Security Directory

C

Cassa disoccupazione cristiano sociale OCST

cd-ocst.ch

54

Cassa disoccupazione cristiano sociale OCST is a Swiss social unemployment fund primarily serving the Canton Ticino region. It holds a leading market position with 40% of the unemployed in the region choosing its services and is recognized by SECO as the fastest unemployment fund in Switzerland. The organization offers digital assistance, online tools, and educational resources to support unemployed individuals and companies. The website is built on WordPress and uses common plugins for analytics and cookie consent, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit published security policies. Overall, the site is professional, trustworthy, and compliant with basic privacy requirements, though it could improve transparency around incident response and vulnerability disclosure.

P

Puzzle ITC

puzzle.ch

70

Puzzle ITC is a Swiss-based technology company specializing in open source software and sustainable IT solutions. They offer a broad range of services including digital transformation, software development, platform engineering, cloud infrastructure, AI, IT security, and mobility IT services. Their market presence is focused on Switzerland and parts of Germany, targeting businesses and organizations seeking innovative and sustainable IT solutions. The company demonstrates a solid market position with reputable client partnerships and a professional online presence. Technically, the website is built on WordPress with modern technologies such as Yoast SEO, Matomo analytics, and Google reCAPTCHA, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features could be improved. Performance is moderate, and the site uses structured data for enhanced search engine understanding. From a security perspective, the site enforces HTTPS and uses privacy-conscious analytics (Matomo). However, it lacks explicit security policies, incident response contacts, and security headers, which are areas for improvement. Privacy compliance is partial, with no visible privacy or cookie policies and no consent mechanisms, which could pose compliance risks. Overall, Puzzle ITC presents a trustworthy and professional business with a good security posture but should enhance privacy and security transparency to meet higher compliance standards and user trust expectations.

Fincons Group AG is a well-established IT business consulting and system integration company with over 40 years of experience. The company operates internationally with offices across Europe and the US, serving industries such as media, financial services, energy, transportation, manufacturing, public administration, and international institutions. Their business model focuses on providing consulting, system integration, proprietary solutions, and smart-shore services, supported by a strong partnership ecosystem. The website reflects a professional and consistent brand image targeting enterprise clients and organizations seeking digital transformation solutions. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Slick Carousel, with integration of Google Analytics and Tag Manager for analytics and marketing. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility enhancements could be made. The CMS used is Kali, a custom solution, indicating a tailored digital infrastructure. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, showing transparent and consistent registration information, supporting the legitimacy of the business. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Recommendations include enhancing security headers, publishing a security policy or incident response contact, and improving accessibility features to further strengthen compliance and trust.

P

Photothek Media Lab

photothek.de

49

Photothek Media Lab is a professional media service provider based in Berlin, specializing in photography, event photography, portrait photography, videography, and e-learning content production. The company positions itself as a premium and experienced provider, targeting clients who value creativity and reliability in visual storytelling. Their website reflects a strong brand identity with consistent and professional design, clear navigation, and comprehensive service descriptions. The business model focuses on delivering high-quality media content for various client needs, including social media content, event films, and educational videos. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, ensuring good SEO optimization and user experience. The hosting appears to be German-based, aligning with the company's location. The site is mobile-optimized and performs moderately well, with room for improvement in accessibility features. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers and incident response policies are not evident, suggesting areas for enhancement. No vulnerabilities or suspicious activities were detected, and the domain registration appears consistent with the business's geographic claims, although detailed WHOIS registrant data is limited. Overall, Photothek Media Lab presents a trustworthy and professional online presence with strong compliance to privacy regulations and a clear focus on quality media services. Strategic improvements in security policies and accessibility could further strengthen their digital maturity and client trust.

S

Società Elettrica Sopracenerina SA (SES)

ses.ch

65

Società Elettrica Sopracenerina SA (SES) is a regional Swiss energy company primarily engaged in the distribution and production of electricity, focusing on renewable sources such as hydroelectric and photovoltaic power. The company serves private customers, businesses, municipalities, and installers within Ticino and surrounding areas. SES maintains a strong market position as a trusted energy provider with a commitment to sustainability and customer service excellence. The website reflects a professional and well-structured digital presence, supporting customer engagement through multiple channels including online forms, newsletters, and social media. Technically, the website employs modern web technologies including jQuery and Matomo analytics, ensuring privacy-conscious user tracking. The site is mobile-optimized and demonstrates good performance and SEO practices. Security-wise, SES holds ISO/IEC 27001:2022 certification, indicating a mature information security management system. HTTPS is enforced, and security headers are present, contributing to a robust security posture. However, incident response contact details and vulnerability disclosure mechanisms are not explicitly provided. Overall, SES's website is a reliable and secure platform that effectively supports its business operations and customer interactions. The company demonstrates compliance with GDPR and cookie consent regulations, enhancing user trust. Strategic recommendations include publishing incident response contacts, enhancing accessibility, and formalizing vulnerability disclosure policies to further strengthen security and compliance.

