals alike. It is positioned as a key regional tourism resource with a professional and consistent brand presence. The site leverages modern web technologies including Google Tag Manager, Matomo Analytics, and Cookiebot for analytics and privacy compliance. The technical infrastructure is solid, with HTTPS enforced and security headers implemented, contributing to a good security posture. However, the absence of an explicit privacy policy and terms of service pages, as well as the lack of visible contact information in the provided HTML snippet, represent areas for improvement in privacy compliance and user trust. Overall, the site is well-designed, mobile-optimized, and provides a safe and trustworthy user experience.

S

SmartBear

smartbear.co

66

SmartBear is a well-established enterprise software company specializing in tools for software testing, API lifecycle management, and observability. The company offers a comprehensive suite of products targeting developers, testers, and software teams to improve software quality and performance. Their market position is strong, supported by a mature domain and consistent branding. Technically, the website employs modern JavaScript libraries, analytics, and monitoring tools, hosted on AWS infrastructure with Kentico CMS. The site is well-optimized for SEO, mobile, and accessibility. Security posture is good with HTTPS and domain protections, though DNSSEC is not enabled and security policy disclosures are limited. Overall, the site reflects a mature digital presence with professional content and strong business credibility.

Q

QMetry Inc.

qmetry.com

58

QMetry Inc. is a technology company specializing in AI-enabled test management and automated testing tools designed for agile enterprises. Their product suite includes scalable test management solutions integrated with popular DevOps tools and AI capabilities to accelerate test case authoring and improve testing efficiency. The company is positioned as a leader in the software testing domain with a strong focus on innovation and customer collaboration. The website demonstrates a mature digital infrastructure leveraging modern frameworks such as Angular and integrates advanced marketing and analytics tools, reflecting a high level of digital maturity. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response policies could be enhanced. Overall, the site is professional, well-branded, and trustworthy, supported by customer testimonials and third-party reviews. However, the absence of WHOIS data raises some concerns about domain registration transparency, warranting further verification.

S

SmartBear Software

reflect.run

61

Reflect.run is a professional SaaS platform operated by SmartBear Software, specializing in AI-powered automated end-to-end testing for web and mobile applications. The platform emphasizes no-code test creation, maintenance, and execution with generative AI capabilities, targeting software testers, QA teams, and developers. The website presents a strong market position as an innovative alternative to traditional code-based testing frameworks, offering integrations with popular CI/CD and test management tools. Technically, the site is built using the Hugo static site generator and leverages modern JavaScript libraries and multiple marketing and analytics tools, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and follows several best practices but lacks visible security headers and explicit security or incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Overall, the domain appears legitimate and professionally managed, though WHOIS data is privacy-protected.

AACSB is a globally recognized organization focused on accrediting business schools and fostering a network of business education leaders. The website demonstrates a mature and professional presence with comprehensive services including accreditation, membership, learning opportunities, events, and insightful research. The organization targets educators, businesses, and learners worldwide, positioning itself as a leader in business education accreditation and development. Technically, the website employs modern analytics and marketing technologies such as Google Tag Manager, Microsoft Clarity, Facebook Pixel, and OneTrust for cookie consent, indicating a digitally mature infrastructure. The site is mobile-optimized, accessible, and well-structured, providing a positive user experience. From a security perspective, the site uses HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response information. No critical vulnerabilities were detected in the content or scripts. The absence of WHOIS data is notable but likely due to .edu domain registration policies rather than malicious intent. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving transparency around vulnerability disclosures.

U

University of Fribourg

unifr.ch

56

The University of Fribourg is a well-established public educational institution founded in 1889, offering a broad range of academic programs including Bachelor, Master, and Doctorate degrees. It serves a diverse audience including students, researchers, and employees, with a strong regional and international presence. The website reflects the university's bilingual and multicultural identity, providing comprehensive information about studies, research, campus life, and support services. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and various analytics tools, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and explicit incident response information. Privacy compliance is basic, lacking cookie consent mechanisms and detailed GDPR indicators. Overall, the site is professional, trustworthy, and well-maintained, supporting the university's mission and reputation.

