Security Directory

P

PickyStory

heyamplify.com

61

Amplify, operated by PickyStory, is a SaaS growth platform designed specifically for Shopify merchants to increase revenue through AI-powered bundles, upsells, and subscription services. The platform targets e-commerce brands seeking to boost average order value and conversions with intelligent cart and checkout optimizations. The website is professionally built on WordPress using Elementor and integrates multiple marketing and analytics tools such as HubSpot, Google Analytics, and Facebook Pixel, indicating a mature digital marketing infrastructure. Security posture is adequate with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site is trustworthy, business-focused, and well-positioned in the e-commerce SaaS market.

F

FIGGE+SCHUSTER AG

figge-schuster.de

58

FIGGE+SCHUSTER AG is a Munich-based internet agency specializing in high-quality websites and online presences for medium-sized companies, with over 20 years of experience. Their core competencies include website relaunches, Weblication CMS development, SEO, Google Ads, film and video production, and corporate design. The company targets clients primarily in the German-speaking region, focusing on complex industries such as healthcare, real estate, and technology. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the site is built on the Weblication CMS platform, uses modern JavaScript libraries, and integrates etracker analytics. Mobile optimization and SEO practices are well implemented, though accessibility is basic. Security posture is good with HTTPS and cookie consent mechanisms, but lacks explicit security policies or incident response information. WHOIS data is consistent with the business profile, and no suspicious patterns were detected. Overall, the website is trustworthy, professional, and compliant with GDPR requirements.

S

Sparkassen- und Giroverband Hessen-Thüringen (SGVHT)

mein-fahrtwind.de

55

Mein Fahrtwind is a promotional website operated by the Sparkassen- und Giroverband Hessen-Thüringen (SGVHT), a public financial association in Germany. The site hosts a contest offering participants the chance to win one of eight electric scooters, targeting residents of Hessen, Thüringen, and parts of Rheinland-Pfalz. The website is professionally designed with comprehensive legal and privacy documentation, reflecting a strong commitment to GDPR compliance and user data protection. The contest employs a double opt-in mechanism to ensure participant consent and data accuracy. Technically, the site uses modern web technologies including Google Tag Manager, Matomo analytics, Adobe Typekit fonts, and a cookie consent management system. Hosting is managed via DomainControl, indicating a professional infrastructure. The site is mobile-optimized and accessible, with good SEO practices. Security measures include HTTPS and IP masking in analytics, though HTTP security headers are not explicitly detected. From a security perspective, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. Privacy policies are detailed and transparent, including a named data protection officer contact. No incident response or vulnerability disclosure policies are found, which could be areas for improvement. Overall, the site presents a low risk profile with strong compliance and trust indicators. Strategically, the site effectively supports the SGVHT's marketing and public engagement goals, leveraging digital tools to promote sustainable mobility. The integration of multiple marketing and tracking tools is balanced with user privacy considerations, positioning the organization as responsible and trustworthy in its digital presence.

The website du-machst-uns-aus.de appears to be a recruiting platform related to SGVHT, targeting job seekers in Germany. The site is built on TYPO3 CMS and incorporates a comprehensive cookie consent mechanism via Cookiebot, indicating awareness of privacy compliance requirements. However, the absence of a dedicated privacy policy, terms of service, and contact information limits its compliance and trustworthiness. Technically, the site uses modern technologies and is hosted on German servers, but SEO is minimal and the site is set to noindex, reducing discoverability. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks visible security headers or incident response information. Overall, the site is functional but requires improvements in privacy disclosures, contact transparency, and SEO to enhance credibility and compliance.

S

Sparkassen in Hessen und Thüringen

ps-los-sparen.de

66

The website www.ps-los-sparen.de represents a regional lottery savings product offered by the Sparkassen financial institutions in Hessen and Thüringen, Germany. The business model combines savings with lottery participation, offering cash and prize draws while supporting social projects. The site targets local savers and lottery participants, positioning itself as a trusted regional financial service with strong branding consistency aligned with the Sparkassen group. Technically, the site is built on Concrete CMS with modern frontend technologies including jQuery, Bootstrap, and Vue.js. It employs Matomo analytics for privacy-conscious user tracking and integrates a cookie consent mechanism, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though explicit security headers and published security policies are absent. The site is accessible without WAF or blocking mechanisms and shows no signs of malicious content or vulnerabilities. Overall, the website demonstrates good content quality, technical implementation, and business credibility, suitable for its regional financial service role.

S

Sparkassen- und Giroverband Hessen-Thüringen (SGVHT)

finanzen-mit-daniel-jung.de

47

The website 'finanzen-mit-daniel-jung.de' is an educational platform focused on financial literacy, primarily targeting students and educators in the Hessen and Thüringen regions of Germany. It is operated under the auspices of the Sparkassen- und Giroverband Hessen-Thüringen, a reputable financial association. The site offers a series of well-structured, easy-to-understand videos and learning materials to enhance financial knowledge. The partnership with Sparkassen and the inclusion of the Sparkassen-SchulService platform reinforce its credibility and regional relevance. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Tag Manager and Matomo for analytics, alongside a GDPR-compliant cookie consent mechanism. The site is hosted on servers indicated by the nameservers 'your-server.de' and related domains, suggesting a professional hosting environment. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some improvements in accessibility and security headers could be made. From a security perspective, the site uses HTTPS with strong SSL configuration and implements cookie consent for privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are comprehensive and clearly presented, with a designated data protection officer contact provided. The site does not employ a vulnerability disclosure policy, which could be considered for future enhancement. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. It effectively serves its educational mission with professional content and transparent governance. Strategic recommendations include enhancing HTTP security headers, formalizing a vulnerability disclosure process, and improving accessibility features to further strengthen the site's security and user experience.

