Security Directory

A

axapharm ag

diabetes-care.ch

51

The website www.diabetes-care.ch represents axapharm ag's Healthpro brand, specializing in diabetes care products such as blood glucose meters, test strips, lancets, and related accessories. The company positions itself as a niche healthcare provider offering modern, user-friendly devices with features supporting effective diabetes management. The site targets individuals managing diabetes and healthcare professionals seeking reliable measurement tools. Technically, the website is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and Google Analytics for user insights. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS with a valid SSL certificate and anonymizes IPs in Google Analytics, but lacks some security headers and displays minor PHP notices, which could expose information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact information is comprehensive and transparent, enhancing business credibility. Overall, the site is trustworthy and professionally maintained but would benefit from addressing minor security and privacy gaps.

A

Axapharm AG

grafixpharm.ch

46

Grafixpharm, operated by Axapharm AG, is a Swiss-based graphic design service provider with a multilingual WordPress website. The site demonstrates moderate digital maturity with the use of modern plugins such as Yoast SEO, WPML for multilingual support, and Google Analytics for visitor tracking. The website design is professional and mobile-optimized, providing a good user experience and clear navigation. However, the site lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security posture is adequate with HTTPS enabled and some tracking opt-out mechanisms, but it lacks advanced security headers and public security policies. Overall, the domain registration aligns well with the business claims, indicating legitimacy and consistency.

S

Springerbörse.ch AG

springerboerse.ch

51

Springerbörse.ch AG is a Swiss-based company specializing in providing unique staffing services for pharmacies, particularly focusing on pharmacist substitutions. The company operates a professional website primarily in German, targeting pharmacies and pharmacist substitutes in Switzerland. Their business model revolves around facilitating flexible staffing solutions and booking services for pharmacies, positioning them as a niche service provider within the healthcare sector. The website features customer testimonials and clear contact information, reinforcing trust and credibility. Technically, the website is built on WordPress using Elementor and several plugins such as Booknetic for booking functionalities and Yoast SEO for search engine optimization. The site demonstrates good mobile optimization, moderate performance, and basic accessibility features. SEO practices are well implemented with proper meta tags and structured data. The hosting provider is not explicitly identified, but the site uses HTTPS with an excellent SSL configuration. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not provide a dedicated security policy or incident response contact. There is no cookie consent mechanism detected, which is a gap in GDPR compliance. No vulnerabilities or malicious indicators were found in the analysis. Overall, the security posture is good but could be improved with additional headers and policies. The overall risk assessment is low, with the website appearing legitimate, professional, and trustworthy. Strategic recommendations include implementing security headers, adding a cookie consent mechanism, publishing a security policy, and maintaining regular updates to plugins and themes to mitigate potential vulnerabilities.

I

ift Rosenheim GmbH

ift-montageplaner.de

57

ift Rosenheim GmbH is a reputable German institute specializing in building technology, particularly in the testing, certification, and planning of windows and building components. Their ift-Montageplaner tool facilitates professional and compliant planning of window wall connections, targeting installers, planners, and processors. The company holds multiple ISO certifications and is recognized internationally. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes consent management for privacy compliance. Security posture is strong with HTTPS and consent mechanisms, though additional HTTP security headers could enhance protection. Overall, the site is professional, well-structured, and trustworthy, with clear contact information and partner integrations.

O

ORDRE DES ARCHITECTES - ORDE VAN ARCHITECTEN FCGOA

nroa-cnoa.be

44

The website represents the National Council of the Order of Architects (NROA) in Belgium, a governmental regulatory body overseeing architects. It provides information about the council's assignments, composition, and offers a service to find architects via an external API. The site is multilingual, targeting Dutch, French, and German-speaking audiences in Belgium. The business model is regulatory and service-oriented, focusing on governance and professional oversight within the architecture sector. The organization is relatively new online, with domain registration in 2023, consistent with the website's recent content updates. Technically, the website is built on WordPress with Elementor and uses modern SEO and cookie consent plugins. Hosting is provided by OVH, a reputable provider. The site is mobile-optimized, has good SEO practices, and uses Google Analytics with consent-based loading. Performance is moderate, and accessibility is basic but functional. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are not explicitly detected. Security-wise, no critical vulnerabilities or exposed sensitive data were found. The site lacks explicit security policies or incident response contacts, which could be improved. Privacy compliance is good with a clear cookie policy and consent mechanism. Business credibility is supported by consistent branding, structured data, and trust signals such as official logos and partner links. Overall, the website is professional, secure, and compliant with GDPR requirements, serving its role as a national architectural regulatory authority effectively.

D

Dr.Dünner AG

pourelle.ch

54

Dr.Dünner AG operates the website pourelle.ch, offering natural and sustainable Swiss supplements targeted at women's cycle health. The company positions itself as a niche player in the healthcare sector, focusing on female empowerment and natural wellness. The website provides educational content alongside product offerings, emphasizing Swiss origin and quality. Technically, the site is built on WordPress with the Avada theme, leveraging modern SEO tools like Yoast and tracking via Google Tag Manager. The site is well-optimized for mobile and presents a professional user experience. Security posture is solid with HTTPS enabled and no obvious vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is partially addressed with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration aligns with the business claims, indicating legitimacy and trustworthiness.

