Security Directory

H

HES-SO Fribourg

hefr.ch

68

HES-SO Fribourg is a prominent higher education institution in Switzerland, offering a range of academic programs including bachelor, master, and postgraduate education across four specialized schools. The institution emphasizes innovation, research, and international collaboration, positioning itself as a key regional player in education and applied sciences. The website reflects a professional and consistent brand image aligned with its parent organization HES-SO. Technically, the site employs modern web technologies such as Bootstrap, Google Tag Manager, and Axeptio for cookie consent, ensuring a responsive and accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements, serving its audience effectively.

O

Omnisend

omnisnippet1.com

76

Omnisend operates as a specialized ecommerce-focused email and SMS marketing automation platform designed to empower ecommerce brands to increase revenue efficiently. The company offers a comprehensive suite of marketing tools including email campaigns, SMS, web push notifications, AI-driven personalization, and seamless integrations with major ecommerce platforms such as Shopify, WooCommerce, and BigCommerce. The website reflects a mature digital presence with professional branding, clear messaging, and extensive content tailored to ecommerce marketers. Technically, the website is built on WordPress with modern front-end technologies including Swiper.js for sliders, Wistia for video hosting, and Cookiebot for GDPR-compliant cookie consent management. The site is well-optimized for SEO and mobile responsiveness, leveraging Google Tag Manager and Visual Website Optimizer for analytics and A/B testing. Security best practices such as HTTPS and cookie consent are implemented, though some security headers could be improved. From a security perspective, the site demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. However, the absence of a public security policy or incident response information and lack of a vulnerability disclosure program represent areas for enhancement. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trustworthiness from a domain registration perspective but does not detract significantly given the professional web presence. Overall, Omnisend presents a credible and professional ecommerce marketing platform with strong technical and content quality. Strategic improvements in security transparency and WHOIS data availability could further enhance trust and compliance.

U

Universidad de Zaragoza

unizar.es

46

The Universidad de Zaragoza is a large, established public university in Spain offering a wide range of undergraduate, graduate, and doctoral programs alongside robust research and community engagement activities. The website reflects a mature digital presence built on Drupal 10, featuring modern web technologies and compliance with privacy regulations such as GDPR. The site is well-designed, mobile-optimized, and provides comprehensive academic and institutional information targeting students, faculty, researchers, and the general public. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. WHOIS data is restricted due to .es domain policies, but the domain's legitimacy is supported by consistent branding and extensive content. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance suitable for a major educational institution.

P

Premium Residences

premiumresidences.cc

54

Premium Residences is a specialized luxury real estate platform showcasing high-end properties primarily in Austria and other select global locations. The website targets affluent buyers and investors seeking premium residential properties. The platform offers curated listings with detailed descriptions and integrates modern technologies such as Google Maps for enhanced user experience. Technically, the site is built on a Laravel-based custom CMS using Alpine.js and Livewire, with assets hosted on Amazon S3, indicating a modern and scalable infrastructure. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements can be made by adding security headers and explicit incident response contacts. Privacy compliance is partial with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is professional and trustworthy but could enhance user trust and compliance by addressing these gaps.

E

Elvi

elvi.lv

41

Elvi.lv is the official website of SIA ELVI Latvija, a large retail supermarket chain operating in Latvia. The site provides comprehensive information about their stores, promotions, recipes, job vacancies, and loyalty programs, targeting general consumers in Latvia. The business is well-established with a consistent brand presence and clear contact channels. Technically, the website is built on WordPress and uses modern JavaScript libraries such as jQuery, Swiper, and Tooltipster, along with Google Analytics and Facebook SDK for tracking and marketing. The site is mobile optimized and SEO friendly, though some lazy loading images have errors that should be addressed. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, but lacks advanced security headers and explicit security policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could improve transparency by adding terms of service and incident response information.

F

Galvenā

fix-price.lv

66

The website lv.fix-price.com is an online retail platform targeting Latvian consumers, offering a variety of products including food, toys, household chemicals, and seasonal items. The site is professionally designed with a clear navigation structure and localized content in Latvian and Russian. It leverages modern frontend technologies such as Vue.js and Nuxt.js, indicating a contemporary technical infrastructure. The presence of Cloudflare Turnstile captcha suggests some level of bot protection. However, the absence of WHOIS data for the domain raises questions about domain registration transparency. No privacy, cookie, or terms of service policies were detected, which may impact compliance and user trust. Overall, the site appears functional and user-friendly but lacks some critical compliance and transparency elements.

S

SK ID Solutions AS

smart-id.be

50

Smart-ID is a well-established digital identity authentication provider offering a secure, user-friendly app compliant with European eIDAS regulations. The company targets businesses and end-users across Europe, positioning itself as a market leader with strong trust signals including certifications and major banking clients. The website is professionally designed, multilingual, and built on a modern WordPress infrastructure with Elementor and Astra theme, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and privacy compliance is well addressed. Overall, the site reflects a mature digital service provider with a strong focus on security and compliance.