S

Stiftung Edith Maryon

maryon.ch

42

Stiftung Edith Maryon is a Swiss non-profit foundation focused on securing land and real estate for social, cultural, educational, and agricultural projects. The organization operates primarily in Switzerland and offers services including project development, legacy consulting, housing assistance, and cultural promotion. Their market position is niche, targeting community-oriented and socially responsible real estate initiatives. The website is built on WordPress with a modern tech stack including Yoast SEO and Matomo analytics, reflecting a moderate to good level of digital maturity. Security posture is adequate with HTTPS and secure forms, but could be improved by adding security headers and a cookie consent mechanism. Overall, the site is professional, trustworthy, and compliant with GDPR, though some privacy compliance aspects could be enhanced.

M

Markant-Stiftung

markant-stiftung.ch

55

Markant-Stiftung is a Swiss philanthropic foundation established in 1993, focused on supporting cultural and charitable projects primarily in the Zentralschweiz region and Switzerland at large. The foundation operates with a clear mission to fund projects in music, theater, visual arts, literature, and social initiatives such as youth promotion and support for disadvantaged groups. It maintains a transparent and structured application process via a dedicated online platform, reflecting a mature digital presence. Technically, the website is built on Joomla CMS with Bootstrap and jQuery, offering a responsive and user-friendly experience. Security posture is solid with HTTPS, CSRF tokens, and no visible vulnerabilities, though some advanced security headers and incident response policies are absent. Privacy compliance is strong, with a comprehensive privacy policy aligned with Swiss and GDPR standards, although cookie consent mechanisms are missing. Overall, the foundation presents a trustworthy and professional online presence aligned with its non-profit mission.

S

Settelen AG

settelen.ch

53

Settelen AG is a well-established Swiss mobility service provider based in Basel, with a history dating back to 1883. The company offers a comprehensive range of services including new and used car sales, garage and repair services, car rental, moving services, and group travel by bus. It holds a strong regional market position and is recognized as a leading Toyota center in Switzerland. The website is professionally designed, content-rich, and targets both private and corporate customers in the Basel region. Technically, the site is built on TYPO3 CMS with modern frontend technologies and includes Google Analytics for visitor tracking. Security posture is good with HTTPS enabled and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy compliance is basic with clear privacy and cookie policies and consent mechanisms. Overall, the site reflects a credible and trustworthy business with strong branding and user experience.

B

Bäckerei Kult

baeckereikult.ch

48

Bäckerei Kult is a small local bakery business based in Basel, Switzerland, operating multiple physical locations and offering bakery products, ordering services, and event hosting. The website is professionally designed using WordPress and integrates social media channels such as Facebook and Instagram to engage with its local audience. The business targets local customers and partners within the Basel region, maintaining a consistent brand presence and providing clear information about opening hours and locations. Technically, the website uses a modern CMS with SEO optimization and basic accessibility features, though there is room for improvement in security headers and incident response transparency. Security posture is solid with HTTPS enabled and cookie consent implemented, but lacks advanced security policies or vulnerability disclosure mechanisms. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements, reflecting a legitimate and established local business.

S

Sommercasino Basel

sommercasino.ch

49

Sommercasino Basel is a small cultural venue located in Basel, Switzerland, offering a diverse program of concerts, theater, workshops, and community events. It also operates a café (Café Stoa) that serves seasonal meals and private event catering. The website is built on WordPress with modern plugins and technologies, providing a good user experience with clear navigation and event information. Social media integration and partner logos enhance its community presence. Security posture is adequate with HTTPS and email obfuscation, but lacks advanced security headers and cookie consent mechanisms. The domain uses privacy protection which is justified for this type of organization. Overall, the site is professional, trustworthy, and well-maintained.

H

Helvetiarockt

helvetiarockt.ch

48

Helvetiarockt is a Swiss non-profit organization dedicated to empowering girls, women, intersex, non-binary, trans, and agender individuals through music workshops, sensitization events, and networking platforms. The organization positions itself as a niche player in the Swiss cultural and social empowerment sector, leveraging partnerships such as musicdirectory.ch and diversityroadmap.org to extend its reach and impact. The website is multilingual, supporting German, French, Italian, Romansh, and English, reflecting its inclusive and broad audience approach. Technically, the website is built on WordPress with modern integrations including Google Analytics, Google Tag Manager, and Elfsight widgets. It uses jQuery and GSAP for animations and interactive elements. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Performance is moderate, with deferred script loading to improve user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks advanced security headers and explicit security or incident response policies. Privacy compliance is basic, with privacy and cookie policies present but no active consent mechanism. The site collects user data via newsletter subscription forms and uses tracking scripts moderately. Overall, Helvetiarockt presents a trustworthy and professional online presence with a clear mission and audience. Security and privacy practices are adequate but could be improved to meet higher compliance standards. The domain registration data aligns well with the organization's profile, supporting legitimacy. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing explicit security policies to strengthen trust and compliance.