B

Bad Egelsee

badegelsee.ch

60

Bad Egelsee is a public family and sports swimming facility located in Kreuzlingen, Switzerland, offering a variety of aquatic and wellness services including sport pools, family pools, saunas, and steam baths. The website presents a professional and consistent brand image targeting families, sports swimmers, and wellness seekers in the local community. The business model focuses on providing recreational and health-related aquatic services with a clear emphasis on family-friendly and sports-oriented offerings. Technically, the website uses modern JavaScript frameworks such as Alpine.js and integrates Matomo for analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and SEO-friendly with good accessibility features, although some accessibility aspects could be improved. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks published security policies or incident response information. Overall, the website is trustworthy and professionally maintained with no signs of malicious activity or content safety concerns.

B

blogduwebdesign

blogduwebdesign.com

61

Blog Du Webdesign is a French-language online resource hub focused on web design, UX, and UI for web professionals and enthusiasts. It offers high-quality articles, tutorials, toolboxes, and trend analyses tailored for experts in the web industry. The website is built on the e-monsite CMS platform and leverages modern web technologies including Bootstrap 4, jQuery, Google Fonts, and integrates advertising and tracking tools such as Google Adsense, Google Analytics, and Facebook Pixel. While the site demonstrates strong content quality, professional design, and good SEO practices, it lacks some security headers and a cookie consent mechanism, which are important for GDPR compliance. The WHOIS data for the domain is unavailable, which raises some concerns about domain legitimacy, though the website's professional appearance and active social media presence mitigate this risk. Overall, the site is a valuable resource for its target audience but would benefit from enhanced security and privacy compliance measures.

M

Mesresa

mesresa.fr

54

Mesresa is a French company providing a comprehensive software solution for managing seasonal and short-term rental properties. Their platform targets property owners and managers seeking to optimize bookings, automate reservation processes, and increase rental revenue. The website is professionally designed, mobile-optimized, and integrates with major rental platforms and payment gateways, reflecting a mature digital infrastructure. However, the absence of WHOIS registration data and lack of explicit privacy and security policies slightly reduce trustworthiness. The site uses modern web technologies including Bootstrap 4 and jQuery, with Google Tag Manager for analytics. Security posture is adequate with HTTPS and secure payment integration but lacks some recommended HTTP security headers. Overall, Mesresa presents a credible business with room for improvement in transparency and security best practices.

U

Up spot

upspot.app

61

UP Spot operates a French-language website promoting a mobile application for guided tourist visits, focusing on cultural, historical, and architectural heritage. The business targets tourists and residents seeking flexible, self-paced tours via curated circuits with multimedia content. The website is professionally designed, mobile-optimized, and integrates modern web technologies including Bootstrap 4, jQuery, and Google Analytics. Privacy and cookie policies are implemented with GDPR compliance, and social media presence is established on Facebook and Instagram. However, direct contact emails and phone numbers are not explicitly provided, relying instead on contact forms. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks explicit security policies or vulnerability disclosure channels.

L

Luminjo

luminjo.com

64

Luminjo is a French SaaS company providing an intuitive online customer support software designed to centralize client inquiries and improve team collaboration. The platform targets small to medium enterprises, startups, and associations, offering features such as ticket centralization, tracking, and API integration. The website is professionally designed, mobile-optimized, and includes multi-language support, reflecting a mature digital presence. Technically, the site uses modern web technologies including jQuery, Google Analytics, and a proprietary CMS framework, ensuring a functional and responsive user experience. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, though lacks explicit security headers and incident response information. WHOIS data for the subdomain is unavailable, which is typical for subdomains, but the main domain's WHOIS data was not provided for analysis. Overall, Luminjo presents a credible and professional online presence with room for enhanced security transparency.

C

Carers UK

carersuk.org

65

Carers UK is a well-established UK-based non-profit charity dedicated to supporting unpaid carers through expert information, advice, support services, and advocacy campaigns. The organization has a strong market position with over 60 years of history and a clear focus on improving carers' lives across the UK. Their website reflects a professional and user-friendly platform that effectively serves their target audience of unpaid carers. Technically, the site uses a modern technology stack including Umbraco CMS, jQuery, Bootstrap, and integrates Google Analytics and Tag Manager for analytics. Hosting and DNS are managed via Cloudflare, providing good performance and security. Security posture is solid with HTTPS enforced and standard security headers likely in place, though DNSSEC is not enabled and no explicit security policy or vulnerability disclosure is published. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, well-branded, and provides comprehensive content relevant to its audience.

W

Winti Mäss GmbH

wintimaess.ch

57

Winti Mäss GmbH operates a regional event website focused on the Winti Mäss event in Winterthur, Switzerland, targeting families and the general public with offerings including gastronomy, live music, and entertainment. The website is built on WordPress with a modern tech stack including Bootstrap and jQuery, and it employs standard plugins such as Real Cookie Banner for GDPR compliance. The site demonstrates good digital maturity with mobile optimization and SEO best practices. Security posture is strong with HTTPS enforced and appropriate security headers, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is trustworthy, professional, and compliant with relevant privacy regulations.

