Security Directory

V

velo_konzept GmbH

velokonzept.de

48

velo_konzept GmbH is a specialized consultancy and event organizer focused on transforming mobility, particularly promoting cycling and pedestrian transport. The company holds a strong market position within Germany's transportation sector, actively participating in major events such as VELOBerlin and EUROBIKE, and collaborating with governmental bodies like the Bundesministerium für Verkehr. Their services emphasize strategic communication and problem-solving to advance the mobility transition. Technically, the website is built on a modern WordPress platform using Elementor, enhanced with Usercentrics for privacy compliance and Google Tag Manager for analytics. The site demonstrates good performance, mobile optimization, and accessibility standards. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and vulnerability disclosure information. Overall, the business presents a credible and professional digital presence with moderate tracking and good privacy practices.

D

Die Handschutz Experten

handschutz-experten.de

51

Die Handschutz Experten is a specialized German website focused on providing expert advice, guides, and information about hand protection in industrial and craft settings. The site is positioned as a niche content provider under the parent company W+R INDUSTRY GmbH, targeting professionals responsible for workplace safety and hand protection. The business model centers on educational content and advisory services rather than direct sales. Technically, the website is built on WordPress with Elementor and uses modern SEO and analytics tools, including Yoast SEO and Google Analytics with IP anonymization, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and compliant with GDPR, though it lacks explicit security policy or incident response information. Strategic recommendations include enhancing security headers, publishing a security policy, and providing clearer contact channels for incident reporting.

G

GRÜN GmbH Spezialmaschinenfabrik

gruen-gmbh.de

55

GRÜN GmbH Spezialmaschinenfabrik is a well-established German manufacturer specializing in machinery for road construction, roofing, and industrial applications, with a history dating back to 1919. The company serves primarily the German and European markets, offering products such as fall protection systems, roofing devices, road construction machines, and control technology. Their website reflects a mature digital presence built on WordPress with WooCommerce and Elementor, supporting multilingual content and cookie consent mechanisms. Security posture is solid with HTTPS and cookie consent implemented, though some security headers and policies could be improved. The site is professional, trustworthy, and compliant with GDPR, featuring clear contact details and ISO 9001 certification. No critical vulnerabilities or suspicious patterns were detected.

B

Bauverlag

bauverlag.de

63

Bauverlag is a well-established German media company specializing in professional publications and services for the architecture and construction industries. With a history spanning over 100 years, it holds a leading market position in its sector, offering specialist magazines, marketing consulting, and event organization. The website reflects a professional and consistent brand image targeting architects, engineers, and construction professionals. Technically, the site uses modern web technologies including Alpine.js, Swiper.js, and Usercentrics for cookie consent, hosted on Arvato Systems infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are not found in the provided content. Overall, the site is accessible, well-structured, and trustworthy, but could improve compliance transparency by publishing privacy and terms of service pages.

Z

Zine EOOD

bootstrapstudio.io

56

Bootstrap Studio, developed by Zine EOOD, is a well-established desktop application designed for visual web design using the Bootstrap framework. The company targets web designers, developers, students, and freelancers with a one-time purchase business model complemented by optional hosting and smart form services. The website reflects a mature product with a strong market position supported by thousands of users and positive testimonials. Technically, the site employs modern web technologies including Bootstrap, jQuery, Swiper.js, and integrates Paddle for payments and ProfitWell for analytics, ensuring a fast, responsive, and SEO-optimized user experience. Security posture is solid with HTTPS enforced and domain registration consistent with company information, though there is room for improvement in security headers and cookie consent mechanisms. Overall, the website is professional, trustworthy, and compliant with GDPR, making it a reliable platform for its users.

Z

Ziff Davis, Inc

zdbb.net

76

Ziff Davis, Inc is a large, publicly traded digital media and internet company with a diverse portfolio of leading brands across technology, entertainment, shopping, health, cybersecurity, and marketing technology sectors. The company maintains a strong market position with a focus on vertical integration and brand leadership. The website reflects a mature digital presence with comprehensive investor relations, ESG and DEI reporting, and a broad brand showcase. Technically, the site is built on WordPress with modern SEO and accessibility practices, leveraging popular libraries like Swiper.js and Google Tag Manager for analytics and user experience. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and vulnerability disclosures could be improved. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy given the company's public status and detailed corporate disclosures. Overall, the site demonstrates professionalism, trustworthiness, and compliance with privacy regulations.

O

Oldtimermuseen.de

oldtimermuseen.de

38

Oldtimermuseen.de is a specialized online portal dedicated to providing comprehensive information about over 350 oldtimer museums across Germany. It serves classic vehicle enthusiasts and tourists by offering detailed museum guides, interactive maps, and press resources. The website enjoys a solid market position within its niche, supported by partnerships and positive media coverage. Technically, it is built on WordPress with modern plugins and libraries, ensuring good SEO, mobile optimization, and moderate performance. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie management. Overall, the site is trustworthy, professional, and safe for general audiences.