T

Theater Basel

theater-basel.ch

56

Theater Basel is a well-established cultural institution in Switzerland offering a diverse range of performing arts including opera, theater, and ballet. The website effectively communicates its offerings with detailed event calendars, production information, and ticket purchasing options. The institution targets a broad audience including families, schools, and general theater enthusiasts. Technically, the website is built on Drupal 10, employs modern web technologies, and integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Security posture is strong with HTTPS and security headers, though improvements can be made in privacy compliance by adding cookie consent mechanisms and publishing terms of service. Overall, the website reflects a professional and trustworthy organization with a solid digital presence.

P

Paprec Schweiz

paprec.ch

53

Paprec Schweiz is a well-established Swiss company specializing in sustainable recycling, waste management, and secure data destruction services. With over 125 years of experience and multiple subsidiaries across key Swiss regions such as Aargau, Basel, Geneva, Lucerne, and Zurich, the company offers comprehensive solutions for both corporate and private clients. Their business model focuses on environmental sustainability and resource recovery, leveraging modern technologies and eco-friendly processes. The website reflects a professional and consistent brand image, supported by structured data and active social media presence. Technically, the website is built on WordPress with popular plugins like Yoast SEO and Borlabs Cookie for SEO and privacy compliance. The site is mobile-optimized and uses interactive mapping tools to showcase locations. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Analytics usage is minimal and privacy-conscious, with Google Analytics disabled by default. No critical vulnerabilities or security issues were detected. However, the absence of a visible privacy policy and terms of service pages is a compliance gap. Contact information is clearly presented with multiple phone numbers and physical addresses for subsidiaries. Overall, the site demonstrates a mature digital presence aligned with the company's market position. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, and improving accessibility features to further strengthen trust and compliance.

O

Opferhilfe beider Basel

opferhilfe-beiderbasel.ch

56

Opferhilfe beider Basel is a regional non-profit organization dedicated to supporting victims of violence in the Basel area of Switzerland. The website serves as an informational and advisory platform, offering guidance, support, and resources for victims of various forms of violence including sexualized violence, domestic violence, hate crimes, and more. The organization targets victims and their close relatives, providing free consultation services as mandated by the Swiss Victim Support Act. The site is multilingual, enhancing accessibility for diverse audiences. Technically, the website is built on a modern WordPress infrastructure using Elementor for design and layout, WPML for multilingual support, and WP Rocket for performance optimization. The site demonstrates good mobile optimization, fast loading times, and solid SEO practices through Yoast SEO integration. However, there is room for improvement in accessibility and explicit security headers. From a security perspective, the site uses HTTPS and does not expose sensitive data in its HTML content. There is no evidence of security policy documentation or incident response contacts, which are recommended for enhanced trust and compliance. Privacy and cookie policies are absent, which impacts GDPR compliance and user trust. Overall, Opferhilfe beider Basel presents a trustworthy and professional online presence for a non-profit victim support entity. Strategic recommendations include publishing privacy and cookie policies with consent mechanisms, adding security headers, and providing incident response information to strengthen security posture and compliance.

S.E.A. AG operates the website Kulturservice.ch, providing a range of advertising and marketing services across Switzerland, including social media management, poster and flyer advertising, event staffing, and guerilla marketing. The company targets businesses and organizations seeking comprehensive promotional solutions. The website is professionally designed with clear navigation and consistent branding, reflecting a small but established regional player in the media sector. Technically, the site uses Bootstrap and jQuery frameworks, integrates Google Analytics for visitor tracking, and employs a cookie consent mechanism to comply with privacy regulations. Mobile optimization and SEO practices are adequately implemented, ensuring a good user experience. Security posture is moderate; HTTPS is used, but security headers and incident response policies are lacking, representing an area for improvement. Overall, the site is trustworthy and compliant with basic GDPR requirements, though it could benefit from enhanced security and transparency measures.

G

Geschwister Meier Stiftung

gmstiftung.ch

61

The Geschwister Meier Stiftung is a Swiss non-profit foundation dedicated to supporting music and cultural activities ranging from traditional folk music to avant-garde experimental sounds. The website serves as an informational platform to present the foundation's mission and activities, targeting a general audience interested in arts and culture within Switzerland. The foundation operates in a niche cultural sector with a small organizational size and a focused business model centered on cultural funding and promotion. Technically, the website is built on the Wix platform, utilizing Wix's standard JavaScript libraries and hosting infrastructure. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO features. The technical stack is modern but limited to Wix's ecosystem, which simplifies maintenance but may restrict advanced customization. From a security perspective, the site benefits from HTTPS and a good SSL configuration. However, it lacks several security best practices such as security headers and explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency and readiness. Overall, the website is professionally designed and consistent with the foundation's branding and mission. The absence of contact details and privacy-related policies slightly diminishes trust and compliance posture. Strategic enhancements in privacy compliance, security headers, and contact transparency would strengthen the foundation's digital presence and user confidence.