A

AMFF 2025

atlantidafilmfest.com

50

Atlàntida Mallorca Film Fest (AMFF) is a cultural media entity organizing a film festival in Mallorca, Spain, with a focus on sustainability and artistic expression. The website serves as a portal for festival programming, news, and event information, targeting a general audience interested in film and culture. The business is positioned as a niche cultural event with a small organizational size and a history dating back to 2013. Technically, the website is built on WordPress using Elementor and Yoast SEO Premium, hosted with domain registration via GoDaddy and DNS managed by Cloudflare. The site demonstrates moderate performance and good mobile optimization, with modern web technologies and SEO best practices implemented. Analytics are handled via Google Analytics and Google Tag Manager, with a cookie consent mechanism in place to comply with GDPR. From a security perspective, the site uses HTTPS with a good SSL configuration and domain-level protections such as clientDeleteProhibited status. However, DNSSEC is not enabled, and security headers are not explicitly detected, suggesting room for improvement. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is good, with a clear cookie policy and consent mechanism, though no explicit privacy or security policy pages were identified. Overall, the website is professional, trustworthy, and well-maintained, with a strong focus on cultural content and user experience. Strategic recommendations include enabling DNSSEC, adding security headers, and publishing explicit security and incident response policies to enhance trust and compliance.

Frölich Reisen is a German travel agency specializing in organized travel packages including bus tours, flights, cruises, and premium travel options. The website presents a professional and well-structured digital presence with a focus on user experience and clear navigation. The technical infrastructure is based on WordPress with modern web technologies and integrations such as Google Tag Manager and Facebook Pixel for marketing and analytics. Security posture is solid with HTTPS enforced and some security best practices observed, though explicit security policies and incident response contacts are not publicly available. Privacy compliance is partial, with a cookie consent mechanism implemented but no visible privacy policy or terms of service pages. Overall, the website is trustworthy and serves its business purpose effectively, though improvements in privacy transparency and security documentation are recommended.

Masin Idriss is a small German-based interior design and furniture company specializing in creating functional and individual design concepts for various types of spaces including homes, lofts, and commercial premises. The company emphasizes craftsmanship and professional planning, supported by a partner network (GOETHE 64) and a commitment to fostering young talent through internships and coaching. The website reflects a niche market position with a focus on quality and personalized service. Technically, the website uses modern web technologies such as HTML5, CSS3, JavaScript, and Swiper.js for interactive galleries. It is hosted by IONOS SE, a reputable provider, and shows moderate performance with good mobile optimization. However, the site lacks advanced security headers and DNSSEC, which are recommended for improved security posture. From a security perspective, the site uses HTTPS but does not implement additional security policies or incident response contacts. Privacy compliance is minimal, with a basic privacy policy linked in the imprint but no cookie consent mechanism or GDPR explicit indicators. No forms or tracking scripts are present, reducing data collection risks but also limiting marketing insights. Overall, the website is professional and trustworthy for its business domain but would benefit from enhanced security measures and privacy compliance improvements to align with best practices and regulatory requirements.

G

Göhler Treppen GmbH & Co. KG

goehlertreppen.de

57

Göhler Treppen GmbH & Co. KG is a specialized manufacturer and installer of custom staircases based in Germany, with over 30 years of industry experience. The company offers bespoke stair solutions including wooden, metal, and design stairs, as well as renovation and integrated furniture solutions. Their market position is that of a trusted regional expert with a strong emphasis on craftsmanship and customer-centric service. The website reflects a mature digital presence built on WordPress, featuring modern technologies such as jQuery, Swiper.js, and Borlabs Cookie for privacy compliance. SEO and accessibility are well addressed, with structured data enhancing search visibility. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and policies are not fully evident. The domain WHOIS data is minimal but consistent with the business claims, hosted on German infrastructure. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

E

evenito AG

evenito.com

68

evenito AG operates a decentralized event management software platform designed to empower enterprises to scale their event planning efforts while maintaining central control. The platform offers a comprehensive suite of features including guest management, event registration and ticketing, virtual and hybrid event support, automated communication, and analytics. The company targets a broad audience including corporates, SMEs, agencies, and conference organizers, positioning itself as a leading event management solution with strong trust signals such as ISO 27001 certification and GDPR compliance. Technically, the website is built on modern web technologies including Webflow CMS, Google Analytics, Microsoft Clarity, Hotjar, and Leadfeeder for analytics and user behavior tracking. The site is well-optimized for performance, mobile responsiveness, and SEO, with a professional and consistent branding approach. Hosting appears to be via Webflow's CDN, ensuring fast content delivery. From a security perspective, the site enforces HTTPS and demonstrates compliance with key standards such as ISO 27001 and GDPR. However, explicit security headers are not detected, and there is no publicly available vulnerability disclosure or incident response contact information. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating an unregistered or expired domain, which should be verified to ensure legitimacy. Overall, the website presents a professional and trustworthy front with strong business and technical maturity. The main risk lies in the missing WHOIS data, which impacts domain legitimacy assessment. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and clarifying domain registration status to improve trust and security posture.