R

RootMetrics

rootmetrics.com

63

RootMetrics is a well-established technology performance benchmarking company specializing in mobile network operator testing and 5G performance measurement. As a recognized industry standard and now a subsidiary of Ookla, RootMetrics provides actionable insights to consumers and businesses to improve their connected technology experiences. The website reflects a professional and consistent brand presence with comprehensive content and multimedia elements that engage its target audience effectively. Technically, the site employs modern JavaScript frameworks such as AngularJS and uses marketing automation tools like Eloqua and HubSpot forms, hosted on AWS infrastructure, ensuring good performance and scalability. Security posture is solid with HTTPS enabled and domain transfer protections in place, though DNSSEC is not enabled and security headers are not evident, indicating room for improvement. Privacy and terms policies are comprehensive and hosted on the parent company domain, demonstrating good privacy compliance. Overall, the website is trustworthy, well-designed, and serves its business purpose effectively.

S

SOS-Verkehrsrecht.de

sos-verkehrsrecht.de

65

SOS-Verkehrsrecht.de is a specialized German legal service provider focusing on traffic law, offering digital and transparent legal consultation and representation for clients facing fines, points, and driving bans. With over 150,000 cases handled and TÜV-certified customer satisfaction, the company holds a strong market position in Germany. Their business model leverages an intuitive online questionnaire and remote legal services to efficiently serve clients nationwide. Technically, the website is built on a modern WordPress platform hosted on AWS, optimized for performance and mobile responsiveness, and integrates GDPR-compliant consent management. Security posture is solid with HTTPS and best practices, though some security headers could be explicitly verified. Overall, the site demonstrates high professionalism, trustworthiness, and compliance, making it a reliable resource for its target audience.

The website www.kongress-absturzsicherheit.de serves as the official platform for the 9th German Fachkongress for Fall Protection scheduled in November 2025. It targets professionals in construction safety, architecture, and building operations, providing a specialized event focused on comprehensive fall protection safety. The site is well-branded, consistent, and supported by reputable partners and sponsors, reflecting a stable market position within its niche. Technically, the site uses modern JavaScript libraries, a consent management platform for GDPR compliance, and is built on the InterRed CMS, delivering a good user experience with mobile optimization and clear navigation. Security-wise, HTTPS is enforced and privacy compliance is strong, though the absence of explicit security headers and incident response information suggests room for improvement. Overall, the site is trustworthy, professional, and compliant with relevant privacy regulations.

B

Bnetwork

bnetwork.com

75

Bnetwork is a well-established accommodation management company founded in 2003, specializing in managing event accommodation worldwide. With nearly two decades of experience, the company supports over 150 events annually across more than 40 destinations in 20 countries. Their business model leverages partnerships with major online travel agencies and real-time communication with properties to provide competitive rates and transparent services. The company maintains a strong market position as a leading accommodation specialist with multiple international offices and recognized certifications such as ISO 20121 and PCI DSS. Technically, the website is built on ASP.NET WebForms with modern JavaScript libraries like jQuery, Bootstrap, and Swiper.js, hosted with domain registration via Amazon Registrar and DNS on AWS. The site is mobile-optimized, has good SEO practices, and includes comprehensive privacy and cookie consent mechanisms. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS, uses domain status locks to prevent unauthorized changes, and implements cookie consent for GDPR compliance. However, it lacks explicit security headers and a published vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The domain WHOIS data aligns well with the website content, indicating legitimacy and consistency. Overall, Bnetwork presents a professional, trustworthy, and secure online presence suitable for its hospitality and event management business. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance their posture.

M

Mannheimer Versicherung AG

mannheimer.de

66

Mannheimer Versicherung AG is a well-established German insurance company with a history dating back to 1879. The company specializes in transport insurance and offers a wide range of insurance products for private customers, commercial clients, and specific sectors such as cyber insurance and classic music insurance. The website reflects a professional and trustworthy brand with clear navigation, comprehensive contact options, and multiple industry certifications. Technically, the site is built on the Liferay platform with modern frameworks like React and uses various JavaScript libraries to enhance user experience. Security measures include a strict Content-Security-Policy and HTTPS enforcement, alongside a consent management platform for privacy compliance. However, some security headers could be improved, and no explicit security or incident response policies are published. Overall, the website demonstrates a mature digital presence with good privacy and security posture, suitable for its business domain.

D

Dublin Bus

dodublin.ie

66

DoDublin is a well-established tourism and transportation service provider in Dublin, Ireland, offering hop-on hop-off bus tours, day tours, airport transfers, and attraction tickets. The company is part of Dublin Bus, the city's public bus provider, which strengthens its market position and trustworthiness. The website is professionally designed with excellent content quality, clear navigation, and good mobile optimization. It integrates modern technologies such as Swiper.js and Google Tag Manager for analytics and marketing purposes. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. The domain registration is consistent with the business claims and supports legitimacy. Overall, the website presents a trustworthy and user-friendly platform for tourists seeking Dublin city tours and related services.