R

Region Leimental Plus

regionleimentalplus.com

58

Region Leimental Plus is a regional governmental association in Switzerland representing a cluster of municipalities in the Basel-Landschaft canton. The website provides information about the association's formation, member municipalities, and regional projects. The site is hosted on WordPress.com and uses standard WordPress technologies and plugins. The technical infrastructure is modern and adequate for the site's purpose, with good mobile optimization and moderate performance. Security posture is acceptable with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but could improve compliance and security practices.

A

Atelier Spolia GmbH

spolia.ch

50

Atelier Spolia GmbH is a small architectural and design atelier based in Bern, Switzerland. The company focuses on exploring architecture and design through a process of learning and rethinking, offering bespoke projects that encourage freedom of use and appropriation. Their market position is niche, targeting clients interested in innovative and open architectural solutions. The website is built on WordPress using the Lay Theme, incorporating modern JavaScript libraries such as jQuery and Swiper.js, indicating a moderate level of technical maturity. Mobile optimization is good, and the site uses HTTPS with valid SSL certificates, ensuring secure communication. However, the absence of privacy and cookie policies, security headers, and analytics tools suggests room for improvement in compliance and marketing sophistication. Security posture is adequate but could be enhanced by implementing standard security headers and formal incident response mechanisms. Overall, the website presents a professional image with clear contact information but lacks comprehensive privacy and security disclosures.

B

Bajour

bajour.ch

61

Bajour is a Swiss media company specializing in community journalism focused on Basel and its local community. The website offers news articles, community engagement features, and membership options, positioning itself as a trusted local media outlet. The content is professionally presented with a modern design and clear navigation, targeting residents interested in local news and cultural topics. Technically, the site is built on modern web technologies including React and Next.js, ensuring fast performance and excellent mobile optimization. Security posture is good with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. Overall, the domain registration and website content are consistent and legitimate, reflecting a trustworthy business entity.

Avadis Vorsorge AG is a Swiss financial services company specializing in pension fund management and investment solutions for institutional and private clients. The company offers a range of services including pension fund administration, private equity investments, real estate investments, and financial planning. With over 450 institutional clients and a strong presence in Switzerland, Avadis positions itself as a reliable and independent partner in the financial sector. The website reflects a professional and consistent brand image, targeting institutional investors and private individuals seeking investment opportunities and pension solutions. Technically, the website employs modern JavaScript frameworks, Google Analytics, and OneTrust for cookie consent, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security-wise, the site uses HTTPS with strong SSL configuration and appropriate security headers, but lacks publicly available security policies or incident response contacts. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website demonstrates a high level of professionalism and trustworthiness, with minor recommendations to enhance security transparency and incident response readiness.

M

mediacampus-frankfurt

mediacampus-frankfurt.de

66

Mediacampus Frankfurt is an established educational institution specializing in seminars, training, and educational programs for the book trade and media industry in Germany. The website presents a professional and well-structured platform offering a variety of courses, webinars, and training sessions targeting professionals, newcomers, and specialists in publishing and media sectors. The institution maintains a strong social media presence and provides detailed event information, enhancing its market position as a key player in media education. Technically, the website employs modern web technologies including JavaScript, Algolia Search for site search functionality, and Google Tag Manager for analytics, which is loaded conditionally upon cookie consent. The site is hosted on Anexia servers, uses HTTPS with good SSL configuration, and is optimized for mobile devices with good accessibility and SEO practices. However, some security headers are not explicitly detected, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and privacy-aware analytics loading. No vulnerabilities or exposed sensitive data were found in the provided content. The WHOIS data aligns with the business claims, showing consistent domain registration and hosting. Privacy and cookie policies are not explicitly found in the provided content, which is a compliance gap. Overall, the site is safe, professional, and trustworthy with room for improvement in privacy disclosures and security policy transparency.

A

Amnesty International Deutschland e.V.

amnesty-international.de

41

Amnesty International Deutschland e.V. operates this website as a portal for local groups and districts within the German section of Amnesty International. The site serves as an informational hub linking to the main Amnesty International Germany website and providing resources for groups interested in establishing their own web presence. The organization is a well-established non-profit focused on human rights advocacy with a medium-sized presence in Germany. Technically, the website is built on WordPress with a moderate tech stack including jQuery and several plugins for enhanced user experience. The site is mobile-optimized and accessible, though content quality is basic and primarily informational. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and explicit incident response or vulnerability disclosure mechanisms. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and legitimate, but could benefit from enhanced security and privacy features.

À

À la lyonnaise

alalyonnaise.fr

61

À la lyonnaise is a French lifestyle media company focusing on the city of Lyon, offering content related to food, shopping, cultural discoveries, and leisure activities. The website serves as a digital platform complementing their print magazine editions, targeting residents and visitors interested in Lyon's local culture and lifestyle. Their market position is that of a niche local media outlet with a consistent brand presence and active social media engagement. Technically, the website employs modern JavaScript libraries, Matomo and Google Analytics for tracking, and uses HTTPS with cookie consent mechanisms, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and cookie consent but lacks explicit security headers and public security policies, suggesting room for improvement in security posture. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could enhance transparency around terms of service and incident response. Strategic recommendations include implementing security headers, publishing security policies, and improving SEO and accessibility compliance.

