Security Directory

R

Repair-Café Tösstal

repair-cafe-toesstal.ch

36

Repair-Café Tösstal is a small, community-driven non-profit organization based in Switzerland, focused on providing free repair services for various household and personal items to reduce waste and promote sustainability. Founded in 2018, it operates with a volunteer team and enjoys strong local support from municipalities and schools. The website reflects a well-structured and informative platform that clearly communicates its mission, services, and contact information. Technically, the site uses standard web technologies such as HTML5, CSS3, JavaScript, and jQuery, with moderate performance and good mobile optimization. However, there is a lack of formal privacy and cookie policies, and no visible security headers, which are areas for improvement. The security posture is moderate with no visible vulnerabilities or sensitive data exposure, but the absence of security best practices and compliance documentation lowers the overall security score. Overall, the website is trustworthy and professional, serving its target audience effectively with a clear business model and community focus.

G

Gewerbeausstellung GEWA | 17. – 19. April 2026 | Reithalle Turbenthal

gewa-turbenthal.ch

61

The website www.gewa-turbenthal.ch appears to represent a small Swiss business, likely in the energy or local services sector, based on the domain and partial content context. The site is built on the Wix platform, utilizing Wix Thunderbolt framework and standard Wix hosting infrastructure. The technical infrastructure is modern but basic, with no advanced SEO or accessibility features detected. Security posture is moderate with HTTPS enabled but lacks security headers and formal privacy or cookie policies. No contact or business registration information is clearly presented, limiting trust and compliance assessment. Overall, the site is functional but minimal in content and security maturity.

A

Awelty

awelty.com

50

Awelty is a French web agency based in Amiens with over 20 years of experience specializing in web creation, AI integration, and digital marketing services. The company offers a broad range of services including custom software development, e-commerce solutions, SEO, mobile applications, and motion design. Their market position is that of a well-established regional player with a strong focus on innovative AI-powered digital solutions. The website reflects a professional and consistent brand image with detailed case studies and client logos, indicating trust and credibility. Technically, the website uses a modern technology stack including PHP Symfony, Flutter, Firebase, and cloud services from Google Cloud and AWS. It employs common web frameworks like Bootstrap 4 and jQuery, and integrates AI technologies such as OpenAI and Mistral. The site is mobile-optimized and SEO-friendly, with good performance and accessibility basics in place. From a security perspective, the site uses HTTPS and includes tracking and analytics tools like Google Analytics, Matomo, and Facebook Pixel. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is partial, with cookie management present but no clear privacy policy page found. Overall, the website is professional, secure, and credible with minor gaps in privacy and security policy disclosures. The domain WHOIS data is unavailable due to privacy protection, which is typical for commercial entities in France. The business and technical maturity are consistent with the company's claims, though domain age cannot be verified. Strategic recommendations include enhancing privacy disclosures, publishing security policies, and implementing security headers to improve trust and compliance.

Fahrschule Scheelen is a well-established driving school based in Emmendingen and Teningen, Germany, with over 40 years of experience and a strong local presence. The company offers comprehensive driving education services for various license classes, including cars and motorcycles, supported by modern vehicles and online learning tools. Their target audience includes both young and older individuals seeking driving licenses in the region. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options, including multiple contact forms and direct phone and email contacts. Technically, the site is built on WordPress with Elementor and uses modern libraries and frameworks, hosted likely on Your-Server.de. Security posture is good with HTTPS and email obfuscation, though some security headers and cookie consent mechanisms are missing. Overall, the site reflects a credible and trustworthy business with a solid digital presence.

G

gb consite GmbH | Geomarketing und Logistik Software

gbconsite.de

53

gb consite GmbH operates a professional website offering specialized software solutions in the geomarketing and logistics sector. Their services include location analysis and route optimization tools targeted at businesses seeking to optimize their geographic marketing and logistics operations. The company positions itself as a niche provider with a focus on affordable and professional online geomarketing software. The website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, indicating a moderate level of digital maturity and technical infrastructure. Cookie consent is managed effectively via Cookiebot, demonstrating attention to privacy compliance. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities detected, though improvements in security headers and incident response documentation are recommended. Overall, the website presents a trustworthy and professional front for a small technology company based in Germany.

B

Bundesinstitut für Öffentliche Gesundheit (BIÖG)

j1-info.de

65

The website www.j1-info.de is an official public health information portal managed by the Bundesinstitut für Öffentliche Gesundheit (BIÖG) in Germany. It provides comprehensive information about the J1 health check for adolescents aged 12 to 14, including educational content, appointment scheduling assistance, and a doctor search feature. The site targets youth, their parents, and healthcare professionals, positioning itself as a trusted government resource in the healthcare sector. The content is well-structured, multilingual, and includes accessible media, enhancing user engagement and inclusivity. Technically, the site is built on TYPO3 CMS, employs Matomo for privacy-conscious analytics, and uses modern web technologies including accessible video players and responsive design. The website demonstrates good performance and SEO practices, with strong accessibility features. Hosting details are not explicitly disclosed, but data processing for analytics is localized in Germany, aligning with GDPR requirements. From a security perspective, the site enforces HTTPS, anonymizes IP addresses in analytics, and implements a clear cookie consent mechanism. While some security headers like Content-Security-Policy are not explicitly found, the overall posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is excellent, with detailed policies and user consent mechanisms in place. Overall, the website presents a low-risk profile with high trustworthiness, serving as a professional and reliable source of health information for its audience. Strategic recommendations include enhancing security headers and publishing explicit security policies to further strengthen trust and compliance.