C

CNCC (Compagnie Nationale des Commissaires aux Comptes)

assises-cncc.fr

63

The website www.assises-cncc.fr serves as the official platform for the 36th National Conference of Statutory Auditors organized by the CNCC in France. It provides comprehensive event-related information including program details, registration, accommodation, and professional editorial content targeted at statutory auditors and related professionals. The site demonstrates a professional and consistent branding aligned with the CNCC identity. Technically, it employs modern frontend technologies such as Vue.js and Swiper.js, and includes a cookie consent mechanism compliant with GDPR. Security-wise, while HTTPS is presumably enabled, explicit security headers are not evident, and no direct incident response or security policies are published. WHOIS data is unavailable, likely due to privacy protection, which is justified for this type of professional event site. Overall, the site is trustworthy, well-structured, and serves its audience effectively.

E

EFFA

ecole-audit.fr

43

EFFA (École Française de Formation à l'Audit) is a specialized French educational institution focused on training auditors and commissioners of accounts. Supported by recognized professional bodies such as the Compagnie Nationale des Commissaires aux Comptes and ENOES Paris, EFFA offers a range of certifications and training programs including CAFCAC, DU Audit Légal, and a Master MAE in partnership with IAE Angers. The institution targets students with or without a Master degree, experienced audit professionals, and audit firms seeking training for their collaborators. The website reflects a strong market position as a reference school in France for audit training. Technically, the website is built on WordPress with modern libraries such as jQuery and Swiper.js, and integrates Google Tag Manager and Google Analytics for marketing and analytics purposes. The site is well-optimized for SEO and mobile devices, with a professional design and clear navigation. Security measures include HTTPS enforcement, Content-Security-Policy headers, and cookie consent mechanisms with GDPR compliance. However, additional security headers and a public security policy or incident response page are absent. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent management. The absence of WHOIS data reduces domain trust slightly, but the professional presentation and clear contact information mitigate concerns. Overall, the website is trustworthy, professional, and well-suited for its educational mission.

M

Montreux-Vevey Tourisme

montreuxriviera.com

66

Montreux Riviera is a regional tourism organization promoting the Montreux Riviera area in Switzerland. The website offers comprehensive information on accommodations, events, activities, and local attractions, targeting tourists and visitors seeking travel and leisure experiences. The platform supports multiple languages and provides booking capabilities, event calendars, and curated content to enhance visitor engagement. Technically, the site uses a modern technology stack including Google Tag Manager, Facebook Pixel, and a proprietary CMS (MyCity Tourism Information System). The site is mobile-optimized with good SEO and accessibility features. Security posture is adequate with HTTPS usage and no exposed sensitive data, though security headers are not explicitly detected. Privacy compliance is supported with visible privacy and cookie policies and consent mechanisms. However, the absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective. Overall, the site is professional, content-rich, and trustworthy for its intended audience.

Frölich Reisen is a German travel agency specializing in a variety of travel services including bus tours, flights, cruises, and premium travel packages. The website targets German-speaking travelers seeking well-organized and comfortable travel experiences. The company appears to be a medium-sized regional player in the transportation sector with a diversified portfolio of travel offerings. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is hosted by webgo.de and uses HTTPS with good SSL configuration. Security posture is solid with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit privacy or terms of service pages. No contact emails or phone numbers are explicitly found, which may affect user trust and compliance. Overall, the website is professional and well-branded with good SEO and mobile optimization but could improve privacy compliance and security practices.

K

Kasseler Markthalle 2020 GmbH

kasseler-markthalle.de

50

Kasseler Markthalle 2020 GmbH operates a regional market hall in Kassel, Germany, offering a wide range of regional and international food products through over 70 market stands and gastronomy services. The business emphasizes local specialties, fresh produce, and culinary events, positioning itself as a key local retail and hospitality venue. The website is professionally designed using WordPress with SEO optimization and structured data, providing a rich user experience and clear navigation. GDPR compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response information could be improved. Overall, the site reflects a trustworthy and established local business with good digital maturity.

CBF is a well-established Dutch non-profit organization specializing in oversight and certification of charitable organizations, ensuring donor trust and transparency. The website reflects a strong market position as the leading authority for charity certification in the Netherlands, offering services such as the CBF-Erkenning certification, donor guidance, research, and municipal support. The digital infrastructure is modern and performant, leveraging Google Tag Manager, Cookiebot for consent management, and ReadSpeaker for accessibility. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS, DNSSEC, and no visible vulnerabilities, although explicit security policies and incident response details are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact and accreditation information.

S

Sveriges Annonsörer

100wattaren.se

56

100-wattaren.se is the official website for the 100-wattaren competition, a well-established Swedish contest recognizing effective communication efforts since 1990. The site is operated by Sveriges Annonsörer, a reputable Swedish advertising organization. The website offers detailed information about the competition, categories, jury, winners, and gala events, targeting marketing professionals and organizations in Sweden. The business model is non-profit, focusing on industry inspiration and recognition. Technically, the site is built on WordPress with modern JavaScript libraries like Alpine.js and Swiper.js, and integrates Google Tag Manager and CookieHub for analytics and cookie consent management. The site is hosted by Loopia AB, a Swedish registrar and hosting provider, with a domain age consistent with the competition's history. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with clear cookie and privacy policies linked to Sveriges Annonsörer. No contact emails or phone numbers are explicitly listed on the homepage, and no terms of service or security policy pages were found. Overall, the site is professional, well-branded, and trustworthy, with no signs of malicious or adult content.

