Security Directory

R

RaiseNow

raisenow.ch

72

RaiseNow operates a professional SaaS platform focused on enabling nonprofits, associations, and changemakers to efficiently collect donations and manage payments both locally and globally. The website demonstrates a strong market position with over 54,000 organizations trusting their technology, including well-known NGOs such as UNICEF and Amnesty International. The platform offers a comprehensive suite of fundraising tools, payment acceptance solutions, community engagement features, and integration capabilities, positioning itself as a key player in the nonprofit technology sector. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies including Google Analytics 4, Google Tag Manager, and FontAwesome. The site is mobile-optimized, well-structured, and includes SEO best practices. Cookie consent mechanisms and privacy policies indicate a good level of GDPR compliance. However, explicit security headers are not clearly visible in the provided data, suggesting room for improvement in security hardening. From a security perspective, the site uses HTTPS and implements cookie consent, but lacks publicly visible security policies or incident response contacts. The absence of WHOIS registrant data is a concern but does not currently undermine the site's legitimacy given the professional presentation and reputable client base. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, RaiseNow's website reflects a mature digital presence with solid business credibility and moderate technical sophistication. Strategic recommendations include enhancing security header implementation, publishing security policies, and improving transparency around incident response. Monitoring the WHOIS data situation is advised to ensure ongoing trustworthiness.

Bänziger Hug is a Swiss-based design agency founded in 2011 by Samuel Bänziger and Olivier Hug. The agency specializes in print and interactive design, offering services such as book design, exhibitions, publications, identities, and website design primarily for cultural institutions, businesses, and individuals. The company has a strong market position within its niche, supported by numerous prestigious design awards, indicating a high level of professional recognition and trust. Technically, the website is built using modern web standards including HTML5, CSS3, and JavaScript, with the use of Modernizr for feature detection and Google Analytics for visitor tracking. The site is mobile optimized and performs moderately well, though accessibility features are basic. The absence of a CMS or hosting provider information limits deeper infrastructure insights. From a security perspective, the website benefits from HTTPS with excellent SSL configuration, but lacks important security headers such as Content-Security-Policy and X-Frame-Options. No forms or input fields are present, reducing attack surface, but the absence of privacy and cookie policies indicates compliance gaps. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website content. Overall, the website is professional and trustworthy in appearance and content, but the lack of WHOIS transparency and privacy compliance policies present moderate risks. Strategic improvements in security headers, privacy documentation, and domain registration transparency are recommended to enhance trust and compliance.

N

Nora Vögeli Grafik Design

noravoegeli.com

60

Nora Vögeli Grafik Design is a small, professional design atelier based in Zürich, Switzerland, specializing in art direction, graphic design, branding, and spatial design. The website showcases a comprehensive portfolio of projects including corporate design, event branding, publications, and digital applications, targeting clients seeking creative design services primarily in the Zürich region. Technically, the site is built on the Squarespace platform, leveraging modern web technologies such as HTTPS with HSTS, Google Fonts, and YouTube embeds, providing a moderate performance and good mobile optimization. Security posture is solid with HTTPS and HSTS, but lacks additional security headers and formal privacy or cookie policies. The absence of WHOIS data limits domain legitimacy verification, though the professional presentation and content quality suggest a legitimate business. Overall, the site is well-designed and functional but would benefit from enhanced privacy compliance and clearer contact information to improve trust and security.

J

Julian Humm Gestaltung und Entwicklung

julianhumm.com

60

Julian Humm Gestaltung und Entwicklung is a small design and development office based in Basel, Switzerland, specializing in visual communication and publication solutions for both digital and analog spaces. The company offers services including branding, web design, poster creation, and identity development, targeting clients who require professional visual communication systems. The website showcases a portfolio of projects and client references, indicating a solid market presence within its niche. Technically, the website is built using modern technologies such as Svelte and Swiper.js, with good mobile optimization and a clean, professional design. However, there is a lack of privacy and cookie policies, and no security headers were detected, which are areas for improvement. The WHOIS data for the domain is missing or indicates the domain may not be registered, which is unusual but the website content and contact information suggest a legitimate business. Overall, the site is safe, professional, and trustworthy, but would benefit from enhanced security and privacy compliance measures.

The Meldestelle Sportmanipulation website serves as an official German government-related platform dedicated to combating manipulation in sports competitions and betting fraud. It provides a secure and anonymous whistleblower system, supported by a reputable law firm, to encourage fair play and integrity in sports. The site targets sports enthusiasts, athletes, and the general public interested in maintaining fairness in sports. The business model is a state-mandated reporting and advisory service, positioning itself as a trusted authority in the niche of sports integrity. Technically, the website is built using the Government Site Builder CMS, employs modern web standards including HTML5, CSS3, and JavaScript, and integrates Matomo for web analytics with a clear cookie consent mechanism. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a moderate to good digital maturity. Hosting details are not explicit, but HTTPS is enforced, ensuring secure communications. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent with opt-out options. However, no explicit security headers were detected in the provided data, and there is no published security or incident response policy. No vulnerabilities or exposed sensitive data were found. The absence of a vulnerability disclosure policy or security.txt file suggests room for improvement in transparency and incident handling readiness. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and official branding. The WHOIS data is minimal but does not raise significant concerns given the governmental nature of the site. Recommendations include publishing formal security policies, adding security headers, and establishing a vulnerability disclosure mechanism to enhance security posture and user trust.

