Security Directory

F

First Sight AG

first-sight.ch

54

First Sight AG is a specialized ophthalmology practice located at Bahnhofplatz 9, Zurich, Switzerland, focusing on eye care for children and adults. The practice offers a range of services including pediatric eye examinations, amblyopia therapy, myopia management, and surgical interventions such as strabismus and cataract operations. The website is professionally designed with clear navigation, multilingual support (German and English), and comprehensive content tailored to patients seeking eye care services. Structured data and patient testimonials enhance trust and SEO performance. Technically, the site is built on WordPress with modern JavaScript frameworks and integrates Google Tag Manager for analytics. Security posture is good with HTTPS enforced, but lacks explicit security headers and a cookie consent mechanism, which are recommended for GDPR compliance. Contact information is clearly presented, reinforcing business credibility. Overall, the website reflects a mature digital presence suitable for a healthcare provider.

S

Sans Papiers Anlaufstelle Basel

sans-papiers-basel.ch

46

Sans Papiers Anlaufstelle Basel is a small non-profit organization dedicated to supporting undocumented migrants in Basel, Switzerland. The website serves as an information and advocacy platform offering consultations, campaigns, and community engagement. It targets undocumented migrants and supporters interested in migration and human rights. The organization is positioned locally with a clear mission and regularly updated content. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Contact Form 7, and uses Matomo for privacy-respecting analytics. The site is mobile-optimized and well-structured, providing a good user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers are missing and no cookie consent mechanism is implemented. WHOIS data aligns with the organization's Basel location and mission, supporting legitimacy. Overall, the site is trustworthy and professionally maintained, with room for improvement in privacy compliance and security policies.

D

Der Holzring GmbH

holzring-lieferanten.de

44

Der Holzring GmbH operates a specialized network platform focused on enhancing collaboration between its shareholders and suppliers in the wood industry. The company offers services such as market analyses, framework agreements, sales promotion, and competence transfer to optimize processes and foster growth. The website reflects a professional and consistent brand presence targeting business partners and suppliers within Germany. Technically, the site is built on TYPO3 CMS, employs modern web technologies, and includes a cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforced and privacy-conscious analytics configurations, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, well-structured, and compliant, supporting the company's business credibility and digital maturity.

L

Leyendecker bastelstube GmbH & Co. KG

leyendecker-bastelstube.de

51

Leyendecker bastelstube GmbH & Co. KG is a well-established retail business specializing in arts, crafts, and hobby supplies, serving the Trier and Luxembourg regions. With over 61 years of operation, the company offers a broad product range both in-store and online, complemented by services such as an Abhol-Service and event hosting. The website reflects a professional and consistent brand image, targeting creative hobbyists and local customers. Technically, the site is built on WordPress with modern plugins and libraries, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS and GDPR-compliant cookie management, though some security headers could be improved. Overall, the site is trustworthy and well-maintained, supporting the company's market position as a leading local retailer in its niche.

I

Input interior

inputinterior.dk

46

Input interior is a leading independent interior design and furnishing group operating across the Nordic region, specializing in tailored solutions for offices, hospitality, education, and care sectors. The company emphasizes sustainability and offers a broad product range supported by multiple regional websites and active social media engagement. The website demonstrates a mature digital presence with multilingual support and comprehensive content showcasing projects, news, and services. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are not publicly documented. The absence of WHOIS data limits domain trust verification, but the professional presentation and business transparency mitigate concerns. Overall, Input interior presents a credible and well-established business with a strong online footprint.

I

Input interior

inputinterior.com

56

Input interiör is a leading independent Nordic interior design group specializing in tailored interior solutions for offices, hospitality, education, and healthcare sectors. The company emphasizes sustainability and offers a broad product range supported by certifications such as Svanen and EcoLabel. Their website demonstrates a mature digital presence with multilingual support, comprehensive content, and active social media engagement. Technically, the site is built on WordPress with modern plugins and performance optimizations, ensuring fast and accessible user experience. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be enhanced. WHOIS data for the exact www subdomain is unavailable, but this is typical and does not detract significantly from trust given the professional site content. Overall, Input interiör presents a credible and well-managed online presence aligned with their business stature.

