Security Directory

J

Jugendkulturfestival Basel (JKF)

jkf.ch

45

Jugendkulturfestival Basel (JKF) is a small-scale cultural festival focused on youth engagement in Basel, Switzerland. The website serves as an informational platform for the festival's upcoming events, providing program links, partner information, and contact details. The festival targets youth and cultural enthusiasts in the region, positioning itself as a key local cultural event. Technically, the site is built on WordPress with modern web standards, including HTTPS and responsive design, but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and no visible incident response or security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but could improve in compliance and security transparency.

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which serves as a placeholder when the browser cannot load the requested website content. The page includes the offline dinosaur game scripts and styles but contains no actual business or website content. Consequently, there is no identifiable company information, business description, or market positioning. The technical infrastructure is limited to client-side JavaScript for the embedded game, with no server-side or hosting details available. Security posture cannot be assessed due to the absence of real website content, security headers, or HTTPS information. Privacy compliance elements such as privacy policies, cookie consent, or contact information are missing. Overall, this is not a functional website but a browser error page, and thus the risk assessment is that no meaningful business or security evaluation can be performed.

A

ARS Architektur AG

ars-architektur.ch

52

ARS Architektur AG is a Swiss architecture firm located in Münchenstein, Basel region, specializing in architecture, interior design, general planning, project development, and area development. The website presents a professional image with project showcases and a clean, modern design using the Svelte framework. The technical infrastructure is moderately modern with good mobile optimization and SEO practices, but lacks explicit CMS or hosting details. Security posture is weak due to absence of security headers, privacy policies, and incident response information. No HTTPS or SSL configuration details were available from the provided data. Overall, the site is functional and professional but requires improvements in security and privacy compliance to meet modern standards. The risk level is moderate with no critical vulnerabilities detected but gaps in security best practices and compliance.

R

Ruedi Walti Fotografie

ruediwalti.ch

47

Ruedi Walti Fotografie is a small Swiss photography business specializing in architecture, flora, and publication photography. The website serves primarily as a portfolio or informational site with minimal content and no visible contact or policy information. The technical infrastructure is based on modern frontend technologies such as React and Webpack, indicating a contemporary approach to web development. However, the site lacks advanced SEO, accessibility, and performance optimizations, reflecting a basic digital maturity level. Security posture is minimal with no detected security headers or privacy policies, and no HTTPS status was explicitly provided, suggesting room for improvement in securing the site and enhancing user trust. Overall, the risk level is moderate due to the absence of critical security flaws but also due to missing compliance and contact information.

U

unterdessen.ch

unterdessen.ch

48

The website unterdessen.ch presents minimal accessible content with no visible business description, contact information, or policies. The site uses a modern JavaScript framework (SvelteKit) and custom fonts, indicating some technical maturity, but lacks SEO, accessibility, and user engagement features. Security posture is weak due to absence of security headers and privacy policies, and WHOIS data is privacy protected, limiting transparency. Overall, the site appears to be a small or early-stage project with limited public-facing information, resulting in low trust and credibility scores.

S

Stück Labor Basel

stuecklabor.ch

47

Stück Labor Basel is a well-established cultural initiative founded in 2008 by Theater Basel to promote new Swiss dramaturgy. The program annually supports selected playwrights and collaborates with major Swiss theaters such as Theater Basel, Bühnen Bern, and Luzerner Theater. The website reflects this cultural focus with professional design and consistent branding, targeting theater professionals and audiences interested in Swiss dramaturgy. Technically, the site uses modern JavaScript frameworks (Svelte) and demonstrates good mobile optimization and SEO practices, although some accessibility features are basic. Security posture is moderate with no HTTPS or security headers explicitly detected in the provided data, and no privacy or cookie policies are present, indicating room for improvement in compliance and security best practices. Overall, the domain registration data aligns well with the website's claims, supporting legitimacy and trustworthiness.

B

Back Simonsen

backsimonsen.ch

46

Back Simonsen is a Swiss architecture firm based in Basel, founded in 2015 by Valerie Simonsen and Lukas Back. The firm offers architectural design, planning, and project management services for private and public clients, focusing on sustainable and high-quality building culture. Their portfolio includes interior renovations, private homes, residential complexes, public buildings, and urban quarters. The website presents a professional image with clear contact details and project listings, targeting clients in the Swiss real estate and construction sectors. Technically, the site is built with modern React technology and CSS modules, providing a good user experience and mobile optimization. However, the site lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and security. No blocking or WAF protections hinder content access, and the domain registration data aligns well with the business profile, supporting legitimacy. Overall, the website is a good representation of a small architecture firm with room for improvement in security and privacy compliance.