The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) which is displayed when a requested website is not accessible or offline. This page includes embedded Chromium offline game scripts and styling but contains no actual business or website content. Consequently, there is no identifiable company, no privacy or cookie policies, no contact information, and no external links or marketing content. The technical infrastructure is limited to Chromium internal scripts and basic HTML/CSS, with no hosting or CMS details available. Security posture is minimal due to the nature of the page being an error display rather than a public website. Overall, this page does not represent a legitimate business website and cannot be evaluated for compliance or security beyond its role as a browser error page.

W

Wiki Software International - Consulenza finanziaria

wikisoftware.it

43

Wiki Software International is a specialized Italian company founded in 2011, offering financial consultancy and software solutions focused on synchronizing financial flows and reducing errors in payment processes. Their market position is that of a niche provider with strong banking and financial know-how, targeting CFOs and financial departments of enterprises. The website reflects a professional B2B business model with key services including assessment, consultancy, international finance, IBAN checking, and a competence center. Technically, the site is built on WordPress with modern plugins and SEO tools, showing good mobile optimization and moderate performance. Security posture is adequate with HTTPS, DNSSEC, and reCAPTCHA, but the expired domain status is a critical risk. Privacy compliance is limited due to missing privacy and terms policies. Overall, the site is trustworthy and professional but requires urgent domain renewal and enhanced compliance documentation.

K

Komm.ONE

komm.one

73

Komm.ONE is a public law institution and IT service provider dedicated to supporting municipalities across Baden-Württemberg, Germany. The organization develops and operates software and IT services tailored for local government administration, positioning itself as a key regional player in the public sector IT market. Their offerings include consulting, cloud services, security, innovation management, and training, targeting municipal administrations and public entities. The website reflects a professional and consistent brand image aligned with their mission. Technically, the website is built on a modern stack including jQuery, Bootstrap, and specialized CMS templates, with good mobile optimization and accessibility features. The presence of a cookie consent mechanism and Matomo analytics indicates a mature digital infrastructure with privacy considerations. Performance is moderate, and SEO practices are well implemented. From a security perspective, the site enforces HTTPS and uses cookie consent controls but lacks explicit published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, likely due to privacy protection, but the domain and website content strongly indicate legitimacy as a public institution. Overall, Komm.ONE presents a trustworthy and professional online presence with room for improvement in transparency around security policies and incident response. The risk level is low, and the site is suitable for its target audience of public sector entities.

Unser-stadtplan.de is a German website operated by Städte-Verlag E. v. Wagner & J. Mitterhuber GmbH, providing digital and printed city maps, district maps, and comprehensive business directories. The platform also features job listings, targeting local residents and businesses in Germany. The website content is primarily in German and focuses on delivering detailed geographic and commercial information to its users. The business model revolves around map publishing and local business promotion, positioning itself as a regional leader in city planning and local information services. Technically, the website uses standard web technologies including JavaScript and CSS with custom scripts for UI interactions and animations. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. No CMS or major frameworks are detected. The hosting provider and SSL configuration details are not explicitly available, limiting a full technical assessment. From a security perspective, the site does not explicitly show HTTPS status or security headers in the provided data, indicating potential gaps in security best practices. No privacy or cookie consent banners are present, which is a compliance concern under GDPR. The site includes a privacy policy and contact form but lacks visible incident response or security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is functional and provides valuable local information but would benefit from enhanced security measures, improved privacy compliance, and better technical modernization to strengthen trust and user experience.

W

Weil am Rhein Wirtschaft und Tourismus GmbH

w-wt.de

55

The website for Weil am Rhein Wirtschaft und Tourismus GmbH serves as the official platform for economic development, tourism, and city marketing in the municipality of Weil am Rhein, Germany. It targets local businesses, tourists, and residents, providing information on commercial real estate, events, and tourism services. The site is built on the Weblication® CMS platform and features a well-structured navigation system with multilingual support. Accessibility is a key focus, evidenced by the dedicated accessibility menu offering font size, contrast, dark mode, and reading options. However, the site lacks explicit privacy, cookie, and security policies, which are critical for compliance and user trust.

