Security Directory

V

VeronaLabs

wp-statistics.com

64

WP Statistics is a mature and well-established WordPress plugin developed by VeronaLabs, specializing in privacy-friendly website analytics that comply with GDPR, CCPA, and PECR regulations. The company positions itself as a leader in privacy-centric analytics for WordPress users, boasting over 600,000 active users and offering a comprehensive suite of features including content analytics, author performance tracking, marketing campaign insights, and geographical reporting. The business model revolves around plugin sales, add-ons, and an affiliate program, targeting website owners, bloggers, and marketers who prioritize privacy and data ownership.

G

Genève-Servette Hockey Club

gshc.ch

56

Genève-Servette Hockey Club is a professional hockey organization based in Geneva, Switzerland, operating a well-established sports club with a strong local and regional fan base. The website serves as the official portal for the club, providing information on team schedules, news, ticketing, merchandise, and fan engagement. The club maintains partnerships with various sponsors and ticketing platforms, reflecting a solid market position within Swiss professional hockey. Technically, the website is built on TYPO3 CMS and integrates modern web technologies including YouTube embeds, Google Tag Manager, and TikTok analytics pixels. The site is mobile-optimized and accessible, with good SEO practices evident. However, there is room for improvement in performance optimization and security hardening, particularly in implementing security headers and enhancing privacy compliance. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal privacy and cookie policies. There is no public vulnerability disclosure or incident response contact information, which could be improved to enhance trust and compliance. The use of third-party tracking scripts suggests moderate user tracking, but privacy compliance is currently limited. Overall, the website is professional and trustworthy, supporting the club's business objectives effectively. Strategic enhancements in privacy, security policies, and transparency would further strengthen the club's digital maturity and user trust.

M

MSC Croisières

msccroisieres.fr

76

MSC Croisières is a major cruise line company operating in France, offering vacation cruises in the Mediterranean, Caribbean, Emirates, and worldwide. The website reflects a well-established business with a strong market position and a comprehensive range of cruise-related services including booking management, onboard experiences, and special offers. The parent company is MSC Cruises S.A., indicating a large international presence. Technically, the website uses modern web technologies including Vue.js, Google Tag Manager, and advanced consent management tools, hosted likely on Akamai infrastructure. The site is well-optimized for mobile and SEO, with good user experience and professional design. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not found. WHOIS data is missing, which slightly reduces trust but the overall digital footprint and branding strongly support legitimacy. Strategic recommendations include enhancing security header implementation, publishing incident response contacts, and adding vulnerability disclosure information.

H

Helvetia Environnement

helvetia-environnement.ch

58

Helvetia Environnement is a Swiss-based environmental services group specializing in comprehensive waste management solutions including collection, recycling, and energy production from waste. Positioned as a leader in the Swiss market, the company serves public and private entities as well as individuals. The website is professionally designed, primarily in French, and provides clear information about the company's services, subsidiaries, and sustainability commitments. Technically, the site uses a legacy ASP.NET WebForms framework with JavaScript libraries such as jQuery and Fotorama, and integrates Google Tag Manager and Axeptio for analytics and cookie consent. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though some security headers and modern library versions could improve the stance. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site reflects a trustworthy and credible business with good digital maturity.

S

Swissstaffing

swissstaffing.ch

56

Swissstaffing is the national association representing Swiss recruitment agencies, providing industry representation and member services. The website is professionally designed, targeting recruitment agencies and stakeholders in Switzerland. The technical infrastructure includes modern web technologies such as HTML5, CSS3, JavaScript, Google Tag Manager, and Cookiebot for cookie consent management. The site uses HTTPS and implements security best practices including security headers and Google reCAPTCHA. However, explicit privacy policy and terms of service pages are not found in the analyzed content, which is a compliance gap. The site integrates multiple third-party analytics and marketing services, indicating extensive user tracking. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and contact transparency.

A

Advanced Sterilization Products, Inc.

sterradsterilityguide.com

63

The STERRAD Sterility Guide website serves as a specialized online tool for healthcare professionals and customers of STERRAD sterilization systems, providing an up-to-date database of devices compatible with STERRAD claims. The site is professionally designed using Drupal 10 CMS, with a clear focus on usability, mobile optimization, and accessibility. It integrates standard privacy and cookie consent mechanisms, reflecting a mature approach to user data protection. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy, despite the professional appearance and consistent branding. Security posture is generally good with HTTPS enforced and secure login forms, but the lack of explicit security headers and published security policies suggests room for improvement. Overall, the site is a credible resource within the healthcare sterilization niche but would benefit from enhanced transparency around domain registration and security policies.

C

Cloudinary

cloudinary.com

70

Cloudinary is a leading cloud-based media management platform founded in 2011, specializing in image and video upload, storage, optimization, and delivery via APIs and CDN. The company targets developers, IT teams, marketers, and enterprises across various industries, providing scalable and AI-powered media solutions. The website reflects a mature digital presence with comprehensive product information, strong branding, and clear navigation. Technically, the site leverages modern web technologies including WordPress CMS, Bootstrap framework, and integrates analytics and marketing tools such as Google Analytics and LinkedIn Insight Tag. Security posture is solid with HTTPS enforced and no exposed sensitive data, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR indicators. Overall, Cloudinary demonstrates a high level of professionalism, technical maturity, and business credibility.