A

ateliernord.ch

ateliernord.ch

44

The website ateliernord.ch presents minimal accessible content with no metadata, structured data, or visible business information. The site uses the SvelteKit JavaScript framework, indicating a modern technical foundation, but lacks visible SEO, accessibility, or security features. No privacy, cookie, or terms of service policies are found, and no contact information or forms are present, limiting user engagement and trust. Security posture cannot be fully assessed due to lack of headers and SSL details. Overall, the site appears to be in an early or minimal state with limited business or security maturity.

Christine Moser's website serves as an online portfolio showcasing her art exhibitions and objects, primarily targeting art enthusiasts and museum visitors. The site highlights projects such as 'Double Face' at the Museum für Gestaltung Zürich, positioning her as a niche artist in the contemporary art and design space. The business model is centered on artistic presentation rather than commercial sales or services. Technically, the website employs modern frontend technologies including Svelte and Swiper.js for interactive galleries, indicating a moderate level of digital maturity. The site appears mobile-optimized with good design quality and navigation clarity, although accessibility features are basic. No CMS or hosting provider details are evident. From a security perspective, the site lacks key security headers and explicit privacy or cookie policies, which lowers its compliance posture. The absence of contact information and incident response details further limits trust and security transparency. However, no vulnerabilities or suspicious elements were detected, and the content is safe for general audiences. Overall, the website is functional and professionally presented but would benefit from enhanced security practices, privacy compliance, and clearer contact information to improve trustworthiness and regulatory adherence.

The website mirjamplattner.ch appears to be a minimal personal or professional portfolio site built using the SvelteKit framework. The content is very limited, primarily displaying a logo image with no additional textual or metadata content. There is no evidence of privacy policies, cookie consent mechanisms, or terms of service, indicating a basic digital maturity level. The technical infrastructure is modern in terms of framework choice but lacks visible SEO, accessibility, or performance optimizations. Security posture is minimal with no detected security headers or HTTPS confirmation in the provided data, and no contact or incident response information is available. Overall, the site presents a low-risk profile due to minimal content and no suspicious elements, but it lacks many standard compliance and security features expected for professional or business websites.

3

3 Mai Avocates

3mai.ch

58

3 Mai Avocates is a small, multilingual law firm based in Geneva, Switzerland, specializing in criminal law, torts and contracts, and public law. The firm is led by founding partners Xenia Rivkin and Sofia Suarez-Blaser and serves clients in French- and German-speaking Switzerland as well as in international disputes. The website is professionally designed with good content quality and clear navigation, supporting multiple languages to cater to a diverse client base. Technically, the site uses modern frameworks such as SvelteKit and integrates Google Maps for location display, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site presents a trustworthy and professional image but would benefit from enhanced compliance and security documentation.

S

szenografieschweiz.ch

szenografieschweiz.ch

43

The website szenografieschweiz.ch currently presents minimal accessible content, primarily consisting of a basic HTML structure with JavaScript modules loaded via the SvelteKit framework. There is no visible textual content, metadata, or structured data to provide insights into the business operations, services, or market positioning. The absence of privacy, cookie, or terms of service policies, as well as contact information, limits the ability to assess compliance and user engagement. Technically, the site uses modern JavaScript frameworks but lacks visible performance or security optimizations. Security posture is weak due to missing HTTPS/SSL information and absence of security headers or policies. Overall, the site appears to be in an early or placeholder state, with significant gaps in content, compliance, and security.

M

Miranda Roux

mirandaroux.net

51

Miranda Roux is a Danish artist based in Geneva, specializing in figurative art that explores surrealism, classical sculpture, and taboo themes. The website serves as a portfolio showcasing her selected works, biography, news, texts, and contact information. The site targets art enthusiasts, collectors, and galleries interested in contemporary European art. Technically, the website is built using the modern Svelte framework, hosted by Infomaniak Network SA, and employs HTTPS with domain transfer protection. However, it lacks DNSSEC and a defined Content-Security-Policy header, which are recommended for enhanced security. The site does not provide privacy or cookie policies, nor does it include direct contact emails or phone numbers, relying solely on a contact form for communication. No tracking or advertising technologies are detected, indicating a privacy-conscious approach but also a lack of compliance documentation. Overall, the website is professional and well-structured but would benefit from improved security headers and privacy compliance measures.