T

Techmates Solutions

techmatessolutions.com

46

Techmates Solutions is a well-established digital agency founded in 2012, specializing in digital marketing, website and mobile application development, UI/UX consulting, and strategic business solutions. The company targets businesses seeking to enhance their digital presence and offers a comprehensive suite of services including strategy, design, engineering, and marketing. Their market position is supported by a portfolio of global clients and a professional online presence. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, Swiper.js, and GSAP, with integration of Google Analytics and Google Tag Manager for tracking. The site is moderately optimized for performance and mobile devices, with good design quality and user experience. However, there is room for improvement in accessibility and SEO optimization. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies, which could pose regulatory risks. Contact information is clearly presented, enhancing business credibility. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and security hardening. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and providing incident response contacts to strengthen trust and compliance.

L

Lebenshilfe Gießen e.V.

lebenshilfe-giessen.de

54

Lebenshilfe Gießen e.V. is a well-established non-profit organization based in Germany, dedicated to supporting people with and without disabilities through a wide range of social services, educational programs, and community initiatives. The organization operates over 70 facilities and services in the Gießen region, employing approximately 1,800 staff members. Their business model focuses on inclusive social support, vocational training, and community integration, supported by several subsidiaries and a strong partnership network with umbrella organizations. The website reflects a professional and comprehensive digital presence, showcasing their extensive service offerings and community engagement. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Swiper.js for interactive elements and Usercentrics for GDPR-compliant consent management. The site is mobile-optimized, accessible, and SEO-friendly, hosted on domaincontrol.com infrastructure. Performance is moderate with good responsiveness and accessibility features. From a security perspective, the site enforces HTTPS and uses a consent management platform, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong with clear privacy and cookie policies in German, aligned with GDPR requirements. Overall, Lebenshilfe Gießen e.V. presents a trustworthy, professional, and secure online presence suitable for a broad audience, with recommendations to enhance security posture by adding formal security policies, incident response information, and security headers to further strengthen trust and compliance.

C

Classic Cars for Sale on Classic Trader | www.classic-trader.com

classic-trader.com

66

Classic Trader operates an international online marketplace specializing in classic cars, offering over 10,000 listings. The website targets classic car enthusiasts and buyers globally, providing a platform to browse and purchase vintage automobiles. The business model centers on facilitating transactions between sellers and buyers through a digital marketplace. Technically, the site employs modern web technologies including Google Analytics, Facebook Pixel, Cookiebot for consent management, and payment integrations with Stripe and PayPal. Hosting and security are enhanced by Cloudflare services, ensuring good performance and protection against bots. Security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response policies are absent. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR-aligned cookie consent. However, the absence of WHOIS data limits domain legitimacy verification, which is a notable risk factor. Overall, the website is professional, secure, and user-friendly, but would benefit from enhanced transparency in domain registration and contact information.

T

Talan

talan.com

77

Talan is a large international consulting and technology services company specializing in digital transformation, data and AI, technology integration, and positive innovation across multiple industries such as energy, transport, banking, manufacturing, insurance, health, retail, luxury, and public services. The website is professionally designed using modern frontend technologies including Nuxt.js and Vue.js, providing excellent mobile optimization, accessibility, and SEO. The security posture is moderate with HTTPS implied but lacks visible security headers and explicit security policies. Privacy compliance is limited as no clear privacy or cookie policies were detected, though cookie consent is managed via Axeptio. The WHOIS data is incomplete or unavailable, which slightly impacts trustworthiness. Overall, the website is high quality and professional but could improve transparency and security disclosures.

W

Winnin

winnin.com

71

Winnin is a technology company specializing in AI-powered cultural intelligence and video behavioral data analytics. Their platform provides brands with predictive insights to optimize cultural relevance and brand engagement in the attention economy. The company targets marketers and brand strategists, offering subscription-based services trusted by major global brands. Technically, the website is built on WordPress with modern tools such as Elementor and Yoast SEO, supported by multiple analytics and marketing integrations including Google Analytics, HubSpot, and Hotjar. The hosting infrastructure appears to leverage AWS DNS services. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and advanced security headers. Privacy compliance is basic with a privacy policy and terms of service present, but no cookie consent mechanism or explicit GDPR compliance statements. Contact information is limited to a contact form, with no direct emails or phone numbers publicly listed. Overall, the website is professional, content-rich, and trustworthy, with room for improvement in security and privacy transparency.

E

ennit GmbH

ennit.net

57

ennit GmbH is a well-established German IT services company specializing in flexible, secure, and sustainable IT infrastructure solutions. With over 20 years of experience, they serve medium to large enterprises across various sectors including technology, banking, trade, and services. Their offerings include virtual data centers, managed IT services, cybersecurity solutions compliant with EU directives such as NIS2, and innovative green IT powered by renewable energy. The company emphasizes compliance with multiple certifications including ISO 27001, PCI DSS, and IDW PS 951, positioning itself as a trusted IT partner in Germany. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as Swiper.js and WOW.js for enhanced user experience. The site is mobile-optimized with good SEO practices, although some accessibility features could be improved. Hosting appears to be geo-redundant within Germany, supporting their claims of data sovereignty and security. From a security perspective, the site enforces HTTPS and demonstrates strong adherence to recognized security standards and certifications. However, there is room for improvement in implementing security headers, cookie consent mechanisms, and providing explicit incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. Overall, ennit GmbH presents a professional, trustworthy, and compliant digital presence aligned with its business goals. Strategic enhancements in privacy compliance and security transparency would further strengthen their security posture and customer trust.