S

Sparkasse

sportabzeichen-wettbewerb.de

57

The Sportabzeichen-Wettbewerb website is a professionally designed platform promoting a national sports competition initiative supported by the Sparkassen-Finanzgruppe in Germany. It focuses on encouraging both athletic achievement and social engagement through the Deutsches Sportabzeichen. The site offers information about participation, prizes, and related projects, targeting athletes, sports clubs, and community organizers. Technically, the site is built on a Laravel-based framework, uses modern web standards including HTTPS, and integrates Google Analytics for visitor tracking. The cookie consent mechanism is robust and GDPR compliant. Security posture is solid with CSRF protections and secure cookie handling, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-branded, and serves its non-profit sports promotion mission effectively.

T

tabmag / publish! Content-Marketing-Agentur

tabmag.de

55

tabmag is a German-based digital magazine platform and content marketing service provider specializing in transforming traditional print content into interactive, responsive digital magazines. The company operates under the umbrella of the publish! Content-Marketing-Agentur and targets organizations such as companies, associations, and clubs seeking modern digital publishing solutions. The website demonstrates a high level of digital maturity with modern technologies, multimedia content, and interactive tools like a cost-saving calculator. Security posture is solid with HTTPS and form validation, though some enhancements like CSP headers and incident response contacts could improve it further. Privacy compliance is well addressed with clear privacy and terms pages, though a cookie consent mechanism is not evident. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

K

Kontainer

kontainer.com

62

Kontainer is a Denmark-based technology company specializing in digital asset management, product information management, and image bank solutions. Established in 2000, it serves businesses seeking efficient digital content management through a B2B SaaS platform. The website reflects a professional and consistent brand image with a focus on user experience and mobile responsiveness. Technically, the site leverages modern frameworks such as Nuxt.js and Vue.js, ensuring a contemporary and performant digital presence. Security posture is solid with HTTPS enabled and domain protections in place, though improvements like DNSSEC and explicit security policies could enhance trust further. Overall, Kontainer presents a credible and mature digital footprint suitable for its market segment.

W

wemakeit Ltd

wemakeit.com

69

wemakeit Ltd operates a well-established crowdfunding platform specializing in creative projects such as art, music, literature, and innovative ideas. Founded in 2014 and based in Switzerland, the platform has facilitated over 7,900 successful projects with a strong community of over 720,000 members. The business model centers on enabling project creators to raise funds through community engagement and offers additional services such as crowdfunding consultancy and webinars. The platform maintains a consistent brand presence and leverages partnerships with various specialized channels to expand its reach. Technically, wemakeit employs a modern web stack including Ruby on Rails with Turbo (Hotwire) for dynamic content delivery, Cloudinary for image hosting, and Matomo Tag Manager for analytics. The website is well-optimized for mobile devices, accessible, and SEO-friendly, though performance is moderate. Hosting details are partially known, with domain registration through EuroDNS S.A. The platform uses HTTPS with valid SSL but lacks DNSSEC and some security headers, which are recommended for enhanced security. From a security perspective, the platform demonstrates good practices such as HTTPS enforcement and CSRF protection in forms. However, the absence of DNSSEC, security headers, and explicit incident response contacts indicates areas for improvement. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but the lack of a cookie consent mechanism is a notable gap given GDPR requirements. No critical vulnerabilities or adult content were detected, and the website is fully accessible without WAF blocking. Overall, wemakeit presents a trustworthy and professional crowdfunding platform with strong business credibility and a solid technical foundation. Strategic enhancements in security headers, DNSSEC, and privacy consent mechanisms would further strengthen its security posture and compliance standing.

The website garancianakupu.sk operates as a Slovak e-commerce purchase guarantee platform affiliated with Heureka Group a.s. It provides customers with assurances on purchases made through the Heureka Košík system, including money-back guarantees and support for order issues. The site targets Slovak online shoppers and certified e-shops, positioning itself as a trusted intermediary in the Slovak e-commerce market. The business model revolves around enhancing consumer confidence and supporting e-shops with certification and guarantee services. Technically, the website uses AngularJS for frontend rendering, includes Google Analytics for tracking, and employs modern HTML5 and CSS3 standards. The site is mobile-optimized and presents a professional design with clear navigation. However, it lacks advanced accessibility features and modern frameworks. No CMS or hosting provider details are evident from the content. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks visible security headers and published security or incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. The domain WHOIS data is consistent and indicates a legitimate, established business presence since 2009. Overall, the website is functional, trustworthy, and professionally presented but would benefit from enhanced privacy compliance, security hardening, and transparency regarding data protection and incident response.

G

GWeb Solutions GmbH

gweb.de

62

GWeb Solutions GmbH is a German-based digital transformation consultancy specializing in helping organizations digitize their processes and structures. With over 12 years of experience and more than 450 completed projects, the company positions itself as a reliable and experienced partner in the technology sector. Their website reflects a professional image with a clear focus on digital innovation and client success. The company targets organizations seeking to modernize and digitally transform their operations. Technically, the website employs modern web technologies including jQuery, FontAwesome, and integrates privacy-conscious tools such as self-hosted Matomo analytics and Google reCAPTCHA for form protection. The presence of a comprehensive cookie consent mechanism and privacy policy indicates good GDPR compliance. Security-wise, while HTTPS is used and forms are protected with reCAPTCHA, the site lacks visible security headers and published security policies, suggesting room for improvement in security posture. Overall, the website is well-designed, user-friendly, and trustworthy, with no signs of malicious content or blocking mechanisms.