F

Fondazione Luigi Einaudi

fondazioneeinaudi.it

64

Fondazione Luigi Einaudi is a well-established Italian non-profit foundation dedicated to supporting research and education in social sciences. Founded in 1964, it offers extensive resources including a large library, archives, scholarships, publications, and organizes academic events. The website reflects a professional and consistent brand image targeting researchers, academics, and students interested in social sciences. The foundation maintains a strong market position as a reference point in its sector in Italy. Technically, the website employs modern technologies such as Google Tag Manager and Iubenda for privacy compliance, with good mobile optimization and moderate performance. The site uses HTTPS with strong security headers and cookie consent mechanisms, indicating a mature digital infrastructure. However, no explicit CMS or hosting provider was identified. From a security perspective, the site demonstrates good practices including HTTPS enforcement, security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. However, the absence of a terms of service page and incident response information are minor gaps. Overall, the website is trustworthy, content-rich, and professionally maintained with a strong focus on privacy and security. The risk level is low, but improvements in transparency around security policies and incident response would enhance trust further.

L

Libéritas Editorial

liberitasediciones.es

47

Libéritas Ediciones is a Spanish educational publishing company specializing in textbooks and educational resources aimed at facilitating an itinerary for encountering truth. It operates as a subsidiary of CEU Ediciones, linked to the Fundación Universitaria San Pablo CEU. The website is professionally designed using WordPress with a child theme, featuring good mobile optimization and clear navigation. The technical infrastructure includes modern libraries such as jQuery, Google Tag Manager, and Contact Form 7, supporting analytics and user interaction. Security posture is solid with HTTPS enabled, reCAPTCHA on forms, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is good with a visible privacy policy and GDPR acceptance on forms. Overall, the site presents a trustworthy and professional image with a focus on educational content.

S

SauerlandKurier

sauerlandkurier.de

58

SauerlandKurier is a regional news media outlet serving the Sauerland region in Germany, focusing on local news, events, and community information. The website is professionally designed with a consistent brand presence and offers a variety of content including news articles, photos, and videos. It operates under the parent company Ippen.Media, leveraging a modern technical infrastructure with multiple third-party integrations for advertising and user engagement. The site employs HTTPS and consent management to ensure privacy compliance, although explicit security and incident response policies are not publicly disclosed. Overall, the website demonstrates a mature digital presence suitable for its regional audience.

D

Digitale Kreativ Agentur

digitale-kreativ-agentur.de

57

Digitale Kreativ Agentur is a small, full-service advertising and marketing agency based in Kassel, Germany. They specialize in crossmedia marketing solutions including print, digital marketing, social media management, employer branding, content creation, graphic design, and multimedia production. The agency serves a diverse client base ranging from auto dealerships to healthcare and real estate sectors, positioning itself as a trusted regional partner with a strong local presence. Their website reflects a professional and modern digital footprint with comprehensive service offerings and client testimonials that reinforce their market position. Technically, the website is built on WordPress with modern JavaScript libraries such as Swiper.js and jQuery, and employs SEO best practices via the Rank Math plugin. Cookie consent is managed through the Borlabs Cookie plugin, ensuring GDPR compliance. The site is mobile-optimized and performs moderately well, with good accessibility and SEO optimization. No significant technical debt or performance bottlenecks were detected. From a security perspective, the website uses HTTPS with an excellent SSL configuration. However, security headers are not explicitly detected, and no formal security or incident response policies are published. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. The WHOIS data is consistent with the website's claims, indicating a legitimate and trustworthy domain registration. Overall, the website demonstrates a high level of professionalism, security awareness, and compliance, making it a reliable digital presence for the agency. Strategic improvements in security headers and incident response transparency could further enhance their security posture.

C

ClimaGrün

climagruen.it

57

ClimaGrün is a specialized company focused on intelligent green roofing systems, with over 20 years of research and development in sustainable roof greening and technical greening solutions. The company targets planners, architects, landscape architects, investors, and private customers, offering patented thin-layer water storage technology integrated into their green roof systems. Their market position is that of an established niche player in the sustainable urban greening sector, primarily operating in Germany. The website demonstrates a high level of digital maturity, built on WordPress with Elementor, enhanced by SEO tools and modern JavaScript libraries for animations and user experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though formal security policies and incident response contacts are not explicitly published. Overall, the site is professional, trustworthy, and compliant with GDPR, providing a solid platform for business and customer engagement.

N

Niseko

niseko.ch

53

Niseko is a Swiss-based web agency specializing in bespoke web solutions, including custom website design, web applications, and AI/data integration services. The company targets businesses seeking tailored digital projects, emphasizing quality, performance, and user experience. Their market position is that of a small but professional agency with a clear focus on delivering solid and well-thought-out web solutions. Technically, the website is built on WordPress using Elementor, with modern JavaScript libraries and Google Analytics for tracking, complemented by a GDPR-compliant cookie consent mechanism. The site is well-optimized for SEO and mobile devices, offering a professional and consistent user experience. Security-wise, the site enforces HTTPS, includes standard security headers, and avoids exposing sensitive data, though it lacks explicit security policies and incident response information. Overall, the website is trustworthy and professional, with room for improvement in publishing security and compliance documentation.