B

Bremen Classic Motorshow

classicmotorshow.de

55

Bremen Classic Motorshow is a well-established event organizer specializing in classic and vintage vehicle exhibitions held annually in Bremen, Germany. The website serves as a comprehensive information portal for visitors, exhibitors, and enthusiasts, showcasing event details, registration, and thematic content. The business holds a strong market position within the classic vehicle community, attracting tens of thousands of visitors and hundreds of exhibitors from multiple countries. Technically, the website is built on WordPress with Elementor and integrates modern web technologies including Gravity Forms and Swiper.js for interactive content. Security posture is solid with HTTPS and cookie consent mechanisms in place, though explicit privacy and security policies are absent. Overall, the site demonstrates professionalism and strong user experience but would benefit from enhanced compliance documentation and explicit contact details.

V

Vendée Globe

vendeeglobe.org

63

The Vendée Globe official website serves as a comprehensive digital platform for the globally recognized solo round-the-world sailing race. It offers detailed race information, skipper profiles, rankings, news updates, and promotes ocean preservation initiatives. The site targets sailing enthusiasts, media, and the general public with a professional and engaging user experience. Technically, the website is built on a modern stack including Drupal CMS, Alpine.js, and Swiper.js, with strong mobile optimization and accessibility features. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms, though explicit privacy and terms of service pages are missing. WHOIS data is unavailable, which slightly impacts domain trust but the overall branding and external references strongly support legitimacy.

M

MFFM SRLS

quickyweb.it

59

Quickyweb is a small Italian web agency specializing in custom digital solutions including professional website development, bespoke management software, AI-powered video and chatbot consultancy, SEO optimization, and eLearning platforms. The company positions itself as a technology innovator for SMEs and professionals seeking to enhance their online presence and digital workflows. The website is well-structured, professionally designed, and mobile-optimized, reflecting a solid digital maturity. The technical stack includes modern front-end frameworks and libraries such as Bootstrap, AOS, Swiper.js, and jQuery, supporting a responsive and interactive user experience. Security practices are acknowledged with references to GDPR and ISO 27001 compliance, and the contact form enforces privacy consent, though technical security headers and vulnerability disclosure mechanisms are absent. Overall, the site is accessible without WAF or blocking, indicating good operational stability. The domain registration data aligns with the business claims, supporting legitimacy and trustworthiness.

G

Great Place To Work Hellas

greatplacetowork.gr

51

Great Place To Work Hellas is a leading organization in Greece specializing in workplace culture evaluation, certification, and consulting services. The company helps businesses assess and improve their work environments to achieve Great Place To Work Certified™ status, enhancing employee satisfaction and organizational performance. Their market position is strong within the Greek business community, targeting companies seeking to improve workplace culture and gain recognition. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and integrations such as Google Tag Manager and LinkedIn Insight for analytics and marketing. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. From a security perspective, the site uses HTTPS with good SSL configuration and avoids exposing sensitive data. However, it lacks explicit security headers and formal privacy and cookie policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices to strengthen user confidence and regulatory adherence.

I

IF-TECH AG

if-tech.de

54

IF-TECH AG is a Munich-based IT service provider specializing in cloud solutions, modern workplace, and IT security. The company positions itself as an innovation leader and strategic partner, offering scalable and flexible IT concepts tailored to customer needs. Their services include consulting, managed services, and proprietary AI solutions, targeting businesses primarily in Germany. The website demonstrates a mature digital presence with modern technologies such as WordPress, Elementor, and integrated analytics tools. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and explicit privacy documentation are recommended. WHOIS data lacks detailed registrant information, which slightly impacts transparency but does not detract from the professional business presentation. Overall, IF-TECH AG presents a credible and trustworthy IT services business with a strong market position and good technical implementation.

C

connexta | IT. Gemeinsam. Stärker.

connexta.de

50

connexta is a German IT services group focused on providing multi-cloud services, IT security, managed services, and modern workplace solutions primarily targeting the German mid-sized business sector. The website is professionally designed using WordPress with SEO optimization and integrates advanced marketing and analytics tools such as HubSpot and Google Analytics. Cookie consent is managed comprehensively via Cookiebot, ensuring GDPR compliance in user tracking and data collection. The technical infrastructure is modern and hosted with INWX, a reputable German hosting provider. Security posture is solid with HTTPS enforced and WAF protection via Cloudflare, although explicit security policies and incident response contacts are not published on the site. Overall, the website presents a trustworthy and professional image suitable for its target audience.