The website revsci.net currently hosts extremely minimal content, consisting solely of a small JavaScript snippet that loads an external accessibility script. There is no metadata, no business information, no contact details, and no policies present on the site. The domain is newly registered in August 2023 via DropCatch.com, a domain drop-catching registrar, suggesting the site is either in early development or speculative. The lack of content and business information prevents any meaningful assessment of the company's market position or services. From a technical perspective, the site uses basic JavaScript but lacks modern web development best practices such as SEO metadata, accessibility features, or performance optimizations. There is no evidence of HTTPS or security headers, which poses a significant security risk. No analytics or advertising technologies are detected, indicating minimal digital maturity. Security posture is weak due to the absence of HTTPS, security headers, privacy policies, and contact information for incident response. The domain registration is legitimate but does not align with any visible business claims, reducing trustworthiness. No vulnerabilities or malicious indicators are detected, but the site is not production-ready. Overall, the site scores very low on content quality, security, privacy compliance, and business credibility. Strategic recommendations include enabling HTTPS, adding comprehensive privacy and cookie policies, publishing contact and security incident response information, and developing meaningful website content to establish trust and legitimacy.

A

advertising.com

advertising.com

64

Advertising.com is a mature technology company specializing in programmatic advertising solutions, offering a suite of services including DSP, SSP, engagement platforms, and search solutions. The company targets businesses with large user bases seeking to enhance user engagement and revenue through tailored advertising technologies. The recent acquisition of Underdog Media expands their access to premium publisher inventory, strengthening their market position. Technically, the website is built on WordPress with modern analytics tools such as Google Analytics and Microsoft Clarity, hosted likely on AWS infrastructure. The site is well-designed, mobile-optimized, and SEO-friendly, providing a good user experience. Security posture is adequate with HTTPS and CAPTCHA protections, but lacks DNSSEC and explicit security headers, which are recommended for improvement. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

V

Ville de Saint-Louis

saint-louis.fr

66

The website www.saint-louis.fr is the official digital presence of the city of Saint-Louis in Alsace, France. It serves as a comprehensive portal for residents and visitors, offering municipal information, public services, event announcements, and cultural activities. The site targets local citizens and tourists, positioning itself as a key communication channel for the municipal government. The business model is that of a government entity providing essential public services and information without commercial intent. Technically, the site is built on the CMS I3C platform and leverages modern web technologies including jQuery, Bootstrap, CKEditor, and Matomo analytics configured with privacy in mind. The site is mobile-optimized and features a clear navigation structure with multiple service categories. Performance is moderate, with room for optimization. The presence of cookie consent mechanisms and disabled tracking cookies reflects a commitment to user privacy. From a security perspective, the site enforces HTTPS and uses privacy-focused analytics. However, it lacks several security headers and does not publicly provide a privacy policy or incident response contacts, which are areas for improvement. The absence of WHOIS data limits domain trust verification, though the site content and branding strongly indicate legitimacy. Overall, the website is a well-maintained municipal portal with good content quality and user experience. Strategic recommendations include publishing a comprehensive privacy policy, enhancing security headers, and providing clear contact information for security and privacy matters to strengthen trust and compliance.

S

Stadt Rheinfelden (Baden)

rheinfelden.de

49

Stadt Rheinfelden (Baden) operates an official municipal website providing extensive information and services to residents and visitors. The site covers a broad range of topics including citizen services, cultural events, urban planning, and tourism. The website is well-structured, professionally designed, and primarily targets local citizens and tourists. Technically, the site uses the cEasy CMS platform and integrates Matomo analytics for privacy-conscious user tracking. The infrastructure is modern with HTTPS enforced, but lacks some advanced security headers and cookie consent mechanisms. Security posture is moderate with no critical vulnerabilities detected. Overall, the site reflects a mature municipal digital presence with room for improvement in privacy compliance and security best practices.

L

Landkreis Lörrach

loerrach-landkreis.de

49

Landkreis Lörrach operates as a regional government authority in Germany, providing a broad range of public services including transportation, economic development, social and family support, environmental initiatives, and tourism promotion. The website serves residents and visitors with comprehensive information and digital services, reflecting a mature public sector entity with a consistent brand and professional presentation. Technically, the site is built on the cEasy CMS platform, employs modern web technologies, and integrates privacy-conscious analytics via Matomo. The site is well-optimized for mobile and accessibility standards, ensuring a good user experience. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a trustworthy and professional digital presence aligned with its governmental role.

C

Collectivité européenne d'Alsace

haut-rhin.fr

68

The Collectivité européenne d'Alsace operates as a regional government entity providing a comprehensive range of public services and information to residents and stakeholders in the Alsace region of France. The website serves as an official portal with detailed information on social services, culture, transport, environment, and citizen engagement. It maintains a strong market position as the authoritative regional government body with a clear focus on transparency and public communication. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with privacy-conscious analytics via Matomo and a cookie consent mechanism powered by OreJime. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure suitable for a government portal. From a security perspective, the site enforces HTTPS and demonstrates good security hygiene with no exposed sensitive data or vulnerable libraries detected. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced security posture. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. The absence of WHOIS data is standard for .eu domains and does not detract from the legitimacy of the site. Strategic recommendations include implementing security headers, publishing a security policy, and adding a vulnerability disclosure channel to further strengthen trust and security.