M

MGS Loib GmbH

mgs.de

10

MGS Loib GmbH is a medium-sized German retail company specializing in wholesale distribution of sheet music and related music products. The company operates multiple physical branches and serves music retailers and business partners. As of July 1, 2024, the wholesale operations are being transferred to music distribution services (mds) in Mainz, indicating a strategic business transition. The website is professionally designed using WordPress and the Kadence theme, providing a good user experience with clear navigation and relevant content primarily in German. Technical infrastructure includes modern web technologies and privacy-conscious analytics via Matomo. Security posture is adequate with HTTPS enforced, though improvements in security headers and explicit incident response policies are recommended. Privacy compliance is partially met with a privacy policy present but lacking a cookie consent mechanism. Overall, the website is trustworthy and professional, reflecting a credible business presence in the music wholesale retail sector.

V

Værsågod AS

vaersaagod.no

60

Værsågod AS is a small Norwegian digital agency specializing in modern, accessible website development. Founded in 2012, the company offers front-end and back-end development, creative coding, CMS solutions, and ongoing support and maintenance. Their client portfolio includes reputable Norwegian organizations, positioning them as a trusted boutique agency in the technology sector. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site uses modern web technologies and CDNs, ensuring fast performance and good accessibility. Security posture is solid with HTTPS enforced, though explicit security headers and privacy policies are absent, representing areas for improvement. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is reasonable for this business type. Overall, the website demonstrates high professionalism and trustworthiness with minor gaps in privacy compliance and security disclosures.

B

Bigadan A/S

bigadan.com

60

Bigadan A/S is a Denmark-based company specializing in the development, construction, operation, and ownership of modular biogas systems and circular energy ecosystems. With over 40 years of experience, the company serves industrial, agricultural, municipal, and energy consumer clients by providing end-to-end solutions including biomass sourcing, biogas plant construction, biomethane production, biogenic CO2 capture, and nutrient-rich fertilizer production. The website reflects a mature and professional business with a strong market position in the renewable energy sector. Technically, the website is well-implemented with modern technologies, fast performance, and excellent mobile optimization. Security posture is good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with clear privacy and cookie policies, though no explicit consent mechanism is present. Contact is primarily via web forms, with no direct emails or phone numbers published. Overall, the site is trustworthy, professional, and aligned with industry standards.

D

dialoop GmbH

dialoop.de

56

dialoop GmbH is a specialized technology service provider based in Germany, offering a broad range of digital communication solutions including web development, email marketing, mobile applications, customer loyalty management, and user experience design. The company positions itself as an experienced partner with over two decades of market presence, serving both enterprises and agencies with tailored digital services. Their website reflects a professional and consistent brand image, supported by detailed client references and comprehensive service descriptions. Technically, the website employs a modern technology stack including PHP frameworks (Symfony, Laravel), JavaScript frameworks, and CMS platforms like TYPO3 and WordPress. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security measures include HTTPS enforcement, CSRF tokens, and captcha on forms, but lack some HTTP security headers and cookie consent mechanisms. From a security perspective, the site demonstrates good practices with secure form handling and no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure reduces transparency. WHOIS data is limited due to DENIC privacy policies but shows consistent DNS management aligned with the brand. Overall, dialoop GmbH presents a trustworthy and professional digital presence with solid technical and security foundations. Strategic improvements in privacy compliance and security transparency would further enhance their risk posture and client trust.

S

Stadt Wallisellen

wallisellen.ch

61

Stadt Wallisellen operates an official municipal website providing comprehensive information and digital services to its residents and stakeholders. The site covers a broad range of topics including local politics, administration, education, culture, and public services, positioning itself as the primary digital interface for the community. The website demonstrates a solid technical infrastructure using modern web standards, responsive design, and privacy-conscious analytics (Matomo) with user consent mechanisms. Security posture is good with HTTPS enforced and secure form implementations, though some security headers could be improved. Overall, the site is trustworthy, professional, and well-aligned with its government entity status.

R

Raiffeisen Schweiz Genossenschaft

raiffeisen.ch

75

Raiffeisen Schweiz Genossenschaft is the second largest Swiss banking group, specializing in retail and corporate banking services. Founded in 1899, it offers a broad range of financial products including mortgages, investment services, insurance, and e-banking solutions. The website targets both private and business customers, providing comprehensive information and digital services. Technically, the site is built on Adobe Experience Manager with modern JavaScript frameworks and is optimized for mobile and accessibility. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site reflects a mature, trustworthy financial institution with a professional online presence.

O

OSTWIND

ostwind.ch

56

OSTWIND is a regional public transport tariff association serving multiple Swiss cantons and Liechtenstein, uniting 30 transport companies under a unified zonal fare system. The website provides comprehensive information on ticketing, subscriptions, customer service, and travel tips, targeting public transport users in the region. The digital infrastructure employs modern web technologies including web components and embedded video content, with Google Tag Manager for analytics and marketing. The site is well-designed, mobile-optimized, and accessible, offering a positive user experience. Security posture is good with HTTPS enforced, but could be improved by adding standard security headers and publishing explicit security policies. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, OSTWIND’s website is professional and trustworthy, serving its audience effectively with room for security and compliance enhancements.