C

Christkatholische Kirchgemeinde Zürich

christkath-zuerich.ch

53

Christkatholische Kirchgemeinde Zürich operates as a Christian Catholic parish serving the Zurich community with religious services, social support, and cultural events. The website is well-structured, providing detailed event information, contact details, and community resources. Technically, it employs modern web technologies such as Bootstrap and jQuery, with a CMS based on ZMS, and uses HTTPS with appropriate security headers. However, the site lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is strong with no visible vulnerabilities, and WHOIS data confirms the legitimacy of the domain and organization. Overall, the website effectively serves its community audience but should improve privacy compliance to enhance trust and legal adherence.

K

Katholisch Stadt Zürich

katholisch-stadtzuerich.ch

53

Katholisch Stadt Zürich is a non-profit religious organization representing the Catholic community in Zurich, Switzerland. The website serves as a hub for 23 parishes, providing information and community engagement for the largest city in Switzerland. The organization focuses on religious services and community activities, targeting local residents and the Catholic population. The website is professionally designed using WordPress with modern plugins such as Yoast SEO and Smart Slider 3, indicating a moderate level of digital maturity. Mobile optimization and SEO practices are well implemented, though accessibility features are basic. Security posture is good with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and incident response disclosures. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the site is trustworthy and credible but would benefit from enhanced compliance and security transparency.

K

Kirchen in Zürich - Diese Seite ist nicht mehr in Betrieb.

kirchen-in-zuerich.ch

43

The website kirchen-in-zuerich.ch is currently inactive, displaying a message that it is no longer in operation. It appears to have been a WordPress-based site focused on churches in Zürich, Switzerland, but no active content or business services are available. The technical infrastructure is minimal, relying on WordPress with an under construction plugin and standard web fonts and CSS frameworks. There are no visible security headers or advanced security configurations, and no privacy or cookie policies are present. The site lacks contact information, forms, or social media links, indicating a low level of digital maturity and business engagement. Overall, the security posture is weak due to the absence of security best practices and policies, though no critical vulnerabilities or malicious indicators were detected. The domain registration data is consistent with the website's geographic focus and theme, but the inactive status reduces trust and business credibility. Strategic recommendations include reactivating the site with proper content, implementing security headers and HTTPS, adding privacy and cookie policies, and providing clear contact and incident response information to improve compliance and trust.

H

Holzbau-Offensive

aufholzbauen.de

61

The website aufholzbauen.de represents the Holzbau-Offensive, an educational initiative focused on timber construction for planners in the Baden-Württemberg region of Germany. It offers courses, webinars, and resources to support professionals in this niche sector. The platform is built on WordPress with WooCommerce integration for course management, indicating a digital maturity aligned with modern CMS and e-commerce technologies. The site is well-branded, consistent, and targets a specialized professional audience with relevant content in German. Technically, the site uses standard web technologies including jQuery and Revolution Slider, and implements GDPR-compliant cookie consent mechanisms via CookieYes. Security posture is adequate with HTTPS and basic security headers, though there is room for improvement in advanced headers and explicit security policies. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though it lacks explicit contact and security policy disclosures.

C

Cluster Forst und Holz BW

cluster-forstholz-bw.de

54

The website represents the Cluster Forst und Holz BW, a cluster initiative in Baden-Württemberg, Germany, focused on promoting innovation and collaboration within the forestry and wood industry sectors. It serves as a platform for companies and research institutions to access funding programs, project information, and networking opportunities. The site highlights its strong market position with significant economic impact in the region, supported by partnerships with government and EU funding bodies. Technically, the website is built on the Yii framework with Bootstrap and jQuery, hosted on Hetzner servers, and demonstrates good mobile optimization and SEO practices. Security measures include HTTPS enforcement and CSRF protection, though some security headers and policies are not explicitly published. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page. Overall, the site is professional, trustworthy, and well-structured, though it lacks direct contact emails and explicit security or incident response policies.

F

Fachkommission Internet – Amnesty International

fk-internet.de

44

The Fachkommission Internet (FK Internet) website serves as an IT support portal for the German section of Amnesty International, providing services such as webhosting, email, cloud storage, and intranet support. The organization operates as a small, volunteer-driven non-profit entity, targeting Amnesty International groups and districts in Germany. The website is built on WordPress and hosted on Manitu servers, reflecting a moderate to good level of technical maturity with modern plugins and responsive design. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and explicit security policies. Privacy compliance is mostly met with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the website is trustworthy, professional, and well-maintained, supporting its niche audience effectively.

O

Opferhilfe beider Basel

bleibnichtallein.ch

51

Bleib nicht allein is a regional non-profit organization providing victim support services primarily in the Basel region of Switzerland. The website offers assistance and resources for children, youth, parents, and professionals dealing with victimization. The organization positions itself as a trusted local support entity with clear contact channels and a focus on accessibility and user support. The website is built on WordPress with common plugins for analytics and contact forms, reflecting a moderate level of digital maturity. The technical infrastructure supports HTTPS with good SSL configuration and basic performance and mobile optimization. Security posture is adequate with encrypted connections and some anti-spam measures, but lacks explicit security headers and incident response information. Privacy compliance is partially met with a GDPR-compliant privacy policy but no cookie consent mechanism. Overall, the site is trustworthy and professional, serving a sensitive and important social function.