The website vittoriosantoro.info serves as an online portfolio for the artist Vittorio Santoro, showcasing current and past exhibitions, recent works, and publications. It targets art enthusiasts, galleries, and cultural institutions interested in the artist's work. The business model is primarily promotional, focusing on visibility and information dissemination rather than direct sales. The site is niche and small scale, consistent with an individual artist's portfolio. Technically, the site is built using modern JavaScript technologies, specifically the SvelteKit framework, and includes interactive elements such as a swiper for featured content. The site is mobile optimized and has a good design quality, though accessibility and SEO optimizations are basic. No CMS or hosting provider details are evident from the content. From a security perspective, the site lacks visible security headers and privacy-related policies, which lowers its security posture. No HTTPS or SSL configuration details were available from the data, and no contact or incident response information is provided. The WHOIS data is incomplete due to unsupported TLD WHOIS queries, limiting domain trust assessment. Overall, the site appears legitimate but would benefit from improved security and compliance measures. The overall risk is moderate with recommendations to implement security headers, add privacy and cookie policies, provide contact information, and verify SSL/TLS configurations to enhance trust and compliance.

S

Stücheli Pestalozzi Schiratzki Architekt*innen ETH SIA

stuepetzki.ch

44

Stücheli Pestalozzi Schiratzki Architekt*innen ETH SIA is a small architecture firm based in Zürich, Switzerland, specializing in architecture and urban planning projects ranging from new constructions to renovations. The website showcases a portfolio of projects with extensive imagery, targeting clients interested in architectural services. The technical infrastructure is modern, leveraging the SvelteKit framework and JavaScript modules, indicating a contemporary digital presence. However, the site lacks critical privacy and security policies, contact information, and security best practices, which impacts its overall security posture. No WAF or blocking mechanisms were detected, and the site is fully accessible. The WHOIS data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and compliance.

The website reuse-rlp.de is a non-profit platform dedicated to promoting and facilitating the practice of reuse in the construction sector within Rheinland-Pfalz, Germany. It targets professionals and stakeholders interested in sustainable construction and reuse practices. The platform provides information about actors and buildings involved in reuse, as well as specialist information relevant to the sector. The site is well-branded and presents content in German with a clear and consistent design. Technically, the website is built using modern technologies such as SvelteKit and employs Matomo analytics with DoNotTrack enabled, reflecting a moderate level of digital maturity and privacy awareness. The site appears to be mobile-optimized and offers a good user experience with clear navigation. However, there is a lack of visible security headers and no explicit SSL configuration data was provided, which suggests room for improvement in security hardening. From a security perspective, the site does not expose sensitive data and uses privacy-conscious analytics, but it lacks critical compliance elements such as privacy and cookie policies, contact information for incident response, and vulnerability disclosure mechanisms. The WHOIS data indicates the domain is likely affiliated with an academic or regional institution, supporting its legitimacy. Overall, the security posture is moderate but could be enhanced by implementing standard security headers, privacy documentation, and contact channels. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include adding privacy and cookie policies to improve GDPR compliance, implementing security headers to harden the site, providing clear contact information for security incidents, and establishing a vulnerability disclosure policy. These steps will enhance trust, compliance, and security culture, supporting the platform's mission and user confidence.

The eMuseum website serves as the digital archive platform for the Museum für Gestaltung Zürich and the Archive of the Zurich University of the Arts (ZHdK). It provides extensive access to a large collection of design and art objects, positioning itself as the largest Swiss online database in this domain. The platform targets researchers, curators, designers, collectors, and the general public interested in design and art history. The business model is non-profit, focusing on cultural preservation and digital access rather than commercial activities. Technically, the website is built on a custom CMS leveraging the Apache Tapestry framework, with frontend technologies including Bootstrap, jQuery, OpenLayers, and Font Awesome. It employs Matomo for analytics and AddToAny for social sharing. The site is mobile-optimized with moderate performance and basic accessibility features. SEO optimization is basic, with room for improvement in structured data and meta tags. From a security perspective, the site enforces HTTPS and uses secure form tokens, but lacks several security headers and published policies such as privacy, cookie, and incident response. No vulnerabilities or malicious content were detected. The WHOIS data aligns well with the institutional identity, confirming legitimacy and trustworthiness. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, improved security headers, and more transparent contact and incident response information to strengthen user trust and regulatory adherence.

