Security Directory

B

Bundesstadt Bonn

bonn-macht-mit.de

55

Bonn-macht-mit.de is the official citizen participation portal for the city of Bonn, Germany. It provides a platform for residents to engage in local government decisions, participate in surveys, and stay informed about events and initiatives. The website is well-branded with official city logos and offers comprehensive information about ongoing participatory projects, targeting a broad audience including youth. Technically, the site is built on Drupal 10, uses Matomo for privacy-respecting analytics, and incorporates modern web technologies such as Font Awesome and CookiesJSR for cookie management. The site is mobile-optimized and accessible, with clear navigation and professional design. Security-wise, the site enforces HTTPS, respects Do Not Track settings, and implements cookie consent mechanisms, though it lacks some advanced security headers and a published security policy. Overall, the domain registration data aligns well with the website content and hosting, indicating legitimacy and trustworthiness.

The website 'Bonn hilft Cherson' is a humanitarian aid initiative led by the city of Bonn in partnership with the NGO Help – Hilfe zur Selbsthilfe e.V. It focuses on raising donations to support medical aid and infrastructure rebuilding in the Ukrainian city of Cherson. The site is well-structured, professionally designed, and provides comprehensive information about the project, donation methods, and partner organizations. The target audience includes citizens of Bonn, local organizations, and donors interested in humanitarian support. Technically, the website is built on TYPO3 CMS and uses modern web technologies including Bootstrap for responsive design. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Hosting appears to be managed via German hosting providers, with no signs of blocking or WAF interference. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for GDPR compliance. No incident response or vulnerability disclosure policies are published, which could be improved to enhance trust and security posture. Overall, the website scores well on content quality, business credibility, and technical implementation, with minor penalties for privacy and security policy gaps. It represents a trustworthy and professional platform for humanitarian fundraising and awareness.

P

PickyStory

pickystory.com

61

Amplify, operated by PickyStory, is a SaaS growth platform designed specifically for Shopify merchants to increase revenue through AI-powered bundles, upsells, and subscription services. The platform targets e-commerce brands seeking to boost average order value and customer lifetime value. The website is professionally designed using WordPress and Elementor, integrating modern marketing and analytics tools such as Google Tag Manager and HubSpot. The technical infrastructure is modern and performant, with Cloudflare DNS and HTTPS enforced, ensuring secure and reliable access. However, the site lacks explicit privacy and cookie policies, which is a compliance gap that should be addressed. Security posture is solid with standard protections but could be enhanced with additional HTTP security headers and published security policies. Overall, the business appears legitimate and well-positioned in the e-commerce SaaS market, serving over 4,500 Shopify brands.

1

1881

1881.no

66

1881.no is a leading Norwegian telephone directory and number lookup service, providing updated contact information for individuals and businesses across Norway. The website positions itself as a trusted source for reliable phone directory services, supported by a strong brand presence and social media engagement. The business model focuses on information services, leveraging advertising and partnerships to monetize the platform. Technically, the site employs modern web technologies including Google Tag Manager, Prebid.js for header bidding, and Amazon Publisher Services, indicating a mature digital infrastructure. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS enforced and standard security headers likely present, but the site lacks visible privacy and cookie policies, as well as incident response disclosures. Overall, the site is professional and trustworthy, but could enhance compliance and transparency to improve user trust and regulatory adherence.

N

Nordnorsk debatt

nordnorskdebatt.no

58

Nordnorsk debatt is a regional Norwegian online media platform focused on societal, political, and cultural debates in Northern Norway. It positions itself as the largest and best forum for northern Norwegian debate, targeting residents and stakeholders interested in regional issues. The platform offers opinion articles, debate forums, advertising opportunities, and subscription services, operating under the Amedia media group umbrella. Technically, the website employs modern JavaScript frameworks, service workers, and ad technologies such as Google Publisher Tags and Prebid.js, indicating a mature digital infrastructure with mobile app integration for iOS and Android. Security posture is strong with HTTPS enforcement and security headers, though explicit privacy and terms policies are lacking. The absence of WHOIS data limits domain legitimacy verification, but the website's professional branding and technology suggest a legitimate operation. Overall, the site is well-designed, content-rich, and trustworthy for its target audience.