E

Einwohnergemeinde Allschwil

allschwil.ch

62

The Einwohnergemeinde Allschwil website serves as the official digital presence of the municipal government of Allschwil, Switzerland. It provides comprehensive information on local government services, cultural events, political activities, and community resources. The site targets residents and stakeholders interested in municipal affairs, offering a broad range of services including administrative forms, event calendars, and contact information. The business model is that of a public sector entity focused on community service and governance. Technically, the website is built on the Weblication CMS platform, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. It integrates external resources like FontAwesome for icons and ReadSpeaker for accessibility. The site demonstrates good mobile optimization and accessibility features, with a moderate performance profile. SEO practices are adequately implemented with meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses some security headers, though it lacks advanced headers like Content-Security-Policy. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and a consent mechanism in place. However, no explicit security policy or incident response contact information is provided. Overall, the website is trustworthy and professional, reflecting the legitimacy of a municipal government entity. It maintains a good balance between usability, compliance, and security, with room for improvement in security header implementation and incident response transparency.

S

SUPERO

supero.ch

10

SUPERO is a Swiss-based graphic design agency located in La Chaux-de-Fonds, Neuchâtel. The company offers creative graphic design services and operates an online shop. The website is built on WordPress with WooCommerce integration, utilizing modern frontend libraries such as Bootstrap, Swiper, and Video.js. Social media presence is established on Facebook, LinkedIn, and Instagram, enhancing brand visibility. The technical infrastructure is solid with HTTPS enabled, but lacks some security headers and explicit privacy and cookie policies. No contact emails or phone numbers are directly visible in the analyzed HTML content, which may affect user trust and compliance. Overall, the website presents a professional image with good content quality and user experience but could improve in privacy compliance and security best practices.

K

KaktusApps

kaktusapp.com

10

KaktusApps is a specialized eCommerce development company focused on providing a suite of innovative apps designed to enhance online store performance, increase sales, and improve customer engagement. Their offerings primarily target Shopify merchants but also extend to other eCommerce platforms. The company has established a solid market position with multiple apps available on the Shopify app store, supported by positive customer ratings and testimonials. Technically, the website is built using modern web technologies including Webflow CMS, Cloudflare DNS, and integrates marketing and analytics tools such as Google Tag Manager and Crisp Chat. The site is mobile optimized and demonstrates good performance and SEO practices. Security-wise, the domain is well protected with registrar locks and HTTPS is enforced, though DNSSEC is not enabled. However, the site lacks explicit privacy and cookie policies, and no direct contact information is provided, which are areas for improvement. Overall, the website is professional, trustworthy, and safe for general audiences.

S

Swiss Institute for Art Research (SIK-ISEA)

sikart.ch

10

The Swiss Institute for Art Research (SIK-ISEA) operates a specialized research portal focused on Swiss art and art history. The website serves as an authoritative platform offering access to the SIKART Lexicon, catalogues raisonnés, and collections/projects, targeting researchers, academics, and art enthusiasts. The business model is non-profit and research-oriented, positioning the institute as a key resource in the cultural heritage sector in Switzerland. Technically, the site employs modern web technologies including React and Font Awesome, with Matomo analytics for user tracking. The site is mobile-optimized and demonstrates good design and navigation clarity. Security posture is solid with HTTPS enforced and cookie consent implemented, though lacks visible advanced security headers and formal privacy or security policies. Overall, the site is trustworthy and professionally maintained, but could improve transparency by publishing privacy and terms of service documents.

H

Historisches Lexikon der Schweiz (HLS)

hls-dhs-dss.ch

10

The Historisches Lexikon der Schweiz (HLS) is a reputable, multilingual, scientific online lexicon dedicated to Swiss history, serving both the general public and researchers. It is uniquely positioned as the only scientific lexicon published simultaneously in the four Swiss national languages. The website is affiliated with the Swiss Academy of Humanities and Social Sciences, enhancing its credibility and trustworthiness. The platform offers a rich array of content including articles, multimedia, projects, and newsletters, emphasizing open access and scientific rigor. Technically, the website is built on the XWiki platform with a modern tech stack including RequireJS, jQuery, Bootstrap, and Matomo for privacy-conscious analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is strong with HTTPS enforced and no exposed sensitive data, but could be improved by adding explicit security headers and vulnerability disclosure mechanisms. Overall, the site maintains a high level of professionalism and trustworthiness, with comprehensive content and consistent branding. However, it lacks explicit cookie consent mechanisms and published security policies, which are recommended for enhanced compliance and user trust. The domain registration aligns well with the website's academic nature, supporting its legitimacy.