B

Beisheim Holding

beisheim.com

61

Beisheim Holding operates as a holding and capital management company with a professional online presence focused on corporate stakeholders and investors. The website is structured using modern web technologies including Nuxt.js and integrates Cookiebot for comprehensive cookie consent management, reflecting a commitment to privacy compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the professional appearance and GDPR-compliant cookie practices. The site lacks explicit contact information, terms of service, and security policies, which limits transparency and user trust. Security posture is moderate with HTTPS enforced but missing key security headers and incident response information. Overall, the website is functional and compliant in privacy aspects but would benefit from enhanced transparency and security disclosures.

H

Start - Hannover sauber! Gemeinsam für eine schöne Stadt.

hannover-sauber.de

46

The website www.hannover-sauber.de represents a community-driven initiative focused on promoting cleanliness and beautification in the city of Hannover, Germany. The site serves as a platform for residents and community members to engage in activities aimed at maintaining a clean urban environment. The business model is non-commercial and primarily community-oriented, with a small scale and local focus. The website was first published in 2021 and uses WordPress CMS with the Divi theme, supplemented by various plugins for enhanced functionality such as event management, testimonials, and social media feeds. From a technical perspective, the site employs modern web technologies including HTTPS, Google Fonts, Cookiebot for cookie consent, and Google Analytics for visitor tracking with IP anonymization. The site is mobile-optimized and demonstrates good SEO practices. However, there is room for improvement in accessibility and performance optimization. The technical stack is typical for small to medium WordPress sites, leveraging popular plugins and themes. Security posture is moderate with HTTPS enabled and bot protection via Google reCAPTCHA. Cookie consent is actively managed through Cookiebot, indicating awareness of privacy regulations. However, the absence of security headers and lack of explicit privacy and security policies reduce the overall security maturity. No vulnerability disclosure or incident response information is provided, which could be a concern for transparency and trust. Overall, the website is safe for general audiences, with no adult or questionable content detected. The lack of detailed contact information and formal policies slightly impacts business credibility and privacy compliance scores. Strategic recommendations include adding privacy and security policies, implementing security headers, and providing clear contact channels for incident response. These steps would enhance trustworthiness and compliance with data protection regulations.

S

STATION UG (haftungsbeschränkt)

station-frankfurt.de

56

STATION UG (haftungsbeschränkt) operates a regional digital platform serving the FrankfurtRheinMain startup and innovation ecosystem. The website provides news, event information, programs, awards, and networking opportunities targeting startups, innovators, and ecosystem participants in the region. The business positions itself as a central hub for regional startup support and information dissemination. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, Revolution Slider, and WP Jobsearch, hosted by Raidboxes. It employs Google Analytics for visitor tracking and Mailchimp for newsletter management. The site is mobile-optimized and SEO-friendly, with a consistent brand presence and active social media channels. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it lacks explicit terms of service and a security policy page.

K

KIZ | Kommunikations- und Innovations-Zentrum

kiz.de

50

KIZ | Kommunikations- und Innovations-Zentrum is a well-established German company specializing in career coaching, business consulting, and support for self-employment. With over 28 years of experience, it offers services such as job and career coaching, startup and business coaching, and digital projects including online programs. The website is professionally designed, content-rich, and targets individuals seeking professional development and entrepreneurial support primarily in Germany. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit policies could be improved. Privacy compliance is good with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy and credible with no signs of suspicious activity or content safety concerns.

S

Sparkassen-Finanzgruppe Hessen-Thüringen

sfg-ht.de

66

The Sparkassen-Finanzgruppe Hessen-Thüringen website represents a large regional financial services group operating in Germany's Hessen and Thüringen regions. The group offers a broad range of financial products and services including banking, insurance, building finance, and asset accumulation, supported by a workforce of over 19,900 employees. The website is professionally designed, consistent in branding, and targets a general audience including customers and potential employees. Technically, the site is built on Concrete CMS and leverages modern JavaScript libraries such as jQuery and Swiper.js, with media assets hosted on Cloudinary. It integrates Matomo for analytics and cookiefirst.com for GDPR-compliant cookie consent management, along with accessibility enhancements via eyeAble.js. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and incident response information are absent. No privacy policy or terms of service pages were detected in the provided content, which is a compliance gap. Overall, the site is trustworthy, safe, and well-positioned in its market segment.