Doppelmayr Group is a well-established global leader in the transportation sector, specializing in the manufacturing and servicing of cable cars and ropeway systems. The website serves as a corporate portal providing news, product brochures, and company information primarily targeting industry professionals and customers interested in ropeway technology. The company has a strong market position supported by a long history dating back to 1928 and a large operational scale. Technically, the website is built on a modern WordPress CMS platform with advanced SEO tools such as Yoast SEO Premium and enhanced search capabilities via Algolia. The site is hosted likely behind Cloudflare, ensuring good performance and security. The design is professional and mobile-optimized, though accessibility features are basic. The site lacks explicit privacy and cookie policies, which impacts compliance ratings. From a security perspective, the site enforces HTTPS and does not expose sensitive data or use vulnerable libraries. However, it lacks security headers and does not provide incident response or vulnerability disclosure information, which are areas for improvement. No WAF or blocking mechanisms interfere with content access. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security transparency. Strategic improvements in these areas would strengthen user trust and regulatory adherence.

B

Banque Cantonale du Valais

bcvs.ch

64

Banque Cantonale du Valais (BCVs) is a well-established Swiss cantonal bank providing a broad range of financial services including retail and corporate banking, mortgages, wealth management, and digital banking solutions. The website reflects a strong regional focus on the Valais canton with comprehensive service offerings tailored to private individuals and businesses. The digital infrastructure is built on TYPO3 CMS with modern web technologies and includes responsive design and accessibility features, ensuring a positive user experience across devices. Security posture is robust with HTTPS enforcement, security headers, and privacy compliance mechanisms such as cookie consent and a detailed privacy policy. However, explicit security policies and incident response information are not publicly detailed, and no vulnerability disclosure mechanism is present. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with Swiss and EU privacy regulations.

S

Sabre

sabre.com

62

Sabre is a leading software and technology company powering the global travel industry. It offers a comprehensive suite of products and services targeting airlines, travel agencies, hotels, corporate travel buyers, and travel suppliers. The company focuses on modernizing travel retailing, distribution, and fulfillment through innovative technology solutions and a broad partner ecosystem. Sabre's market position is strong, supported by decades of industry experience and a large enterprise footprint. Technically, the website is built on WordPress with modern JavaScript libraries and integrates key analytics and consent management tools such as Google Analytics, Google Tag Manager, Demandbase, and OneTrust. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS data limits domain registration trust analysis, but the website's professional presentation and external references support its legitimacy. Overall, Sabre's website reflects a well-established enterprise with strong business credibility and a solid technical foundation. Strategic improvements in security header implementation and transparency around security policies would enhance its security posture and trustworthiness.

A

Avalems

avalems.ch

63

Avalems is a regional association representing all EMS (Etablissements Médico-Sociaux) in the Valais region of Switzerland. It focuses on advocating for quality health and social policies, supporting member institutions in providing adapted living spaces for the elderly, and enhancing the public image of EMS. The website is professionally designed using WordPress with modern SEO and cookie consent tools, providing clear navigation and multilingual support. Contact information and social media presence are transparent and accessible. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and serves its target audience effectively.

P

Parlamentarische Gruppe Digitale Nachhaltigkeit

digitale-nachhaltigkeit.ch

65

Parldigi is a Swiss parliamentary group dedicated to promoting digital sustainability and responsible digital transformation. The organization focuses on advocacy, education, and information dissemination related to digital sovereignty, data protection, and inclusion. Their website serves as a hub for news, events, and resources targeted primarily at Swiss policymakers and the interested public. Technically, the site is built on WordPress with a modern tech stack including jQuery, Bootstrap, and social media integration widgets. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS and standard secure libraries but lacks visible security headers and formal security policies. Privacy compliance is partial, with no explicit cookie consent mechanism or detailed privacy policy page, which could be improved to meet GDPR standards. Overall, the domain registration and WHOIS data align well with the website's governmental and non-profit nature, indicating legitimacy and trustworthiness.

D

DINAcon – Konferenz für digitale Nachhaltigkeit

dinacon.ch

46

DINAcon is a Swiss-based conference organizer specializing in digital sustainability events, targeting professionals interested in technology and sustainability. The website presents information about upcoming conferences, ticketing, and program details, positioning itself as a niche player in the technology event sector within Switzerland. Technically, the site is built on WordPress with Elementor and uses modern web technologies such as Bootstrap and jQuery, providing a responsive and user-friendly experience. Security-wise, the site benefits from HTTPS but lacks visible security headers and formal security policies, indicating room for improvement in security posture and compliance. Privacy compliance is weak due to the absence of privacy and cookie policies, which could expose the organization to regulatory risks. Overall, the site is professional and trustworthy but should enhance its compliance and security transparency to strengthen user trust and regulatory adherence.