N

Nord24

nord24.no

62

Nord24 is a Norwegian local news media outlet providing a wide range of content including local news, sports, culture, business news, and classifieds. It operates a subscription-based business model supplemented by advertising revenue. The website is professionally designed, mobile-optimized, and uses modern web technologies including service workers and JavaScript frameworks. The technical infrastructure supports a progressive web app experience and integrates multiple advertising networks and analytics services. Security posture is strong with HTTPS enforced and standard security headers present, though public security policies and incident response information are not found. The domain WHOIS data is unavailable, likely due to privacy protection, which is common for media companies. Overall, the site presents a trustworthy and professional presence in the Norwegian regional media market.

A

Amedia Annonseproduksjon

amediaressurs.no

42

Amedia Annonseproduksjon operates advertisement production centers in Harstad and Tønsberg, Norway, serving as part of the larger Amedia group. The website presents a professional and regionally focused business offering advertisement production services primarily targeting businesses and advertisers within Norway. The digital infrastructure is based on standard web technologies such as Bootstrap and jQuery, providing a responsive and user-friendly experience, though lacking advanced SEO and accessibility features. Security posture is basic with no evident HTTPS enforcement or security headers, and the site lacks privacy and cookie policies, which are critical for GDPR compliance. Overall, the website is functional and credible but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

M

Mediebedriftenes Landsforening

medietall.no

67

Medietall.no is an official Norwegian media statistics portal operated by Mediebedriftenes Landsforening (MBL). It provides authoritative data on media coverage, traffic, and circulation numbers to members and stakeholders in the Norwegian media industry. The website serves as a trusted source for media metrics and offers API and iframe access to its data, supporting transparency and industry insight. The site is well-branded, consistent, and targets media professionals and organizations interested in media statistics. Technically, the website uses modern frontend technologies including Bootstrap 5.3, jQuery, and Ionicons, served via reputable CDNs with integrity checks. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security is solid with HTTPS enforced and secure cookie handling, though it lacks advanced security headers and explicit security policies. Analytics are implemented via Linkpulse, with a cookie consent mechanism in place, indicating basic privacy compliance. From a security perspective, the site shows good practices such as secure cookies and no visible vulnerabilities or exposed sensitive data. However, it lacks published incident response contacts, security policies, and vulnerability disclosure mechanisms, which could be improved to enhance trust and compliance. The domain registration data aligns well with the website's business claims, supporting legitimacy. Overall, Medietall.no is a professional, trustworthy, and functional media statistics portal with room for improvement in security policy transparency and privacy documentation. It poses low risk and serves its target audience effectively.

D

Distribution Innovation

di.no

61

Distribution Innovation is a Nordic technology company specializing in logistics and distribution solutions, focusing on parcel and print media logistics. The company offers software products that enhance logistics efficiency for businesses delivering products to consumers, with a strong presence in Norway, Sweden, and Finland. Their solutions cover distribution execution and planning, supporting a network of over 15,000 couriers and powering major newspaper deliveries in the region. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Fonts, jQuery, Google Tag Manager, and reCAPTCHA for security. The site is well-optimized for performance and mobile devices, with good SEO practices and a professional design. Analytics are implemented via Google Analytics with IP anonymization. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks several important security headers and explicit incident response or security policy disclosures. Privacy compliance is partially addressed with a privacy and cookie policy, though no explicit cookie consent mechanism is present. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for businesses in this sector. Overall, the website presents a professional and trustworthy front for a medium-sized Nordic logistics technology company. Strategic improvements in security headers, privacy mechanisms, and transparency around incident response would enhance their security posture and compliance standing.

The website e-pages.dk currently serves an error page indicating that the requested content is not found. There is no accessible business information, metadata, or contact details available on the page. The domain is registered since 2006 and is active, but the website content is minimal and lacks professional presentation or navigation. The technical infrastructure cannot be fully assessed due to the lack of content and metadata. Security posture is weak with no evidence of HTTPS or security headers, and no privacy or cookie policies are present. Overall, the website appears inactive or misconfigured, resulting in a poor user experience and low trustworthiness.