H

Hofheim

hofheim.de

54

Hofheim am Taunus operates an official municipal website providing comprehensive information and services to residents, visitors, and local stakeholders. The site covers a broad range of topics including culture, tourism, politics, administration, and community life, positioning itself as the primary digital interface for the city. The website is built on TYPO3 CMS, a robust open-source content management system, and demonstrates good technical maturity with responsive design and structured data for SEO and accessibility. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though improvements are recommended in security headers and privacy compliance documentation. Overall, the website reflects a trustworthy and professional government presence with clear contact information and consistent branding.

B

Bundesagentur für Arbeit

arbeitsagentur.de

73

The Bundesagentur für Arbeit website serves as the official digital portal for Germany's federal employment agency, providing comprehensive services including job search, unemployment benefits, career counseling, and support for families, people with disabilities, and immigrants. The site is well-positioned as a national government entity with a large enterprise scale, offering a broad range of public services to citizens and businesses alike. The content is professionally curated, accessible, and highly relevant to its target audience. Technically, the website employs modern web technologies such as React and Next.js, ensuring fast performance and excellent mobile optimization. The use of Matomo analytics reflects a commitment to privacy-conscious user tracking. The site is hosted on German infrastructure with secure HTTPS enforcement and demonstrates good SEO and accessibility practices. From a security perspective, the site benefits from ISO 27001 certification, indicating a mature information security management system. Security best practices are observed, including secure communication channels and cookie consent mechanisms. However, explicit incident response and vulnerability disclosure policies are not publicly available, representing an area for improvement. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include publishing clear security incident response information, adding a security.txt file, and enhancing transparency around security contacts to further strengthen trust and security culture.

H

Handelsverband Hessen

hvhessen.de

56

Handelsverband Hessen is a regional trade association representing retail businesses in Hessen, Germany. The organization focuses on strengthening the competitiveness of its members by providing tailored support and fostering a vibrant trade community. The website reflects a professional and consistent brand image, targeting retail businesses and stakeholders within the Hessen region. Technically, the site is built on the Weblication® CMS platform, featuring responsive design and modern web fonts, but lacks advanced security headers and visible privacy compliance documentation. Security posture is moderate with room for improvement in policy transparency and technical safeguards. Overall, the site is trustworthy and well-positioned within its market niche but should enhance privacy and security practices to align with GDPR and industry standards.

T

Techniker Krankenkasse

tk.de

66

Techniker Krankenkasse (TK) is a leading statutory health insurance provider in Germany, offering comprehensive health coverage, digital health services, and personalized member support. The website reflects a mature digital presence with a strong focus on user experience, accessibility, and privacy compliance. The technical infrastructure leverages modern web technologies and a custom design system, hosted on reliable infrastructure with Versatel. Security posture is solid with HTTPS, CSRF protection, and a consent manager, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-aligned with the business's market position.

W

WOA

woa.de

50

WOA is a German advertising agency specializing in integrated communication services including web design, events, PR, and classical advertising. The company targets businesses seeking comprehensive marketing and communication solutions primarily in the German regions of Wiesbaden, Frankfurt, Hamburg, and central Hesse. Their website reflects a professional and consistent brand image with a clear presentation of services and client references. Technically, the website is built on Joomla CMS with Yootheme templates and uses modern web technologies such as UIkit, Google Tag Manager, and HubSpot integrations. The site is mobile optimized and includes standard SEO and accessibility features, though some accessibility aspects could be improved. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms compliant with GDPR. However, explicit security headers are missing, and no dedicated security or incident response policies are published. The site uses multiple third-party marketing and analytics tools, which are managed with user consent. No vulnerabilities or suspicious domains were detected. Overall, WOA presents a trustworthy and professional online presence with good privacy compliance and a solid technical foundation. Strategic improvements in security headers and incident response transparency would enhance their security posture further.

H

Hochschulen Fresenius GmbH

hs-fresenius.de

71

Hochschulen Fresenius GmbH is a large, well-established private higher education institution in Germany, founded in 1848. It offers a broad range of Bachelor and Master degree programs across multiple disciplines including Chemistry, Biology, Business, Media, Health, Social Sciences, and Fashion & Design. The university serves over 17,000 students with flexible study options including full-time, part-time, on-campus, and online formats. The website reflects a professional and modern digital presence, leveraging WordPress CMS, SEO best practices, and cookie consent management via Usercentrics. Hosting is provided by Adacor, with consistent DNS and SSL configurations ensuring secure access. However, explicit privacy and security policies are not readily visible, and security headers are not detected, indicating room for improvement in security posture. Overall, the website is trustworthy, well-branded, and compliant with basic GDPR cookie consent requirements.