S

Stiftung Stadt.Geschichte.Basel

stadtgeschichtebasel.ch

11

Stadt.Geschichte.Basel is a non-profit foundation focused on providing deep insights into the history of Basel through digital storytelling, research data platforms, and public engagement. The website serves a niche audience including history enthusiasts, students, and researchers by offering access to nine individual volumes and an overview volume of Basel's history, enriched with innovative data stories and a blog covering various historical epochs. The platform emphasizes open access to research data and collaborative dissemination through partnerships and events. Technically, the site is built on modern frameworks like SvelteKit, ensuring fast performance, mobile optimization, and good accessibility. The use of privacy-respecting analytics (Plausible) aligns with the foundation's educational mission. Security posture is solid with HTTPS and no visible vulnerabilities, though the absence of some security headers and incident response contacts suggests room for improvement. Overall, the site is professional, trustworthy, and well-aligned with its cultural and educational objectives.

L

Loonexx AG

smartaxxess.io

9

The website smartaxxess.io serves as a login portal for the smartakte service, operated by Loonexx AG, a German technology company founded in 2022. The site targets professional users requiring secure access to digital services. The business model appears to be subscription or account-based access to a technology platform. The website is professionally designed with a consistent brand presence and basic content quality focused on user authentication. Technically, the site uses modern web technologies including JavaScript ES modules and CSS, hosted by IONOS SE. The site is mobile optimized and performs moderately well. However, it lacks advanced SEO and accessibility features. Security is enforced via HTTPS and CSRF tokens in forms, but no security headers or DNSSEC are implemented, representing areas for improvement. From a security posture perspective, the site shows good basic protections but lacks published privacy, cookie, and terms policies, as well as incident response or vulnerability disclosure information. No contact information or social media presence is visible, which limits transparency. The WHOIS data is consistent and trustworthy, with no suspicious patterns. Overall, the site is safe and suitable for general audiences, with no adult or questionable content. The main risks relate to compliance and security best practices gaps. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, enabling DNSSEC, and providing clear contact and incident response information to enhance trust and compliance.

C

Common Ground

app.cg

58

Common Ground is a web3 community platform aimed at serving users interested in blockchain and decentralized technologies. The website presents a minimal but consistent branding and content focused on the web3 community, with a clear emphasis on technology and community engagement. The platform appears to be in early or growth stages given the limited content and lack of detailed business information. Technically, the site uses modern frontend technologies such as React and Google Fonts, ensuring a responsive and moderately optimized user experience. However, the absence of privacy, cookie, and terms of service policies indicates gaps in compliance and user trust mechanisms. Security posture is adequate with HTTPS enforced, but lacks important security headers and incident response contact information, which are critical for a platform dealing with web3 users. Overall, the site is safe with no adult or questionable content detected, but improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.

B

B. Metzler seel. Sohn & Co. AG

metzler.com

10

Bankhaus Metzler is Germany's oldest family-owned bank, specializing in capital market services for institutions and discerning private clients. The company operates across four main business areas: Asset Management, Capital Markets, Corporate Finance, and Private Banking. The website reflects a strong market position with a focus on personalized, long-term financial solutions. The bank emphasizes stability, reliability, and a tradition of excellence in its services. Technically, the website is well-structured with modern HTML5, CSS, and JavaScript technologies. It is mobile-optimized and provides a good user experience with clear navigation and comprehensive content. The presence of structured data (JSON-LD) enhances SEO and trustworthiness. However, explicit security headers are missing, and no CMS or hosting provider details are evident from the source. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a notable concern for a financial institution, potentially indicating privacy protection or registry issues. No incident response or vulnerability disclosure information is publicly available, which could be improved to enhance transparency and trust. Overall, the website is professional, trustworthy, and compliant with privacy regulations, but improvements in security headers, incident response transparency, and WHOIS data availability are recommended to strengthen the security posture and business credibility.

C

Chatlio LLC

chatlio.com

72

Chatlio LLC operates a specialized SaaS platform offering live chat services integrated directly with Slack, targeting businesses that use Slack for communication. The company positions itself as a niche provider simplifying customer engagement by eliminating the need for separate chat clients. Founded in 2014, Chatlio maintains a small company profile with a consistent and professional web presence emphasizing ease of integration and customer support. Technically, the website is built using modern technologies including the Hugo static site generator, JavaScript, and Cloudflare for DNS and hosting. The site is performant, mobile-optimized, and uses frameworks such as AOS and Bootstrap for UI enhancements. The integration with Slack APIs is a core technical feature. However, some improvements could be made in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks DNSSEC and visible security headers. There is no published security policy or incident response information, and no cookie consent mechanism was detected despite GDPR compliance indications. No vulnerabilities or exposed sensitive data were found in the HTML content. The domain registration is consistent and transparent, supporting legitimacy. Overall, Chatlio presents a trustworthy and professional online presence with a solid technical foundation and good business credibility. Strategic improvements in privacy compliance and security transparency would enhance trust and regulatory adherence.