A

adminster ag

adminster.ch

51

adminster ag is a Swiss-based professional services firm specializing in accounting, tax, payroll, and consulting solutions tailored for small and medium-sized enterprises (KMUs) primarily in Zürich and Zug. The company positions itself as a trusted local partner offering comprehensive financial and administrative outsourcing services, including external CFO support and company formation assistance. Their market approach emphasizes personal, uncomplicated service with a strong focus on digital processes and client collaboration. The website reflects a mature digital presence with modern technologies such as WordPress, Breakdance builder, and SEO optimization tools, ensuring excellent user experience and mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent implemented, although explicit security headers and incident response policies are not publicly detailed. Overall, the domain registration and website content are consistent and legitimate, supporting a high trustworthiness rating.

S

Stockholm International Water Institute

siwi.org

64

Stockholm International Water Institute (SIWI) is a well-established non-profit organization focused on water governance and sustainable water management. Founded in 1997, SIWI operates globally to influence policy and decision-making in water-related sustainable development. The website reflects a professional and consistent brand presence targeting policymakers, researchers, and water sector professionals. Technically, the site is built on WordPress with modern frameworks like Bootstrap and hosted on Microsoft Azure DNS infrastructure, indicating a moderate to good level of digital maturity. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and content-rich but would benefit from enhanced privacy and security disclosures.

C

creandi Medienagentur GmbH

trauer.nrw

59

The website trauer.nrw operates as a regional obituary and grief support portal focused on the Westphalia region in Germany. It is managed by creandi Medienagentur GmbH under the umbrella of VRS Media GmbH und Co KG, a recognized media company. The portal offers comprehensive services including obituary searches, memorial pages, grief counseling, and informative guides, targeting a general audience seeking regional death notices and support. The site is well-structured with clear navigation and professional design, supporting a positive user experience.

M

Movable Ink

movableink.com

71

Movable Ink is an established enterprise-level technology company specializing in AI-driven personalized marketing solutions. Their platform enables marketers to deliver dynamic, data-driven content across multiple customer touchpoints including email, mobile, and web. The company positions itself as a leader in autonomous marketing, blending creativity with machine intelligence to optimize customer engagement and revenue. The website reflects a mature digital presence with modern design, mobile optimization, and integration of advanced marketing and analytics tools such as Adobe Marketo and Intellimize. Security posture is strong with HTTPS enforcement and standard security headers, though there is room for improvement in DNS security and explicit security policy disclosures. Privacy compliance is partially addressed with cookie consent mechanisms but lacks visible privacy and terms of service documentation in the provided content. Overall, the domain registration data aligns well with the business profile, indicating a legitimate and stable online presence.

M

Monrif Net - S.p.A.

quotidiano.net

64

Quotidiano Nazionale is a prominent Italian news media website operated by Monrif Net - S.p.A., founded in 1997. It delivers comprehensive news coverage across politics, economy, international affairs, and magazine content, targeting a broad general audience in Italy. The business model combines digital news publishing with subscription offerings and advertising revenue. The website demonstrates a mature digital infrastructure using modern technologies such as React and Next.js, integrated with multiple advertising and analytics platforms. Security posture is strong with HTTPS enforcement and standard security headers, though some areas like incident response contact and vulnerability disclosure could be improved. Privacy compliance is evident with GDPR-aligned policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in the Italian media market.

L

Lantbrukarnas Riksförbund (LRF)

lrf.se

57

Lantbrukarnas Riksförbund (LRF) is Sweden's leading organization representing agriculture, forestry, and rural businesses. The website serves as a comprehensive platform for members and stakeholders, offering information on membership benefits, advocacy, news, events, and regional activities. The organization positions itself as a key player in promoting sustainability, innovation, and strong green industries in Sweden. Technically, the website is built on modern frameworks including Umbraco CMS, Alpine.js, and integrates Google Tag Manager and New Relic for analytics and performance monitoring. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security posture is strong with HTTPS enforcement, use of reCAPTCHA, and cookie consent mechanisms, although explicit security policies and incident response information are not published. Overall, the site reflects a mature, trustworthy organization with good digital maturity and compliance with privacy regulations.

D

Digital Control Room

digitalcontrolroom.com

71

Digital Control Room is a specialized company providing automated compliance and digital asset monitoring solutions primarily for the pharmaceutical and life sciences sectors. Their platform enables clients to discover and audit digital content across multiple brands and languages, ensuring regulatory compliance and reducing risk. The company positions itself as a trusted partner for global oversight of distributed digital content, supported by client testimonials from top pharma companies and recognized by awards such as The Kings Awards for Enterprise Innovation. Technically, the website is built on WordPress using modern plugins like Breakdance and Yoast SEO, with jQuery and Swiper.js for interactive elements. The site is well-optimized for SEO and mobile devices, offering a professional user experience. Security measures include HTTPS enforcement and cookie consent management, though there is room for improvement in implementing additional security headers and a dedicated security.txt file. The security posture is solid with no visible vulnerabilities or exposed sensitive data, and privacy compliance is well addressed with comprehensive policies and consent mechanisms. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness, warranting further verification. Overall, the site demonstrates a mature digital presence with strong business credibility but should enhance transparency around domain registration and security policies.