G

Golf Obere Alp e.V.

golf-oberealp.de

63

Golf Obere Alp e.V. is a regional golf club located in Germany's Schwarzwald region, offering a 27-hole golf course, training, tournaments, and hospitality services. The website is built on TYPO3 CMS and uses modern frontend technologies such as jQuery, Swiper.js, and FontAwesome. The site is well-structured with good content quality, including frequent news updates and event information, targeting golf enthusiasts and club members. While the site employs HTTPS and a cookie consent mechanism, it lacks explicit privacy and terms of service pages, and no direct contact information is found in the HTML content. Security headers and incident response policies are not evident, indicating room for improvement in security posture. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact channels.

G

Golfclub Engelberg-Titlis

golfclub-engelberg.ch

68

Golfclub Engelberg-Titlis operates a well-established 18-hole golf course located in Engelberg, Switzerland, offering a blend of sport and nature with a mild mountain climate. The club targets golf enthusiasts including guests, members, juniors, and seniors, providing services such as golf lessons, tournaments, a pro shop, and seasonal restaurant facilities. The website reflects a strong community focus and regional market position, supported by a GEO certification that underscores environmental and operational standards. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies with good SEO and mobile optimization. Security posture is robust with HTTPS, security headers, and secure login forms, though explicit security policies and incident response contacts are absent. Privacy compliance is addressed through a cookie consent mechanism and a privacy information page, indicating GDPR awareness. Overall, the site is professional, trustworthy, and content-rich, supporting the club's business credibility and member engagement.

V

Værsågod AS

vrs.gd

60

Værsågod AS is a small Norwegian digital agency specializing in the development of modern, accessible, and visually engaging websites. Founded in 2012, the company offers front-end and back-end development, creative coding, CMS solutions, and ongoing support and maintenance. Their client portfolio includes reputable organizations such as Snøhetta, Oslo-Filharmonien, and Bane NOR, positioning them as a trusted boutique agency in the Norwegian market. The website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the site employs modern web technologies, including HTTPS, CDNs, and optimized media delivery, ensuring fast performance and good mobile responsiveness. However, the absence of explicit privacy and cookie policies indicates a compliance gap that should be addressed. Security posture is solid with HTTPS and no visible vulnerabilities, but could be improved by adding security headers and vulnerability disclosure mechanisms. Overall, the domain appears legitimate despite the lack of WHOIS data, likely due to registry privacy policies. The site is safe for general audiences and demonstrates high professionalism and trustworthiness.

T

Treets Venner

treetsvenner.no

43

Treets Venner is a Norwegian non-profit organization dedicated to the use, preservation, and maintenance of trees and vegetation. The website serves as an educational and advocacy platform targeting environmentally conscious individuals and communities interested in tree conservation. The organization operates primarily through membership engagement, events, and informational content. The website is built on WordPress using the Twenty Fourteen theme and integrates Google Analytics and Jetpack for analytics and site management. While the site is well-structured, mobile-optimized, and secure with HTTPS, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. No direct contact information or security incident response details are provided, which could impact user trust and compliance. Overall, the site presents a professional and trustworthy image consistent with a small non-profit entity with a long-standing domain registration dating back to 2009.

S

SproutVideo

sproutvideo.com

75

SproutVideo is a well-established video hosting and live streaming platform targeting businesses and enterprises. Founded in 2010, it offers a comprehensive suite of video marketing, analytics, and privacy tools designed to help companies securely share and analyze video content. The platform is trusted by Fortune 500 companies and thousands of small and medium-sized organizations, positioning itself as a reliable and enterprise-ready solution in the video hosting market. The website reflects a mature digital presence with professional design, clear navigation, and extensive marketing and analytics integrations. Technically, SproutVideo leverages modern web technologies including HTML5, JavaScript, and CSS3, supported by AWS infrastructure and Cloudfront CDN for performance and scalability. The site integrates multiple analytics and tracking services such as Google Analytics, Facebook Pixel, TikTok Analytics, LinkedIn Insight Tag, and Microsoft Clarity, indicating a sophisticated approach to user engagement and marketing optimization. Mobile optimization and accessibility are well addressed, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with a strong SSL configuration and uses domain transfer protection. However, it lacks DNSSEC and explicit security headers, and does not publish a dedicated security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is supported by clear privacy and cookie policies with consent mechanisms, aligning with GDPR requirements. Overall, SproutVideo demonstrates a strong business credibility and technical maturity with a high level of professionalism and trustworthiness. Strategic recommendations include enhancing DNS security with DNSSEC, implementing security headers, and publishing security and vulnerability disclosure policies to further strengthen the security posture and transparency.

T

Ten4

ten4design.co.uk

72

Ten4 is a UK-based digital agency specializing in research, strategy, design, and development services for ambitious organizations. The company serves a diverse client base including prestigious institutions such as Royal Museums Greenwich, BAFTA, Channel 4, and University College London, positioning itself as a reputable player in the digital services market. Their offerings encompass UX/UI design, API integrations, content management, and secure hosting, reflecting a comprehensive digital service portfolio. The website demonstrates a high level of professionalism with rich multimedia content and clear navigation, targeting organizations seeking digital transformation and growth.