T

Team PAPREC ARKÉA

teampaprecarkea.com

39

Team PAPREC ARKÉA is a French offshore sailing team prominently preparing for the Vendée Globe 2024-2025 race, sponsored by Paprec and Arkéa. The website serves as an official platform to share news, media, and team information, targeting sailing enthusiasts and sports fans. The business model revolves around sponsorship and promotion within competitive sailing circuits. Technically, the site employs modern web standards, including responsive design, accessibility features, and structured data, ensuring a good user experience across devices. Security posture is solid with HTTPS and consent management, though improvements in security headers and explicit incident response information are recommended. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, but the professional presentation and active social media presence support the site's credibility. Overall, the site is well-maintained, compliant with privacy regulations, and effectively supports the team's branding and communication objectives.

E

EasyRecyclage

easyrecyclage.com

60

EasyRecyclage is a leading French company specializing in tertiary waste management services, including recycling, secure destruction of confidential documents, and customized waste solutions. The company operates under the Paprec Group umbrella, leveraging a strong market position and extensive service offerings tailored to businesses and organizations across France. Their website reflects a professional and consistent brand image, emphasizing their expertise and client base of over 20,000 companies. Technically, the website is built on WordPress with Elementor, incorporating modern web technologies and providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enabled and domain transfer protections, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is limited due to the absence of explicit privacy and cookie policies, which should be addressed to meet GDPR standards. Overall, the website is trustworthy and professionally maintained, supporting the company's credibility in the waste management sector.

H

herzog kommunikation GmbH

herzogkommunikation.de

53

herzog kommunikation GmbH is a small digital agency based in Stuttgart, Germany, specializing in scalable and future-proof web and application development. Their services include customized web tools, mobile apps, digital installations, and concept development, targeting both established companies and startups. The website reflects a professional digital agency with a clear portfolio and contact information, positioning them as a regional player in the technology sector. Technically, the site uses modern web technologies such as HTML5, Bootstrap, PHP, and Docker, ensuring responsive design and moderate performance. Security posture is good with HTTPS enforced and CSRF tokens present, but lacks advanced security headers and formal security policies. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is trustworthy and professionally maintained.

A

Amnesty International

amnesty.de

68

Amnesty International Germany operates a comprehensive website focused on human rights advocacy and activism. The organization is positioned as the largest global human rights movement, targeting a broad audience interested in social justice and human rights. The website provides information about activism opportunities both locally and online, reflecting a non-profit business model centered on membership and campaign engagement. Technically, the site is built on Drupal 10, leveraging modern JavaScript libraries and third-party tools such as Cookiebot for consent management and Visual Website Optimizer for A/B testing and analytics. The infrastructure indicates a mature digital presence with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of explicit security headers and vulnerability disclosure mechanisms suggests room for improvement. Privacy compliance is partially addressed through cookie consent but lacks a visible privacy policy and terms of service. Overall, the website is professional, trustworthy, and safe for general audiences, with a solid foundation for further enhancements in security and compliance.

F

Fachkommission Internet – Amnesty International

amnesty-intern.de

43

The Fachkommission Internet (FK Internet) website serves as an informational and support platform for the German section of Amnesty International, focusing on IT-related services such as webhosting, email, cloud storage, and intranet support. The organization operates as a small, volunteer-driven non-profit entity providing specialized IT assistance to Amnesty International groups and districts in Germany. The website is built on WordPress and leverages a variety of plugins and modern web technologies to deliver content and services effectively. Hosting is provided by Manitu, a reputable German hosting provider, which aligns with the organization's regional focus. From a technical perspective, the site demonstrates a moderate level of digital maturity with a modern tech stack, responsive design, and active content updates. However, there is room for improvement in areas such as security headers implementation and cookie consent mechanisms to enhance GDPR compliance. The absence of explicit terms of service and vulnerability disclosure pages suggests potential gaps in formal security and compliance documentation. Security posture is generally good, with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The site does not exhibit signs of malicious activity or phishing. Privacy compliance is supported by the presence of a privacy policy, though cookie consent mechanisms are lacking. Contact information is available primarily via email and contact forms, but no phone numbers or physical addresses are prominently displayed. Overall, FK Internet presents a trustworthy and professional online presence consistent with its non-profit mission. Strategic recommendations include enhancing privacy compliance with cookie consent, implementing security headers, and publishing formal security policies to strengthen trust and compliance further.

E

EWE VERTRIEB GmbH

werder-strom.de

62

Werder Strom is a niche energy product offered by EWE Vertrieb GmbH targeting Werder Bremen football fans with 100% renewable electricity and fan engagement incentives such as monetary rewards per goal scored. The website is professionally designed, mobile optimized, and uses modern tracking and consent management technologies. Hosting is on AWS with DNS consistent with the business. Privacy compliance is strong with a comprehensive privacy policy linked to the EWE domain and an active cookie consent mechanism. However, the site lacks explicit security policy and incident response information, which could be improved to enhance trust. Overall, the site is secure, compliant, and credible with a good user experience and clear business focus.