L

Lessebo Paper

lessebopaper.com

62

Lessebo Paper is a premium paper manufacturer based in Sweden, emphasizing environmentally friendly and sustainable production methods. The company has a long heritage dating back to 1693, positioning itself as a leader in climate-friendly paper products. Their website reflects a professional and consistent brand image, targeting businesses and consumers interested in high-quality, sustainable paper solutions. The business model focuses on manufacturing and selling premium paper with a strong environmental ethos. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies such as Google Tag Manager and reCAPTCHA for analytics and security. Hosting is provided by Loopia, a known provider. The site performs moderately well with good mobile optimization and basic accessibility features. SEO is supported by the Yoast SEO plugin, enhancing search visibility. From a security perspective, the site uses HTTPS with a good SSL configuration and employs reCAPTCHA to mitigate automated abuse. However, it lacks several security headers and does not publish a security policy or incident response contacts. No vulnerability disclosure or security.txt file is present, which are areas for improvement. Privacy compliance is limited, with no visible privacy or cookie policies, which could pose regulatory risks. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust. Strategic recommendations include implementing privacy and cookie policies, adding security headers, enabling DNSSEC, and publishing vulnerability disclosure information.

T

Taberg Media Group

tabergmediagroup.se

44

Taberg Media Group is a well-established Swedish media and communication company founded in 2005, offering a broad range of services including print production, expo solutions, profile products, creative marketing, and digital solutions. The company operates across multiple Swedish cities, positioning itself as a full-service communication partner for businesses seeking integrated marketing and print services. Their website reflects a mature digital presence with professional design, clear service segmentation, and active marketing integrations. Technically, the site is built on WordPress with the Divi theme and leverages modern JavaScript libraries and marketing tools such as HubSpot, Google Tag Manager, and Facebook Pixel. Security posture is generally good with HTTPS enabled and no critical vulnerabilities detected, though some security headers like Content-Security-Policy are missing, and DNSSEC is not enabled. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism in place, aligned with GDPR requirements. Contact information is primarily via web forms, with no explicit emails or phone numbers visible on the homepage. Overall, the site is trustworthy, professional, and well-suited for its business purpose.

B

Bauer Media Outdoor

clearchannel.se

68

Bauer Media Outdoor is a leading outdoor advertising company in Sweden, operating under the Bauer Media Group umbrella. The company offers extensive outdoor advertising solutions including digital and classic billboards, programmatic advertising, and campaign planning services. Their market position is strong, with a wide geographic reach and a focus on impactful brand communication. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, and OneTrust for privacy compliance, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in publishing explicit security policies and vulnerability disclosures. Overall, the website is professional, user-friendly, and compliant with GDPR, but the absence of WHOIS data for the domain raises some concerns about domain registration legitimacy that should be addressed.

C

Citypaketet

citypaketet.se

53

Citypaketet is a collaborative advertising platform formed by three of Sweden's largest morning newspapers: Dagens Nyheter, Göteborgs-Posten, and Sydsvenskan. Established in 1994, it targets urban audiences in Sweden's three largest cities by offering combined media advertising solutions across print and digital channels. The website presents a professional image with clear business information and a focus on delivering impactful advertising campaigns. Technically, the site is built on WordPress using the Avada theme and several plugins, including Yoast SEO and Download Manager, indicating a modern and maintainable infrastructure. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks advanced security headers and formal privacy or cookie policies. Overall, the site is trustworthy and well-positioned in the media sector, though improvements in privacy compliance and security best practices are recommended.