T

Touring Club Schweiz (TCS)

tcs.ch

73

Touring Club Schweiz (TCS) is a well-established Swiss mobility club founded in 1909, offering roadside assistance, member benefits, and mobility-related services to a broad Swiss audience. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its members and potential customers. Technically, the site uses modern JavaScript libraries, consent management tools, and analytics platforms, hosted on a secure HTTPS infrastructure with strong security headers and privacy compliance mechanisms. Security posture is solid with no detected vulnerabilities or exposed sensitive data, though explicit security policies and incident response information could be enhanced. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and Swiss data protection standards.

A

autoSense

autosense.ch

65

autoSense is a Swiss-based company specializing in intelligent mobility solutions, focusing on electric vehicle charging and fleet management. Their offerings include comprehensive charging solutions for workplaces, public charging, home charging reimbursement, and telematics services such as digital logbooks. The company targets fleet managers and drivers transitioning to electric vehicles, providing integrated software and hardware solutions to simplify and optimize electric mobility. The website is professionally designed, mobile-optimized, and uses modern web technologies including Webflow CMS, Google Tag Manager, and Facebook Pixel for analytics and marketing. From a technical perspective, the website demonstrates a mature digital infrastructure with fast performance, good SEO, and accessibility features. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit privacy policy and terms of service pages, which are critical for GDPR compliance and user trust. Cookie consent is implemented, indicating some privacy awareness. Overall, the security posture is solid but could be improved by publishing comprehensive privacy and security policies and providing clear contact information including incident response contacts. The domain registration data aligns well with the business claims, supporting legitimacy. The website content is safe and appropriate for a general audience, with no adult or questionable content detected.

R

Rexx Systems

rexx-recruitment.com

62

Rexx Systems is a well-established German technology company specializing in HR software solutions tailored for medium and large enterprises. With over 25 years of experience and a customer base of approximately 3,000 clients, the company offers modular, cloud-based and on-premise HR software products including recruiting, talent management, digital personnel files, and AI-enhanced tools. Their market position is strong within the HR technology sector, supported by consistent branding and professional digital presence. Technically, the website is built on WordPress with Elementor and leverages modern web technologies such as jQuery and Google Tag Manager. The site is optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. Security measures include HTTPS enforcement and standard security headers, although there is room for improvement in public vulnerability disclosure and incident response transparency. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is good, with comprehensive privacy and cookie policies and consent mechanisms in place. However, the absence of WHOIS registration data introduces some uncertainty regarding domain registration transparency, though this is likely due to privacy protection. Overall, Rexx Systems presents a trustworthy and professional business with a secure and well-implemented web presence. Strategic recommendations include enhancing security transparency through vulnerability disclosure and incident response information, and maintaining rigorous audits of third-party scripts and data retention policies.

A

AMAG Leasing AG

amag-leasing.ch

72

AMAG Leasing AG is a prominent Swiss vehicle leasing company specializing in automotive and electric mobility leasing solutions. The company operates under the AMAG Group umbrella and offers a comprehensive range of leasing products including bike leasing, fuel and charging cards, and all-inclusive leasing packages. Their website demonstrates a high level of professionalism, with clear navigation, multilingual support, and a strong focus on customer experience. Technically, the site leverages modern frameworks such as Adobe Helix and integrates trusted third-party services like Google Tag Manager and OneTrust for analytics and privacy compliance. Security posture is robust with HTTPS enforcement and multiple security headers, although explicit security policies and incident response information are not publicly detailed. Overall, the website is well-optimized for performance, accessibility, and SEO, reflecting a mature digital presence.

V

Volkswagen

volkswagen.com

65

Volkswagen Finland operates a comprehensive and professionally designed website offering detailed information about Volkswagen's vehicle lineup, services, and customer support. The site targets Finnish consumers and businesses interested in new and used Volkswagen vehicles, including electric and hybrid models. The business model includes vehicle sales, leasing, servicing, and digital connectivity services, positioning Volkswagen as a leading automotive brand in Finland. The website demonstrates a mature digital infrastructure leveraging modern web technologies such as React and Adobe Experience Manager, ensuring fast performance and excellent mobile optimization. Security measures include HTTPS enforcement, content security policies, and client-side guards to prevent unauthorized content loading. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms. Overall, the site reflects a high level of professionalism, trustworthiness, and compliance with industry standards.

M

Magnite

springserve.com

66

Magnite is a leading independent sell-side advertising company specializing in helping media owners maximize advertising revenue across multiple channels including Connected TV (CTV), streaming, online video, display, and audio. The company positions itself as a global technology platform offering advanced brand protection, targeting, and programmatic advertising solutions. Their website reflects a mature enterprise with comprehensive content, strong branding, and a clear focus on media owners and advertisers as their primary audience. Technically, the site is built on WordPress with modern marketing and analytics tools such as Google Tag Manager, Marketo, LinkedIn Insight, and Hotjar, indicating a digitally mature infrastructure. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though security headers could be improved. Privacy compliance is well addressed with detailed privacy and cookie policies and GDPR adherence. Overall, the domain WHOIS data is unavailable, likely due to privacy protection, which is common in this industry but slightly reduces transparency. The website is professional, trustworthy, and well-optimized for SEO and mobile use.