L

L'Ordre des architectes

ordredesarchitectes.be

44

L'Ordre des architectes is the official professional association representing architects in the francophone and germanophone regions of Belgium. The website serves as a comprehensive resource for architects, trainees, and the public, offering directories, news, job listings, and architectural project showcases. The organization holds a strong market position as the authoritative body for architectural practice in Belgium. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and utilizes libraries such as Swiper.js and Redactor editor. The site is hosted by OVH, a reputable provider, and demonstrates good mobile optimization and SEO practices. Security posture is moderate with HTTPS usage and cookie consent mechanisms in place, but lacks visible security headers and formal security policies. Overall, the site is professional, trustworthy, and content-rich, though it could improve privacy policy visibility and security disclosures.

B

Bosch Sicherheitssysteme GmbH

boschsecurity.com

69

Bosch Sicherheitssysteme GmbH operates a professional corporate website focused on security and safety systems, particularly fire alarm and detection technologies. The company is positioned as a large enterprise within the technology and manufacturing sectors, serving industrial and commercial clients globally. The website reflects a mature digital presence with consistent branding and comprehensive content about their realignment and product offerings. Technically, the site employs modern web technologies including Google Tag Manager and custom privacy consent management, ensuring GDPR compliance and user privacy. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and a dedicated security policy page are absent. WHOIS data is unavailable from the raw output, which is unusual but the website's professional nature and corporate branding strongly support legitimacy. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

C

Carmody Groarke

carmodygroarke.com

68

Carmody Groarke is a London-based architecture practice established in 2006, specializing in cultural, heritage, and innovative architectural projects. The website serves as a professional portfolio showcasing their key projects, publications, and news updates, targeting clients and stakeholders in the architecture and real estate sectors. The firm positions itself as an established player with a focus on research, innovation, and urban heritage. Technically, the website is built using modern web technologies including React and Next.js, with content managed via Sanity CMS. The site demonstrates good mobile optimization and user experience, though some SEO and accessibility features could be enhanced. Performance is moderate with a well-structured layout and clear navigation. From a security perspective, the site uses HTTPS with a valid SSL certificate but lacks DNSSEC and security headers, which are recommended to improve security posture. No explicit security policies or incident response information is provided, indicating room for improvement in transparency and compliance. Overall, the website is professional and trustworthy with no signs of malicious content or blocking mechanisms. Privacy and cookie policies are present but basic, and no contact emails or phone numbers are explicitly listed on the homepage. Strategic recommendations include enhancing security headers, adding detailed security and incident response policies, and improving privacy compliance disclosures.

C

Caruso St John Architects

carusostjohn.com

54

Caruso St John Architects is an internationally recognized architecture firm specializing in well-crafted architectural projects, renovations, and exhibition designs. The firm has a strong market position with numerous awards, lectures, and publications highlighting their expertise and influence in the architecture sector. Their website reflects a professional and consistent brand image targeting clients and stakeholders interested in high-quality architectural services. The business operates primarily in the real estate and architectural design industry, based in the United Kingdom, with a domain age consistent with a mature and established practice. Technically, the website employs standard web technologies such as HTML5, CSS3, and JavaScript, hosted by GoDaddy.com, LLC. The site is moderately performant with good mobile optimization and accessibility features. However, there is room for improvement in security configurations, including enabling DNSSEC and implementing security headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies, and no incident response or vulnerability disclosure information is provided. The security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. No critical vulnerabilities or exposed sensitive data were detected. The website content is safe for general audiences, with no adult or questionable content. Overall, the site demonstrates high professionalism and trustworthiness but would benefit from enhanced privacy and security practices to align with best practices and regulatory requirements. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear incident response and vulnerability disclosure channels to strengthen trust and compliance.

W

Wright & Wright Architects LLP

wrightandwright.co.uk

68

Wright & Wright Architects LLP is a London-based award-winning architectural practice specializing in sustainable, contextual, and innovative design primarily for the culture and education sectors. Their portfolio includes Passivhaus-certified projects and a strong commitment to carbon reduction and energy efficiency. The website reflects a professional and well-established firm with a clear focus on quality and sustainability. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Vimeo video integration, Google Tag Manager, and Typekit fonts. It is well-optimized for performance, mobile responsiveness, and accessibility, providing a seamless user experience. The presence of cookie consent management and privacy policies indicates good digital maturity and compliance with privacy regulations. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a public security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS lookup failed due to querying a subdomain rather than the domain itself, but the website's professionalism and trust indicators suggest legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving accessibility features to further strengthen security posture and user trust.

D

David Chipperfield Architects

davidchipperfield.com

63

David Chipperfield Architects is a well-established international architectural practice founded in 1985, with offices in multiple global cities. The company provides architectural design and related cultural and research services, targeting clients interested in high-quality architectural projects. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content about projects and news. Technically, the site uses modern web standards, is mobile optimized, and employs privacy-focused analytics. Security posture is good with HTTPS and domain protection measures, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with a clear privacy policy, but lacks a cookie consent mechanism. Overall, the website is trustworthy and professionally managed, supporting the company's market position as a leading architectural firm.

DRMA AS is a Norwegian architecture and planning firm established in 2006, specializing in community-focused architectural design, planning, placemaking, and landscape architecture. The company positions itself as a local expert with a global outlook, demonstrated by participation in international exhibitions and collaborations. Their website showcases multimedia content highlighting their projects and approach, targeting clients interested in innovative and community-driven architectural solutions. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Mapbox GL JS for mapping features. The site is mobile-optimized with good design quality and user experience, though some accessibility and SEO optimizations could be improved. No CMS or hosting provider details were identified. From a security perspective, the site uses HTTPS with good SSL configuration but lacks security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No forms or analytics scripts were detected, indicating minimal data collection and tracking. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, DRMA's website is professional and trustworthy but would benefit from enhanced privacy compliance, security headers, and accessibility improvements to strengthen its security posture and regulatory adherence.