W

Wollenhaupt GmbH

wollenhaupt.de

64

Wollenhaupt GmbH is a well-established regional company based in Nordhessen, Germany, specializing in print media and web services. Celebrating 100 years in business, the company offers a comprehensive range of services including print production, web design, and an e-commerce shop focused on labels and container cards. Their market position is that of a trusted medium-sized service provider with a strong local presence and a commitment to sustainable production practices. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to business clients in the region. Technically, the website is built on a modern WordPress platform using the Enfold theme and WooCommerce for e-commerce functionality. It integrates several third-party tools such as Google Analytics, Google Tag Manager, and Rapidmail for newsletter management. The site is mobile optimized and demonstrates good SEO practices including structured data and meta tags. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. While explicit security headers are not visible in the provided data, the overall posture is good with no exposed sensitive data or obvious vulnerabilities. The use of standard WordPress plugins and regular updates is recommended to maintain security. Privacy compliance is well addressed with comprehensive policies and user consent options. Overall, the website presents a low risk profile with strong business credibility and compliance. Strategic recommendations include enhancing security headers, conducting regular security audits especially for WooCommerce and contact forms, and continuous monitoring of third-party scripts for privacy risks.

H

Hermann Klein GmbH & Co. KG

klein-fuldatal.audi

68

Hermann Klein GmbH & Co. KG operates as an authorized Audi dealership located in Fuldatal, Germany, offering new and used Audi vehicles, customer service, and after-sales support. The website is well integrated into Audi's digital ecosystem, leveraging Adobe Experience Manager headless CMS and modern JavaScript frameworks to deliver a responsive and user-friendly experience. The site includes comprehensive cookie consent management aligned with GDPR requirements, reflecting a strong commitment to privacy compliance. Security posture is robust with HTTPS enforcement and privacy management tools, although explicit security policy and incident response contacts are not found. Overall, the domain appears legitimate and professionally maintained, though WHOIS data is not publicly available, likely due to privacy protection.

Š

Škoda Auto Deutschland GmbH

skoda-auto.de

69

Škoda Auto Deutschland GmbH operates the official German website for the Škoda automotive brand, providing comprehensive information about their vehicle models, financing options, after-sales services, and electric mobility solutions. The company is a large, well-established player in the transportation sector in Germany, with a strong market presence and a broad portfolio including electric vehicles. The website targets both individual consumers and business customers, offering tools such as vehicle configurators, dealer locators, and financing calculators. Technically, the website employs a modern technology stack including React, Bootstrap, and jQuery, hosted on a reliable infrastructure likely powered by Microsoft Azure. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with extensive use of structured data and meta tags. Performance is moderate, with good loading times and responsive design. From a security perspective, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data. However, it lacks a public vulnerability disclosure policy and explicit incident response contact details. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Contact information is transparent and professional, enhancing business credibility. Overall, the website presents a low-risk profile with strong trust indicators and professional digital maturity. Strategic improvements could focus on enhancing security transparency and incident response readiness to further strengthen the security posture.

S

SEAT Deutschland GmbH

seat.de

65

SEAT Deutschland GmbH operates a comprehensive automotive website targeting the German market, offering new and used car sales, leasing options, test drives, and after-sales services. The company is a subsidiary of the Volkswagen Group and maintains a strong market presence in Germany with a broad portfolio of vehicles and services. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content tailored to consumers interested in SEAT vehicles. Technically, the site leverages Adobe Experience Manager as its CMS, integrates modern analytics and tag management tools, and implements cookie consent mechanisms to comply with privacy regulations. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy policies and terms of service are present and comprehensive, indicating good compliance with GDPR. Overall, the website reflects a mature digital infrastructure supporting a large enterprise automotive business.

C

CUPRA

cupra.de

67

CUPRAofficial.de is the official German website for CUPRA, a premium automotive brand specializing in sporty and electric vehicles. The website offers comprehensive information about CUPRA's vehicle lineup, electric mobility solutions, financing, leasing, and after-sales services. It is clearly positioned as a premium brand under the Volkswagen Group umbrella, targeting automotive customers in Germany interested in modern, sporty, and electric vehicles. The site features a professional design, clear navigation, and is optimized for mobile devices. Technically, it is built on Adobe Experience Manager and hosted on Volkswagen Group's cloud infrastructure, integrating advanced marketing and analytics tools such as Google Tag Manager and Adobe Analytics. Security posture is strong with HTTPS enforced, security headers present, and cookie consent managed via OneTrust. However, explicit security policies and incident response contacts are not publicly available. Overall, the website demonstrates a mature digital presence with good privacy compliance and business credibility.