E

EveryWare AG

everyware.ch

71

EveryWare AG is a well-established Swiss IT service provider specializing in cloud, hosting, datacenter, network, and managed IT services. The company positions itself as a leading provider in Switzerland with over 25 years of experience, offering comprehensive business IT solutions focused on public, hybrid, and private cloud environments. Their services cater primarily to Swiss businesses and IT organizations seeking secure, scalable, and sovereign cloud and IT infrastructure solutions. The website reflects a professional and consistent brand image with detailed service offerings and customer success stories, reinforcing their market position. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized, well-structured, and performs moderately well. Privacy and cookie policies are clearly presented with consent mechanisms in place, demonstrating good compliance with GDPR requirements. However, explicit security policies and incident response contacts are not publicly available, which could be improved. From a security perspective, the site enforces HTTPS and uses privacy-focused tools but lacks visible advanced security headers and a dedicated vulnerability disclosure policy. No vulnerabilities or suspicious content were detected. WHOIS data confirms the legitimacy of the domain registration, consistent with the company’s Swiss identity and business history. Overall, EveryWare AG’s website presents a trustworthy, professional, and compliant digital presence suitable for its target market. Strategic improvements in security transparency and incident response communication would further enhance their security posture and customer trust.

E

ELCA Security

elcasecurity.ch

85

ELCA Security is a Swiss-based cybersecurity company specializing in securing IT infrastructure, identities, and business operations for both businesses and government entities. The company positions itself as a robust security solutions provider with a focus on anticipating, protecting, detecting, and defending against cyber threats. Their website reflects a professional and modern digital presence, leveraging advanced web technologies such as Next.js and React, and integrating reputable third-party services like Stripe for payments and Matomo for privacy-focused analytics. The site is well-optimized for mobile devices and includes comprehensive cookie consent management via Cookiebot, demonstrating a commitment to privacy compliance.

B

bbv Software Services AG

bbv-software.de

59

bbv Software Services AG is a well-established Swiss software and consulting company specializing in digital consulting, software engineering, and digital transformation services. Founded in 1995, the company serves a broad range of clients, focusing on delivering scalable digital businesses, innovative digital experiences, and sustainable software products. Their market position is strong within Switzerland, supported by a medium-sized team and a comprehensive portfolio of services including AI consulting, cloud services, cybersecurity, and data management. The website reflects a professional and consistent brand image with multilingual support and rich content tailored to business clients. Technically, the website is built on WordPress with modern plugins and tools such as WPBakery Page Builder, Google Tag Manager, HubSpot, and LinkedIn Insight Tag. It employs standard web technologies including JavaScript and jQuery, and integrates multiple analytics and marketing tools with a robust cookie consent mechanism ensuring GDPR compliance. The site demonstrates good performance, mobile optimization, and accessibility features. From a security perspective, the site uses HTTPS with strong SSL configuration and employs Google reCAPTCHA to protect forms from spam. While some security headers are not explicitly detected, the overall security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management system. However, the site could improve by publishing explicit security policies and incident response contacts. Overall, bbv Software Services AG presents a trustworthy and professional online presence with strong business credibility, good technical implementation, and solid privacy and security practices. The risk level is low, and the company is well-positioned to maintain compliance and security in its digital operations.

G

Genève Tourisme

geneve.com

53

Genève Tourisme operates the official online guide for Geneva, providing comprehensive tourism information including attractions, events, dining, accommodation, and city tours. The website is well-structured, professionally designed, and targets tourists and visitors seeking to explore Geneva's cultural and natural offerings. Technically, the site uses TYPO3 CMS, integrates Google Tag Manager, and employs modern JavaScript libraries, indicating a mature digital infrastructure. Security posture is moderate with HTTPS usage and cookie consent, but lacks visible security headers and explicit privacy policies. WHOIS data is missing or unavailable, which raises concerns about domain registration transparency. Overall, the site is trustworthy and professional but would benefit from enhanced security and compliance disclosures.

F

Fondation Clair-Bois

clairbois.ch

59

Fondation Clair-Bois is a Swiss non-profit organization dedicated to supporting polyhandicapped individuals. The website, primarily in French, serves as an informational and possibly e-commerce platform using WordPress with the Divi theme and WooCommerce plugin. The foundation appears to be established since 2017, consistent with the domain registration date. The site targets a general audience interested in the foundation's mission and services. Technically, the site employs modern web technologies including Google Tag Manager for analytics and Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place; however, the absence of security headers and explicit privacy and terms policies suggests room for improvement. Overall, the website is professionally designed with good user experience and moderate trustworthiness, but lacks some compliance and security best practices.