Transborder Studio is a small architecture practice founded in 2013, specializing in architecture, urbanism, and interior design with a focus on sustainable and cultural projects. The website serves as a portfolio showcasing key projects primarily located in Norway and Venice. The business targets clients interested in green living and cultural spaces, positioning itself as a niche player in the architecture sector. Technically, the website uses modern web standards with HTML5, CSS3, and JavaScript, and images are delivered via the imgix CDN. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, and no contact information or incident response details are provided, which impacts trust and compliance. Overall, the site is professional and functional but could improve in transparency and security best practices.

E

EnergieSchweiz

local-energy.swiss

66

The website local-energy.swiss represents EnergieSchweiz, a Swiss federal government program aimed at promoting energy efficiency and renewable energy through voluntary measures targeted at cities, municipalities, and regions. The site provides information on various programs such as project funding, energy regions, smart city initiatives, and mobility solutions. The content is professionally presented, consistent with Swiss government branding, and designed to serve a public sector audience. Technically, the website employs modern web standards with responsive design and uses MailerLite for email marketing. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and privacy compliance mechanisms such as cookie consent and privacy policies. WHOIS data is privacy protected, which is typical for government-related domains, and the domain appears legitimate and consistent with its stated purpose. Overall, the site is trustworthy and serves as an authoritative resource for energy-related programs in Switzerland.

B

Bundesamt für Umwelt BAFU

onlinetool-klimaanpassung.ch

65

The website www.onlinetool-klimaanpassung.ch is an official Swiss government platform operated by the Bundesamt für Umwelt (BAFU) under the Eidgenössisches Departement für Umwelt, Verkehr, Energie und Kommunikation (UVEK). It provides an online tool aimed at Swiss municipalities to help them understand and adapt to local climate change risks. The platform offers localized hazard information and practical measures based on experiences from comparable communities, positioning itself as a trusted resource for public sector climate adaptation efforts. Technically, the site is built using modern web technologies including Angular 17.3.8 and Kendo UI components, ensuring a contemporary user experience. The site is multilingual (German, French, Italian) and includes video content to engage users. While the site is moderately optimized for performance and mobile use, there is room for improvement in accessibility and SEO. No major technical issues or vulnerabilities were detected in the provided HTML content. From a security perspective, the site uses HTTPS and employs some best practices such as disabling video downloads. However, explicit security headers are not visible in the HTML content, and no vulnerability disclosure or incident response information is provided. Privacy compliance is partially addressed with a privacy and contact page, but no cookie consent mechanism is evident. Overall, the security posture is adequate but could be enhanced with additional headers and transparency. The overall risk assessment is low given the official nature of the site, absence of suspicious content, and consistent WHOIS data confirming legitimacy. Strategic recommendations include implementing security headers, adding cookie consent, improving accessibility, and publishing a vulnerability disclosure policy to strengthen trust and compliance.

D

Das Gebäudeprogramm

dasgebaeudeprogramm.ch

68

Das Gebäudeprogramm is a Swiss government-supported initiative focused on promoting energy efficiency in buildings through subsidies and consulting. The website serves as an information hub for private homeowners and builders in Switzerland, providing detailed guidance on energy-saving measures, subsidy applications, and success stories. The program is positioned as a key pillar in Swiss energy and climate policy, backed by federal and cantonal authorities. Technically, the website employs modern web standards with HTTPS, security headers, and Matomo analytics, reflecting a mature digital infrastructure. The security posture is strong with no evident vulnerabilities, though privacy compliance could be enhanced by adding cookie consent mechanisms and explicit data retention policies. Overall, the site is professional, trustworthy, and well-aligned with its governmental mission.

O

okaj zürich

okaj.ch

47

okaj zürich is a well-established non-profit umbrella organization dedicated to coordinating and supporting open, associative, and church-based child and youth work in the canton of Zürich, Switzerland. With a history spanning 100 years, it serves approximately 600 member organizations and operates under a mandate from the canton government. The website effectively communicates its mission, projects, and events, targeting professionals in youth work, government officials, and member organizations. The organization emphasizes education, networking, and advocacy through various projects and publications.

station.plus is an online TV station dedicated to communicating architecture as a discipline that impacts society and everyday life. The platform uses video content to explore architectural themes beyond traditional plans and models, emphasizing societal and political implications. The website presents a rich catalog of documentary series and thematic content aimed at a broad audience interested in architecture and its broader context. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and embeds YouTube videos for content delivery. The site is mobile optimized with good navigation and content relevance. However, there is a lack of visible privacy, cookie, or terms of service policies, and no contact or business registration information is provided, which impacts trust and compliance. Security headers and explicit security policies are not detected, suggesting room for improvement in security posture. WHOIS data is not publicly available due to privacy protections, which is common for media platforms but reduces transparency. Overall, the site is professional and content-rich but would benefit from enhanced privacy, security, and contact transparency.