B

Bürgschaftsbank Hessen GmbH

bb-h.de

52

Bürgschaftsbank Hessen GmbH operates as a regional financial guarantor in Hessen, Germany, providing guarantees and financing support to businesses, founders, and successors in cooperation with banks and Sparkassen. The website presents a professional and consistent brand image, targeting business clients in the finance sector. The company offers a range of guarantee products including classical guarantees, express guarantees, leasing guarantees, and specialized funds like Hessenfonds and Agrarbürgschaft. Technically, the website is built on WordPress with the Enfold theme, enhanced by Yoast SEO and Borlabs Cookie for privacy compliance. Hosting and DNS services are provided via Cloudflare, ensuring good performance and security. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and explicit privacy policies are lacking. Analytics are conducted via eTracker, indicating moderate user tracking. Overall, the site is well-structured, mobile-optimized, and trustworthy, though improvements in privacy transparency and security headers are recommended.

V

Verband der Metall- und Elektro-Unternehmen Hessen (HESSENMETALL)

hessenmetall.de

51

HESSENMETALL is a prominent industry association representing employers in the metal, electrical, and IT sectors in Hessen, Germany. The organization provides comprehensive services including labor relations, legal advice, workforce development, digital transformation support, and innovation facilitation. It holds a strong market position as a leading regional network for over 200,000 employment relationships in the region's M+E industry. The website reflects a professional and well-structured digital presence with member portals and extensive content tailored to its audience of employers and industry stakeholders. Technically, the site is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery and Swiper.js, and integrates analytics tools like Matomo and Google Tag Manager. Accessibility features are enhanced by the inclusion of eyeAble tools. The site is mobile-optimized and demonstrates good SEO practices with proper metadata and structured navigation. From a security perspective, the website enforces HTTPS and employs secure login forms with CSRF tokens. While explicit security headers are not fully visible in the HTML, the overall SSL configuration is good. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place, aligning with GDPR requirements. Overall, the website presents a low-risk profile with a high degree of professionalism and trustworthiness. Strategic recommendations include enhancing security headers, increasing transparency around incident response contacts, and maintaining up-to-date CMS and third-party components to mitigate potential vulnerabilities.

IKEA Deutschland GmbH & Co. KG operates a comprehensive retail website offering affordable furniture and home accessories tailored for the German market. The site provides extensive product categories, planning services, and customer support, positioning IKEA as a leading furniture retailer in Germany. The website is well-branded, professionally designed, and optimized for mobile and accessibility, reflecting a mature digital presence. Technically, the site employs modern web technologies including JavaScript frameworks, cookie consent management via OneTrust, and A/B testing with Optimizely, ensuring a robust user experience. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response details are not publicly disclosed. Privacy compliance is well addressed with clear cookie and privacy policies, including GDPR adherence and a consent mechanism. The absence of WHOIS data limits domain registration trust analysis, but the overall site quality and brand reputation strongly indicate legitimacy. No adult or questionable content is present, making the site safe for general audiences.

B

Benner Holding

benner-holding.com

61

Benner Holding is a well-established German family-owned holding company founded in 1882, with diversified business interests spanning real estate, trade, agriculture, energy, and hospitality sectors. The company emphasizes long-term investments and diversification to maintain stability even during economic downturns. The website reflects a professional corporate presence with clear business sector segmentation and leadership visibility, notably CEO Dr. Dominik Benner. Technically, the site is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile-optimized and SEO-friendly but lacks some advanced accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no explicit security or incident response policies are published. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional but could improve in security and privacy transparency.

C

corosys technologies GmbH

corosys.com

45

corosys technologies GmbH is a German-based industrial company specializing in the development and delivery of complete process systems and engineering plants for the beverage, chemical, pharmaceutical, and food industries. The company operates through multiple subsidiaries, each focusing on specific sectors such as beverage technology, chemical and pharma technology, food technology, and filtration consulting. Their market position is that of a specialized B2B engineering and manufacturing provider with a strong focus on process technology solutions. The website reflects a professional and consistent brand image targeting industrial clients in Germany and possibly broader European markets. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, and FontAwesome, with analytics powered by Matomo and security features such as Cloudflare Turnstile captcha for form protection. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms, indicating a mature digital presence. Security posture is adequate with best practices observed in form protection and privacy compliance, though there is room for improvement in publishing explicit security policies and enhancing HTTP security headers. The WHOIS data is notably missing or inaccessible, which raises questions about domain registration legitimacy; however, the website content and contact information appear legitimate and professional. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with a moderate security posture and good business credibility.