S

Servette Rugby Club SA

servetterc.ch

60

Servette Rugby Club SA is a Swiss-based rugby sports club focused on providing rugby team activities, events, and community engagement primarily in Geneva. The club operates a professional website offering ticket sales, merchandise, and information about matches and training academies. Their market position is that of a regional sports club with a dedicated fan base and active community involvement. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including YouTube embeds, Google Tag Manager, and Facebook Pixel, with a cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and headers. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

S

Servette FC

servettefc.ch

60

Servette FC is a Swiss football club with an official website serving as a hub for club news, updates, and fan engagement. The website is built on WordPress and leverages modern SEO and cookie consent tools such as Yoast SEO and Cookiebot. It integrates multiple third-party analytics and marketing pixels including Google Analytics, Facebook Pixel, and TikTok Pixel, indicating a mature digital marketing approach. The site is well-branded and professionally designed, targeting football fans and stakeholders in Switzerland. Technically, the site is moderately performant with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and explicit privacy and terms of service pages are notable gaps. No contact information or incident response channels are directly visible, which could impact user trust and compliance. Overall, the domain registration aligns well with the business claims, supporting legitimacy. Strategic improvements include publishing comprehensive privacy and terms policies, enhancing security headers, and providing clear contact channels for security and privacy inquiries.

O

Office cantonal des assurances sociales

ocas.ch

64

The Office cantonal des assurances sociales (OCAS) of Geneva is a government entity responsible for managing and coordinating key social insurance schemes including old-age and survivors insurance, disability insurance, family allowances, and loss of earnings allowances. The website serves as an official portal providing comprehensive information, e-government services, and assistance to various stakeholders such as employers, employees, independents, students, and medical professionals. The site is well-positioned as the authoritative source for social insurance in the Geneva canton. Technically, the website is built on Drupal 11, leveraging modern web technologies including Matomo and Google Tag Manager for analytics, with a focus on privacy and accessibility. The site is mobile-optimized, well-structured, and uses recognized accessibility tools, reflecting a mature digital infrastructure suitable for a government agency. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and security posture. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource for its target audience. Strategic improvements in security policy transparency and security headers would further strengthen its security maturity.

F

FIBA

fiba.basketball

71

FIBA is the global governing body for basketball, providing official news, event schedules, rankings, and media content through its website. The site serves basketball fans, athletes, and media professionals worldwide, positioning itself as the authoritative source for basketball-related information. Technically, the website employs modern frameworks such as Next.js and React, integrates Google Tag Manager and reCAPTCHA for analytics and security, and uses Cloudinary for media delivery. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is strong with HTTPS enforcement, security headers, and consent management, though explicit security policies and incident response contacts are not publicly visible. Overall, the website is professional, trustworthy, and safe for general audiences.

M

Mirabaud Group

mirabaud.com

52

Mirabaud Group is a well-established Swiss financial institution specializing in wealth management and asset management services. With a heritage spanning over 200 years, the company serves high net worth individuals, families, entrepreneurs, and institutional clients globally. Their business model emphasizes personalized client relationships, sustainable investment strategies, and a robust international platform. The website reflects a professional and consistent brand image, showcasing their key services and corporate responsibility initiatives. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Google Tag Manager and OneTrust for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. However, some technical improvements could be made in security headers and incident response disclosures. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security policies and incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or data unavailability, which is unusual for a financial institution. Overall, the website presents a trustworthy and professional front for Mirabaud Group, but verification of domain registration and enhancement of security disclosures are recommended to strengthen trust and compliance.

T

Trinseo

trinseo.com

76

Trinseo is a specialty material solutions provider focused on partnering with companies to deliver innovative and high-quality materials. The website presents a professional and well-structured digital presence built on Drupal 10, incorporating modern compliance tools such as Cookiebot for GDPR and cookie consent management. The technical infrastructure includes Google Tag Manager and bot detection scripts, indicating a mature digital setup. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and incident response contacts are absent. The lack of WHOIS registration data is a notable anomaly that slightly reduces trust but does not overshadow the overall legitimacy indicated by the website content and compliance features. Strategic recommendations include enhancing security headers, publishing security policies, and improving transparency with contact information for security incidents.

C

Chambre de commerce, d’industrie et des services de Genève

ccig.ch

63

The Chambre de commerce, d’industrie et des services de Genève (CCIG) is a well-established private association founded in 1865, representing approximately 2600 member companies. It serves as a key economic actor in Geneva, promoting a strong economy and supporting its members through business networking, events, export services, legal advice, and publications. The website reflects a professional and consistent brand image, targeting local businesses and economic stakeholders. Technically, the site uses a modern tech stack including jQuery, Bootstrap, Kendo UI, and integrates analytics tools such as Google Analytics and LinkedIn Insight Tag. The site is mobile-optimized and well-structured, though performance is moderate. Security posture is good with HTTPS enforced, but lacks visible security headers and a public security policy. Privacy compliance is limited due to absence of explicit privacy and cookie policies or consent mechanisms. Overall, the domain registration data aligns well with the organization's claims, indicating a legitimate and trustworthy entity.

C

Chopard

chopard.com

76

Chopard is a prestigious Swiss luxury brand specializing in high-end watches and jewellery, with a rich heritage dating back to 1860. The website serves as an official platform showcasing their exclusive products and brand story, targeting affluent consumers globally. The site demonstrates a mature digital presence with modern e-commerce capabilities powered by Salesforce Commerce Cloud, integrating personalization and analytics tools such as Google Tag Manager and CQuotient. Security measures include HTTPS enforcement, reCAPTCHA for form protection, and a comprehensive cookie consent mechanism, reflecting a strong commitment to user privacy and data protection. However, the absence of publicly available WHOIS registrant data introduces a minor transparency concern, though the overall brand trust and website professionalism mitigate this risk. Strategic recommendations include publishing explicit security policies and incident response contacts to enhance trust and compliance.