G

Gedenkzeit.ch

gedenkzeit.ch

59

Gedenkzeit.ch is a Swiss regional online platform specializing in obituary listings, memorial pages, and funeral service directories. It serves a German-speaking audience seeking to find or place death notices and related services. The website is well-branded with regional newspaper affiliations and is part of the CH Media group, indicating a solid market position in Swiss media. The platform offers search and submission functionalities for obituaries and a directory of funeral-related service providers.

В

ВІннер Імпортс Україна, Лтд

ford.ua

68

The website ford.ua is the official online presence of the authorized Ford importer in Ukraine, ВІннер Імпортс Україна, Лтд. It offers a comprehensive portfolio of Ford vehicles including passenger cars, commercial vehicles, and electric models, alongside services such as vehicle servicing, financial products like credit and leasing, and a dealer locator. The site targets Ukrainian consumers and corporate clients, positioning itself as a major player in the Ukrainian automotive market. Technically, the site employs modern web technologies including Tailwind CSS, StimulusJS, and integrates multiple analytics and marketing pixels such as Google Analytics, Facebook Pixel, and TikTok Pixel, indicating a mature digital marketing approach. Security-wise, the site enforces HTTPS and includes CSRF tokens, but lacks explicit security headers and visible security policies, which are areas for improvement. Overall, the site is professional, well-branded, and trustworthy, though it would benefit from enhanced privacy and cookie compliance documentation.

C

Conventum TPS

conventum.lu

70

Conventum TPS is a Luxembourg-based fund management company specializing in third party fund governance and administrative services. Founded in 2001, it operates under the commercial name of BLI - Banque de Luxembourg Investments. The company targets professional investors and fund initiators, providing regulatory and operational support to enable clients to focus on asset management and client servicing. The website reflects a professional and consistent brand image with clear contact information and legal disclosures. Technically, the site is built on the Liferay CMS platform, utilizing modern JavaScript libraries and a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are absent. The lack of WHOIS data limits domain trust analysis, but the overall business credibility and website quality are high, supporting a positive risk assessment.

M

MoEngage

moengage.com

75

MoEngage is a leading SaaS platform specializing in insights-led customer engagement, enabling brands to analyze customer behavior and deliver personalized communication across multiple channels including web, mobile, and email. The company targets marketers, product owners, and developers within enterprise organizations, offering a comprehensive suite of services such as customer insights, cross-channel marketing, AI-driven personalization, and real-time transactional alerts. The website reflects a mature digital presence with strong branding, professional design, and extensive resources including industry reports and learning hubs. Technically, the website is built on WordPress with modern SEO and marketing tools like Yoast SEO Premium and HubSpot forms. It employs advanced JavaScript libraries such as Swiper.js for UI components and integrates Google Tag Manager for analytics. The site is mobile-optimized, fast-loading, and accessible, demonstrating a high level of digital maturity. From a security perspective, the site enforces HTTPS, includes anti-clickjacking measures, and likely uses standard security headers, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS registrant data suggests privacy protection, which is common for commercial SaaS providers but warrants moderate caution. Overall, the security posture is strong but could be enhanced with more transparent policies. The overall risk assessment is low with recommendations to publish explicit security and incident response policies, implement a vulnerability disclosure program, and maintain regular audits of third-party integrations to sustain trust and compliance.

G

Geohoney

geohoney.com

52

Geohoney is an established e-commerce business founded in 2017, specializing in the supply of organic raw honey and related natural products such as Himalayan salt lamps and organic sugar. The company targets consumers and wholesale buyers primarily in the UAE and several international markets including Saudi Arabia, South Africa, and the USA. Their market position is that of a leading supplier in their niche with a medium-sized business footprint. The website is professionally designed with good content quality and consistent branding, supporting a positive user experience and clear navigation. Technically, the site uses modern web technologies including Bootstrap, jQuery, and integrates popular analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. Payment processing is handled via trusted partners like PayPal and PayFort, enhancing transactional security and user trust. Security posture is adequate with HTTPS enforced and CSRF protections on forms, but lacks DNSSEC and explicit security headers, representing areas for improvement. Privacy compliance is weak due to absence of privacy and cookie policies, which is a notable compliance gap. Overall, the website is functional and credible but would benefit from enhanced security and privacy practices to align with best standards.