Formdesk, operated by Innovero Software Solutions B.V., is a well-established Dutch SaaS provider specializing in smart online form creation and workflow management solutions. With over 20 years in the market, it serves SMEs, enterprise clients, and government organizations primarily in the Netherlands and Europe. The company offers a modular, flexible platform with features such as OpenID Connect authentication, barcode scanning, PDF generation, and webhook integrations. The website reflects a professional and trustworthy brand with strong client references and certifications. Technically, the website is built on WordPress with a custom theme and uses modern JavaScript libraries and SEO tools. It is hosted by a reputable registrar and shows good performance, mobile optimization, and accessibility. Privacy compliance is robust, featuring GDPR-aligned cookie consent and processor agreements. Security practices include HTTPS enforcement and a security exploit bounty program, though DNSSEC is not enabled and some security headers could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. The domain registration is consistent with the business history and geographic claims, enhancing trustworthiness. Overall, the website and business demonstrate a mature digital presence with good security and privacy awareness. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, adding explicit security headers, and providing DPO contact details to further strengthen compliance and incident response readiness.

A

ASSOCIAZIONE SVIZZERA PER SISTEMI DI QUALITA E MANAGEMENT - SQS

sqs.it

57

SQS is a Swiss association specializing in quality and management system certification, operating primarily in Italy and Europe. Established in 1983, it holds a strong market position as one of the leading certification bodies, offering audit, evaluation, certification, and training services. The organization targets companies seeking recognized quality certifications such as ISO 9001, serving diverse sectors including aerospace, automotive, healthcare, and energy. The website reflects a professional and consistent brand image with clear service offerings and contact points. Technically, the site uses modern frontend technologies like Bootstrap and jQuery, with Google Analytics for user tracking. Security posture is adequate with HTTPS and cookie consent, though some security headers and incident response disclosures are missing. Overall, the site is well-structured, accessible, and trustworthy, supporting the organization's credibility and business goals.

NFON AG is a leading European provider of cloud telephony and unified communications solutions, offering scalable and reliable business communication services such as Cloud PBX, SIP trunking, and contact center solutions. The company targets businesses across Europe, providing customizable plans and powerful integrations to enhance communication efficiency. The website reflects a mature digital presence with excellent design, clear navigation, and mobile optimization. Technically, the site uses modern JavaScript frameworks and consent management tools, ensuring good performance and privacy compliance. Security posture is strong with HTTPS enforcement, security headers, and ISO 27001 certification, although explicit security policies and incident response details are not publicly available. The absence of WHOIS data reduces domain registration trust but does not detract from the professional business presentation. Overall, NFON demonstrates a robust business and technical foundation with room for enhanced transparency in security disclosures.

N

New York Vendée 2024 | Le site officiel

newyorkvendee.org

65

The New York Vendée 2024 website serves as the official platform for the New York Vendée sailing race, a key qualifier event for the prestigious Vendée Globe. The site provides comprehensive race information, skipper profiles, rankings, and media content targeted at sailing enthusiasts and participants. It maintains consistent branding aligned with the Vendée Globe ecosystem and features multilingual support (French and English). Technically, the site is built on a modern stack including Alpine.js and Swiper.js, likely powered by Drupal CMS, and integrates Matomo analytics for user tracking. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacks visible security headers and published privacy or terms of service policies. The WHOIS data is unavailable due to malformed queries, limiting domain registration transparency. Overall, the site is professional, content-rich, and trustworthy but would benefit from enhanced privacy disclosures and security headers to improve compliance and security posture.

D

Delius Klasing Verlag GmbH

yacht.de

61

YACHT.de is the digital presence of Delius Klasing Verlag GmbH, Europe's largest magazine dedicated to sailing. The website offers extensive content including yacht models, equipment, travel and charter guides, regatta news, and a used boat market. It targets sailing enthusiasts primarily in Germany and Europe, providing both free and premium subscription content alongside e-commerce services. The site is built on modern web technologies including React and Next.js, with Shopify integration for commerce. Social media channels are actively linked, enhancing brand reach. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit privacy and cookie policies are missing from the homepage content. Overall, the site is professional, content-rich, and well-positioned in the sailing media market.

moxi ltd. is a Swiss-based, owner-managed full-service communication agency with approximately 25 years of experience. The company specializes in communication design, serving a diverse clientele including public sector entities at federal, cantonal, and municipal levels, SMEs, associations, and cultural institutions. Their services encompass strategy, content creation, design, and digital development, with a strong focus on societal and political topics. The website reflects a professional and consistent brand image, targeting organizations requiring comprehensive communication solutions. Technically, the website uses modern web standards with a custom CMS framework and includes responsive design and accessibility features. Security posture is moderate with HTTPS implied but lacks visible security headers and explicit security policies. Privacy compliance is good with a clear privacy policy but no cookie consent mechanism detected. Overall, the website is trustworthy, well-maintained, and aligned with the company's business claims.

B

Bambuser AB

bambuser.com

76

Bambuser AB operates as a leading video commerce platform, delivering innovative solutions such as live video shopping, shoppable video, and digital clienteling to brands and retailers globally. Established in 2007, the company has positioned itself as a market leader in the technology and e-commerce sectors, providing scalable interactive video tools that enhance customer engagement and conversion. The website reflects a mature digital infrastructure with modern technologies including Webflow CMS, Google Tag Manager, and various marketing and analytics integrations. Security posture is strong, evidenced by ISO 27001 certification and penetration testing by a reputable cybersecurity firm. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, Bambuser demonstrates a high level of professionalism, technical maturity, and trustworthiness.