Cartier is a globally recognized luxury jeweller and watchmaker established in 1847, operating a professional e-commerce website targeting luxury consumers primarily in Finland for this localized site. The website offers a comprehensive catalog of fine watches, jewellery, leather goods, and related luxury products, supported by personalized customer service and boutique locators. Technically, the site is built on Adobe Experience Manager, leveraging Akamai CDN and modern JavaScript frameworks, ensuring good performance and mobile responsiveness. Security posture is strong with HTTPS, security headers, and secure payment integrations, though no explicit security policy or vulnerability disclosure is present. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The WHOIS data is unavailable publicly, likely due to privacy protection, but the site’s professional presentation and brand consistency support legitimacy. Overall, the site scores highly on content quality, technical implementation, and security, with minor recommendations for enhanced transparency and accessibility.

F

FER Genève

fer-ge.ch

68

FER Genève is a large, established umbrella organization representing over 80 professional associations and 29,000 member companies in Geneva, Switzerland. The website serves as a platform for advocacy and support of its members' political and economic interests. Technically, the site is built on the Liferay CMS platform, utilizing modern JavaScript libraries such as jQuery and FontAwesome, and integrates multiple analytics and tracking services including Google Analytics and Friendly Analytics. The security posture is adequate with HTTPS enabled and asynchronous loading of scripts, but lacks visible security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the website is functional and moderately professional but would benefit from enhanced privacy disclosures and security best practices.

T

Théâtre de Beausobre

beausobre.ch

54

Théâtre de Beausobre is a well-established Swiss cultural venue located in Morges, attracting over 42,000 visitors per season to attend a diverse program of approximately 60 performances including theatre, dance, music, and circus. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization, supporting ticket sales and subscriptions through a partnered external platform. Technically, the site leverages WordPress with modern plugins and frameworks, ensuring good performance and SEO optimization. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, compliant, and serves its audience effectively.

I

Infront Moto Racing

mxgp.com

59

MXGP.com is the official website for the FIM Motocross World Championship and related motocross events managed by Infront Moto Racing. The site serves as a comprehensive media and information hub for motocross fans, teams, riders, and partners worldwide. It offers news, event calendars, results, photos, and multimedia content, supported by a professional digital infrastructure. The website uses Drupal 7 CMS with integrations for advertising, analytics, and social media, ensuring a modern and engaging user experience. Security posture is strong with HTTPS enforcement and GDPR-compliant privacy and cookie policies, though some security headers could be improved. The absence of WHOIS data is noted but does not detract significantly from the site's legitimacy given its professional presentation and official affiliations. Overall, MXGP.com is a credible, well-maintained sports media platform with good privacy and security practices.

The International Institute in Geneva (IIG) is a private higher education institution based in Switzerland offering accredited undergraduate, graduate, and doctorate programs primarily in business administration, international relations, computer science, and digital marketing. The institution maintains strong international partnerships, notably with the University of Plymouth in the UK, enabling dual degree offerings. The website is professionally designed with clear navigation and comprehensive program information targeting prospective students and academic professionals. Technically, the site employs modern JavaScript libraries and tracking tools such as HubSpot and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, though security headers and incident response information could be enhanced. Privacy and cookie policies are present and GDPR compliant, reflecting a mature privacy stance. Overall, the website reflects a credible and established educational entity with a strong market position in international higher education.

V

Ville de Genève

geneve.ch

72

The website www.geneve.ch is the official digital presence of the City of Geneva, Switzerland. It serves as a comprehensive portal for municipal information, including administrative procedures, city news, cultural events, and public services. The site targets residents, tourists, businesses, and associations, providing clear and accessible content in French with multilingual support via Weglot. The business model is that of a public sector municipal government, focusing on transparency and citizen engagement. Technically, the site is built on Drupal 10, leveraging modern web technologies such as Google Tag Manager for analytics and Weglot for translations. The site demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with room for optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms, though some security headers are not explicitly detected. From a security and compliance perspective, the site includes a comprehensive privacy policy and cookie consent banner aligned with GDPR requirements. However, explicit security policies and incident response contacts are not publicly available. WHOIS data confirms the domain's legitimacy and consistency with the official City of Geneva identity, supporting high trustworthiness. Overall, the website is professional, trustworthy, and well-maintained, serving its public sector role effectively. Strategic improvements could include publishing explicit security policies and enhancing security headers to further strengthen the security posture.