C

Cross River

crossriverbank.com

62

Cross River is a prominent financial services organization specializing in API-driven banking infrastructure that enables businesses and fintechs to embed financial services seamlessly. The company positions itself as a hybrid between a traditional bank and a technology innovator, offering a broad suite of products including payment rails, card issuing, digital lending, and capital solutions. Their market presence is reinforced by partnerships with major players such as Plaid, Visa, Mastercard, and Stripe, highlighting their integral role in the fintech ecosystem. Technically, the website demonstrates a mature digital infrastructure leveraging modern web technologies such as Webflow CMS, jQuery, Swiper.js, and analytics tools like Google Tag Manager and Hotjar. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing a professional and user-friendly experience. The presence of cookie consent mechanisms and privacy policies indicates attention to privacy compliance. From a security perspective, the site enforces HTTPS and uses secure login portals, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data is a notable anomaly for a financial institution, warranting further verification of domain ownership and registration. Overall, Cross River's website reflects a high level of professionalism, technical sophistication, and business credibility. However, improvements in transparency around security policies and domain registration details would enhance trust and compliance posture.

C

Conventum TPS

conventumtps.lu

71

Conventum TPS is a Luxembourg-based fund management company operating under Banque de Luxembourg Investments. Founded in 2001, it specializes in providing third party solutions including regulatory and administrative fund management services. The website reflects a professional and well-established business with clear service offerings targeted at asset managers and fund initiators. The digital infrastructure is built on the Liferay platform with modern web technologies and includes a cookie consent mechanism and Matomo analytics for privacy-conscious tracking. Security posture is good with HTTPS enforced and no exposed sensitive data, though some security headers could be improved. Overall, the website is trustworthy, compliant with GDPR, and provides comprehensive contact information.

E

EQS Integrity Line

integrityline.com

66

EQS Integrity Line operates as a specialized provider of secure whistleblowing hotline services, primarily targeting organizations within the European Union to comply with the EU Whistleblower Directive. The company positions itself as a trusted and certified partner, emphasizing GDPR compliance and ISO 27001 certification to assure clients of data security and privacy. Their market presence is supported by professional branding and a comprehensive digital platform built on WordPress with modern web technologies and privacy management tools. Technically, the website demonstrates good performance, mobile optimization, and SEO practices, although some accessibility features could be improved. Security posture is strong with HTTPS enforcement, security headers, and consent mechanisms, but lacks public incident response and vulnerability disclosure information, which could enhance trust further. The absence of WHOIS domain registration data is a notable transparency gap, though the website content and certifications suggest legitimacy. Overall, the risk profile is moderate with recommendations to improve transparency and contact information visibility.

S

Stamped Technologies

stamped.io

65

Stamped Technologies operates the website stamped.io, providing a comprehensive SaaS platform focused on Ecommerce brand growth through product reviews, customer loyalty programs, and user-generated content. The company targets Ecommerce brands seeking to enhance customer engagement, trust, and retention. Their market position is solidified by integrations with major Ecommerce platforms such as Shopify, BigCommerce, and Magento, and a suite of services including reviews, loyalty points, VIP programs, and referral systems. The website demonstrates a professional and consistent brand presence with excellent content quality and user experience. Technically, the website is built on modern web technologies including React with Next.js, Bootstrap, and various analytics and marketing tools such as Google Analytics, Microsoft Clarity, Segment, and HubSpot. Hosting is provided via AWS infrastructure with Cloudfront CDN, ensuring fast performance and global availability. The site is mobile-optimized and SEO-friendly, with good accessibility features. From a security perspective, the site enforces HTTPS with strong SSL configuration, uses Google reCAPTCHA Enterprise for bot protection, and maintains domain transfer restrictions. While explicit security headers are not fully visible in the HTML, best practices appear to be followed. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and GDPR compliant, with active consent mechanisms. Overall, the website and business exhibit a high level of professionalism, security maturity, and compliance. The domain registration data aligns well with the business claims, supporting legitimacy. There are no indications of suspicious activity or content safety concerns. Strategic recommendations include enabling DNSSEC, publishing a formal security policy or vulnerability disclosure program, and enhancing security headers for improved protection.

B

Banque de Luxembourg Investments

banquedeluxembourginvestments.com

67

Banque de Luxembourg Investments (BLI) is a specialist asset management company based in Luxembourg, focusing on equities, bonds, multi-asset strategies, and sustainable investing. The company targets both private and professional investors primarily in Europe, emphasizing active management and ESG principles. The website reflects a professional and consistent brand image with clear navigation and relevant content about their investment expertise and fund offerings. Technically, the site is built on the Liferay CMS platform, utilizing modern JavaScript libraries and analytics tools such as Matomo, ensuring a moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The absence of WHOIS registration data is a notable anomaly, reducing domain trustworthiness despite the professional presentation. Overall, the site is credible and well-maintained but would benefit from enhanced transparency in privacy and security policies.

N

Nexoria

nexoria.com.br

69

Nexoria is a Brazilian technology company specializing in comprehensive digital risk protection services, including cybersecurity, privacy, antifraud, and digital forensic solutions. Positioned as the largest hub for digital risk solutions in Brazil, Nexoria leverages partnerships with major market players to deliver advanced technology and expert implementation services. Their target audience primarily consists of enterprises and businesses seeking to strengthen operational and strategic resilience against digital threats. The website is professionally designed, multilingual, and optimized for modern web standards, reflecting a mature digital presence. Technically, the site is built on WordPress with Elementor, hosted on AWS infrastructure, and integrates Google Tag Manager and translation services, indicating a robust and scalable platform. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and published security policies, suggesting room for improvement in transparency and incident response readiness. Overall, Nexoria presents a credible and professional business front with strong market positioning in the cybersecurity sector.