A

ARCH+ Verlag GmbH

archplus.net

57

ARCH+ Verlag GmbH operates a well-established German architecture and urbanism magazine with a strong digital presence. The website serves as a platform for magazine sales, event promotion, and architectural discourse, targeting professionals, students, and enthusiasts in the architecture sector. The business model centers on publishing quarterly issues in print and digital formats, supplemented by events and advertising. The company holds a leading position in its niche market in Germany with international outreach through English content and social media engagement. Technically, the website employs modern web standards, including HTML5, CSS3, and JavaScript, with embedded video content and Google Tag Manager for analytics and marketing. The site is hosted on Namespace4You infrastructure and shows moderate performance with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though improvements are recommended such as enabling DNSSEC and adding security headers. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and aligns well with the company's business objectives.

N

New Generations

newgenerationsweb.com

36

New Generations is a European media and cultural platform focused on emerging architectural practices since 2013. It provides a space for knowledge exchange, events, publications, and networking for architects across Europe. The website is built on SilverStripe CMS, uses modern web technologies including Bootstrap and jQuery, and integrates Google Analytics and reCAPTCHA for user interaction and spam protection. The security posture is moderate with HTTPS enabled and reCAPTCHA implemented, but lacks some security headers and DNSSEC. Privacy and cookie policies are absent, which impacts compliance. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

R

Reka

reka.ch

70

Reka operates as a Swiss-based company specializing in family-friendly holiday and leisure services, primarily through its Reka-Card discount payment system and holiday offerings in Switzerland and Europe. The website reflects a professional and consistent brand presence targeting families and leisure travelers. Technically, the site employs modern web standards including HTML5, CSS3, and Bootstrap grid, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks visible security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance and security transparency are recommended to enhance trust and compliance.

A

Avacon AG

avacon-shop.de

66

Avacon AG operates the Avacon Shop, an e-commerce platform specializing in energy-related products and services including electromobility, photovoltaic systems, energy storage, and electrical installations. The website targets consumers and businesses in Germany seeking comprehensive energy solutions. The platform is built on the Shopware CMS and hosted by Hetzner, leveraging modern web technologies and marketing tools such as Google Tag Manager and Facebook Pixel. The site features a professional design with good navigation and mobile optimization, supporting customer account management and product browsing. Security posture is adequate with HTTPS and secure forms, though lacks explicit security headers and published privacy or cookie policies. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate business presence.

The Federal Ministry of Food and Agriculture (BMLEH) operates an official government website providing comprehensive information on topics such as food and nutrition, consumer protection, farming, animal welfare, rural regions, forests, fisheries, international affairs, and digitalisation. The site targets the general public, stakeholders in agriculture and food sectors, and international partners, serving as a key communication and service platform for the ministry. The website is well-structured, professionally designed, and consistent with government branding standards. Technically, the website is built on the Government Site Builder CMS platform, utilizing modern web standards including HTML5, CSS3, and SVG graphics. It incorporates Matomo analytics for anonymous visitor statistics and implements a granular cookie consent mechanism compliant with GDPR. Mobile optimization and accessibility features are well addressed, ensuring a good user experience across devices. From a security perspective, the site enforces HTTPS with excellent SSL configuration and includes standard security headers such as Content-Security-Policy and Strict-Transport-Security. The cookie consent banner clearly distinguishes necessary cookies from optional tracking and third-party content cookies. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, representing areas for improvement. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. The domain appears legitimate and consistent with official government use. No WAF or content blocking was detected, allowing full content accessibility. Strategic recommendations include publishing detailed security policies, providing incident response contact channels, and establishing a vulnerability disclosure process to enhance security posture and transparency.

W

Worldsoft AG

worldsoft.info

68

Worldsoft AG is a well-established Swiss technology company specializing in comprehensive web project solutions including domain registration, website building, email marketing, online shops, CRM, and hosting services. With over 25 years of experience, they serve a broad business audience across Europe, positioning themselves as a reliable and professional provider. Their website reflects a mature digital presence with clear branding, extensive product offerings, and strong customer trust indicators such as high Google review ratings and multiple certifications. Technically, the website employs modern web technologies including progressive web app capabilities, custom CMS, and third-party widgets for enhanced user engagement. The site is well-optimized for mobile devices, fast loading, and SEO-friendly. However, some security best practices like explicit security headers and published incident response policies could be improved. From a security perspective, the site uses HTTPS and shows no obvious vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Contact information is transparent and professional, supporting business credibility. Overall, the website and business demonstrate a strong security posture and digital maturity, though there is room for improvement in formalizing security policies and enhancing transparency around vulnerability disclosures. The domain WHOIS data is privacy protected, which is typical for this business type and does not raise immediate concerns. Strategic recommendations include implementing security headers, publishing incident response and vulnerability disclosure information, and maintaining ongoing security audits to sustain trust and compliance.

L

Landeshauptstadt Hannover

herrenhausen.de

52

The website 'Herrenhäuser Gärten - Hannover.de' serves as the official online presence for the Herrenhäuser Gardens and the Museum Schloss Herrenhausen, operated by the Landeshauptstadt Hannover (City of Hannover). It provides comprehensive visitor information, event details, group tours, and ticketing services, targeting tourists, families, and cultural enthusiasts. The site is well-positioned as a leading cultural and botanical attraction in Hannover, supported by consistent branding and professional content. Technically, the website employs modern web standards including HTML5, CSS3, SVG graphics, and JavaScript, with Matomo analytics for user tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The CMS appears custom or proprietary, typical for government sites. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. No vulnerabilities or exposed sensitive data were detected. However, the site lacks a visible cookie consent mechanism and dedicated security or incident response policies, which are recommended for enhanced GDPR compliance and transparency. Overall, the website is trustworthy, professionally maintained, and provides a safe user experience. Strategic improvements in privacy consent and security transparency would further strengthen its compliance and user trust.