S

Smeetz SA

smeetz.com

65

Smeetz SA operates a sophisticated unified commerce platform tailored for visitor attractions such as amusement parks, zoos, museums, and live venues. Their AI-powered solutions focus on optimizing ticketing, retail, and F&B sales through centralized inventory management, dynamic pricing, marketing intelligence, and performance insights. The company positions itself as a modern leader in the hospitality technology sector, leveraging AI to enhance visitor experience and revenue growth. The website reflects a mature digital presence with professional design, multilingual support, and comprehensive content targeting B2B customers in the hospitality industry. Technically, the website is built on Webflow CMS and integrates multiple modern marketing and analytics tools including Google Tag Manager, Facebook Pixel, Hotjar, LinkedIn Insight Tag, and HubSpot forms. The site is well-optimized for performance, mobile responsiveness, and SEO, demonstrating a high level of digital maturity. Security best practices are observed with HTTPS enforcement and security headers, though explicit cookie consent mechanisms and incident response information are lacking. From a security perspective, the site shows a good posture with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain www.smeetz.com introduces some uncertainty regarding domain registration legitimacy. Despite this, the professional branding, customer testimonials, and active social media presence support the company's credibility. Privacy compliance is partially addressed with a comprehensive privacy policy, but cookie consent and GDPR explicit indicators could be improved. Overall, Smeetz SA presents a trustworthy and professional online presence with strong business and technical foundations. Strategic improvements in privacy compliance and transparency around security policies would further enhance trust and regulatory adherence.

S

Standout GmbH

standout.ch

55

Standout GmbH is a Swiss-based online marketing agency established in 2012, specializing in services such as SEO, Google Ads, social media marketing, lead generation, e-commerce marketing, and digital recruiting. The company holds reputable certifications including Google Premier Partner and Meta Business Partner, positioning it as a credible player in the Swiss digital marketing sector. Their website reflects a professional and modern design with clear navigation and comprehensive service offerings tailored to businesses seeking to enhance their online visibility and lead acquisition. Technically, the website leverages a modern technology stack including Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and Cookiebot for privacy compliance. The use of Craft CMS is inferred from security cookies. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Cookie consent mechanisms are robust, ensuring GDPR compliance. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements security best practices such as CSRF protection and security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy or incident response contact is noted. Overall, the website demonstrates a high level of professionalism, security, and privacy compliance, making it a trustworthy digital presence for Standout GmbH. Strategic recommendations include publishing a security policy, providing incident response contacts, and establishing a vulnerability disclosure program to further enhance trust and security posture.

L

Landidyll Weinhotel Klostermühle

klostermuehle-saar.de

54

Landidyll Weinhotel Klostermühle is a family-run boutique hotel located in Ockfen/Saar, Germany, specializing in wine tourism and regional culinary experiences. The business offers hotel accommodations, a restaurant with regional specialties, wine tastings from its own vineyard, and various leisure activities such as hiking and cycling. The website reflects a strong regional identity and targets tourists interested in nature and wine culture in the Saar and Mosel regions. The company holds multiple certifications that emphasize quality and accessibility, enhancing its market position as a trusted regional hospitality provider. Technically, the website is built on a modern CMS platform (likely Shopware), utilizing JavaScript frameworks, SVG icons, and video content to deliver a rich user experience. It integrates advanced analytics tools including Matomo and Google Analytics 4, alongside a consent management platform to comply with privacy regulations. The site is mobile-optimized, accessible, and SEO-friendly, with clear navigation and multilingual support. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business claims, showing consistent domain registration and no privacy protection, indicating transparency and legitimacy. Overall, the website demonstrates a high level of professionalism, content quality, and compliance with privacy standards, making it a trustworthy digital presence for the hospitality business. Strategic improvements in security headers and incident response disclosures could further enhance its security posture.

P

PAPA RHEIN Hotel & Spa

paparheinhotel.de

54

PAPA RHEIN Hotel & Spa is a modern hospitality business located in Bingen am Rhein, Germany, offering upscale accommodation, spa services, dining, and event hosting. The hotel emphasizes a unique urban style combined with regional cultural elements, targeting leisure travelers, families, and wellness guests. The website reflects a strong market position with multiple awards and a professional digital presence. Technically, the site uses modern web technologies including Angular components, jQuery UI, and Swiper.js, with integrated analytics and consent-based tracking. Security posture is solid with HTTPS and some security headers, though improvements like CSP and security.txt are recommended. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

H

HerzogsPark GmbH & Co. KG

herzogspark.de

54

HerzogsPark GmbH & Co. KG operates a 4-star superior hotel located in Herzogenaurach near Nürnberg, Germany. The hotel specializes in business and seminar accommodations, offering modern event spaces, themed rooms inspired by sports heritage, wellness facilities, and dining options. The website reflects a well-established hospitality business targeting both corporate clients and leisure travelers, including sports teams and families. The company maintains a strong market position with trust certifications and a best price guarantee, enhancing customer confidence. Technically, the website is built on a modern stack likely powered by Shopware CMS, incorporating JavaScript frameworks such as Swiper.js for UI components and Google Analytics for visitor tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices. Consent management is implemented via a recognized platform, ensuring GDPR compliance. From a security perspective, the site enforces HTTPS and integrates cookie consent mechanisms. While some security headers are not explicitly visible, the overall posture is strong with no evident vulnerabilities or exposed sensitive data. The domain registration data aligns with the business identity, supporting legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant, providing a positive user experience and strong business credibility. Strategic recommendations include enhancing security headers, continuous monitoring of third-party scripts, and maintaining up-to-date privacy practices to adapt to evolving regulations.