R

Reisswolf

reisswolf.ch

64

Reisswolf Schweiz is a specialized service provider offering secure, certified, and sustainable destruction of sensitive documents and data carriers across Switzerland. The company targets businesses, public authorities, healthcare providers, and legal firms, providing services compliant with Swiss data protection laws and international standards such as DIN 66399 and ISO/IEC 21964. With multiple regional offices, Reisswolf ensures localized service delivery and strong customer support. The website reflects a mature digital presence built on WordPress with modern SEO and privacy compliance features. Security posture is strong, leveraging HTTPS, certified processes, and secure logistics containers, although incident response contact details are not publicly disclosed. Overall, the company demonstrates high trustworthiness and professionalism in its market niche.

P

Paprec Group

paprec.com

65

Paprec Group is a leading French company specializing in waste management and recycling services. Established in 1994, it has grown into a major player in the environmental sector, serving both industrial clients and local authorities with a comprehensive range of services including waste collection, sorting, recycling, and energy valorization. The company emphasizes sustainability and circular economy principles, positioning itself as a key contributor to environmental preservation in France. The website reflects a mature digital presence with multilingual support and rich content aimed at educating and engaging its audience. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and Matomo analytics. It demonstrates good performance, mobile optimization, and accessibility features. Security best practices are observed with HTTPS enforcement and security headers, although public security policies and incident response information are not explicitly published. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. However, the WHOIS data for the domain is missing or not publicly available, which raises minor concerns about domain registration transparency but does not detract significantly from the overall legitimacy given the professional website and business presence. Overall, Paprec Group's website is professional, secure, and compliant, supporting its position as a trusted leader in the recycling industry. Strategic recommendations include publishing explicit security and incident response policies and improving domain registration transparency.

Y

You Manage Consulting AG

mediasign.ch

53

You Manage Consulting AG is a Swiss-based consulting firm specializing in project management services for small and medium-sized enterprises (KMU), with expertise in real estate, finance, and ICT sectors. The company is led by Daniel Honegger, who brings over 20 years of experience in project leadership and business consulting. The website clearly targets KMU clients in Switzerland, offering freelance and fixed mandate consulting engagements. The business model focuses on providing tailored project management and advisory services in niche sectors, positioning itself as a trusted partner for operational efficiency and project success. Technically, the website is built on WordPress using modern frameworks such as Bootstrap 4 and jQuery, enhanced with optimization plugins like Autoptimize. The site demonstrates good mobile responsiveness, SEO optimization, and a moderate performance profile. Structured data is implemented effectively to enhance search engine understanding and trust signals. However, some improvements could be made in accessibility and security headers to strengthen the technical posture. From a security perspective, the site uses HTTPS with an excellent SSL configuration, and no exposed sensitive data or vulnerable libraries were detected. However, the absence of security headers and incident response contact information indicates room for improvement in security best practices. Privacy compliance is addressed with a privacy and cookie policy, though a cookie consent mechanism is missing, which is important for GDPR compliance. No signs of malicious content or vulnerabilities were found, supporting a strong security baseline. Overall, the website presents a professional and trustworthy image with clear business information and contact details. The risk profile is low, with recommendations focusing on enhancing security headers, incident response readiness, and privacy consent mechanisms to further improve compliance and trustworthiness.

S

Strube Stiftung

strube-stiftung.de

62

Strube Stiftung is a German non-profit foundation focused on encouraging responsible action among individuals and society by initiating and supporting projects in health literacy, European cultural integration, and contemporary dance. The foundation targets audiences interested in healthcare empowerment, European culture, and artistic innovation. The website is built on WordPress using the Divi theme, featuring a professional design with good mobile optimization and clear navigation. Social media presence across major platforms enhances outreach and trust. Security posture is solid with HTTPS, cookie consent mechanisms, and updated software components, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy and cookie policy. No critical vulnerabilities or suspicious content were detected, and the site is fully accessible without WAF blocking. WHOIS data is limited but does not raise significant concerns. Overall, the site demonstrates a good balance of professionalism, security, and compliance appropriate for a small non-profit foundation.

A

Albert und Barbara von Metzler-Stiftung

metzler-stiftung.de

61

The Albert und Barbara von Metzler-Stiftung is a small non-profit foundation based in Germany, focused on supporting children and youth through targeted social projects primarily in Frankfurt and surrounding areas. Established in 1998, the foundation operates with a clear mission to improve societal well-being through financial support and active engagement in projects. The website reflects a professional and consistent brand image, emphasizing transparency and community involvement. Technically, the site is hosted on Colt's infrastructure and likely uses an enterprise CMS, delivering a moderate performance with good mobile optimization and SEO practices. Security-wise, the site implements cookie consent mechanisms and avoids exposing sensitive data, but lacks explicit security policies or incident response information. Overall, the foundation demonstrates a trustworthy online presence with strong business credibility and privacy compliance.