H

Heli GmbH

helikopterflug.ch

69

Heli GmbH operates a specialized e-commerce platform offering helicopter flight experiences, including sightseeing tours, pilot experiences, and VIP taxi flights primarily in Switzerland. The company targets general consumers interested in unique aerial experiences and gifts. The website is built on the Shopify platform, leveraging modern web technologies and third-party marketing and analytics tools to provide a professional and user-friendly experience. The site includes comprehensive privacy and cookie policies with active consent mechanisms, reflecting good compliance with GDPR standards. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although formal security policies and incident response information are absent. Overall, the website is trustworthy, well-maintained, and suitable for its niche market.

Achermann Sport is a well-established Swiss retail company specializing in ski, langlauf, running, and outdoor adventure equipment. With physical stores in Stans and Engelberg and a robust online shop, the company offers a wide range of products and services including equipment rental, ski service, and running shoe consultation. The website reflects a professional and trustworthy brand with clear business information and strong regional presence. Technically, the site is built on WordPress with WooCommerce and uses modern optimization and marketing tools, ensuring good performance and SEO. Security posture is solid with HTTPS and secure payment integration, though minor improvements in CSP and cookie consent are recommended. Overall, the site is safe, user-friendly, and compliant with GDPR requirements.

C

Conférence romande des bureaux de l’égalité

egalite.ch

52

egalite.ch is a regional governmental and non-profit platform representing the Conférence romande des bureaux de l’égalité, which coordinates and promotes gender equality initiatives across French-speaking Swiss cantons. The website serves as an information hub and project coordinator for equality offices in cantons such as Berne (French part), Fribourg, Genève, Neuchâtel, Jura, Valais, and Vaud. It targets public institutions and citizens interested in gender equality and provides project information, news, and resources. Technically, the website is built on WordPress 6.8.3, leveraging modern web technologies including jQuery and WP Rocket for performance optimization. It uses standard plugins for GDPR compliance and cookie consent management, ensuring privacy compliance. The site is mobile-optimized with good SEO and accessibility features, although some accessibility aspects could be improved. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected and should be implemented. No critical vulnerabilities or exposed sensitive data were found. Incident response and security policies are not publicly available, which is a potential area for improvement. Overall, the website demonstrates a solid digital presence with good content quality and compliance posture. The domain registration is consistent with the organization's claims, enhancing trustworthiness. Strategic recommendations include enhancing security headers, publishing incident response policies, and adding a vulnerability disclosure mechanism to further strengthen security and trust.

The website represents the Tripartite Berufsbildungskonferenz (TBBK), a Swiss governmental entity under the Staatssekretariat für Bildung, Forschung und Innovation (SBFI). It serves as a coordination platform linking operational committees with national political vocational education meetings. The site provides news, reports, and information about vocational education initiatives, targeting stakeholders in Swiss vocational training and government officials. The business model is governmental coordination and information dissemination with a medium-sized organizational footprint in Switzerland. Technically, the site is built on Joomla CMS with Bootstrap and jQuery, using Matomo for privacy-conscious analytics. The site is mobile-optimized and professionally designed with consistent branding. Security posture is good with HTTPS and form protections but lacks security headers and explicit privacy/cookie policies, which are compliance gaps. Overall, the domain registration and WHOIS data align well with the website's governmental nature, indicating high legitimacy and trustworthiness.

M

Medeco Cleantec

medeco-cleantec.de

50

Medeco Cleantec is a German-based company specializing in environmentally friendly cleaning solutions, pioneering the Green Cleaning concept. Their offerings include micro dry steam cleaners, air sterilization devices, and surface refinement products, targeting both businesses and consumers seeking chemical-free cleaning. The website is well-structured, professionally designed, and optimized for SEO and mobile use, leveraging WordPress and multiple plugins for enhanced functionality. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are not found. The domain is legitimate and consistent with the business profile, using Cloudflare for DNS and CDN services.

Aircraft Solutions is a specialized service provider offering comprehensive maintenance and support services for rotary and fixed-wing aircraft. Their services include maintenance, battery overhauls, parts sourcing, and CAMO management, targeting private owners and businesses worldwide with 24/7 availability. The website is built on WordPress with modern plugins and fonts, providing a professional and responsive user experience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy policies. No contact emails or phone numbers are publicly listed, which may impact user trust and compliance. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

P

Parlamentarische Gruppe Digitale Nachhaltigkeit

parldigi.ch

65

Parldigi is a Swiss parliamentary group dedicated to promoting digital sustainability and responsible digital transformation within the public sector. The organization advocates for digital sovereignty, open source adoption, and sustainable digital policies, targeting Swiss parliamentarians, government bodies, and related stakeholders. Their activities include policy advocacy, organizing hearings, publishing news, and educational MasterClass programs. The website is professionally designed using WordPress and integrates modern web technologies, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled, but lacks some advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration aligns well with the organization's identity, indicating legitimacy and trustworthiness.