O

Office du Tourisme et des Congrès de la métropole de Lyon

visiterlyon.com

69

The website www.visiterlyon.com serves as the official tourism portal for Lyon and its metropolitan area, operated by the Office du Tourisme et des Congrès de la métropole de Lyon. It provides comprehensive tourism information, online booking services for hotels, restaurants, leisure activities, and city passes such as the Lyon City Card. The site targets tourists, families, business travelers, and groups, positioning itself as an authoritative and trusted source for visiting Lyon. The content is rich, professionally presented, and available in multiple languages, enhancing accessibility and user experience. Technically, the website employs modern web technologies including Alpine.js for interactivity, Swiper.js for sliders, and MapLibre GL for mapping. It integrates Google Tag Manager and Google reCAPTCHA for analytics and security. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Security best practices are observed with HTTPS enforcement, security headers, and secure forms, although explicit security policy and incident response information are not published. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR adherence, and consent mechanisms. However, WHOIS data for the domain is missing or unavailable, which is unusual for an official entity and slightly impacts trustworthiness. Despite this, the website's certifications, social media presence, and comprehensive content support its legitimacy. Overall, the website is a high-quality, secure, and user-friendly platform for promoting tourism in Lyon. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and a vulnerability disclosure policy to further enhance trust and transparency.

Z

Zammad

zammad.org

69

Zammad.org is the community website for Zammad, an open source web-based help desk and ticketing system. The site provides downloads for multiple operating systems and promotes free self-hosted installation. The business model centers on open source community engagement with a sister commercial site (zammad.com) for extended offerings. The website is well-structured, with clear navigation and professional design, targeting organizations seeking open source support solutions. Technically, the site uses modern JavaScript libraries such as jQuery and Prism.js, and employs Matomo for privacy-focused analytics. The site is hosted under a reputable registrar and uses HTTPS with a clientTransferProhibited domain status, indicating good domain security practices. However, the site lacks visible security headers and cookie consent mechanisms, which are recommended for enhanced security and compliance. No contact emails or phone numbers are listed on the homepage, which may impact user trust and support accessibility.

N

NETHINKS GmbH

nethinks.com

56

NETHINKS GmbH is a well-established German IT and telecommunications service provider founded in 2004. The company specializes in network solutions, VoIP, web and mail hosting, and professional IT infrastructure consulting. Positioned as a manufacturer-neutral partner, NETHINKS serves business clients with tailored, future-proof communication and IT infrastructure solutions. Their market presence is reinforced by partnerships with major technology vendors and an ISO 27001 certification, underscoring their commitment to security and quality. Technically, the website is built on WordPress using WPBakery Page Builder and integrates Borlabs Cookie for GDPR-compliant cookie management. The site employs modern web technologies including jQuery and Google Tag Manager for analytics and marketing. Hosting and domain registration are managed by Vautron Rechenzentrum AG, a reputable provider. The website demonstrates good mobile optimization, SEO practices, and accessibility features, though some security headers are missing. From a security perspective, NETHINKS shows a mature posture with HTTPS enforced, cookie consent mechanisms, and ISO 27001 certification. However, there is room for improvement in publishing explicit incident response contacts and security.txt files. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear policies and consent management in place. Overall, NETHINKS GmbH presents a trustworthy and professional online presence with solid business credibility and technical implementation. The risk profile is low, but enhancing security headers and incident response transparency would further strengthen their security posture.

C

Centro para el Desarrollo Tecnológico Industrial (CDTI)

cdti.es

63

CDTI is a Spanish government agency dedicated to promoting technological development and innovation among Spanish companies. It acts as a key national funding and support body for R&D projects, international cooperation, and innovation financing. The website reflects a mature digital presence with comprehensive content targeting entrepreneurs, companies, and research entities in Spain. The site is well-structured, professionally designed, and provides clear navigation and access to services and information. Technically, it is built on Drupal 9 with modern libraries and includes privacy-conscious analytics via Matomo and a consent manager (Klaro). Security posture is strong with HTTPS, security headers, and no evident vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Business credibility is high, supported by official domain registration and alignment with government entities. Overall, the site is trustworthy and serves its public mission effectively.

The website speaz.com currently presents an empty HTML page with no visible content, metadata, or interactive elements. The domain is registered with OVH sas since April 2020 and is locked against unauthorized transfers or deletions, indicating some level of domain management maturity. However, the lack of any website content or policies suggests the site is either under development or abandoned. There are no contact details, privacy policies, or security disclosures available, which limits the ability to assess the business or security posture comprehensively. Technically, the site is hosted by OVH but lacks modern web technologies, SEO optimizations, or accessibility features. Security headers and DNSSEC are not implemented, and SSL configuration is basic. Overall, the site scores low on content quality, technical implementation, privacy compliance, and business credibility.