I

Input interior

inputinterior.se

47

Input interiör is a leading independent interior design group in the Nordic region, specializing in tailored interior solutions for offices, hospitality, education, and healthcare sectors. The company operates multiple showrooms and offers a broad product range with a strong emphasis on sustainability and functionality. Their market position is strong, supported by certifications and a professional digital presence. Technically, the website is built on WordPress with modern plugins and frameworks, optimized for performance, SEO, and mobile responsiveness. The use of Google Tag Manager and reCAPTCHA indicates a mature digital infrastructure. Security practices are good with HTTPS and cookie consent mechanisms, though some HTTP security headers could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent. Contact information is clearly presented, enhancing business credibility. Overall, the website and business present a low risk profile with strong trust indicators. The missing WHOIS data for the subdomain is not a significant concern given the overall professionalism and transparency of the site. Strategic recommendations include enhancing HTTP security headers and publishing a vulnerability disclosure policy.

P

pCon Solutions

pcon-catalog.com

47

The website catalogs.pcon-solutions.com serves as a digital catalog platform offering high-resolution 2D and 3D models and materials primarily targeted at architects, interior designers, and planners. The business appears to be a specialized technology provider in the architectural content space, delivering digital assets for integration into architectural plans. The site is professionally designed using modern web technologies such as React and Material-UI, providing a good user experience with responsive design and clear navigation. However, the lack of WHOIS registration data raises questions about domain legitimacy and ownership transparency. Security posture is moderate with HTTPS enforced and cookie consent implemented, but the absence of security headers and contact information for incident response are notable gaps. Privacy compliance is addressed with a cookie policy and privacy policy links, indicating awareness of GDPR requirements. Overall, the site is functional and professional but would benefit from improved transparency and security practices.

Y

YellowMap AG

yellowmap.de

54

YellowMap AG operates a comprehensive local business directory platform for Germany, offering over 5 million listings including companies, services, maps, events, and more. The website targets general users seeking local business information and related services such as hotels, pharmacies, and restaurants. The platform is well-established with visible partnerships and affiliate programs enhancing its market position. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript libraries like jQuery and Slick Carousel, and integrates Piwik analytics for user tracking. The site is mobile-optimized with good SEO and accessibility basics. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks visible advanced security headers and explicit security policies. Overall, the site is professional, trustworthy, and safe for general audiences.

L

LANDI

landi.ch

61

LANDI is a well-established Swiss retail company specializing in products for home, garden, agriculture, and pets, operating both physical stores and an extensive online shop. The website reflects a mature e-commerce platform with a broad product catalog and user-friendly navigation, targeting consumers in Switzerland interested in these sectors. Technically, the site uses modern web technologies including JavaScript frameworks, Google Maps API, Facebook Pixel, and Google Tag Manager, with a CMS likely based on Concrete5. The site is mobile-optimized and performs moderately well. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly available. WHOIS data confirms the domain's legitimacy and alignment with the parent company Fenaco. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

K

KEIM Commercial

keim-usa.com

53

KEIM Commercial is a medium-sized manufacturing company specializing in mineral silicate paints and stains, serving the construction and historic restoration markets primarily in the United States, Canada, and the Caribbean. The company offers a broad range of eco-friendly, durable paint products supported by extensive technical documentation and a knowledgeable sales and service team. The website is built on WordPress with WooCommerce and Elementor, reflecting a modern digital infrastructure with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain transfer protections, though improvements are needed in DNSSEC and security headers. Privacy compliance is lacking due to missing privacy and cookie policies. Overall, the site is professional and trustworthy, with strong business credibility but some compliance and security enhancements recommended.

Z

ZeroDocs.com

zerodocs.com

60

ZeroDocs.com is a specialized service provider focused on developing architectural specifications and sustainability documentation for building product manufacturers. Established in 2010, the company targets architects and building product brands, offering 3-part specifications, environmental product declarations, and free downloadable specifications. The website demonstrates a professional market position supported by client testimonials and a clear business model centered on specification writing services. Technically, the site is built on WordPress with modern plugins such as Elementor and WooCommerce, supported by Cloudflare DNS and Google Analytics for performance and tracking. Security posture is adequate with HTTPS enabled and domain registration protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is trustworthy and professionally maintained, serving a niche market effectively.