A

Admeira AG

admeira.ch

64

Admeira AG is a Swiss media company specializing in TV advertising sales and marketing, representing major broadcasters such as SRG SSR and CANAL+. The company targets Swiss advertisers aiming to reach diverse audiences across all language regions with high-quality TV content including live sports and original programming. The website reflects a professional and consistent brand image with comprehensive service offerings and clear contact channels. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates Matomo analytics with privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be enhanced. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

S

Seitz Phototechnik AG

roundshot.com

66

Roundshot, operated by Seitz Phototechnik AG, is a Swiss-based company specializing in high-precision 360° panoramic cameras and webcam solutions. The company emphasizes quality manufacturing with CNC-milled aluminum parts and hand assembly, targeting professional and business customers requiring advanced imaging technology. Their product portfolio includes Livecam webcams, VR Drive automated stitching heads, and software for cross-media image distribution. The website reflects a niche market leader with a consistent brand and comprehensive product offerings. Technically, the site uses modern JavaScript libraries, a govis CMS, and Matomo analytics, with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security headers and published security policies. WHOIS data is unavailable, which slightly reduces trust but the professional content and contact information support legitimacy. Overall, the site is well-designed, user-friendly, and compliant with privacy regulations.

J

jobiqo GmbH

jobiqo.com

72

Jobiqo GmbH operates a leading job board software platform focused on recruitment marketing automation and AI-powered job advertising. The company targets media publishers, associations, and recruiters globally, offering a flexible white-label SaaS solution that enhances candidate reach and recruitment revenue. Their market position is strong, supported by industry awards and a comprehensive product suite including Jobiqo AIR and AI-driven search and match technologies. Technically, the website is built on WordPress with modern plugins and scripts, optimized for SEO, mobile, and accessibility. Security posture is solid with HTTPS, cookie consent, and a responsible disclosure policy, though explicit security headers and incident response contacts could be improved. The absence of WHOIS data is a concern but offset by the professional presentation and trust signals. Overall, Jobiqo demonstrates a mature digital presence with good compliance and security practices.

A

Associazioni Cristiane Lavoratori Internazionali SVIZZERA

acli.ch

57

ACLI.CH is a Swiss non-profit association dedicated to supporting Christian international workers through social, cultural, and legal services. The website presents a well-structured platform with clear navigation and relevant content focused on community engagement, events, and patronage services. The organization maintains a consistent brand presence and targets a niche audience within Switzerland. Technically, the site leverages WordPress with Elementor and The7 theme, ensuring a modern and responsive user experience. Security measures include HTTPS enforcement, cookie consent mechanisms, and standard security headers, although explicit security policies and incident response information are absent. Overall, the website demonstrates a solid digital maturity suitable for its non-profit mission, with room for enhanced transparency in security and contact information.

F

fh-ch

fh-ch.ch

49

fh-ch is a Swiss non-profit association representing educators and researchers at Swiss universities of applied sciences. It acts as a national umbrella organization advocating for the rights, working conditions, and educational quality for its members. The website is professionally designed using WordPress, with multilingual support and standard web technologies. While the site is accessible and well-structured, it lacks explicit privacy, cookie, and security policies, which are important for compliance and trust. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosures. Overall, the organization appears legitimate and trustworthy with a clear mission and target audience.

S

Syna

syna.ch

57

Syna is a well-established Swiss trade union dedicated to advocating for fair working conditions and balancing work and leisure for employees across various sectors. The website serves as a platform for membership engagement, legal advice, campaigns, and regional contact points. It targets employees in Switzerland and promotes petitions and initiatives relevant to labor rights. Technically, the site is built on Joomla CMS with modern UIkit framework and uses popular analytics and marketing tools such as Matomo, Facebook Pixel, and Google Tag Manager. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and published security policies. WHOIS data confirms the domain's legitimacy and consistency with the organization's identity. Overall, the site is professional and trustworthy but could improve privacy compliance and contact transparency.

N

New Brunswick Construction Safety Association

nbcsa.ca

45

The New Brunswick Construction Safety Association (NBCSA) is a well-established industry association founded in 2002, dedicated to promoting construction safety within New Brunswick, Canada. The organization offers a variety of training programs, certifications such as COR®, NCSO®, CSC™, and NHSA™, and member services aimed at enhancing workplace safety standards. The website serves as a comprehensive resource for industry professionals, providing course schedules, certification information, member resources, and event announcements. NBCSA maintains an active presence on major social media platforms, reinforcing its engagement with the construction community. Technically, the website is built on WordPress with Elementor as the page builder, utilizing modern web technologies including jQuery and Bootstrap. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Security measures include HTTPS encryption, but the absence of DNSSEC and security headers suggests room for improvement. Privacy compliance is weak due to the lack of visible privacy and cookie policies. From a security perspective, the site shows no signs of malicious activity or vulnerabilities in the visible content. However, the lack of explicit security policies and incident response information indicates potential gaps in organizational security posture. The domain registration data aligns well with the business identity, supporting the site's legitimacy. Overall, NBCSA's website is a professional and trustworthy platform for construction safety education and industry collaboration, with recommendations to enhance privacy compliance and security hardening to further strengthen its digital presence.