D

Deutsche Stiftung für junge Erwachsene mit Krebs

junge-erwachsene-mit-krebs.de

46

The Deutsche Stiftung für junge Erwachsene mit Krebs is a specialized non-profit foundation dedicated to supporting young adults aged 18 to 39 diagnosed with cancer. The organization provides comprehensive information, support services, advocacy, and educational resources tailored to this demographic within Germany. Their market position is focused and niche, serving a critical healthcare segment with a strong emphasis on community engagement and scientific collaboration. The website reflects a mature digital presence with multilingual support and donation capabilities, indicating a well-established infrastructure. Technically, the website is built on WordPress with modern plugins such as Yoast SEO for optimization, GiveWP for donations, and WPML for multilingual content. The site demonstrates good mobile responsiveness, accessibility compliance (including BITV standards), and SEO best practices. Performance is moderate, with room for optimization, but overall the technical implementation supports the foundation's mission effectively. From a security perspective, the site enforces HTTPS and employs cookie consent management via Borlabs Cookie. While explicit security headers are not fully evident, no critical vulnerabilities or exposed sensitive data were found. The WHOIS data aligns well with the organization's identity, showing consistent registration and no privacy protection, which is appropriate for a non-profit entity. No incident response or vulnerability disclosure policies are publicly visible, suggesting an area for improvement. Overall, the website presents a low-risk profile with strong business credibility and compliance with privacy regulations. Strategic recommendations include enhancing security headers, formalizing incident response and vulnerability disclosure processes, and continuous monitoring of plugin security to maintain a robust security posture.

A

ARAG SE

arag-karriere.de

64

ARAG SE is a well-established German insurance company specializing in legal protection insurance and related services, with a strong market position as the largest family-owned insurer in Germany and a global leader in its niche. The website serves as a professional career portal targeting job seekers interested in joining ARAG, featuring comprehensive content about company values, culture, and job opportunities. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, Matomo analytics, and a proprietary recruitment platform by talentsconnect, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and privacy compliance, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, with no signs of blocking or suspicious activity.

S

Schaffhauser Fernsehen

shf.ch

55

Schaffhauser Fernsehen is a regional television broadcaster serving the Schaffhausen region in Switzerland, providing local news, cultural programming, and entertainment through multiple distribution channels including traditional TV providers and online livestreams. The website reflects a small media business focused on regional content with a modest digital presence. Technically, the site uses the phpwcms content management system and integrates various third-party advertising and tracking scripts, indicating a moderate level of digital maturity. However, the site lacks modern security headers and explicit privacy or cookie policies, which are critical for compliance and user trust. The security posture is basic, with no visible vulnerabilities but also no advanced protections or disclosures. Overall, the site is accessible and safe for general audiences but would benefit from enhanced privacy compliance and security hardening to improve trust and regulatory adherence.

R

Radio Munot

radiomunot.ch

62

Radio Munot is a regional Swiss radio station providing local news, music, and media content to its audience. The website serves as a digital platform for live streaming, media library access, and event information, targeting local listeners. The business operates primarily in the media sector with a small-scale regional focus. Technically, the website is built on a modern Angular framework with integration of Google Tag Manager and Consent Manager for analytics and cookie compliance. The site is mobile optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS enforced and basic security headers inferred, but lacks explicit published security policies or incident response contacts. Privacy compliance is partially addressed through cookie consent but lacks a visible privacy policy or terms of service. Overall, the website is trustworthy and functional but would benefit from enhanced transparency and compliance documentation.

S

Schazo AG

schazo.ch

45

Schazo AG is a well-established regional delivery company based in Switzerland, specializing in early morning delivery of newspapers, magazines, and advertising materials across the Schaffhausen region and neighboring cantons. With over 30 years of experience and a workforce of approximately 150 employees, Schazo serves over 51,000 households, positioning itself as a key player in regional print media distribution. The company offers services including early delivery, advertising mail distribution, and comprehensive delivery solutions in partnership with local providers. Technically, the website is built on the webEdition CMS platform and utilizes jQuery and custom image fading scripts. The site demonstrates moderate performance and basic mobile optimization, with a clear navigation structure and consistent branding. SEO and accessibility features are basic but functional. The site includes a cookie consent mechanism compliant with GDPR requirements, and privacy and terms of service documents are available, though security policies and incident response information are absent. From a security perspective, the website uses HTTPS (assumed from modern standards though not explicitly confirmed in the HTML), but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the content. The cookie consent mechanism is implemented properly, enhancing privacy compliance. WHOIS data confirms the domain is consistent with the business profile, showing legitimacy and alignment with the company's claimed history and location. Overall, the website presents a professional and trustworthy image with good business credibility and privacy compliance. However, improvements in security headers, incident response transparency, and technical modernization could enhance the security posture and user trust further.

P

Projektträger Jülich (PtJ) / Bundesministerium für Wirtschaft und Energie (BMWi)

enargus.de

59

EnArgus is an official German government internet portal managed by the Federal Ministry for Economic Affairs and Energy (BMWi) and Projektträger Jülich (PtJ). It provides comprehensive information on ongoing and completed energy research projects funded under the 7th Energy Research Programme. The portal offers multilingual support, a searchable project database, funding data visualizations, and a wiki for energy research terminology. The website targets researchers, policymakers, and industry stakeholders interested in energy research funding and project details within Germany. Technically, the site employs modern JavaScript frameworks including Bootstrap, Leaflet.js for mapping, and jQuery for DOM manipulation, delivering a responsive and user-friendly experience with moderate performance.