W

Weiss Internet Services

wwweiss.de

45

Weiss Internet Services is represented by a minimalistic German-language website primarily serving as a digital presence. The company appears to operate in the technology sector, likely providing internet-related services, though no detailed business description or service listings are present. The website uses the Weblication® CMS platform, indicating a moderate level of digital maturity but lacks advanced technical or marketing features. Security posture is basic with no HTTPS verification visible in the provided data, no security headers, and no privacy or cookie policies, which indicates room for improvement in compliance and security best practices. Overall, the site is accessible and functional but minimal in content and security features, suggesting a small business or early-stage digital presence.

P

Partner sein

partner-sein.ch

65

Partner sein is a Swiss non-profit humanitarian organization affiliated with the Swiss Old Catholic church, focusing on international aid projects in countries such as DR Congo, South Sudan, Uganda, Syria, and the Philippines. The website provides project updates, donation options, and contact forms for engagement. The organization targets donors and church communities interested in solidarity and humanitarian support. Technically, the website is built on the kirchenweb.ch CMS platform, uses jQuery and Hyphenopoly for hyphenation, and serves content over HTTPS with moderate performance and good mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Contact information is limited to contact forms without direct emails or phone numbers. Overall, the website is professional, trustworthy, and content-rich, but could improve in privacy compliance and security transparency.

Studierendenwerk Aachen is a regional non-profit organization providing essential student services such as housing, dining, and social support primarily for the academic community in Aachen, Germany. The website serves as an informational portal targeting students and university affiliates. The technical infrastructure relies on established but somewhat dated technologies including jQuery 1.12.4, Materialize CSS, and Google Maps API, with consent management handled by Usercentrics, indicating some GDPR awareness. However, the website lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS implied but no visible security headers or modern security practices. No contact or business certification information is readily available in the provided content, limiting trust signals. Overall, the site is functional but could benefit from modernization and enhanced compliance documentation.

D

DigiBib - Digitale Bibliothek - DigiBib

digibib.net

55

DigiBib is a digital library portal primarily serving German libraries and their users by providing a centralized access point to multiple library resources. The website offers a map and search functionality to locate libraries that provide access to the DigiBib portal, with usage often requiring a library card. The site is professionally designed with good navigation and mobile optimization, leveraging modern technologies such as Bootstrap, Leaflet for mapping, and Matomo for privacy-conscious analytics. However, the absence of privacy and cookie policies, as well as missing WHOIS domain registration data, raises concerns about compliance and domain legitimacy. Security posture is moderate with some best practices observed, but lacks critical security headers and explicit incident response contacts. Overall, DigiBib appears to be a legitimate educational service with room for improvement in privacy compliance and security transparency.

The website cloud32.ch currently serves as a minimal 'Coming Soon' placeholder page with no substantive business content, contact information, or policies. The site uses WordPress with a Coming Soon plugin and includes styling via Tailwind CSS and FontAwesome. There is no evidence of active business operations or services presented on the site. The technical infrastructure is basic, with standard libraries such as jQuery and Google Fonts included. No analytics or tracking scripts are detected, and no security headers or SSL configuration details are available from the provided data. The security posture is weak due to lack of visible HTTPS enforcement and absence of security best practices. Privacy compliance is non-existent as no privacy or cookie policies are found. Overall, the site lacks business credibility and trust indicators, making it unsuitable for customer engagement at this time.

The website sefeaimpact.it currently serves a robot challenge screen implementing a proof-of-work captcha mechanism to verify visitors. This indicates the presence of a Web Application Firewall (WAF) or security layer blocking direct access to the actual website content. Due to this, no business-related content, contact information, or policies are accessible for analysis. The domain is registered since 2016 with DNSSEC enabled, suggesting a legitimate registration, but the lack of accessible content limits further trust evaluation. Technically, the site uses custom JavaScript with Web Workers and cryptographic hashing to implement the captcha challenge. The hosting leverages AWS Cloudfront CDN for content delivery. However, no SEO, accessibility, or privacy compliance features are present on the challenge page. Security headers and HTTPS configuration details are not visible in the provided data. The security posture shows some strengths in DNSSEC and captcha usage but lacks visible security headers and privacy compliance mechanisms. The site does not expose forms or inputs, reducing attack surface but also limiting user interaction. Overall, the site is currently inaccessible for normal users without passing the challenge, which impacts usability and trust. Given these factors, the overall risk is moderate due to the blocking mechanism, but the lack of transparency and policies is a concern. Strategic recommendations include implementing visible security headers, publishing privacy and cookie policies, providing contact and incident response information, and improving user experience post-challenge.

B

BPER Banca

bper.it

70

BPER Banca is a large Italian banking group offering a wide range of financial services including retail banking, corporate banking, wealth management, loans, mortgages, and digital banking services. The website targets private individuals, businesses, and wealth management clients, providing comprehensive product offerings and digital access points. The site is built on a modern technical infrastructure using Liferay CMS, React, and various JavaScript libraries, ensuring a good user experience and mobile optimization. Security posture is strong with HTTPS enforced and bot protection via reCAPTCHA, though explicit security headers and published security policies are lacking. Privacy compliance is partially addressed with a cookie consent mechanism but no visible privacy policy or terms of service links in the main content. Overall, the website is professional, trustworthy, and well-positioned in the Italian banking sector.