V

Vercorin

vercorin.ch

64

Vercorin.ch is a professionally developed tourism website dedicated to promoting the Vercorin region in Switzerland. It offers comprehensive information on accommodation, activities, events, and practical visitor details, targeting tourists and families interested in outdoor and cultural experiences. The site integrates booking and reservation services through partner domains and maintains a consistent brand presence with official regional partners and media. Technically, the site uses a modern JavaScript stack with Google Tag Manager, reCAPTCHA, and a custom CMS platform (MyCity Tourism Information System). The website is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and reCAPTCHA, though explicit security headers and privacy policies are missing, representing compliance gaps. No direct contact emails or phone numbers are exposed, relying on a contact form. Overall, the site is trustworthy and well-positioned as a regional tourism portal but should improve privacy and security disclosures.

B

BOAS Gestion SA

bainsdesaillon.ch

50

Les Bains de Saillon, operated by BOAS Gestion SA, is a well-established hospitality and wellness business located in Valais, Switzerland. The company offers a 4-star hotel with 145 rooms, a thermal bath center, multiple themed restaurants, spa services, and event hosting facilities. The website reflects a professional and comprehensive digital presence with clear navigation, multilingual support, and integrated booking systems. The business targets tourists, families, and wellness seekers, positioning itself as a regional leader in hospitality and wellness services. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and policies could be improved. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

B

Bad Schinznach AG

bad-schinznach.ch

54

Bad Schinznach AG is a well-established Swiss company specializing in wellness, hospitality, and healthcare services. The company operates thermal baths, a Kurhotel, a private rehabilitation clinic, and offers complementary services such as gastronomy and golf. Their market position is strong regionally, supported by a comprehensive service portfolio targeting tourists, wellness seekers, and patients. The website reflects a mature digital infrastructure using modern technologies like Next.js and React, with good performance and mobile optimization. Privacy and cookie compliance are well implemented, with clear policies and consent mechanisms. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities. Overall, the company presents a trustworthy and professional online presence.

V

VAUD

vaudplus-produits.ch

54

The website www.vaud.ch/terroir is an official government platform representing the Canton of Vaud in Switzerland. It focuses on promoting the region's rich terroir, local products, and quality certifications such as the VAUD CERTIFIÉ D’ICI label. The site targets residents, local producers, and visitors interested in regional gastronomy and culture. It serves as a comprehensive informational and promotional tool, reinforcing the Canton’s market position as a reputable and authentic source of local products and tourism information. Technically, the site is built on WordPress with modern integrations including Google Tag Manager, Matomo Analytics, and Facebook Pixel, ensuring robust tracking and marketing capabilities. The design is professional, mobile-optimized, and accessible with clear navigation and rich content. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site demonstrates high business credibility and trustworthiness, supported by consistent branding and official domain registration.

V

Val d’Anniviers Tourism

valdanniviers.ch

55

Val d’Anniviers Tourism operates a professional and content-rich website promoting the Val d’Anniviers region in Switzerland as a mountain tourism destination. The site provides comprehensive information on accommodation, activities, events, ski lifts, webcams, and local culture, targeting tourists and visitors interested in alpine experiences. The business model focuses on destination marketing and facilitating bookings through linked platforms. Technically, the website uses a custom CMS (MyCity Tourism Information System), integrates Google Tag Manager and reCAPTCHA, and implements cookie consent mechanisms, reflecting a moderate to good digital maturity. Security posture is solid with HTTPS and anti-bot measures, though it lacks explicit security headers and published security policies. Overall, the site is trustworthy, well-branded, and professionally maintained, with room for improvement in privacy and security transparency.