Simpleview Europe is a specialized digital agency providing comprehensive tourism technology solutions including CMS, CRM, DMS, and digital marketing services. As part of Granicus, it holds a strong market position serving Destination Management Organisations and tourism boards across Europe. The website reflects a mature digital presence with modern technologies and extensive service offerings. However, the absence of WHOIS data and lack of explicit privacy and cookie policies indicate areas for improvement in transparency and compliance. The technical infrastructure is robust with use of modern JavaScript frameworks and analytics tools, supporting good performance and user experience. Security posture is moderate with HTTPS implied but lacking visible security headers and published policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact and security information.

The website frontify-artifacts.com is currently inaccessible, presenting an Access Denied error page with no visible content or metadata. This indicates the presence of a web application firewall or security mechanism blocking access, preventing a full analysis of the site's content, policies, or business information. The domain is registered through Amazon Registrar, Inc. with DNS hosted on AWS, which is consistent and typical for legitimate businesses. However, the lack of accessible content and absence of privacy, cookie, or contact information limits the ability to assess the company's business model, market position, or compliance posture. From a technical perspective, the site shows minimal technical implementation with no detectable scripts, frameworks, or SEO optimizations. Security posture is basic with no DNSSEC enabled and no security headers observed, though HTTPS is presumably enabled given the domain uses AWS infrastructure. The domain registration is valid and not privacy protected, which supports legitimacy, but the inaccessible content significantly reduces trust and credibility. Security evaluation highlights the need for improved security headers, DNSSEC implementation, and visible privacy and cookie policies to meet compliance standards such as GDPR. The absence of contact or incident response information further weakens the security and compliance posture. Overall, the site currently poses a low trust level due to inaccessibility and lack of transparency. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and cookie policies, improving security headers, and ensuring the website content is accessible to users and security scanners. These steps will enhance trust, compliance, and security maturity, enabling better business credibility and user confidence.

F

Fredriksstad Blad

f-b.no

66

Fredriksstad Blad is a regional Norwegian news media outlet providing local news, sports, culture, classifieds, and subscription-based premium content. The website targets local residents interested in community news and events. It operates under the parent company Amedia and offers digital and e-paper subscriptions alongside advertising revenue streams. The site demonstrates a mature digital infrastructure using modern JavaScript frameworks, service workers, and ad technologies. Security posture is strong with HTTPS, security headers, and privacy policies in place, though explicit security policy and incident response information are not publicly available. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, serving a general audience with safe content.

A

Avisa Valdres

avisa-valdres.no

66

Avisa Valdres is a regional Norwegian news media company providing local news, sports, culture, business, and community information primarily targeting residents of the Valdres region. The website supports subscription-based access to content including digital and e-paper editions. The company is part of the Amedia group, a major Norwegian media conglomerate. The site demonstrates a mature digital presence with modern web technologies, including progressive web app features and integration with advertising networks. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is evident with clear privacy and cookie policies and GDPR adherence. Overall, the site is professional, trustworthy, and well-maintained.

O

Oppland Arbeiderblad

oa.no

64

Oppland Arbeiderblad is a regional Norwegian newspaper providing local news, sports, culture, business, and community information primarily targeting the Oppland region. The website supports subscription services, advertising, and digital content delivery including e-paper and podcasts. The site is well-branded and consistent with a professional media outlet. Technically, the site uses modern JavaScript frameworks, service workers, and ad technologies to deliver a performant and mobile-optimized experience. Security posture is strong with HTTPS enforcement and standard security headers, though explicit incident response and vulnerability disclosure information is absent. Privacy and cookie policies are present and GDPR compliant. Overall, the site represents a legitimate, medium-sized media business with a solid digital presence.

G

Glåmdalen

glomdalen.no

64

Glåmdalen is a Norwegian regional news media website providing local news, sports, culture, business, and community information primarily targeting the Norwegian local audience. The site operates on a subscription-based model with premium content gated for subscribers and supported by advertising revenue. It is part of the Amedia group, a major Norwegian media company, which lends credibility and stability to its operations. The website demonstrates a mature digital infrastructure with modern web technologies including service workers and ad management frameworks. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in its market segment.