P

ProveSource

provesrc.com

61

ProveSource operates as a SaaS provider specializing in social proof and live sales notification tools designed to boost online sales conversions. The company positions itself as a market leader in this niche, targeting e-commerce businesses and online marketers. The website reflects a modern WordPress-based infrastructure with Elementor and Yoast SEO plugins, supported by AWS hosting inferred from DNS servers. The technical setup includes multiple analytics and marketing scripts such as Mixpanel, Facebook Pixel, and Google Tag Manager, indicating a mature digital marketing strategy. Security posture is adequate with HTTPS enabled and domain registration protections in place, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies, which is a notable gap for GDPR and other regulations. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

S

SAIO

saio.io

60

SAIO is a small ecommerce service provider specializing in Shopify development, offering custom themes, live webshop tweaks, and app development. The company positions itself as an industry leader trusted by thousands of shop owners worldwide. The website is built on Squarespace, leveraging standard web technologies and Google Analytics for tracking. The technical infrastructure is modern and mobile-optimized, though performance is moderate. Security posture is basic with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and published security policies. WHOIS data is incomplete and privacy-protected, which limits transparency but is common for small businesses. Overall, the website is professional and trustworthy with room for improvement in security and compliance documentation.

S

Schinkels

schinkels-brauhaus.de

56

Schinkels is a regional German brewery and hospitality business offering craft beers, a restaurant experience, and event hosting services. The company emphasizes quality, sustainability, and creating memorable moments for its customers. Their website is professionally designed using WordPress with SEO and event management plugins, providing a rich user experience and structured event data. Security posture is good with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are missing. Overall, the site reflects a mature digital presence suitable for their business model and target audience.

K

Keyweb AG

keymachine.de

75

Keyweb AG is a well-established German technology company specializing in custom-built dedicated servers and hosting services. With over 20 years of experience and TÜV certification, the company offers high-performance, sustainable server solutions tailored to business needs. Their close partnership with Keymachine Server Manufaktur enables rapid and flexible server manufacturing, supporting a broad range of IT infrastructure and hosting services. The website reflects a professional and trustworthy business with clear contact channels and comprehensive service offerings. Technically, the site uses modern web technologies including Bootstrap and JavaScript, is mobile-optimized, and performs well. Security posture is strong with HTTPS, cookie consent, and secure forms, though explicit security policies and incident response contacts are not published. Overall, the domain and WHOIS data align with the company's history and legitimacy, supporting a high trust level.

J

JAXForms AG

jaxforms.com

70

JAXForms AG is a Swiss technology company specializing in digital form and workflow solutions, offering a range of services from simple forms to tailored complete solutions. The company positions itself as a competent partner for digital transformation projects, serving a business audience primarily in Switzerland. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content including success stories and job postings, indicating active operations and growth. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics for user tracking. Security posture is strong with HTTPS enforced and security headers present, though the absence of a dedicated security policy and incident response information suggests room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity, suitable for its business clientele.

Burgergemeinde Bern is a municipal government entity serving the city and canton of Bern, Switzerland. It provides a broad range of social, cultural, environmental, educational, and scientific services aimed at improving the quality of life for its residents. The website reflects a well-established public institution with clear communication of its mission and services, supported by active social media channels and event listings. Technically, the site is built on the Plone CMS platform, leveraging modern JavaScript libraries and a responsive design that supports good user experience across devices. Security posture is solid with HTTPS enforced and CSRF protections in place, though some improvements in security headers and incident response transparency are recommended. Privacy compliance is good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a notable gap. Overall, the website is professional, trustworthy, and aligned with the expectations for a government organization.

WebThinker GmbH is a small German technology service provider specializing in web design, online marketing, web development, tracking, analysis, and consulting. The company holds reputable certifications such as Google Partner and Shopware Partneragentur, positioning it well in the digital services market. Their website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the site is built on WordPress with modern frameworks and plugins, optimized for SEO and mobile use. Security posture is good with HTTPS and cookie consent mechanisms, though additional security headers and policies could enhance protection. Overall, the business demonstrates legitimacy and trustworthiness with clear contact information and positive customer testimonials.

H

Holzbau-Offensive Baden-Württemberg

holzbauoffensivebw.de

56

The Holzbau-Offensive Baden-Württemberg website is a well-established government initiative promoting sustainable and climate-friendly construction using wood. It serves as an information hub offering details on funding, practical support, education, research, and events related to wood construction in the Baden-Württemberg region. The site targets architects, engineers, planners, and public sector stakeholders, positioning Baden-Württemberg as a leader in sustainable building practices. Technically, the site employs modern web technologies including Yii Framework, Bootstrap, jQuery, and Slick Carousel, ensuring a responsive and accessible user experience. Security measures such as HTTPS and CSRF tokens are implemented, though some HTTP security headers could be improved. Privacy compliance is strong with a clear cookie consent mechanism and a comprehensive privacy policy. No critical vulnerabilities or suspicious elements were detected, and the domain registration data aligns well with the website's governmental purpose, supporting high legitimacy and trustworthiness.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

efre-bw.de

62

The EFRE Baden-Württemberg website serves as the official regional government portal for the European Regional Development Fund (EFRE) in the German state of Baden-Württemberg. It provides comprehensive information on funding programs, project examples, current news, and guidance for applicants. The site targets a broad audience including citizens, businesses, and public institutions interested in regional development funding. The portal is well-positioned as a trusted government resource, supported by official branding and EU co-funding acknowledgments. Technically, the website employs a modern technology stack including jQuery, Matomo analytics, and custom CMS solutions tailored for Baden-Württemberg's government portals. It demonstrates good mobile optimization, accessibility compliance, and moderate performance. The hosting and DNS infrastructure aligns with regional academic and government networks, enhancing trustworthiness. From a security perspective, the site enforces HTTPS, uses captcha mechanisms to prevent automated abuse, and implements cookie consent in line with GDPR requirements. While no explicit security policy or incident response contacts are published, the site shows good baseline security hygiene with no visible vulnerabilities or exposed sensitive data. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include publishing a dedicated security policy, enhancing security headers, and providing incident response contacts to further strengthen trust and security maturity.