F

Forschungsnetzwerke Energie

forschungsnetzwerke-energie.de

63

Forschungsnetzwerke Energie is a German government-supported platform facilitating exchange among energy experts, researchers, and policymakers. It provides comprehensive information on energy research networks, events, publications, and webinars, positioning itself as a key knowledge hub in the German energy research sector. The platform is professionally designed, well-branded, and offers clear navigation primarily in German with English options. Technically, the website employs modern JavaScript libraries such as jQuery and Bootstrap, integrates Matomo analytics with privacy-conscious settings, and uses HTTPS with good security practices. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site is trustworthy, compliant with GDPR, and serves its target audience effectively.

B

BigRock

bigrock.in

73

BigRock is a leading Indian domain registration and web hosting provider offering a wide range of services including shared, VPS, dedicated, and cloud hosting, along with email hosting, website building, and online marketing solutions. The company has a strong market position in India, reinforced by its partnership with HostGator India, and targets small to medium businesses and entrepreneurs seeking affordable and reliable web presence solutions. Technically, the website is built on modern frameworks like Next.js and React, with extensive use of analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. The site is fast, mobile-optimized, and well-structured, providing an excellent user experience. Security-wise, the site enforces HTTPS and uses SSL certificates, along with security products like SiteLock and CodeGuard, but lacks explicit published security policies and vulnerability disclosure information. Overall, the website is professional and trustworthy, though it would benefit from enhanced privacy and security transparency.

P

Penzilla

penzilla.de

67

Penzilla is a German-based company specializing in digital solutions for company pension schemes (betriebliche Altersvorsorge). Their platform offers comprehensive services including contract digitalization, automated administration, and consulting tailored for insurance brokers, HR departments, and large enterprises. The website reflects a mature business with strong branding, client trust signals, and integration capabilities with major HR and payroll systems such as DATEV and SAP. Technically, the site is built on WordPress with Elementor and leverages modern marketing and consent management tools like HubSpot and Usercentrics. Security posture is good with HTTPS and GDPR-compliant cookie consent, though explicit security policies and headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

T

Tokenize.it GmbH

tokenize.it

58

Tokenize.it GmbH operates a sophisticated digital platform focused on startup fundraising and investment using tokenized virtual shares on the Ethereum blockchain. The company targets startups, founders, investors including business angels, venture capitalists, and retail investors primarily in Germany and Austria. Their platform enables continuous fundraising without notary involvement, leveraging legal templates optimized for GmbH companies. The business is positioned as a leader in digital fundraising with over €10 million in tokenized assets and more than 65 companies onboarded. Technically, the website is built on Webflow with modern libraries such as GSAP and Swiper.js, integrating blockchain technology and advanced analytics tools like Google Analytics, Hotjar, and LinkedIn Insight. Security posture is strong with HTTPS, DNSSEC, and non-custodial wallet control, though the absence of a published security policy and incident response details is noted. Privacy compliance is robust with GDPR-aligned cookie consent mechanisms and clear privacy and terms pages. The domain is well-aged but currently expired, posing a risk that should be addressed promptly. Overall, Tokenize.it presents a professional, trustworthy, and technically mature digital presence with room for improvement in security transparency and operational domain management.

S

smartaxxess Operation AG

smartaxxess.com

64

smartaxxess Operation AG operates a comprehensive platform and ecosystem focused on supporting startups and young companies in Germany. Their services include business planning, financial analysis, consulting, insurance, financing, controlling, and liquidity management. The company positions itself as a trusted partner providing access to financing and expert advice, supported by a network of reputable partners such as Allianz and DATEV. The website is professionally designed using WordPress with modern plugins and SEO tools, ensuring good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, smartaxxess demonstrates a credible and trustworthy online presence with strong business and technical foundations.

R

Revaia

revaia.com

40

Revaia is a growth equity investment fund dedicated to supporting sustainable leaders in technology and innovation. The website presents a professional image with clear branding and a focus on ESG principles, supported by multiple certifications and industry awards. The target audience includes investors and technology companies focused on sustainability. The site uses modern web technologies such as Nuxt.js, Google Analytics, and reCAPTCHA, indicating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although some security policies and incident response information are absent. Privacy compliance is well addressed with comprehensive privacy and cookie policies. However, the absence of WHOIS data and direct contact information reduces overall trustworthiness. Strategic recommendations include verifying domain registration, enhancing contact transparency, and adding security incident response details.

W

WPorters

wporters.com

52

WPorters is a specialized managed WordPress hosting provider based in Belgium, established in 2014. The company offers managed hosting, custom WordPress development, and support services targeted at entrepreneurs using WordPress websites. Their market position is that of a niche provider focusing on performance, security, and expert assistance. The website demonstrates a mature technical infrastructure built on WordPress with modern plugins and frameworks, optimized for SEO and mobile responsiveness. Security posture is strong with HTTPS, clientTransferProhibited domain status, captcha-protected contact forms, and GDPR-compliant privacy and cookie policies. However, explicit security policies and incident response information are not publicly disclosed. Overall, the website is professional, trustworthy, and well-maintained, with no signs of malicious activity or content safety concerns.