S

Solar Impulse Foundation

solarimpulse.com

56

Solar Impulse Foundation is a Swiss non-profit organization dedicated to promoting clean and profitable environmental solutions worldwide. Leveraging its historic achievement of the first solar-powered flight around the world, the foundation curates and labels over 1000 innovative solutions to accelerate climate action. Their target audience includes political and economic decision-makers, innovators, and investors. The foundation operates a comprehensive digital platform featuring a solutions explorer, advocacy initiatives, and a global alliance network. Technically, the website is built on HubSpot CMS with modern JavaScript libraries and integrates multiple analytics and marketing tools, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS, CSP headers, and domain transfer protections, though DNSSEC is not enabled. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and a clear mission focus.

P

Patrick Breyer

patrick-breyer.de

42

Patrick Breyer's website serves as a professional platform for his political advocacy focused on digital rights, privacy, and transparency within the European context. The site targets citizens interested in civil liberties and digital freedoms, providing rich content, including news, videos, and detailed information about his work and political positions. The website is well-branded, consistent, and maintains a high level of professionalism with clear contact channels and active social media integration. Technically, the site is built on WordPress with modern libraries and plugins, offering good mobile optimization and accessibility. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements are recommended in security headers and cookie consent mechanisms. Overall, the site is trustworthy and aligns well with the business purpose of political advocacy and public engagement.

G

Grill-Restaurant BAULÜÜT

baulueuet.ch

50

Grill-Restaurant BAULÜÜT is a well-established hospitality business located in Oberkirch, Switzerland, specializing in grilled cuisine, bar services, and event hosting. The website reflects a strong market position supported by the Swiss Guest Award 2025 and positive customer reviews. Their key services include dining, bar and whisky lounge experiences, event hosting, and gift voucher sales. The target audience is general, including families, business clients, and event attendees. The business operates primarily as a small-sized restaurant entity founded in 2019. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience and SEO optimization. The site is mobile-optimized and uses structured data for improved search engine visibility. Privacy compliance is well addressed with a clear privacy and cookie policy, supported by a consent management platform (Usercentrics). From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA on forms, but lacks some advanced security headers. No critical vulnerabilities or exposed sensitive data were detected. The domain registration details are consistent with the business claims, indicating legitimacy and trustworthiness. Overall, the website presents a professional, secure, and user-friendly platform that effectively supports the business goals and customer engagement.

S

smt ag | ingenieure + planer

smt.ch

47

smt ag is a well-established engineering and planning company based in Switzerland, specializing in complex construction projects across various sectors including structural and civil engineering. With over 100 years of experience and employee ownership, the company emphasizes personal, innovative, and reliable service to both private and public clients. Their key services include structural engineering, civil engineering, digital planning (BIM), and infrastructure projects. The website reflects a mature digital presence built on WordPress and Elementor, with good SEO practices and mobile optimization. Security posture is strong with HTTPS and security headers, though some compliance aspects like cookie consent and incident response policies could be improved. Overall, smt ag presents a trustworthy and professional image aligned with its business claims.

H

Hörmann

hoermann.ch

51

Hörmann is a leading European manufacturer and supplier specializing in garage doors, front doors, interior doors, frames, and drive systems. The company targets a broad audience across Europe, with a strong presence in Switzerland as indicated by the website domain and language. The website is professionally designed, consistent in branding, and uses modern technologies such as TYPO3 CMS, Google Tag Manager, and Cookiebot for consent management. The technical infrastructure supports moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks published security policies and incident response information. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service. Overall, the website reflects a credible and established business with room for improvement in transparency and security documentation.

I

Infopro Digital Schweiz GmbH

infopro-digital.ch

54

Infopro Digital Schweiz GmbH is a Swiss-based B2B media and data solutions provider specializing in the construction industry. The company offers a range of services including media publications, marketing platforms, and a comprehensive construction project database, positioning itself as a leading information provider in the Swiss construction sector. The website is professionally designed, targeting industry professionals and businesses within Switzerland. Technically, the site employs modern JavaScript libraries, Google Analytics, and Google Tag Manager for tracking, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is partially met with a privacy policy page but lacks visible cookie consent mechanisms. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

I

Infopro Digital Schweiz GmbH

docu.ch

54

Infopro Digital Schweiz GmbH is a Swiss-based B2B media and data solutions provider specializing in the construction industry. The company offers media, marketing, and data solutions tailored to the Swiss construction sector, positioning itself as a leading information provider with extensive reach and a large construction project database. The website reflects a professional and consistent brand image targeting business customers in the construction industry. Technically, the site employs modern JavaScript libraries and tracking tools such as Google Tag Manager and Google Analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS and avoids exposing sensitive data but lacks advanced security headers and explicit security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the website.