Inventus Bern Stiftung is a Swiss non-profit foundation dedicated to supporting applied research and innovation projects primarily for students and researchers at the Bern University of Applied Sciences in the fields of technology and computer science. The foundation provides financial support, including grants and loans, to foster technological transfer and assist students with outstanding achievements. The website is built on WordPress with a moderate technical infrastructure and uses modern technologies such as Bootstrap and jQuery. It is hosted likely by MyHostpoint and employs HTTPS with a valid SSL certificate, ensuring secure communications. However, the site lacks advanced security headers and cookie consent mechanisms, which are areas for improvement. The foundation's contact information is clearly presented, enhancing business credibility. Overall, the website is professional, content-rich, and safe for general audiences, but could benefit from enhanced privacy compliance and security policies.

T

Three Way AG

anforderungsprofile.ch

47

Anforderungsprofile.ch is an educational platform operated by Three Way AG, based in Switzerland, providing tools to explore and compare occupational profiles. The website targets students, teachers, career counselors, training companies, and associations, offering a niche service in vocational guidance. The platform is professionally designed with a clear focus on usability and accessibility, leveraging modern web technologies such as Bootstrap, jQuery, and FontAwesome. Google Analytics is used for traffic analysis, indicating moderate user tracking. Security posture is adequate with HTTPS usage and secure form handling, but lacks explicit security headers and privacy compliance documentation. The WHOIS data confirms the legitimacy of the domain and its alignment with the business entity. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security policies to improve compliance and user trust.

E

Electric Sheep Fencing, LLC

pfsense.org

70

pfSense.org represents the official website for pfSense, a widely trusted open source firewall and router software solution. The site is operated by Electric Sheep Fencing, LLC, and offers comprehensive information about pfSense software, hardware appliances, cloud virtual appliances, professional services, training, and commercial support. The business targets enterprises, large businesses, and SOHO markets, positioning itself as a leading open source network security solution with a strong community and commercial backing through Netgate. The website content is professionally presented with consistent branding and clear navigation, supporting a positive user experience.

H

Hasler Stiftung

haslerstiftung.ch

56

The Hasler Foundation is a Swiss non-profit organization dedicated to promoting information and communications technology (ICT) for the benefit of Switzerland's intellectual and industrial sectors. It supports educational, research, and innovation projects in ICT through funding and co-financing. The foundation maintains a professional online presence with a WordPress-based website, providing detailed information about its programs, beneficiaries, and news updates. Technically, the website uses modern WordPress technologies and is moderately optimized for performance and mobile use. Security posture is good with HTTPS enforced, though security headers and incident response information could be improved. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or terms of service clearly found. Overall, the website reflects a credible and established foundation with a strong focus on ICT advancement in Switzerland.

P

PLACE: Paix et Libération en Afrique

placeafrica.org

57

PLACE: Paix et Libération en Afrique is a recently launched African network focused on peace and liberation through change and engagement, promoted by Libera. Associazioni, nomi e numeri contro le mafie. The website serves as a digital presence for this non-profit collaboration platform, launched in 2023. The site currently displays minimal content indicating ongoing work, with no direct contact or policy pages accessible. Technically, the site is built on WordPress using Elementor and Yoast SEO, indicating a modern CMS infrastructure with good SEO foundations. Security posture is moderate with HTTPS enabled but lacking security headers and privacy policies. The absence of WHOIS data and registrant information reduces trustworthiness, though the site content and structured data suggest legitimacy. Overall, the site requires further development to improve content richness, compliance, and trust signals.

T

Trusted Shops GmbH

trustedshops.de

70

Trusted Shops GmbH operates a leading European e-commerce trust platform that connects over 45 million shoppers with more than 32,000 verified online shops. The website provides services such as shop certification, buyer protection with a money-back guarantee, and authentic customer reviews to protect consumers from fake shops and ensure safe online shopping experiences. The platform targets primarily German-speaking online shoppers and businesses, positioning itself as a community of trust in the e-commerce sector. Technically, the website is built on WordPress with modern plugins like Yoast SEO and integrates Google Tag Manager and Usercentrics for consent management, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and consent mechanisms in place, though explicit security headers and published security policies are lacking. Overall, the site is professional, trustworthy, and well-optimized for SEO and mobile use, but could improve transparency by publishing privacy and terms of service documents and providing clearer contact information.