S

Stiftung z'Rieche

zrieche.ch

48

Stiftung z'Rieche is a Swiss cultural foundation dedicated to publishing the annual 'Jahrbuch z’Rieche', a yearbook focusing on the history, culture, and societal developments of the Riehen community near Basel. Established in 1961, the foundation serves a niche audience interested in regional heritage and cultural documentation. The website is built on TYPO3 CMS and integrates modern web technologies such as Google Analytics and Google Tag Manager for visitor tracking. The site is well-designed, mobile-optimized, and provides clear navigation to its key offerings including yearbook sales and news updates. However, direct contact information such as emails or phone numbers is not explicitly displayed, relying instead on a contact form.

The website lexikon-riehen.ch is an online municipal lexicon dedicated to the history and culture of Riehen, Switzerland. It is supported by the local government and related foundations, providing a curated collection of articles on persons, places, events, and organizations relevant to the community. The platform targets residents, researchers, and history enthusiasts, offering a participatory approach to content enrichment. Technically, the site uses a simple but effective stack including jQuery and CSS, with responsive design for mobile users. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, reflecting its public sector backing.

K

Startseite - Kunstspaziergang Riehen

kunstspaziergang-riehen.ch

46

The website 'Kunstspaziergang Riehen' serves as an informational platform focused on art walks in the municipality of Riehen, Switzerland. It provides visitors with navigation and cultural insights related to local art installations. The site is built on WordPress and integrates Google Maps API for interactive map features. The design is professional and mobile-optimized, offering a good user experience with clear navigation. However, the site lacks critical privacy and cookie policies, which may impact GDPR compliance. No explicit contact information or security policies are present, limiting direct communication and transparency regarding data protection. Security headers are absent, representing a potential vulnerability. Overall, the website is functional and trustworthy for its cultural purpose but requires improvements in privacy, security, and contact transparency to enhance compliance and user trust.

L

lankeleisi-bikes

lankeleisi-bikes.com

69

Lankeleisi-bikes.com is the official e-commerce website for Lankeleisi, a company specializing in dual motor electric bikes, including all-terrain, fat tire, and city commuter models. The site emphasizes a three-year warranty, positioning itself as a reliable brand in the electric bike market. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Judge.me for customer reviews and ShipGuard for shipping protection services. Multilingual support is provided through TranslationLab, targeting a broad international audience. Technically, the site is well-structured with good SEO and mobile optimization, though some accessibility features could be improved. Security posture is solid with HTTPS and domain status protections, but lacks DNSSEC and explicit security policies. Privacy compliance is basic, with cookie consent implemented but no visible privacy or terms of service pages. Overall, the site presents a professional and trustworthy front for its business, though it would benefit from enhanced transparency in privacy and security policies.

O

OneStore

one.store

65

OneStore is a technology company specializing in AI-powered customer engagement and marketing solutions tailored for e-commerce businesses. Their platform offers a comprehensive suite of tools including abandoned cart recovery, social proof notifications, gamified popups, email and SMS marketing, and integrations with major e-commerce platforms such as Shopify, WooCommerce, and BigCommerce. The company has established a strong market presence with over 150,000 businesses using their services and more than 2,450 five-star reviews on the Shopify App Store, indicating high customer satisfaction and trust. Technically, the website employs a modern technology stack with JavaScript frameworks, analytics tools like Google Analytics and ProfitWell, and customer support integrations such as Crisp chat. The site is hosted behind Cloudflare, ensuring performance and security benefits. The website is well-optimized for mobile devices, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses domain status protections to prevent unauthorized transfers or updates. Cookie consent mechanisms are implemented in compliance with GDPR and CCPA regulations. However, there is no explicit security policy or incident response contact information published, and DNSSEC is not enabled, which could be improved to enhance security posture. Overall, OneStore presents a professional, trustworthy, and technically sound online presence with strong privacy compliance and business credibility. Strategic improvements in security transparency and DNS security would further strengthen their risk profile.

Omnisend operates as an omnichannel marketing platform specializing in email and multi-channel messaging services designed to help businesses engage customers effectively and compliantly. The website analyzed is a minimal landing page primarily used for tracking links from emails sent via Omnisend's platform and providing an abuse reporting contact. The business is positioned as a technology provider in the marketing automation space, founded in 2017, with a medium-sized operational scale. Technically, the website is hosted via Cloudflare with basic HTML, CSS, and JavaScript technologies. The site lacks advanced frameworks or CMS indications and shows moderate performance and basic mobile optimization. No analytics or tracking scripts were detected in the provided content, indicating a privacy-conscious minimal landing page. From a security perspective, the domain is registered with a reputable registrar and protected against unauthorized transfers. However, DNSSEC is not enabled, and no security headers were detected, representing areas for improvement. The presence of an anti-abuse contact email demonstrates incident response readiness, but the absence of privacy and cookie policies indicates compliance gaps. Overall, the website is functional for its purpose but limited in content and compliance documentation. Strategic improvements in security headers, privacy policies, and mobile optimization would enhance trust and compliance posture.

Oceanpayment operates as an online payment service provider targeting global businesses with fast and secure payment processing solutions. The website presents a professional and consistent brand image, emphasizing its position as a leading payment processor. The technical infrastructure is based on WordPress with common analytics and marketing tools such as Google Analytics and Google Tag Manager, indicating a moderate level of digital maturity. The website is mobile optimized and includes a comprehensive cookie consent mechanism, reflecting good privacy compliance practices. However, the absence of WHOIS registration data and lack of explicit contact or security incident information introduces concerns regarding transparency and trustworthiness. Security posture is generally good with HTTPS enabled, but the lack of visible security headers and incident response details suggests room for improvement. Overall, the website is functional and professional but would benefit from enhanced transparency and security disclosures.