N

Nordlys

nordlys.no

10

Nordlys is a well-established Norwegian regional media company focused on delivering local news, sports, culture, and business content primarily for Northern Norway. The website supports a subscription-based business model complemented by advertising revenue. It is part of the Amedia group, a significant media conglomerate in Norway. The site demonstrates a professional digital presence with modern web technologies, including progressive web app features and advanced ad serving frameworks. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policy and incident response information are not publicly available. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site is trustworthy and professionally maintained, serving a general audience with safe content.

T

Tønsbergs Blad

tb.no

64

Tønsbergs Blad is a regional Norwegian newspaper providing local news, sports, culture, and community information primarily targeting residents of the Tønsberg area. The website offers subscription services alongside advertising and classified listings, positioning itself as a trusted local media outlet under the parent company Amedia. The digital platform is built on a modern tech stack with progressive web app features and integrates multiple advertising networks and marketing tools. Security posture is strong with HTTPS enforcement and security headers, though public security policies and incident response contacts are not found. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site is professional, accessible, and trustworthy with moderate to good technical performance.

R

Romerikes Blad

rb.no

10

Romerikes Blad is a regional Norwegian news media company providing local news, sports, culture, and community information primarily targeting residents of the Romerike region. The website supports subscription and advertising revenue models, offering digital and print news access. It is part of the Amedia group, with several local subsidiary sites. The site is professionally designed with consistent branding and good content quality in Norwegian language. Technically, the site uses modern JavaScript frameworks, service workers, and ad technologies, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not published. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and well-maintained, serving a medium-sized regional media business.

S

Sandefjords Blad

sb.no

66

Sandefjords Blad is a regional Norwegian newspaper providing local news, sports, culture, and business information primarily targeting readers in Sandefjord and surrounding areas. It operates under the Amedia group, leveraging a subscription and advertising-based business model. The website demonstrates a professional digital presence with a focus on user engagement through subscription services and local classifieds. Technically, the site uses modern web technologies including service workers, header bidding for ads, and a proprietary CMS framework (Rodimus). The security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. The lack of WHOIS data is consistent with Norid's privacy policies for .no domains and does not detract from the site's legitimacy. Overall, the site is trustworthy, well-maintained, and serves its local audience effectively.

D

Drammens Tidende

dt.no

10

Drammens Tidende is a Norwegian local news media outlet providing comprehensive coverage of local news, sports, culture, business, and obituaries. The website operates a subscription-based business model complemented by advertising revenue, targeting local Norwegian residents interested in regional news and events. The site is part of the Amedia group, a significant media company in Norway. Technically, the website employs modern web technologies including service workers, ES modules, and header bidding for advertising, indicating a mature digital infrastructure. The site is mobile responsive and optimized for performance with good SEO and accessibility basics. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional, trustworthy, and well-maintained, serving as a reliable source of local news.

H

Haugesunds Avis

h-avis.no

66

Haugesunds Avis is a regional Norwegian newspaper providing local news, sports, culture, and community information primarily targeting residents of Haugesund and surrounding areas. The website operates on a subscription and advertising business model, integrated within the Amedia media group ecosystem. It offers digital subscriptions, eAvis (digital paper editions), and advertising services. The site is professionally designed with consistent branding and clear navigation, supporting a good user experience for desktop and mobile users. Technically, the site uses modern web technologies including ES modules, service workers, header bidding with Prebid.js, and Google Publisher Tags for advertising. The CMS and framework appear custom-built by Amedia, optimized for responsive design and performance. Accessibility is basic but present, and SEO practices are good with proper meta tags and structured data. Performance is moderate, with room for optimization. Security posture is strong with HTTPS enforced, secure forms, and no exposed sensitive data. However, additional security headers like CSP and HSTS could improve defenses. Privacy compliance is good with clear privacy and cookie policies and GDPR adherence. Contact information is transparent, enhancing business credibility. No WHOIS data is publicly available due to Norid policies, which is standard for Norwegian domains, and the domain appears legitimate and consistent with the business. Overall, Haugesunds Avis presents a trustworthy, professional, and secure digital presence for a regional media company, with solid technical infrastructure and compliance practices.