B

Bowling Room

bowlingroom.com

47

Bowling Room is a regional hospitality and entertainment business operating multiple venues in Germany, offering bowling, billiards, darts, and laser tag activities. The website targets local customers and promotes social and leisure activities. Technically, the site is built on WordPress with Elementor and several Jet plugins, integrating Google Analytics and Tag Manager for tracking. The site implements cookie consent via Borlabs Cookie, indicating some privacy awareness. Security posture is moderate with HTTPS enabled but lacks explicit security headers and a visible privacy policy. WHOIS data is missing, which reduces domain trustworthiness and raises questions about domain registration status. Overall, the site is functional and professional but would benefit from improved transparency and security hardening.

H

Hotel Weingut Weis

hotel-weis.de

54

Hotel Weingut Weis is a family-owned 4-star hotel located in the Ruwertal region near Trier, Germany, offering accommodation, wellness spa services, culinary experiences, and wine tourism through its own winery. The website is professionally designed, well-structured, and targets tourists seeking relaxation, cultural activities, and wine enjoyment. Technically, the site uses modern web technologies including Shopware CMS, Google Analytics 4, and consent management platforms, ensuring GDPR compliance and a good user experience across devices. Security posture is solid with HTTPS and consent mechanisms, though some security headers and policies could be improved. Overall, the domain and website content align with a legitimate hospitality business with strong trust indicators and no suspicious elements.

S

Scherer Gruppe

scherer-gruppe.de

52

Scherer Gruppe is a large, multi-brand automotive dealership group operating in Germany with 37 locations offering new and used vehicles, service, rental, and financing. The website reflects a mature digital presence with modern technologies including analytics and consent management, supporting a professional user experience. Security posture is solid with HTTPS and privacy consent mechanisms, though some security headers and incident response details are missing. Overall, the site is trustworthy and well-branded, targeting both retail and commercial automotive customers.

P

PerNaturam GmbH

pernaturam.de

56

PerNaturam GmbH operates a German-based e-commerce platform specializing in natural animal nutrition and supplements for dogs, cats, horses, and poultry. The company emphasizes natural ingredients, quality control, and veterinary recommendations, positioning itself as a trusted provider with over 30 years of experience. The website supports multiple languages and offers rich educational content including blogs, podcasts, and webinars, enhancing customer engagement and expertise sharing. Technically, the site employs modern analytics tools such as Matomo and Google Analytics with consent management, ensuring compliance with privacy standards. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though some security headers could be improved. Contact information is clearly presented, but formal privacy policies and terms of service were not found in the provided content. Overall, the site is professional, trustworthy, and well-structured, serving a niche retail market effectively.

B

Bellevue Hotelbetriebs GmbH

bellevue-boppard.de

54

Bellevue Hotelbetriebs GmbH operates a well-established hospitality business located in Boppard am Rhein, Germany. The company offers upscale hotel accommodations, gastronomy, wellness, event hosting, and regional tourism experiences. The website reflects a strong market position as a premium family-run hotel with a tradition dating back to 1887, targeting tourists and travelers seeking quality services in the Mittelrhein region. The digital presence is professional, with clear navigation, multi-language support, and comprehensive content about their offerings. Technically, the website leverages modern web technologies including Shopware CMS, JavaScript libraries such as Swiper and Flatpickr, and integrates Google Analytics and Tag Manager for analytics. The site is mobile optimized and includes a consent management platform for GDPR compliance. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies, and contact information is readily available. The WHOIS data aligns with the business information, indicating a legitimate and trustworthy domain registration. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements could include enhancing security headers and publishing incident response information to further strengthen security posture and trust.

M

Möbel Preiss GmbH & Co. KG

moebel-preiss.de

57

Möbel Preiss GmbH & Co. KG operates a medium-sized retail and e-commerce business specializing in furniture, kitchens, and home decoration based in Kastellaun, Germany. The company offers a broad product range including living room, bedroom, kitchen furniture, lighting, and home accessories, supported by a large physical showroom and an online shop with secure payment options. Their market position is that of a regional leader with a strong local presence and growing digital footprint. The website reflects a professional and user-friendly design with clear navigation and relevant content targeting general consumers interested in home furnishings. Technically, the website employs modern JavaScript libraries and tracking technologies such as Google Analytics 4, Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag, all managed with user consent mechanisms. The site uses a proprietary or custom CMS framework named Website22 and demonstrates good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and integrates cookie consent management, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed HTML content. Privacy compliance is strong with comprehensive privacy and cookie policies in German, aligned with GDPR requirements. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Recommendations include enhancing security headers, publishing a security policy, and improving accessibility to further strengthen the security posture and user experience.

H

Hoststar - Multimedia Networks AG

hoststar.ch

73

Hoststar - Multimedia Networks AG is a Swiss-based web hosting and domain registration provider established since 2013. The company offers a wide range of hosting solutions including shared hosting, reseller hosting, virtual servers, SSL certificates, and security services such as SiteLock and VPN. Their market position is that of a reputable mid-sized hosting provider serving individuals and businesses primarily in Switzerland. The website is professionally designed with good content quality and clear navigation, targeting customers seeking reliable and affordable hosting services. Technically, the website is built on Drupal CMS and integrates multiple third-party marketing and analytics tools including Google Analytics, Facebook Pixel, Intercom, and SalesManago. The site is mobile optimized and performs moderately well, though there is room for improvement in accessibility and security headers. HTTPS is properly implemented, ensuring secure communications. From a security perspective, the site follows basic best practices such as HTTPS and offers security-related products. However, it lacks visible security policies, incident response contacts, and comprehensive security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of explicit privacy and cookie policies, which is a notable compliance gap. Overall, the website is trustworthy and legitimate, supported by consistent WHOIS data showing transparent Swiss company ownership and an appropriate domain age. The risk level is moderate, primarily due to privacy compliance shortcomings and limited security policy disclosures. Strategic recommendations include implementing clear privacy and cookie policies, enhancing security headers, and publishing incident response information to improve trust and compliance.