La Route Verte is a specialized tourism website promoting an e-bike route through six regional nature parks in Switzerland, targeting tourists and cycling enthusiasts. The site provides detailed stage information, scenic maps, and reservation options via partner Eurotrek. The technical infrastructure uses modern web technologies including Foundation CSS, jQuery, and various JavaScript libraries, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS, reCAPTCHA, and cookie consent, but lacks explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and partner endorsements.

N

Netzwerk Schweizer Pärke

savurando.ch

57

Savurando is a project under the Netzwerk Schweizer Pärke that offers culinary treasure hunts in Swiss nature parks, combining outdoor activities with local gastronomy. The website targets nature and food enthusiasts including families, friends, and corporate groups, providing ticket and voucher sales for these experiences. Technically, the site uses modern web technologies such as Google Tag Manager, Google Analytics, and Swiper.js, and is built on the moxi CMS platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and uses standard tracking and advertising scripts but lacks explicit security policies or vulnerability disclosures. Privacy compliance is basic with cookie consent and GDPR references present. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

M

MEDIAparc

mediaparc.ch

56

MEDIAparc is a regional media center based in Villars-sur-Glâne, Switzerland, hosting multiple media entities including radio, television, digital agencies, and advertising services. It serves the Freiburg region with a collaborative business model that integrates various media formats under one roof. The website is professionally designed using WordPress and Elementor, supporting multilingual content in German and French. It provides clear contact information, a contact form, and cookie consent mechanisms, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response channels are absent. Overall, the website is trustworthy and well-positioned as a regional media hub.

N

netplusFR SA

netplusfr.ch

59

netplusFR SA is a regional telecommunications provider based in Switzerland, specializing in internet, fixed and mobile telephony, and television services. The company targets residential and business customers primarily in the Fribourg canton, offering combined multimedia packages with competitive speeds up to 10 Gbit/s via fiber optic technology. The website reflects a professional and customer-focused approach with clear service offerings, local physical presence, and customer testimonials enhancing trust. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, integrating modern JavaScript libraries such as Swiper.js and Google reCAPTCHA v3 for security. Analytics are implemented via Matomo, Google Analytics, and Metricool, with cookie consent managed through tarteaucitron.js, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features could be improved. From a security perspective, the site enforces HTTPS, employs standard security headers, and uses CAPTCHA to protect forms. However, it lacks a dedicated security policy or incident response contact details, which could be enhanced to improve transparency and readiness. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, netplusFR SA presents a trustworthy and well-maintained online presence suitable for its regional telecommunications business. Strategic recommendations include publishing explicit security policies, establishing a vulnerability disclosure program, and enhancing accessibility to further strengthen compliance and user trust.

S

Stockholm Business Region AB

visitstockholm.se

51

Visit Stockholm, operated by Stockholm Business Region AB, serves as the official tourism guide for Stockholm, Sweden. The website provides comprehensive information on events, restaurants, cultural activities, and travel tips aimed at tourists and visitors. It holds a strong market position as the authoritative source for Stockholm tourism, offering curated content and personalized guides. The business model focuses on promoting the city to increase visitor engagement and tourism revenue. Technically, the website is built on modern frameworks such as Next.js and React, ensuring fast performance, mobile optimization, and good SEO practices. The use of Matomo Analytics and CookieTractor indicates a commitment to privacy-aware user tracking. Security posture is adequate with HTTPS and cookie consent mechanisms, though the absence of explicit security headers and incident response policies suggests room for improvement. Overall, the site is professional, trustworthy, and well-maintained, with clear contact information and official branding. Recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party scripts to strengthen security and compliance.

G

Gastivo

gastivo.de

55

Gastivo operates as a leading digital ordering platform tailored for the gastronomy sector in Germany, facilitating streamlined procurement between restaurants and suppliers. The website is built on a WordPress CMS with Elementor, indicating a modern and flexible technical infrastructure. The platform demonstrates good design quality, mobile optimization, and SEO practices, supporting a positive user experience for its target audience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and incident response information, which could be improved to enhance trust and compliance. Privacy and cookie policies are absent, representing a compliance gap under GDPR regulations. Overall, the site is functional and professional but would benefit from enhanced privacy and security disclosures to strengthen its risk profile.

F

Federal Chancellery of Switzerland

ch.ch

65

The website www.ch.ch is the official information portal of the Swiss authorities, managed by the Federal Chancellery of Switzerland. It provides comprehensive and authoritative information covering federal, cantonal, and municipal administrative matters across multiple sectors such as health, housing, taxes, and political processes. The portal targets residents and foreign nationals living in Switzerland, offering multilingual support in the country's official languages plus English. The site is positioned as a trusted government resource with a large scope and high content quality. Technically, the website is built using modern frameworks including Nuxt.js and Vue.js, styled with Tailwind CSS, and enhanced with Swiper.js for interactive elements. It demonstrates excellent mobile optimization, accessibility, and SEO practices. The infrastructure appears robust with fast performance and no visible technical issues. From a security perspective, the site enforces HTTPS and includes standard security headers, reflecting a strong security posture. However, it lacks visible cookie consent mechanisms and published security or incident response policies. No vulnerability disclosure or security.txt files are present, which could be improved to enhance transparency and security culture. Overall, the website is highly professional, trustworthy, and well-maintained, serving as a critical government communication channel. Strategic recommendations include implementing cookie consent for privacy compliance, publishing security policies, and establishing a vulnerability disclosure process to further strengthen security and user trust.