S

STRABAG AG

strabag.at

55

STRABAG AG is Austria's largest construction company and a market leader in the construction industry, offering a wide range of services including building construction, civil engineering, and specialized trades. The company emphasizes expertise, innovation, and regional presence to deliver tailored construction solutions. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting clients, partners, and job seekers. Technically, the website uses modern JavaScript libraries such as jQuery and Matomo for analytics, alongside OneTrust for cookie consent management, indicating a commitment to privacy compliance. The site is mobile-optimized and SEO-friendly, though some accessibility features could be enhanced. Security-wise, HTTPS is used, and cookie consent is implemented; however, explicit security headers and incident response information are not evident, suggesting room for improvement. Overall, the website demonstrates a strong security posture with no visible vulnerabilities or suspicious content. The lack of WHOIS data due to privacy protection is common for large enterprises and does not detract from the site's legitimacy. The company maintains active social media channels and partner sites, reinforcing trust and transparency. Strategically, STRABAG AG should focus on publishing explicit security policies, enhancing accessibility, and implementing security headers to further strengthen their security posture and compliance. These steps will improve user trust and reduce potential risks associated with web vulnerabilities.

L

Lexus

discoverlexus.com

60

DiscoverLexus.com serves as a global lifestyle and brand marketing platform for Lexus, a premium automotive brand. The website focuses on delivering luxury and lifestyle content that aligns with Lexus's market positioning as a leader in the transportation sector. The site targets luxury vehicle enthusiasts and Lexus customers worldwide, providing brand storytelling and vehicle-related information. The business model centers on brand engagement and lifestyle marketing rather than direct sales. The domain age and WHOIS data support the legitimacy and maturity of the brand presence online. Technically, the website employs modern frontend technologies including Vue.js and Nuxt.js, with a CMS likely based on Statamic. Hosting is supported by Microsoft Azure DNS infrastructure. The site demonstrates good mobile optimization and SEO practices, with cookie consent managed by Cookiebot. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and enforces domain transfer protection. However, DNSSEC is not enabled, and security headers are not detected in the provided data. There is no visible privacy policy or terms of service, which are critical for compliance and user trust. No incident response or vulnerability disclosure mechanisms are found. The site integrates Google Tag Manager for analytics and tracking, balanced with a cookie consent mechanism. Overall, the website is professionally designed and trustworthy, with a strong brand presence. To enhance security posture and compliance, it is recommended to publish privacy and terms policies, enable DNSSEC, implement security headers, and provide clear contact information for incident response. These steps will improve user trust, regulatory compliance, and resilience against threats.

H

Holzwerk - Ballonteam

luftrebellen.de

44

Holzwerk - Ballonteam operates a specialized balloon flight service based in Celle, Germany, offering scenic balloon rides over local and regional landmarks. Established since 2011, the company maintains a small but professional presence with a focus on personalized customer experience and event participation. Their website reflects a well-structured, content-rich platform with clear business information and active social media engagement. Technically, the site is built on WordPress with modern plugins and SEO optimization, delivering moderate performance and good mobile responsiveness. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and privacy compliance mechanisms are recommended. Overall, the business demonstrates credibility and trustworthiness with clear contact channels and consistent branding.

K

Klasse2000

klasse2000.de

55

Klasse2000 is a German non-profit educational program focused on health promotion, violence prevention, and addiction prevention for primary and special schools. The website serves as an information hub for schools, teachers, parents, and sponsors, offering program details, downloadable materials, and access to a digital learning platform called KLARO Labor. The organization has a strong market position with over 4,900 sponsors and is certified with the DZI Spenden-Siegel, indicating transparent and trustworthy donation management. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes a cookie consent mechanism via CookieFirst, reflecting a moderate level of digital maturity. However, explicit privacy policies and terms of service are not found in the provided content, and security headers are not detected, suggesting room for improvement in security posture. Overall, the website is professional, well-branded, and user-friendly, targeting educators and parents in Germany.

The website valao.de serves as a simple informational landing page announcing the rebranding of valao digital to Tidenhub Digital GmbH and the migration of all content to website-tutor.com. The business focuses on providing digital project guidance and educational content primarily targeting beginners in digital projects. The site is minimalistic with basic HTML and CSS, hosted via INWX nameservers, and lacks advanced technical frameworks or CMS. Security posture is limited with no detected security headers or privacy policies, and no analytics or tracking technologies are present. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional but basic, with room for improvement in security and privacy compliance.