V

Valaisdigital

valais-economy.ch

52

Economic Promotion Valais is a regional government-affiliated entity focused on supporting entrepreneurs, startups, investors, and companies in the Canton of Valais, Switzerland. The website serves as a strategic platform offering services such as assistance to enterprises, innovation support, financial aid, and land or facility search to foster regional economic development. The site is professionally designed with consistent branding and clear navigation, targeting a broad audience of business stakeholders interested in the Valais economy. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, leveraging modern web technologies like jQuery and Swiper.js for interactive elements. The site is mobile-optimized and implements SEO best practices, including structured data for enhanced search visibility. Performance is moderate with good mobile responsiveness. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes essential security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit privacy policy and terms of service pages, which are important for compliance and user trust. Cookie consent is implemented via the Complianz GDPR plugin, indicating some level of privacy compliance. Overall, the website presents a low-risk profile with a strong business credibility and technical foundation. Strategic improvements include publishing comprehensive privacy and security policies, adding direct contact information, and implementing a vulnerability disclosure mechanism to enhance transparency and trust.

V

Valaisdigital

valais-economie.ch

69

Promotion économique Valais is a regional government economic promotion entity serving entrepreneurs and businesses in the Valais region of Switzerland. The website provides information and services to support innovation, business development, and investment in the local economy. It targets SMEs, startups, investors, and external companies interested in establishing themselves in Valais. The site is professionally designed using WordPress and Elementor, with good SEO practices implemented via Yoast SEO. Multilingual support is provided for French, German, and English audiences. Technically, the site uses modern web technologies and enforces HTTPS, ensuring secure communications. However, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security headers are not detected, indicating room for improvement in security hardening. The site uses Google Analytics with a cookie consent mechanism, reflecting basic GDPR compliance. Overall, the website is credible and trustworthy, aligned with its governmental role, but could enhance privacy and security policies to strengthen compliance and user confidence.

T

Tablet LLC

tablethotels.com

65

Tablet Hotels operates as a specialized online booking platform focusing on boutique and luxury hotels worldwide. Affiliated with the MICHELIN Guide since 2018, it offers curated hotel selections, verified reviews, concierge-level service, and exclusive member benefits through its Tablet Plus program. The website targets discerning travelers seeking unique and memorable lodging experiences. Technically, the site leverages a modern React-based single-page application architecture, supported by a headless CMS (Strapi) and CDN hosting via Amazon CloudFront. It integrates multiple third-party analytics and marketing tools including Google Tag Manager, Facebook SDK, and Kameleoon for A/B testing. Security posture is strong with HTTPS enforced and tokenization for payment data, though explicit security headers and published security policies are absent. Privacy compliance is partial, lacking visible privacy and cookie policies despite consent mechanisms being present. Overall, the site demonstrates high professionalism, good performance, and strong branding consistency.

F

Finom

finom.co

80

Finom is a fintech company founded in 2019, providing online business banking and financial management solutions tailored for SMEs, freelancers, and entrepreneurs across multiple European countries. The platform offers business accounts with local IBANs, cashback rewards, electronic invoicing, and accounting integrations, leveraging partnerships with licensed banks SolarisBank and Treezor. Finom positions itself as a fast, reliable, and secure financial platform with multilingual support and regulatory compliance under De Nederlandsche Bank (DNB). Technically, the website is built on modern frameworks such as Next.js and React, hosted on Amazon Cloudfront CDN, and optimized for mobile and SEO. The site employs TLS encryption and security best practices, including strong security headers and GDPR compliance. The user experience is professional, with clear navigation, comprehensive content, and trust signals like awards and customer reviews. Security posture is strong, with encrypted data transfers, no exposed sensitive information, and deposit insurance coverage. However, the site lacks a dedicated security policy and incident response contact details, which could enhance transparency and trust. Overall, the domain registration aligns well with the business claims, supporting legitimacy and credibility. The website is safe for general audiences, contains no adult or questionable content, and provides clear contact channels primarily via email and web forms. Strategic recommendations include publishing explicit security and incident response policies, enhancing vulnerability disclosure, and maintaining rigorous third-party script audits to sustain security and compliance.

H

Haufe-Lexware GmbH & Co. KG

lexware.de

70

Lexware, a division of the Haufe Group since 1993, is a leading German software provider specializing in business and accounting software for self-employed individuals, freelancers, and small to medium-sized enterprises. The company offers a comprehensive suite of products including invoicing, bookkeeping, payroll, e-invoicing, and integrated business banking solutions. With over one million customers and multiple industry certifications, Lexware holds a strong market position as a trusted provider in the German SME software market. The website reflects a mature digital presence with modern technologies, strong branding, and extensive customer engagement features.