A

AMAG Group AG

cuprapartner.ch

71

The website cuprapartner.ch serves as the official CUPRA partner locator for Switzerland, operated under the AMAG Group AG umbrella, a prominent automotive distributor. It targets consumers interested in CUPRA vehicles by providing a platform to find authorized dealerships and access related services. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, it employs modern web technologies including React, Google Maps API, and tracking tools like Google Tag Manager and Visual Website Optimizer, all integrated with GDPR-compliant cookie consent mechanisms. Security measures are robust, featuring HTTPS, security headers, and no exposed sensitive data, although a dedicated security policy and incident response information are absent. WHOIS data confirms the domain's legitimacy and alignment with the business entity, reinforcing trustworthiness. Overall, the site demonstrates a mature digital presence suitable for its business purpose.

S

Suzuki Schweiz

suzuki.ch

42

Suzuki Schweiz operates as the official Swiss web presence for Suzuki, focusing on promoting and linking to its automobile, motorcycle, and marine product lines. The website serves primarily as a gateway to specialized subdomains dedicated to each product category, targeting consumers and enthusiasts in Switzerland. The business model centers on brand representation and product information dissemination within the transportation sector. Technically, the site employs standard HTML5, CSS, and JavaScript technologies, including the Jssor Slider for visual content and Google Tag Manager for analytics and marketing. The site is moderately optimized for mobile devices and performance but lacks advanced SEO and accessibility features. Security posture is basic; while HTTPS is presumed, no security headers or explicit security policies are present, and no contact or incident response information is provided. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms, which may pose GDPR compliance risks. Overall, the domain registration aligns well with the brand's Swiss presence, indicating legitimacy and trustworthiness.

C

CH Regionalmedien AG

telezueri.ch

61

TeleZüri is a regional media company operating in Zurich, Switzerland, providing local news, television programming, and event coverage. The website offers live streaming, video news articles, and advertising opportunities, targeting residents interested in Zurich regional content. The business is positioned as a key regional media player under the parent company CH Regionalmedien AG. Technically, the website uses modern JavaScript frameworks, integrates with Kaltura for video delivery, and employs consent management and advertising networks to monetize content. Security posture is strong with HTTPS, security headers, and privacy compliance, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, serving a general audience with safe content.

V

von Rotz Online Shop

vonrotz-shop.ch

58

Von Rotz Online Shop is a Swiss-based e-commerce retailer specializing in accessories related to automotive, camping, house, and garden sectors. The website presents a professional and consistent brand image targeting general consumers interested in these product categories. The business operates a niche regional online store with a clear focus on retail sales. Technically, the website leverages modern web technologies including jQuery, Google Tag Manager, Google Analytics 4, and lazy loading for images, built on the JTL Shop e-commerce platform. The site is mobile optimized and demonstrates good SEO practices. Security-wise, the site enforces HTTPS, uses Google reCAPTCHA, and implements cookie consent mechanisms, although it lacks explicit privacy and security policies publicly available. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is secure, functional, and trustworthy but would benefit from enhanced transparency in privacy and terms documentation.

A

Appia Contract GmbH

appia-contract.com

60

Appia Contract GmbH is a medium-sized German company specializing in comprehensive hotel project services including architecture, construction, interior finishing, and custom furniture manufacturing. With over a decade of experience and more than 1000 completed hotel projects, the company positions itself as a trusted design & build partner in the hospitality sector. The website reflects a professional and well-structured digital presence, leveraging WordPress with modern technologies such as UIkit and Google Tag Manager. Privacy and cookie policies are implemented with GDPR compliance, and multiple social media channels enhance their outreach. Security posture is good with HTTPS and domain transfer protections, though DNSSEC is not enabled and no explicit security policy is published. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

N

Nourison

nourison.com

72

Nourison is a well-established retailer specializing in home rugs, carpets, and related home decor accessories. The website presents a professional and consistent brand image, targeting homeowners, interior decorators, and retail customers. The business operates primarily through e-commerce and wholesale channels, offering a variety of branded and custom rug collections. Technically, the site is built on the Magento platform, utilizing modern JavaScript libraries and third-party marketing and analytics tools such as Google Tag Manager, HubSpot, and TikTok Pixel. The site is mobile-optimized and includes a comprehensive cookie consent mechanism, reflecting good privacy compliance practices. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, although security headers are not explicitly detected. The absence of WHOIS data is a notable gap, slightly reducing trustworthiness, but the overall digital maturity and business credibility remain strong. Strategic recommendations include enhancing security headers, adding explicit contact and security policy pages, and implementing a vulnerability disclosure program.