8

820

820.ch

56

820 is a Zurich-based architecture studio specializing in innovative designs that integrate technology and environmental considerations. Led by Nicolas König and Lewis Horkulak, the studio emphasizes techno-environmental synergies and speculative spatial scenarios to foster deeper environmental integration. Their portfolio showcases a range of projects, competitions, and installations, highlighting a strong presence in the architectural design community with multiple awards and exhibitions. Technically, the website is built on the Cargo Collective platform, utilizing modern web standards including HTML5, CSS3, and JavaScript. The site is well-optimized for mobile devices and presents a professional, visually rich portfolio. However, there is room for improvement in accessibility and SEO practices. From a security perspective, the site uses HTTPS and does not expose sensitive data or forms, reducing attack surface. Nonetheless, it lacks important security headers and does not provide explicit security policies or incident response contacts, which could be enhanced to improve trust and compliance. Overall, the website reflects a credible and professional architecture studio with a strong digital presence but would benefit from enhanced privacy, security, and compliance disclosures to align with best practices and regulatory requirements.

D

dorsa

dorsa.cc

55

Dorsa is a small, collaborative architecture practice based in Zurich, Switzerland, specializing in innovative architectural design, research, and installations. The website showcases a comprehensive portfolio of projects, academic collaborations, and exhibitions, positioning the collective as a niche player in the architecture and real estate sectors. The technical infrastructure is modern, leveraging Cargo CMS and standard web technologies, with good mobile optimization and moderate performance. Security posture is strong with HTTPS and security headers implemented, though privacy and cookie policies are absent, indicating compliance gaps. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and incident response transparency.

F

Felix Hampe, Pilzkurse und Kartierung

pilz-wissen.de

57

Felix Hampe operates a specialized educational and consulting business focused on mycology, offering mushroom courses, guided walks, consulting, and mapping services primarily in Hessen, Germany. The website presents a clear market position as a niche expert serving mushroom enthusiasts and nature lovers. The business model centers on direct service provision through seminars and personalized courses. Technically, the website is built on a modern stack with a CMS named MyWebsite, featuring responsive design and good SEO practices. Privacy compliance is well addressed with a GDPR-compliant privacy policy and cookie consent mechanisms. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers are absent and could be improved. Overall, the website is professional, trustworthy, and safe for general audiences.

R

Roger Lehner

rogerlehner.com

47

Roger Lehner operates a small, specialized design studio based in Germany, focusing on ambitious projects that emphasize collaboration, creativity, and accessibility. The website showcases a professional portfolio with services including branding, digital and print design, and inclusive design practices. The business targets clients seeking high-quality, dynamic visual communication solutions. Technically, the website employs modern JavaScript libraries such as Swup and Swiper for enhanced user experience and uses Umami Analytics for minimal user tracking. Hosting is provided by hosttech.de, a German hosting provider, aligning with the business location. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and does not implement cookie consent mechanisms, which are areas for improvement. Overall, the website is professional, trustworthy, and well-designed but could enhance compliance and security practices.

A

Amadeu Antonio Stiftung

swipeaway.de

50

SwipeAway is an educational self-learning tool designed to raise awareness about recognizing hostile narratives on social media platforms and to promote digital civil courage. The project is operated by the Amadeu Antonio Stiftung, a reputable non-profit foundation in Germany, and is supported by Stiftung Mercator. The website targets a general audience interested in social media literacy and digital rights education. The business model is non-commercial, focusing on social impact and education. Technically, the website is built using modern web technologies including Nuxt.js, JavaScript, HTML5, and CSS3. It is hosted on servers associated with agenturserver, with good mobile optimization and moderate performance. The site uses HTTPS with an excellent SSL configuration but lacks some security headers that could enhance protection. The site employs minimal user tracking via the privacy-conscious Umami analytics platform. From a security perspective, the website demonstrates a solid baseline with HTTPS enabled and no exposed sensitive data. However, it lacks security headers and a cookie consent mechanism, which are important for GDPR compliance and security best practices. No incident response or security policy information is provided, and no contact information is readily available on the main page, which could impact user trust and compliance. Overall, the website is professional, trustworthy, and focused on educational content without any adult or questionable material. The domain registration data aligns well with the website's stated purpose and parent organization, indicating legitimacy. Strategic recommendations include implementing security headers, adding a cookie consent mechanism, publishing security and incident response policies, and providing clear contact information to enhance trust and compliance.

E

Eisen Optikergeschäft AG

eisen-optiker.ch

49

Eisen Optikergeschäft AG is a small retail optical business based in Winterthur, Switzerland, specializing in eyewear, contact lenses, and related optical services. The website serves as an informational and promotional platform showcasing their products, team, and services, targeting local customers seeking quality optical solutions. The company maintains a consistent brand presence with clear contact details and social media engagement on Instagram and Facebook. Technically, the site is built on the Zeta Producer CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript with jQuery and FlexSlider for UI components. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS but lacks several security headers and explicit security policies, indicating room for improvement in security posture and GDPR compliance. No cookie consent mechanism is present, and privacy policy coverage is basic. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.