C

Cooperfidi Italia Soc. Coop

cooperfidiitalia.it

54

Cooperfidi Italia Soc. Coop is a well-established cooperative society founded in 2009, specializing in providing credit guarantee services primarily to cooperative, non-profit, and primary sector businesses in Italy. The organization positions itself as a key partner facilitating accessible and sustainable credit to promote business growth within its target sectors. The website reflects a professional and consistent brand image, with clear navigation and relevant content tailored to its audience. Technically, the site is built on WordPress with modern plugins and technologies, including Yoast SEO and GDPR-compliant cookie management, indicating a mature digital infrastructure. Security posture is strong with HTTPS and DNSSEC enabled, though some improvements in security headers and explicit policies could enhance trust further. Overall, the site demonstrates good privacy compliance and business credibility, supported by clear contact information and social media presence.

C

Consorzio Cooperativo Finanziario per lo Sviluppo

fin4coop.it

40

FIN4COOP is a cooperative financial intermediary operating nationally in Italy, focusing on providing financial services and support to cooperative members. The website serves as an information portal offering details on financial activities, brochures, membership procedures, financial statements, and news updates. The company targets cooperative organizations and mutual societies, positioning itself as a niche player in the cooperative finance sector with strategic partnerships and a cooperative business model. The website is professionally designed, consistent in branding, and includes trust signals such as privacy compliance and social media presence. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Maps API, and Google Analytics integrated with consent management. The site shows moderate performance and good mobile optimization. SEO practices are well implemented with proper meta tags and structured data. However, a visible PHP warning indicates a plugin issue that should be resolved to improve security and user experience. From a security perspective, the site uses HTTPS with excellent SSL configuration and employs a cookie consent mechanism via Iubenda. No critical vulnerabilities were detected, but the absence of security headers and the PHP warning reduce the security posture score. No incident response or security policy pages were found, suggesting room for improvement in transparency and preparedness. Overall, the website is trustworthy and professional with a good balance of content quality, technical implementation, and privacy compliance. Addressing the minor security issues and enhancing security headers would further strengthen the site's security and user trust.

C

Coopfond

coopfond.com

68

Coopfond is a mutualistic fund affiliated with Legacoop, dedicated to promoting cooperation and supporting the creation and sustainable growth of cooperatives in Italy. The organization has a strong market position with over 30 years of history, offering financial and strategic support to cooperatives, emphasizing sustainability, innovation, and solid growth. The website reflects a mature digital infrastructure built on WordPress with modern plugins and analytics tools, demonstrating a good level of digital maturity. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, including cookie consent and GDPR-aligned policies. No critical vulnerabilities or blocking mechanisms were detected, indicating a secure and trustworthy online presence. Overall, Coopfond presents as a credible and professional organization with a clear mission and well-implemented digital presence.

The domain rumahweb.net is registered to CV. Rumahweb Indonesia since 2005, indicating a long-standing business presence in Indonesia within the technology sector. However, the website content is completely empty, with no metadata, no visible content, no forms, no links, and no scripts, which severely limits the ability to assess the company's digital presence or offerings. The lack of any privacy, cookie, or terms of service policies, as well as absence of contact information, further restricts evaluation of compliance and user engagement capabilities. From a technical perspective, no information about the technology stack, hosting provider, or performance can be derived due to the absence of content. Security posture cannot be assessed beyond the WHOIS data, which shows a domain with clientTransferProhibited and clientUpdateProhibited statuses, indicating some level of domain security. No WAF or blocking mechanisms were detected. Overall, the security posture is unknown due to lack of data, but the domain registration data is consistent and trustworthy. The website's lack of content and policies represents a significant risk for user trust and compliance. Strategic recommendations include developing a functional website with clear business information, implementing privacy and cookie policies, and establishing contact and security policies to improve trust and compliance.

Rumahweb Indonesia is a well-established web hosting and domain registration provider based in Indonesia, serving primarily small to medium businesses and individuals. Founded in 2002, the company offers a comprehensive suite of services including shared hosting, cloud hosting, VPS, dedicated servers, email hosting, SSL certificates, and website creation tools. Their market position is strong locally, supported by over 155,000 customers and multiple industry certifications such as ISO 27001. The website reflects a professional and modern digital presence built on WordPress with Elementor, demonstrating technical maturity and good user experience. Security posture is robust with HTTPS, security partnerships, and anti-DDoS measures, though explicit cookie consent mechanisms and incident response contacts could be improved. The absence of WHOIS data for the domain is unusual but does not detract significantly from the overall trustworthiness given the extensive business and trust signals present. Strategic recommendations include enhancing privacy compliance and publishing vulnerability disclosure information to further strengthen security and compliance posture.