T

Trusted Shops

trustedshops.co.uk

69

Trusted Shops operates a well-branded e-commerce trust platform focused on providing verified shops, authentic customer reviews, and buyer protection services including a money-back guarantee. The website targets European online shoppers and retailers, particularly in the UK, positioning itself as a leading community of trust with millions of consumers and thousands of shops. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses Google Tag Manager and Usercentrics for analytics and consent management. The site is well-optimized for SEO, mobile, and accessibility, with a professional design and clear navigation. Security posture is good with HTTPS and some security best practices, though explicit security headers and policies are not fully documented. WHOIS data for the domain www.trstd.com is missing, which raises some concerns about domain registration legitimacy, but the website content strongly aligns with the Trusted Shops brand. Overall, the site is trustworthy and professional but could improve transparency around privacy, terms, and security policies.

P

Podigee

podigee.com

59

Podigee is a professional podcast hosting and analytics provider primarily serving the German and DACH markets. The company offers a comprehensive platform that enables users to upload, publish, and analyze podcasts with ease, targeting creative individuals, SMEs, and enterprise clients. Their website demonstrates strong branding consistency, excellent content quality, and clear trust indicators such as customer testimonials and GDPR compliance. Technically, the site is built using modern technologies including the Hugo static site generator, jQuery, and Plyr media player, with integrated Cookiebot for consent management and Matomo for analytics. Security posture is good with HTTPS enforced and privacy mechanisms in place, though some security headers and explicit incident response contacts are missing. The WHOIS data for the domain is unavailable, which slightly reduces trust but does not outweigh the professional presentation and business legitimacy evident on the site. Overall, Podigee presents a mature digital presence with a strong focus on privacy and user experience.

ABC Fire and Safety Equipment Ltd. is a well-established Canadian company specializing in fire safety equipment and services, operating since 1979 primarily in Winnipeg and surrounding areas. The company offers a comprehensive range of products including firefighting gear, PPE, fire suppression systems, and certified servicing, targeting both business and consumer markets. Their market position is that of a trusted local leader with certified technicians and recognized certifications such as COR. Technically, the website is built on the Volusion ecommerce platform with modern JavaScript libraries and frameworks, providing a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS and standard security headers, though improvements such as CSP headers and vulnerability disclosure mechanisms are recommended. Privacy compliance is basic, with privacy and terms pages present but lacking cookie consent and GDPR-specific features. Overall, the site is professional, trustworthy, and safe for general audiences.

C

CryptoTracing

crypto-tracing.com

69

CryptoTracing is a specialized service provider focused on blockchain forensics and legal assistance to victims of cryptocurrency fraud. The company operates primarily in Germany and offers a range of services including free initial consultations, blockchain transaction analysis, legal representation, evidence documentation, and filing criminal complaints. Their market position is that of a niche expert provider with recognized certifications and media presence. Technically, the website is built on WordPress with Elementor, uses Cloudflare for DNS and hosting, and implements modern web technologies and cookie consent mechanisms. Security posture is good with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and consent management. Overall, the website is professional, trustworthy, and well-structured, targeting individuals and entities affected by crypto fraud.

C

Creative Virtual

creativevirtual.com

75

Creative Virtual is a UK-based technology company specializing in conversational AI platforms that enhance customer and employee experiences through chatbots, voicebots, and virtual assistants. The company has a strong market position with a comprehensive suite of AI-driven solutions tailored for various industries and use cases. Their digital infrastructure is built on a modern WordPress CMS with performance optimizations and SEO best practices, reflecting a mature and professional online presence. Security posture is robust with HTTPS enforcement and security headers, though there is room for improvement in publishing explicit security policies and incident response details. Overall, the website and business demonstrate high credibility and trustworthiness, suitable for B2B clients seeking AI solutions.

O

OnTheGoSystems

onthegosystems.com

69

OnTheGoSystems is a technology company specializing in cutting-edge translation tools and remote team collaboration software, primarily targeting businesses seeking to expand globally. The company has an established market presence with a domain registered since 2006, reflecting a mature business. Their website is built on WordPress with modern plugins and SEO optimizations, indicating a solid technical infrastructure. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and explicit security policies. Privacy compliance is limited due to missing privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the website is professional and trustworthy, but could improve transparency and security practices.

O

Open Knowledge Foundation

okfn.org

76

Open Knowledge Foundation is a well-established UK-based non-profit organization founded in 2004, dedicated to promoting open knowledge and open data globally. It offers a range of services including open data tools, capacity-building training, and a global network to foster collaboration. The organization maintains a strong market position as a leader in the open data movement, supported by a consistent brand and high-quality content. Technically, the website employs modern JavaScript libraries and analytics tools with a focus on privacy, hosted behind Cloudflare DNS and CDN services. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is robust with clear policies and GDPR adherence. Overall, the website is professional, trustworthy, and well-optimized for user experience and accessibility.