I

iocto GmbH

iocto.com

72

iocto GmbH is a German company specializing in industrial measurement technology and automation, established since 1984. The company positions itself as an expert in its field, targeting industrial clients requiring precise measurement and automation solutions. The website reflects a mature digital presence built on WordPress with modern SEO and analytics integrations, indicating a moderate to high level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some improvements such as enabling DNSSEC and publishing a security.txt file could enhance trust and compliance. Overall, the website is professional, compliant with GDPR, and trustworthy, supporting iocto's market position as a reliable industrial technology provider.

T

Taunus Sparkasse

taunussparkasse.de

66

Taunus Sparkasse is a regional German savings bank offering a comprehensive range of financial services including online banking, accounts, credit cards, loans, investments, insurance, and real estate services. The website targets both private and corporate customers with a strong focus on accessibility, user experience, and digital service delivery. The bank maintains a strong local market position with trusted brand recognition and multiple customer contact channels including phone, chat, and video consultations. Technically, the site is built on modern web technologies and a robust CMS platform (Adobe Experience Manager), optimized for mobile and accessibility compliance. Security posture is strong with HTTPS enforcement, session management, and cookie consent mechanisms, though explicit security headers could be further confirmed. Privacy policies and cookie management are comprehensive and GDPR compliant. Overall, the site demonstrates high professionalism, trustworthiness, and digital maturity.

G

GROOVE im GOP Artistical-Theater Essen

groove-show.de

50

The website groove-show.de serves as an informational and ticket reservation platform for the GROOVE Artistical-Theater in Essen, Germany. It targets general audiences interested in live theatrical performances, positioning itself as a niche entertainment provider. The site is built using the Framer platform and hosted on Hetzner servers, employing modern web technologies including Google Tag Manager and Matomo for analytics. While the site demonstrates good design quality, mobile optimization, and SEO practices, it lacks critical compliance documents such as privacy and terms of service policies. Security posture is moderate with HTTPS enabled but missing key security headers and incident response information. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures.

K

König-Brauerei GmbH

koenig.de

74

König-Brauerei GmbH operates the König Pilsener brand, a well-established brewery in Germany under the Bitburger Braugruppe umbrella. The website showcases their beer products, brewery tours, and fan engagement activities, targeting adult consumers with responsible marketing including age verification. The digital infrastructure is modern, leveraging Next.js and React, with integrated consent management and analytics tools. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though dedicated security policies and incident response contacts are absent. Overall, the site is professional, compliant with GDPR, and trustworthy, supporting a medium-sized hospitality business.

H

HACON

hafas.de

65

HACON is a medium-sized company specializing in digital mobility solutions, offering platforms and systems for Mobility as a Service, ticketing, operator business products, and transport planning. As a part of Siemens Mobility since 2017, HACON holds a strong market position in the transportation technology sector. The website reflects a professional and consistent brand image, targeting mobility service providers and transport operators. Technically, the site is built on TYPO3 CMS, employs modern JavaScript, and integrates Cookiebot for GDPR-compliant cookie consent, alongside Matomo for privacy-friendly analytics. Security posture is solid with HTTPS and consent mechanisms, though security headers and explicit incident response policies are absent. Overall, the site is trustworthy, well-structured, and compliant with privacy regulations, supporting HACON's business credibility and digital maturity.

P

Pflegezentrum Rotacher

pz-rotacher.ch

56

Pflegezentrum Rotacher is a Swiss healthcare provider specializing in elderly care services including long-term, short-term, dementia, psychiatric, and transitional care. The organization serves residents primarily in the Dietlikon, Wallisellen, and Wangen-Brüttisellen communities. Their website reflects a regional healthcare provider with a clear focus on quality care and community integration. The business model centers on providing comprehensive care services recognized by local health authorities and insurers. Technically, the website is built on TYPO3 CMS with modern frontend libraries such as jQuery and Owl Carousel. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies. Overall, the website is professional, trustworthy, and compliant with privacy regulations including GDPR. No critical security issues or blocking mechanisms were detected. The domain WHOIS data aligns well with the business, supporting legitimacy. Recommendations include enhancing security headers, publishing security and incident response policies, and adding vulnerability disclosure information to improve trust and security maturity.