V

Vallée de Joux Tourisme

myvalleedejoux.ch

73

Vallée de Joux Tourisme operates a regional tourism website providing comprehensive information on accommodation, activities, events, and practical visitor information for the Vallée de Joux region in Switzerland. The website targets tourists and visitors seeking travel and leisure options in this area. It serves as an official tourism portal, leveraging the MyCity Tourism Information System platform to deliver content in multiple languages with a professional and consistent branding approach. The business model focuses on tourism promotion and information dissemination, supporting local hospitality and leisure sectors.

V

Veysonnaz Tourisme

veysonnaz.ch

75

Veysonnaz.ch is the official tourism website for the Veysonnaz region in Switzerland, providing comprehensive information about accommodation, activities, events, and local services to visitors and tourists. The site targets holidaymakers interested in outdoor and family-friendly experiences in the Alpine region. It operates primarily as a regional tourism promotion platform with a focus on enhancing visitor engagement and facilitating holiday planning. Technically, the website employs a modern tech stack including JavaScript, jQuery, Google Analytics, Google Tag Manager, and Mapbox for mapping services, hosted on a CDN infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS, uses Google reCAPTCHA for form protection, and includes GDPR-compliant cookie consent mechanisms. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which could be improved to enhance trust and compliance. Overall, the site is legitimate, professionally maintained, and aligns well with its business purpose, with a strong presence on social media and partner integrations.

J

Jura & Three-Lakes Tourism

j3l.ch

69

Jura & Three-Lakes Tourism operates a comprehensive regional tourism website promoting outdoor activities, cultural experiences, and accommodations in the Jura & Three-Lakes region of Switzerland. The site serves as both an information portal and an online booking platform, integrating third-party services for marketing automation, analytics, and user engagement. The business targets tourists, families, and outdoor enthusiasts, positioning itself as a key regional destination marketing organization. Technically, the website employs modern JavaScript libraries, Google Tag Manager, Mapbox for geolocation, and Cookiebot for GDPR-compliant cookie management, hosted on a CMS specialized for tourism information. Security posture is strong with HTTPS enforced, standard security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the site lacks explicit security policies and incident response contacts, which could be improved. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO, making it a reliable resource for visitors planning trips to the region.

B

brucyno

brucy.no

56

Brucy is a technology company offering a modern website platform targeted at small to medium businesses primarily in Norway and Sweden. Their service model is subscription-based, providing complete website creation, SEO optimization, hosting, and maintenance with optional premium consulting services. The company positions itself as an affordable alternative to traditional web agencies and DIY platforms. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, with good mobile optimization and fast performance. Security measures include HTTPS and Google reCAPTCHA on forms, though explicit security headers and privacy policies are missing, indicating room for improvement in compliance and security posture. Overall, the website is professional, trustworthy, and business-focused, with clear contact information and social media presence.

H

HLTHY

hlthy.se

53

HLTHY is a Swedish SaaS provider offering a comprehensive journalsystem tailored for rapidly growing clinics in Sweden. Their platform integrates clinical record keeping, marketing, and financial management into a single user-friendly interface. The website demonstrates a professional design with clear messaging targeting healthcare providers seeking to streamline operations and grow their patient base. Technically, the site is built on Webflow with modern integrations such as Intercom for support and Calendly for scheduling, indicating a mature digital infrastructure. Security posture is generally strong with HTTPS and no visible vulnerabilities, though the absence of security headers and privacy policies suggests room for improvement. The lack of WHOIS data for the domain raises concerns about domain legitimacy and registration status, impacting overall trust. Strategic recommendations include enhancing privacy compliance, adding security headers, and clarifying domain registration details to improve credibility and compliance.