F

feinschreiber

feinschreiber.com

62

feinschreiber is a Bremen-based agency specializing in text, content creation, branding, and marketing services. Founded in 2018, the company offers a broad range of services including consulting, copywriting, SEO, social media, and storytelling, targeting businesses and brands seeking professional content solutions. The website demonstrates a strong market position with notable clients and a consistent brand presentation. Technically, the site is built on WordPress with modern libraries like jQuery and Swiper.js, and it implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Overall, the site is professional, accessible, and trustworthy, with clear contact information and no signs of malicious activity.

H

Hospiz St. Peter Oldenburg

hospiz-oldenburg.de

63

Hospiz St. Peter Oldenburg is a well-established non-profit healthcare provider specializing in hospice and palliative care services in Oldenburg, Germany. The organization offers stationary and day hospice care, grief counseling, and social services, aiming to support terminally ill patients and their families with dignity and compassion. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional design, targeting patients, caregivers, and the local community. Technically, the site is built on WordPress with modern libraries such as jQuery and Swiper.js, and employs GDPR-compliant cookie management. Security posture is solid with HTTPS and anti-spam measures, though some security headers could be improved. The WHOIS data aligns well with the business claims, showing transparency and legitimacy. Overall, the site demonstrates a strong commitment to privacy, compliance, and user experience.

The cheese-festival.ch website represents a Swiss cultural event organizer focused on celebrating Swiss cheese traditions through festivals and related experiences. The organization, Trägerverein cheese-festival, targets cheese lovers and cultural enthusiasts primarily within Switzerland. The website offers event calendars, cheese fest searches, and storytelling content to engage its audience. Technically, the site employs modern JavaScript libraries such as Matomo for analytics, Mapbox for maps, and GSAP for animations, indicating a moderate level of digital maturity. The site is well-structured, mobile-optimized, and SEO-friendly with multilingual support in German, French, and Italian. Security-wise, the website uses HTTPS with good SSL configuration and no visible vulnerabilities, but lacks some security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite tracking usage. Overall, the site is trustworthy and professionally maintained, with clear contact information and active social media presence.

R

Real Centro Universitario Escorial - María Cristina

rcumariacristina.es

48

The Real Centro Universitario Escorial - María Cristina is a private university institution located in San Lorenzo de El Escorial, Spain, with a rich history dating back to 1892. It offers official undergraduate and postgraduate degrees in business administration, law, and related fields, affiliated with Universidad CEU San Pablo. The website reflects a well-established academic institution with a professional digital presence, including comprehensive academic program information, campus details, and active social media engagement. Technically, the website is built on WordPress with modern JavaScript libraries such as Swiper.js and jQuery, enhanced by SEO plugins and GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and uses HTTPS with good SSL configuration, though some security headers are missing. Analytics and marketing tools are implemented with user privacy in mind, leveraging Google Tag Manager and consent mode. From a security perspective, the site demonstrates a solid baseline with HTTPS and cookie consent but lacks published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. The absence of WHOIS data due to Red.es restrictions limits domain registration verification, but the website content and structured data strongly support legitimacy. Overall, the site is a credible, professional educational platform with good technical and privacy practices. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance trust and compliance.

C

CEU - Universidad Fernando III

uf3ceu.es

65

Universidad CEU Fernando III (UF3) is a regional higher education institution based in Sevilla, Spain, offering undergraduate, double degree, and master's programs. The website is professionally designed using WordPress, with good SEO and analytics integration, including Google Tag Manager, Microsoft Clarity, and Hotjar. The site implements GDPR-compliant cookie consent via Cookiebot, reflecting awareness of privacy regulations. However, no explicit privacy policy or terms of service pages were detected, which is a compliance gap. The WHOIS data for the domain is inaccessible due to Red.es restrictions, limiting domain legitimacy verification. Security posture is moderate with HTTPS enforced but lacking visible security headers and vulnerability disclosures. Overall, the site is safe, professional, and targeted at prospective students in the education sector.