F

Fondazione LOGOS

arcoiris.tv

59

Arcoiris TV is a non-profit web TV platform operated by Fondazione LOGOS, based in Italy. It offers free, ad-free streaming of social, political, religious, and cultural content primarily in Italian and Spanish. The platform has been active since 2003, demonstrating a stable market presence in niche independent media. Technically, the site uses a custom PHP CMS with modern frontend technologies like Bootstrap and jQuery, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and clientTransferProhibited domain status, but lacks advanced security headers and DNSSEC. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site is trustworthy, well-maintained, and serves a dedicated audience interested in independent media content.

Radio Popolare is a well-established independent radio broadcaster based in Milan, Italy, operating since 1976. The website serves as a comprehensive platform offering live radio streaming, podcasts, news, and cultural programming primarily targeting Italian-speaking audiences interested in independent media. The business model appears community-supported with donation and subscription options. The site demonstrates consistent branding and good content quality, supported by active social media channels and structured data for SEO. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery, Modernizr, Wavesurfer.js, and jPlayer for audio playback. SEO is enhanced by the Yoast plugin, and performance is moderate with good mobile optimization. Accessibility is basic but present. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers are not explicitly detected, and no incident response or security policy pages are published. Overall, the site is trustworthy and professional, with clear contact information and privacy policies hosted via Iubenda. However, improvements could be made in cookie consent mechanisms, security headers, and publishing explicit security and incident response policies to enhance compliance and trust. The risk profile is low, with no signs of malicious content or suspicious domain registration patterns. Strategic recommendations include enhancing security headers, adding incident response information, and improving privacy compliance mechanisms.

M

Movimento Nonviolento

nonviolenti.org

70

The Movimento Nonviolento is a non-profit organization founded in 1962 by Aldo Capitini, dedicated to promoting nonviolence, conscientious objection, and disarmament. The website serves as a comprehensive resource for activists, researchers, and supporters, offering campaigns, archival materials, and subscription services. It maintains a consistent brand presence and strong social media engagement, reinforcing its position within the Italian non-profit sector. Technically, the website is built on WordPress 6.8.3 with standard plugins such as Cookie Law Info and uses Google Fonts and jQuery. The site is moderately optimized for performance and mobile use, with basic accessibility features. It employs HTTPS and a cookie consent mechanism, reflecting good privacy compliance practices. From a security perspective, the site lacks advanced security headers and explicit incident response documentation but benefits from HTTPS and GDPR-compliant cookie management. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is typical for non-profit organizations, and no suspicious patterns were found. Overall, the website is trustworthy, professional, and serves its community effectively. Strategic improvements in security headers, accessibility, and incident response documentation would enhance its security posture and compliance further.

A

Asmeform

asmeform.it

52

Asmeform is an Italian educational organization specializing in training and certification services primarily for public administration professionals. Their offerings include courses in technical and contractual subjects, digital privacy, English language certifications, and accredited professional certifications. The platform is built on Moodle, indicating a structured learning management system approach. The website is well-branded and targets public sector employees and individuals seeking professional development in Italy. Technically, the site uses a modern Moodle LMS stack with YUI, jQuery, and RequireJS, delivering moderate performance and good mobile optimization. However, the site lacks some advanced security headers and explicit privacy and cookie policies, which are important for compliance and user trust. The SSL configuration is excellent, ensuring secure communications. From a security perspective, the site enforces HTTPS and session timeouts but does not provide incident response or vulnerability disclosure information. No WAF or blocking mechanisms are detected, and no vulnerabilities are apparent from the content. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional, safe, and trustworthy but would benefit from improved privacy compliance and enhanced security headers to strengthen its security posture and regulatory adherence.

emetriq GmbH is a German-based data-driven marketing company specializing in audience targeting solutions leveraging the largest German data pool. Affiliated with Deutsche Telekom, emetriq offers a broad range of data segments including standard, contextual, synthetic, and custom segments to enhance brand awareness and campaign performance. The website is professionally designed, mobile-optimized, and provides comprehensive information about their services, partners, and data privacy compliance. Technically, the site runs on WordPress with modern plugins and includes a robust cookie consent mechanism ensuring GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance and Telekom affiliation. Overall, the site presents a trustworthy and compliant business presence with room for technical security enhancements.

G

GMR Airports Limited

gmrairports.com

66

GMR Airports Limited is a leading global airport infrastructure developer and operator with a strong presence in India and Southeast Asia. The company operates multiple major airports, offers a broad range of aviation-related services including retail, cargo, MRO, and real estate development through its Aerotropolis concept. The website reflects a mature, professional digital presence with comprehensive business information and strong branding. Technically, the site uses modern JavaScript libraries, Google Analytics, and Cloudflare for hosting and DNS, indicating a robust infrastructure. Security posture is good with HTTPS and no visible vulnerabilities, but lacks some advanced security headers and cookie consent mechanisms. Overall, the domain registration and WHOIS data align well with the business profile, supporting legitimacy and trustworthiness.