U

Unilabs

unilabs.se

57

Unilabs is a well-established healthcare company specializing in medical laboratory and diagnostic services primarily in Sweden. The company operates a professional website that targets healthcare providers and patients, offering comprehensive information about their services. The website is built on a Drupal CMS platform and integrates modern technologies such as Google Tag Manager and OneTrust for cookie consent management, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security policies and incident response contacts, which could be improved. The domain registration data supports the legitimacy and trustworthiness of the business, with a domain age consistent with the company's history. Overall, the website presents a professional and trustworthy digital presence with room for enhanced security transparency.

M

MC Handlaren

mchandlaren.se

44

MC Handlaren is a Swedish company specializing in the quick and secure purchase of used motorcycles. Operated by Nilskog Bilgruppen, it leverages over 10 years of experience in the automotive sector to provide free valuations, direct purchase offers, and convenient services such as motorcycle pickup and immediate payment. The website is professionally designed, mobile-optimized, and uses modern web technologies including Nuxt.js and Vue.js, hosted on a CDN for fast performance. Security measures include HTTPS, security headers, and reCAPTCHA on forms, though cookie consent mechanisms and terms of service pages are absent. WHOIS data for the domain www.mchandlaren.se is missing, which slightly reduces trust but the business information and website content appear legitimate and consistent. Overall, the company presents a trustworthy and user-friendly platform for motorcycle sellers in Sweden.

M

Maskrosbarn

maskrosbarn.org

46

Maskrosbarn is a Swedish non-profit organization dedicated to supporting children and youth aged 13-19 who have parents suffering from mental illness, addiction, or who expose them to violence. The organization offers a range of services including chat support, educational materials, activities, and advocacy efforts. It operates regionally in Stockholm, Göteborg, Malmö, and provides nationwide support. The website is well-structured, professionally designed, and targets both youth and adults interested in supporting them. The organization holds recognized certifications such as 90-konto and Tryggt Givande, enhancing its trustworthiness. Technically, the website is built on WordPress with modern technologies including React and jQuery. It uses Yoast SEO for optimization and Cookiebot for cookie consent management. Hosting is provided via Loopiagroup nameservers. The site is mobile-optimized and performs moderately well. Analytics and marketing tools include Google Tag Manager, Snapchat Pixel, and LinkedIn Insight Tag, with moderate user tracking and good privacy compliance. From a security perspective, the site enforces HTTPS with an excellent SSL configuration but lacks DNSSEC and security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. However, there is no visible incident response or vulnerability disclosure information. Overall, the website presents a low-risk profile with a strong business credibility and good technical implementation. Recommendations include enabling DNSSEC, adding security headers, publishing incident response contacts, and providing a terms of service page to further enhance trust and security posture.

Dynapps is a specialized Odoo ERP implementation partner operating primarily in France and Europe. The company offers tailored ERP solutions to automate and optimize business processes across multiple sectors including retail, energy, healthcare, manufacturing, and logistics. Recognized as a leading Odoo Gold Partner and awarded Best Odoo Implementation Partner in Europe 2024, Dynapps demonstrates strong market positioning and expertise. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on the Odoo platform with modern web technologies and integrates third-party services such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS, security headers, and ISO 27001 certification, though some improvements are recommended such as publishing a security policy and incident response contacts. Overall, the site is trustworthy, business-focused, and compliant with GDPR regulations.

Dynapps is a professional and leading Odoo implementation partner specializing in digitalizing business processes through tailored Odoo ERP solutions. The company holds a strong market position as the largest Odoo implementer in Europe and has been recognized as the Best Odoo Partner in Europe 2024. Their services cover a broad range of industries including technology, energy, manufacturing, retail, and healthcare, targeting innovative companies seeking efficient ERP solutions. The website is well-designed, mobile-optimized, and provides comprehensive information about their offerings and certifications. Technically, the website is built on the Odoo CMS platform, leveraging modern web technologies such as Bootstrap, FontAwesome, and integrates analytics and marketing tools like Google Tag Manager, Cookiebot, and Leadinfo. The site demonstrates good performance, accessibility, and SEO practices. Security-wise, Dynapps has achieved ISO 27001 certification, enforces HTTPS, and implements cookie consent mechanisms, reflecting a mature security posture. However, some security headers are not explicitly detected, and incident response contacts are not publicly listed. Overall, the website and business present a trustworthy and professional image with strong compliance and security practices. The domain WHOIS data is privacy protected, which is common and justified for this business type. No critical vulnerabilities or suspicious patterns were found. Strategic recommendations include enhancing security headers, publishing incident response information, and continuous monitoring of third-party scripts to maintain security integrity.