I

INTE BARA POST AB

intebarapost.se

70

Inte Bara Post AB is a Swedish full-service office management and logistics company offering a range of services including courier (Bud), event management, facility maintenance (Allt-i-allo), staffing (Bemanning), and food and beverage services (Skafferi). The company positions itself as an environmentally conscious leader in its sector, emphasizing sustainability with commitments like Net Zero 2040 and ISO certifications. Their target audience includes businesses of various sizes seeking flexible office management solutions. The website reflects a professional and consistent brand image with clear service offerings and a strong focus on customer satisfaction and environmental responsibility. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Typekit fonts, Swiper.js for sliders, and Google Tag Manager for analytics and marketing tags. The site is well-optimized for mobile devices, loads quickly, and includes accessibility features. Cookie consent management is implemented via CookieTractor, ensuring GDPR compliance. The site integrates multiple tracking and advertising services including Google Analytics, Facebook Pixel, Google Ads, and LinkedIn Insight Tag. From a security perspective, the site enforces HTTPS and uses Cloudflare for CDN and WAF services, although explicit security headers like Content-Security-Policy and X-Frame-Options are not detected. No vulnerabilities or exposed sensitive data were found in the HTML content. However, the absence of a published security policy or incident response contact information is noted. The WHOIS lookup for the domain www.intebarapost.se failed, indicating a possible domain registration anomaly or subdomain usage, which slightly reduces trustworthiness. Overall, the website presents a credible and professional business with good technical implementation and privacy compliance. The main risk lies in the unclear domain registration status, which should be investigated further. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and clarifying domain registration details to improve trust and compliance.

S

Skultuna

skultuna.com

75

Skultuna is a well-established Swedish heritage brand founded in 1607, operating an international e-commerce store specializing in home decor, jewelry, and figurines. The website is built on the Shopify platform, leveraging modern web technologies and integrations such as Klaviyo for marketing and Lucky Orange for user behavior analytics. The site demonstrates good digital maturity with responsive design, clear navigation, and GDPR compliance through a comprehensive cookie consent mechanism and privacy policy. Security posture is solid with HTTPS enforced and secure payment methods, though some security headers could be improved and explicit security policies published. Overall, the website presents a professional and trustworthy online retail experience with moderate user tracking and good privacy practices.

Q

QMetry Inc.

qmetry.com

58

QMetry Inc. is a technology company specializing in AI-enabled test management and automated testing tools designed for agile enterprises. Their product suite includes scalable test management solutions integrated with popular DevOps tools and AI capabilities to accelerate test case authoring and improve testing efficiency. The company is positioned as a leader in the software testing domain with a strong focus on innovation and customer collaboration. The website demonstrates a mature digital infrastructure leveraging modern frameworks such as Angular and integrates advanced marketing and analytics tools, reflecting a high level of digital maturity. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response policies could be enhanced. Overall, the site is professional, well-branded, and trustworthy, supported by customer testimonials and third-party reviews. However, the absence of WHOIS data raises some concerns about domain registration transparency, warranting further verification.

C

CUPRA

cupra.de

67

CUPRAofficial.de is the official German website for CUPRA, a premium automotive brand specializing in sporty and electric vehicles. The website offers comprehensive information about CUPRA's vehicle lineup, electric mobility solutions, financing, leasing, and after-sales services. It is clearly positioned as a premium brand under the Volkswagen Group umbrella, targeting automotive customers in Germany interested in modern, sporty, and electric vehicles. The site features a professional design, clear navigation, and is optimized for mobile devices. Technically, it is built on Adobe Experience Manager and hosted on Volkswagen Group's cloud infrastructure, integrating advanced marketing and analytics tools such as Google Tag Manager and Adobe Analytics. Security posture is strong with HTTPS enforced, security headers present, and cookie consent managed via OneTrust. However, explicit security policies and incident response contacts are not publicly available. Overall, the website demonstrates a mature digital presence with good privacy compliance and business credibility.

T

techniConcept Sàrl

gruyerepaysdenhaut.ch

53

Le Parc naturel régional Gruyère Pays-d'Enhaut is a Swiss regional park dedicated to sustainable tourism, environmental conservation, and regional development across three cantons. The website serves as an informative portal for tourists, local residents, and partners, offering event information, educational resources, and membership opportunities. The park is supported by federal and cantonal authorities, emphasizing its official and non-profit nature. Technically, the website is built on the Neos CMS platform, utilizing modern web technologies such as Swiper.js for interactive elements, FontAwesome for icons, and Matomo for analytics, ensuring a fast, mobile-optimized, and accessible user experience. Security is well implemented with HTTPS, security headers, and no visible vulnerabilities. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Contact information is comprehensive and clearly presented, enhancing business credibility.

O

Omnisend

omnisend.com

76

Omnisend is a specialized ecommerce-focused email and SMS marketing automation platform designed to help ecommerce brands increase revenue efficiently through automation, segmentation, and multi-channel campaigns. The company positions itself as a nimble and user-friendly SaaS solution with strong integrations to major ecommerce platforms such as Shopify, WooCommerce, and BigCommerce. The website demonstrates a mature digital presence with professional design, comprehensive content, and strong branding consistency. Technically, the site leverages WordPress CMS with modern JavaScript libraries, analytics, and consent management tools, indicating a well-maintained infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and a public security policy are absent. WHOIS data is not publicly available, likely due to privacy protection, which slightly reduces trust but is common for SaaS businesses. Overall, the site is professional, secure, and compliant with privacy regulations, targeting ecommerce marketers and businesses seeking marketing automation solutions.