A

AZ Hofwiesen

az-hofwiesen.ch

51

AZ Hofwiesen is a Swiss healthcare provider operating a multilingual website primarily in German and Italian. The site serves patients and healthcare consumers, offering medical services and information. The business appears to be a medium-sized regional healthcare facility with a professional online presence. Technically, the website is built on WordPress using the Divi theme and incorporates modern SEO practices via the Yoast SEO plugin. It employs Google Analytics and Google Tag Manager for user tracking and has implemented a cookie consent mechanism to comply with GDPR requirements. Security-wise, the site uses HTTPS with a good SSL configuration but lacks some advanced security headers and explicit security policies. No privacy policy or terms of service pages were detected, which are recommended for compliance and trust. Overall, the website is accessible without WAF or blocking mechanisms, indicating good availability and user experience.

Spitex Glattal is a Swiss non-profit association providing comprehensive home care and support services in the Glattal region, including nursing, psychiatric care, household assistance, and meal delivery. Established in 2013, it serves multiple municipalities with a team of approximately 100 employees, emphasizing empathy, professionalism, and multicultural diversity. The website reflects a well-structured and professional digital presence, leveraging modern web technologies such as Next.js and React, hosted with DigitalOcean Spaces for media assets. The site is mobile-optimized and offers clear navigation and relevant content for its target audience. From a security perspective, the website employs HTTPS with a strong SSL configuration and does not expose sensitive data or vulnerable libraries. However, it lacks some security headers and does not provide explicit security policies or incident response contacts. Privacy compliance is generally good, with a comprehensive privacy policy available, but the absence of a cookie consent mechanism is a notable gap. Overall, the domain registration details align well with the business claims, supporting the legitimacy and trustworthiness of the entity. The risk assessment indicates a low risk profile with recommendations to enhance security headers, implement cookie consent, and publish incident response information to strengthen compliance and trust. The website's content is safe for general audiences, focusing solely on healthcare services without any adult or questionable content.

G

Göttingen Marketing GmbH

einkaufen-in-goettingen.de

65

The website 'Einkaufen in Göttingen' is a professionally developed local city marketing platform operated by Göttingen Marketing GmbH. It serves as a comprehensive shopping and event guide for residents and visitors of Göttingen, focusing on retail, gastronomy, cultural events, and city services. The platform leverages modern web technologies including WordPress and Elementor, with integrations for maps and user consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, cookie consent, and no visible vulnerabilities, although formal security policies and incident response information are absent. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements, making it a reliable resource for its target audience.

G

Goettingen Marketing GmbH

gaenseliesel-fest.de

60

The website www.gaenseliesel-fest.de is a professionally designed WordPress site promoting the Pro City Gänseliesel Fest, a family-friendly city festival in Göttingen, Germany. It provides detailed event information, application forms for festival roles, FAQs, and multimedia galleries, targeting local residents and visitors interested in cultural events. The site uses modern web technologies including WordPress 6.8.3 and Elementor, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Contact information is provided via official email and forms, enhancing business credibility. Overall, the site is trustworthy, well-maintained, and suitable for its community event purpose.

PuzzlePlayz.com is a Swedish website operated by Bulls, a company specializing in providing digital and printed crossword puzzles, sudoku, and similar puzzle content. The business positions itself as the largest provider of online crosswords in Sweden, targeting puzzle enthusiasts and publishers. Their services include responsive digital puzzles compatible across devices and digitalization of existing puzzles. The website content is professional and consistent with the business focus, though it lacks comprehensive privacy and cookie policies. Technically, the website uses standard web technologies including Bootstrap CSS and Google Analytics with Google Tag Manager for tracking. The domain is registered through a reputable registrar and hosted with DNS services via Cloudflare. The site is mobile optimized and performs moderately well but lacks advanced SEO and accessibility features. Security practices are basic with HTTPS enabled but missing important security headers and DNSSEC. From a security perspective, the website shows moderate maturity. HTTPS is implemented, and Google Analytics is configured with secure cookie flags. However, the absence of security headers, DNSSEC, and published privacy or incident response policies indicates room for improvement. No critical vulnerabilities or adult content were detected, and the domain registration is consistent and legitimate. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and transparency to improve trust and regulatory adherence.

S

SWB Bus und Bahn

swb-busundbahn.de

61

SWB Bus und Bahn is a large regional public transportation provider based in Bonn, Germany, operating bus and tram services with a focus on sustainable mobility and customer service. The company is part of the SWB Konzern group and offers a variety of ticketing options, real-time traffic updates, and mobility apps. The website is built on TYPO3 CMS and integrates modern technologies such as Google Tag Manager and Owl Carousel, providing a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.