G

GastroSuisse

gastrosuisse.ch

62

GastroSuisse is the largest hospitality employer association in Switzerland, representing approximately 20,000 members. The organization provides a broad range of services including membership benefits, education and training programs, legal advice, and industry representation. Their website is professionally designed and targets hospitality professionals and businesses within Switzerland. The business model centers on membership and service provision to the hospitality sector, positioning GastroSuisse as a key industry player in the Swiss market. Technically, the website is built on Silverstripe CMS 5.3 and integrates modern tools such as Google Tag Manager and CookieYes for consent management. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. Accessibility is basic but functional. The use of reCAPTCHA and cookie consent mechanisms indicates a mature approach to user privacy and security. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes important security headers. There is no evidence of exposed sensitive data or vulnerable libraries. However, the absence of a dedicated security policy or incident response contact information suggests room for improvement in transparency and preparedness. GDPR compliance is well addressed through comprehensive privacy and cookie policies. Overall, GastroSuisse presents a trustworthy and professional online presence with a solid security posture and good privacy compliance. Strategic enhancements in security policy publication and incident response readiness would further strengthen their position.

I

Intersim AG

schweizerkaese.ch

69

The website www.schweizerkaese.ch serves as a comprehensive promotional platform for Swiss cheese, highlighting its unique taste, variety, and quality. It is operated by Intersim AG and is closely linked with Switzerland Cheese Marketing, indicating an official or semi-official role in promoting Swiss cheese culture. The site targets a broad audience including consumers interested in cheese, recipes, and Swiss culinary traditions. Technically, the site is built on TYPO3 CMS, uses modern multimedia content such as videos hosted on Vimeo, and integrates Usercentrics for cookie consent management and Google Tag Manager for analytics. Security posture is solid with HTTPS and error monitoring via Sentry, though it lacks explicit security headers and published privacy or terms documents. Overall, the site is professional, well-branded, and trustworthy, with a strong social media presence and good user experience.

J

Jaguar

jaguar.com

59

Jaguar is a globally recognized luxury automotive brand offering a wide range of vehicles with a strong digital presence tailored to multiple international markets and languages. The website analyzed serves as a market selector, enabling users to access localized Jaguar sites based on region and language preferences. The site demonstrates a mature digital infrastructure leveraging Adobe Experience Manager CMS, modern JavaScript libraries, and integrated marketing and analytics tools such as Adobe Target and Google Tag Manager. Security posture is strong with HTTPS enforced and consent mechanisms for cookies implemented, although explicit privacy policies and terms of service are not present on the analyzed page. The absence of WHOIS data for the domain introduces some uncertainty, but the professional branding and extensive localization strongly indicate legitimacy. Overall, the site is well-designed, user-friendly, and trustworthy for its intended audience.

L

Lakrids by Johan Buelow A/S

lakridsbybulow.us

69

Lakrids by Bülow is a premium confectionery company specializing in luxury licorice and chocolate products. Established in 2007, the company has positioned itself as a niche leader in the gourmet confectionery market with a strong emphasis on quality, craftsmanship, and sustainability, as evidenced by its B Corp certification. The US-specific domain lakridsbybulow.us supports their international e-commerce presence, targeting consumers seeking high-end confectionery gifts and indulgences. Technically, the website is built on the BigCommerce platform using the Stencil framework, integrating modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, TikTok Pixel, and Microsoft Clarity. Cookie consent is managed via Cookiebot, ensuring GDPR compliance and user privacy controls. The site demonstrates good mobile optimization, SEO practices, and a professional design, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and employs domain transfer protection. However, DNSSEC is not enabled, and some recommended security headers are not explicitly detected. No security policy or incident response contacts are published, which could be improved to enhance trust and readiness. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website presents a trustworthy and professional e-commerce presence with moderate to good security and privacy compliance. Strategic improvements in security headers, explicit privacy policies, and incident response disclosures would further strengthen their posture and customer confidence.