A

Autistici/Inventati

autistici.org

63

Autistici/Inventati is a volunteer-driven organization founded in 2001 that provides free internet services and digital self-defense tools to activists and grassroots collectives. Their platform emphasizes privacy, non-commercial use, and solidarity, supporting individuals aligned with anticapitalist and digital rights movements. The website content reflects a strong commitment to these principles, with manual service request processing and no commoditization of user data. Technically, the website uses modern frontend technologies including Bootstrap and Typeahead.js, with responsive design and good SEO practices. However, some security best practices such as security headers and cookie consent mechanisms are not evident. The site does not expose sensitive data and uses HTTPS, but lacks explicit security policy or incident response information. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or tracking scripts. The absence of WHOIS data is consistent with privacy protection, which aligns with the organization's mission. No advertising or analytics services are detected, supporting their privacy-centric approach. Overall, the website is trustworthy, well-structured, and safe for general audiences. Strategic recommendations include enhancing security headers, adding cookie consent, publishing security policies, and improving accessibility to further strengthen their security and compliance posture.

I

IBA Basel

iba-basel.net

47

IBA Basel is a regional urban development organization focused on coordinating and disseminating information about projects and initiatives in the Basel area, involving multiple municipalities and partners. The website serves as an information hub offering project details, news, events, media, and publications. The organization targets government entities, urban planners, and the general public interested in regional development. Technically, the website uses a range of JavaScript libraries including jQuery, Slick Carousel, and Google Analytics with IP anonymization, indicating a moderate level of digital maturity. The site is mobile optimized and provides cookie consent mechanisms, reflecting basic privacy compliance. Security posture is moderate with room for improvement, particularly in updating libraries and implementing security headers. The WHOIS data is missing or unavailable, which raises some concerns about domain legitimacy, but the professional content and official partner links support the site's credibility. Overall, the website is functional, informative, and trustworthy but would benefit from enhanced security and transparency measures.

S

Stadtverwaltung Weil am Rhein

weil-am-rhein.de

55

The website www.weil-am-rhein.de serves as the official digital presence of the city administration of Weil am Rhein, Germany. It provides comprehensive information and services related to city governance, citizen services, cultural events, environmental initiatives, and urban development projects. The site targets residents, local businesses, tourists, and government stakeholders, offering multilingual support in German, English, and French. The business model is governmental, focusing on public service and information dissemination, positioning itself as the authoritative source for municipal matters in the region. Technically, the website is built on the Komm.ONE CMS platform, leveraging modern JavaScript libraries such as jQuery, Bootstrap, and bxSlider for interactive and responsive user experience. The site is hosted on netcup servers, uses HTTPS with a Content-Security-Policy header, and demonstrates good mobile optimization and accessibility features. SEO practices are well implemented with proper meta tags and structured data (JSON-LD) for enhanced search engine visibility. From a security perspective, the site enforces HTTPS and includes a Content-Security-Policy header, minimizing risks from mixed content and some injection attacks. No critical vulnerabilities or exposed sensitive data were detected. However, additional security headers like X-Frame-Options and Referrer-Policy could further strengthen the security posture. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms in place, aligning with GDPR requirements. Overall, the website presents a professional, trustworthy, and secure platform for municipal communication and services. It lacks explicit security incident response information and vulnerability disclosure mechanisms, which could be areas for future improvement. The domain registration and hosting details are consistent with the official city identity, reinforcing legitimacy and trustworthiness.

Swatch is a globally recognized watch brand operating an official Finnish e-commerce website offering a wide range of watches. The site is built on Salesforce Commerce Cloud, indicating a mature digital infrastructure supporting e-commerce functionalities such as product search, cart, and checkout. The website demonstrates strong branding consistency and professional design, targeting general consumers in Finland. Technically, the site uses modern web technologies and integrates multiple analytics and marketing tools, including Google Tag Manager and TikTok Analytics, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and CSRF protections, though explicit security headers should be verified. WHOIS data was unavailable from the raw output, likely due to query restrictions, but the domain is a well-known brand domain, reducing suspicion. Overall, the site is trustworthy, professional, and compliant with privacy regulations.

M

Multimedia ABC GmbH (hilfmir.ch)

multimedia-abc.ch

43

Multimedia ABC GmbH is a Swiss-based small enterprise specializing in multimedia project services including videoproduction, VoIP telephony, livestreaming, and IT support for private clients, SMEs, and associations. Founded in 1999, the company has evolved to unify multiple projects under one brand, offering a diversified portfolio of digital and multimedia solutions. The website reflects a professional and consistent brand presence targeting a German-speaking Swiss audience. Technically, the site is built on Joomla CMS with modern UIkit framework and integrates Google Analytics with privacy considerations. Security posture is solid with HTTPS and CSRF protections, though some security headers could be improved. Privacy compliance is supported by clear privacy and cookie policies with consent mechanisms. Contact information is complete and transparent, enhancing business credibility.