V

Vieser Oy

vieser.fi

58

Vieser Oy is a Finnish manufacturing company specializing in floor drains, with a market presence dating back to 1973. The company targets construction professionals and consumers primarily in Finland and the Nordic region. Their website reflects a mature digital presence built on WordPress and WooCommerce, supporting e-commerce and multilingual content. The technical infrastructure is modern and includes standard industry tools such as Google Analytics and Cookie Information for privacy compliance. Security posture is solid with HTTPS enforced and standard security headers, though there is room for improvement in CSP implementation and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the company's established market position.

H

Holzwerk GmbH

holzwerk-celle.de

41

Holzwerk GmbH is a small regional German company specializing in carpentry, roofing, and renovation services, particularly focusing on traditional woodwork and altbausanierung (old building restoration). The company serves the Celle area and nearby cities such as Hannover and Braunschweig, positioning itself as a trusted master craftsman business with a focus on quality and customer orientation. Their website provides detailed service descriptions, references, and contact information, supporting their local market presence. Technically, the website is a static or custom-built site using basic HTML, CSS, and JavaScript, with Google Analytics integrated for visitor tracking. The site lacks modern CMS or frameworks and shows basic mobile optimization and accessibility. Hosting is managed via nsentry.de nameservers, indicating a professional hosting environment. SEO is adequately addressed with meta tags and structured navigation. From a security perspective, the site lacks visible HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. The presence of a cookie consent banner and privacy policy indicates some GDPR compliance, but incident response and security policies are absent. Google Analytics is configured with IP anonymization, reflecting some privacy awareness. Overall, the website is functional and credible for a small business but requires improvements in security posture and technical modernization to enhance trust and compliance.

N

Neumarkter Lammsbräu

lammsbraeu.de

62

Neumarkter Lammsbräu is a German company specializing in organic beverages with a focus on sustainability and ecological responsibility. Their website presents a professional and consistent brand image targeting general consumers interested in organic products. The company leverages modern digital marketing and analytics tools such as HubSpot and Google Analytics, integrated with a robust cookie consent mechanism via Cookiebot to ensure GDPR compliance. The technical infrastructure is based on HubSpot CMS, supported by standard web technologies including jQuery and Google Tag Manager, providing a moderate performance and good mobile optimization. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly available. Overall, the website is trustworthy, well-maintained, and compliant with privacy regulations, making it suitable for its business purpose.

S

Studio Bloc GmbH

studiobloc.de

10

Studio Bloc GmbH operates a regional chain of bouldering gyms serving the cities of Darmstadt, Mannheim, and Wiesbaden in Germany. The company positions itself as a local hospitality and sports service provider with a clear focus on climbing and bouldering activities. The website is professionally designed with consistent branding and clear navigation to subdomains representing each location. Contact information is prominently displayed and consistent across multiple data formats, enhancing trust and accessibility. From a technical perspective, the website uses standard HTML5 and CSS3 technologies hosted on 1blu servers, with no detected CMS or advanced frameworks. The site is moderately optimized for performance and mobile devices, with good SEO practices evident in meta tags and structured data. However, there is room for improvement in accessibility and modern technical enhancements. Security posture is moderate; while HTTPS is presumably enabled (inferred from URLs), no explicit security headers or policies are published. There is no cookie consent mechanism or incident response information, which are important for GDPR compliance and user trust. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website presents a low-risk profile with a legitimate business presence and good content quality. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance the security posture and regulatory adherence.

C

Creative Europe Desk Austria

creativeeurope.at

10

Creative Europe Austria is an official Austrian government portal providing comprehensive information and advisory services related to the EU's Creative Europe 2021-2027 funding program. The site targets cultural and creative sectors, offering guidance on funding opportunities across media, culture, and cross-sectoral projects. It is operated under the Bundesministerium für Wohnen, Kunst, Kultur, Medien und Sport (BMWKMS), positioning it as a trusted source for EU cultural funding in Austria. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery and Rocksolid Slider, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong, with GDPR-aligned cookie management and anonymized analytics via Matomo. Overall, the site demonstrates a professional and trustworthy presence with no detected vulnerabilities or suspicious elements.