L

Lakrids by Bülow Ltd.

lakridsbybulow.co.uk

71

Lakrids by Bülow Ltd. is a premium luxury confectionery brand specializing in high-quality liquorice and chocolate products. The company operates an e-commerce platform targeting general consumers seeking gourmet confectionery, with a strong international presence indicated by multiple country-specific domains. Their website is professionally designed, consistent in branding, and offers a seamless shopping experience with fast and secure transactions. The business is medium-sized, founded in 2007, and maintains active social media engagement to support brand awareness and customer interaction. Technically, the website is built on the BigCommerce platform using the Stencil framework, integrating modern technologies such as Google Tag Manager, Cookiebot for consent management, Microsoft Clarity for analytics, and Wistia for video content. The site demonstrates good mobile optimization and SEO practices, although there is room for improvement in accessibility and explicit security header implementation. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. However, it lacks a publicly accessible privacy policy, terms of service, security policy, and incident response contacts, which are critical for compliance and trust. No vulnerabilities or suspicious patterns were detected, and the domain registration is consistent with the business profile, enhancing legitimacy. Overall, the website presents a low-risk profile with a solid business foundation and technical infrastructure. Strategic improvements in privacy documentation, security headers, and accessibility would further enhance compliance and user trust.

L

Lakrids by Johan Bülow AB

lakridsbybulow.se

71

Lakrids by Johan Bülow AB operates a premium e-commerce platform specializing in gourmet licorice and chocolate products, targeting a general audience with a focus on quality and gifting. The company has a strong market position in Sweden and internationally, supported by multiple regional domains and a consistent brand presence. The website is built on the BigCommerce platform, leveraging modern e-commerce technologies and integrations with major analytics and marketing services. The technical infrastructure is robust with Cloudflare DNS and CDN services, ensuring good performance and availability. Security posture is solid with HTTPS enforced and cookie consent managed via Cookiebot, though some security headers could be improved. Privacy compliance is good, but explicit privacy and terms of service pages were not detected in the provided content. Overall, the site is professional, trustworthy, and well-optimized for SEO and user experience.

L

LAKRIDS BY BÜLOW

lakridsbybulow.no

64

LAKRIDS BY BÜLOW is a premium e-commerce business specializing in handcrafted gourmet licorice and chocolate products, targeting a general audience primarily in Norway. The website is built on the BigCommerce platform, leveraging modern technologies such as Google Tag Manager, Cookiebot for cookie consent, and multiple analytics and advertising pixels to optimize marketing efforts. The site demonstrates good design quality, mobile optimization, and SEO practices, supporting a positive user experience and professional brand image. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are not published. The domain registration is recent but consistent with the business launch, indicating legitimacy. Overall, the site is safe, trustworthy, and compliant with basic privacy regulations, though improvements in transparency and security documentation are recommended.

L

Lakrids by Johan Bülow A/S

lakridsbybulow.dk

52

Lakrids by Johan Bülow A/S operates a premium e-commerce platform specializing in gourmet licorice and chocolate products. The company holds a strong market position in the Nordic region as a B Corp certified producer, emphasizing sustainability and quality. Their website reflects a mature digital infrastructure leveraging BigCommerce and multiple modern marketing and analytics technologies, ensuring a seamless user experience and effective customer engagement. Security posture is solid with HTTPS and consent management, though some improvements in security headers and explicit policies are recommended. Overall, the domain registration and business information align well, supporting legitimacy and trustworthiness.