V

Vogel Communications Group

b2b-events.de

69

Vogel Communications Group operates a professional B2B event marketing website focused on specialized congresses across multiple industries. The platform targets industry professionals and decision-makers, offering opportunities for direct engagement and lead generation. The company is positioned as an established media and event organizer with a broad portfolio of industry-specific events. Technically, the website is built on Shopify with modern integrations including Weglot for multilingual support and Consentmanager for cookie compliance. The site demonstrates good performance and mobile optimization, though accessibility features are basic. Security posture is strong with HTTPS and consent mechanisms, but could be enhanced with additional security headers and explicit privacy and terms pages. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

A

Alfacloud

alfacloud.it

52

Alfacloud is a small Italian technology company specializing in the development of games and applications, with a particular focus on supporting health and care companies through cultural and communication tools. The website presents a professional and consistent brand image, targeting health sector clients and general app users. The business model revolves around bespoke software development with a niche market positioning. Technically, the site is built on WordPress 6.7.1 with jQuery and includes the MonsterInsights plugin, although it is not configured, indicating limited analytics usage. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Security posture is basic; HTTPS is used but no security headers are detected, and no explicit security or incident response policies are published. Privacy compliance is weak with no privacy or cookie policies found. Contact information is limited to a physical address with no emails or phone numbers provided. Overall, the site is functional and safe but would benefit from enhanced security, privacy, and contact transparency.

O

Ordine Dei Medici Chirurghi e Odontoiatri della Provincia di Verona

omceovr.it

57

The website represents the Ordine Dei Medici Chirurghi e Odontoiatri della Provincia di Verona, a professional medical association serving the Verona region in Italy. It provides regulatory, informational, and service support to medical and dental professionals, positioning itself as a trusted regional authority. The site is well-structured, professionally designed, and targets healthcare professionals and the public within the province. Technically, it is built on Joomla CMS with modern frontend technologies like Bootstrap and jQuery, ensuring good mobile responsiveness and accessibility. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though explicit security headers and incident response policies are absent. Overall, the site is trustworthy, compliant with GDPR, and free from suspicious content or blocking mechanisms.

O

Ordine dei Medici Chirurghi e degli Odontoiatri della Provincia di Lucca

ordmedlu.it

54

The website www.ordmedlu.it represents the official online presence of the Ordine dei Medici Chirurghi e degli Odontoiatri della Provincia di Lucca, a professional regulatory body for medical doctors and dentists in the Lucca province of Italy. It serves as an information hub and service portal for registered professionals and the general public, offering access to professional registration, continuing education, news, and online services. The site is well-positioned as a local authoritative entity within the healthcare regulatory sector. Technically, the site is built on Joomla CMS with modern frontend frameworks like Bootstrap 5 and jQuery, ensuring a responsive and accessible user experience. The use of Matomo analytics with GDPR-compliant cookie consent reflects a mature approach to privacy and data protection. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with relevant regulations, supporting its role as a key resource for medical professionals in the region.

O

Ordine dei Medici Chirurghi e degli Odontoiatri della Provincia di Taranto

omceota.it

53

The website https://omceota.it/ serves as the official online presence for the Ordine dei Medici Chirurghi e degli Odontoiatri della Provincia di Taranto, a professional regulatory body for medical and dental practitioners in the Taranto province of Italy. The site provides regulatory information, member services, and public resources consistent with its role as a government-subsidiary entity. The business model is focused on professional regulation and public service within the healthcare sector, targeting medical professionals and local citizens. Technically, the website is built on Joomla CMS with Bootstrap 5.3.3 and jQuery, indicating a mature but standard web infrastructure. The site employs Cookiebot for cookie consent management, ensuring GDPR compliance. The presence of DNSSEC and HTTPS with a valid certificate enhances domain and transport security. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site demonstrates good practices including HTTPS enforcement, DNSSEC, and cookie consent mechanisms. However, it lacks explicit security policy or incident response pages and could improve by adding security headers like Content-Security-Policy and publishing a security.txt file. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It is suitable for its intended audience and purpose, with recommendations to enhance security posture and accessibility for further maturity.

O

Ordine Provinciale dei Medici Chirurghi e degli Odontoiatri di Venezia

omceovenezia.it

54

The Ordine Provinciale dei Medici Chirurghi e degli Odontoiatri di Venezia is a regional professional regulatory body for medical and dental practitioners in the Venezia province of Italy. The organization provides a range of services including membership management, professional training, certification issuance, and online service portals. The website reflects a well-structured and professional digital presence, targeting medical professionals with clear navigation and comprehensive content. Technically, the site is built on Joomla CMS with modern libraries such as Bootstrap and jQuery, ensuring good mobile responsiveness and accessibility. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates a mature digital infrastructure suitable for a professional association, with strong trust indicators and compliance adherence.