B

blue-community.ch

bluecommunity.ch

48

Blue Community is a Swiss non-profit organization dedicated to advocating for water as a human right and promoting sustainable water management practices. The website serves as a community platform for municipalities, educational institutions, technical enterprises, church communities, and companies to demonstrate responsibility locally and globally. The organization positions itself as a niche player in the environmental non-profit sector with a focus on water resource protection and international partnerships. Technically, the website is built on WordPress using modern Gutenberg blocks, enhanced with Matomo analytics and Mautic marketing automation tools. It employs a cookie consent mechanism compliant with GDPR, ensuring user privacy and transparency. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses cookie consent best practices but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy and consistency with the organization's Swiss non-profit identity. Overall, the website presents a trustworthy, professional, and privacy-conscious platform with room for improvement in formal security documentation and incident response readiness.

Seelsorge Polizei und Rettungskräfte Zürich SPuR is a specialized non-profit organization providing confidential and free counseling services to police and emergency personnel in Zurich. The website serves as an informational and contact platform, offering support for stressful work or personal situations and special life events. The organization maintains a local presence with clear contact details and event announcements, positioning itself as a trusted support resource within its niche. Technically, the website is built on WordPress using common plugins and frameworks, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the site is professional, trustworthy, and serves its target audience effectively, though it would benefit from enhanced compliance and security measures.

B

Bahnhofkirche Zürich

bahnhofkirche.ch

52

Bahnhofkirche Zürich is a small non-profit organization providing a spiritual and contemplative space in Zurich. The website offers information about the chapel, pastoral care, community groups, and daily reflections called Weg-Wort. It targets the general public and spiritual seekers in the local community. The business model is focused on community service and donations, positioning itself as a trusted local spiritual resource. Technically, the website is built on WordPress using common plugins such as WPForms and MailPoet for forms and newsletters. The site is served over HTTPS, has a moderate performance profile, and is mobile optimized. However, it lacks advanced security headers and a cookie consent mechanism, which are areas for improvement. From a security perspective, the site shows good basic practices with HTTPS and secure form handling but lacks explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic with a privacy policy present but no cookie policy or terms of service. The domain uses privacy protection, which is justified for this type of non-profit entity. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic recommendations include enhancing security headers, adding cookie consent, publishing security policies, and maintaining plugin updates to improve security posture and compliance.

S

Solidara Zürich

solidara.ch

58

Solidara Zürich is a well-established non-profit organization founded in 1862, dedicated to providing social support and professional counseling to socially disadvantaged individuals in Zürich. Their key services include the Café Yucca, a welcoming meeting place; Isla Victoria, a counseling center for sex workers; and assistance for people in emergency situations. The organization maintains a transparent and professional online presence with clear contact information and social media engagement. Technically, the website is built on WordPress with modern themes and SEO plugins, offering good mobile optimization and accessibility. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response policies are absent. Privacy compliance is basic with a privacy policy present but lacking a cookie consent mechanism. Overall, the website reflects a trustworthy and credible organization with a focus on social welfare.

E

Evang.-ref. Kirchgemeinde Zürich

migrationskirchen.ch

44

The Zentrum für Migrationskirchen (ZMK) is a non-profit church-affiliated organization under the Evangelisch-reformierte Kirchgemeinde Zürich, focused on supporting migration churches and fostering intercultural Christian dialogue in Zurich. The website provides comprehensive information about their services, including room rental for worship, support and mediation between migration churches and local reform churches, and current news. The organization is well-positioned regionally with clear contact details and a professional online presence. Technically, the site uses a CMS likely based on DynPG, with Bootstrap and Matomo analytics, delivering a mobile-optimized and user-friendly experience. Security posture is adequate with HTTPS and secure form handling, though security headers and explicit policies are not evident. Privacy compliance is strong with a clear cookie consent mechanism and a detailed privacy policy in German. Overall, the site is trustworthy, professional, and serves its community well.

S

Home | Stadtkloster Zürich

stadtkloster.ch

61

The website www.stadtkloster.ch is a small-scale, community-oriented site hosted on the Wix platform, primarily serving a Swiss audience. The site uses Wix's Thunderbolt framework and standard JavaScript libraries, indicating a modern but basic technical infrastructure. The content is minimal with no visible business or contact information, privacy policies, or terms of service, which limits its professional and compliance stature. Security posture is basic with no advanced headers or policies detected, and no forms or data collection mechanisms are apparent. Overall, the site appears safe and suitable for general audiences but lacks critical compliance and security features.

S

Streetchurch

streetchurch.ch

48

Streetchurch is a small non-profit organization based in Zurich, Switzerland, dedicated to supporting young people through work integration, housing, and social enterprise services. The organization focuses on providing holistic and low-threshold assistance to help individuals develop new life perspectives. Their website is professionally designed using WordPress with the Salient theme and includes clear navigation and relevant content tailored to their target audience. The site is accessible, mobile-optimized, and includes social media integration to enhance community engagement. Technically, the website uses modern web technologies and plugins, though some performance and security enhancements could be made. Security posture is adequate with HTTPS enforced, but lacks security headers and a formal security policy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website reflects a credible and trustworthy non-profit entity with room for improvement in security and privacy practices.