G

Gudbrandsdølen Dagningen

gd.no

10

Gudbrandsdølen Dagningen is a regional Norwegian news media company providing local news, sports, culture, and business content primarily targeting the Norwegian local population. The website supports subscription services and advertising revenue models, positioning itself as a trusted regional news source under the parent company Amedia. The digital infrastructure is built on a custom CMS and modern web technologies including service workers and advanced ad management frameworks. The site is mobile responsive and optimized for user experience with clear navigation and content relevance. Security posture is strong with HTTPS enforcement and security headers, though explicit vulnerability disclosure and incident response information are absent. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a mature digital presence with good business credibility and technical implementation.

H

HIPMI

bpc-hipmi-rembang.com

10

HIPMI Kabupaten Rembang is a regional chapter of the Indonesian Young Entrepreneurs Association, focused on fostering entrepreneurship and economic independence among young businesspeople in the Rembang Regency. The organization offers membership benefits including networking, collaboration, capacity building, and access to capital and markets. The website is built on WordPress with modern plugins and SEO tools, hosted with reputable providers and secured with HTTPS. However, the domain is newly registered in 2025, which is inconsistent with the organization's founding year of 1974, suggesting a recent domain acquisition or rebranding. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers. Privacy compliance is basic with no cookie consent mechanism detected. Overall, the site is professional and trustworthy but could improve security and privacy practices.

B

Bundesstadt Bonn

bonn.de

58

The website www.bonn.de serves as the official digital portal for the Bundesstadt Bonn, providing extensive information and services related to the city administration. It targets residents, visitors, and businesses, offering multilingual content and access to municipal services such as event calendars, service portals, and contact forms. The site is well-branded with consistent city imagery and logos, reflecting its authoritative position as a government entity. Technically, the site employs a modern CMS platform (Information Enterprise Server by Sitepark GmbH) and uses standard web technologies including JavaScript, CSS, and SVG icons. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security best practices are observed with HTTPS enforcement, security headers, and cookie consent mechanisms. From a security perspective, the site demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not published, which could be improved to enhance transparency and trust. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent aligned with GDPR requirements. Overall, www.bonn.de is a professional, trustworthy, and well-maintained government website. It effectively balances user experience, privacy, and security, serving as a reliable resource for its audience. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure information, and providing data protection officer contact details to further strengthen compliance and user trust.

E

Europäischer Verband der Veranstaltungs-Centren e.V.

evvc.org

54

The Europäischer Verband der Veranstaltungs-Centren e.V. (EVVC) is a well-established association representing approximately 600 event venues across German-speaking Europe. Their website serves as a comprehensive platform offering membership information, a job portal, educational opportunities via the EVVC Akademie, and a partner network. The site is professionally designed using Drupal 8 and modern frontend technologies, providing good user experience and mobile optimization. Privacy compliance is addressed with a cookie consent banner and a detailed privacy policy in German. However, no explicit terms of service or security policies are publicly visible. The WHOIS data is unavailable due to privacy protection or malformed queries, which is common for such organizations. Overall, the website demonstrates a solid business presence with moderate technical sophistication and a good security posture, though improvements in security headers and transparency could be made.

G

Göttingen Pro City e. V.

procity.de

45

Göttingen Pro City e. V. is a small non-profit association dedicated to representing the interests of businesses in the Göttingen city center. Established in 1998, it organizes events, marketing campaigns, and offers member benefits to strengthen the local retail community. The website is professionally designed using WordPress with modern plugins such as Elementor and Yoast SEO, providing good content quality and clear navigation. The technical infrastructure is solid, hosted via INWX, and employs HTTPS with cookie consent managed by Usercentrics. Security posture is adequate but could be improved by adding security headers and explicit privacy and terms of service pages. No critical vulnerabilities or blocking mechanisms were detected, and the site content is safe for general audiences.

G

Göttingen Tourismus

goettingen-tourismus.de

69

Göttingen Tourismus operates an official city tourism website providing comprehensive information on sightseeing, events, accommodations, and cultural offerings in Göttingen, Germany. The site targets tourists, families, and business visitors, positioning itself as the authoritative source for local tourism and city marketing. The business model focuses on destination promotion and visitor engagement through digital content and services such as city tours and newsletters. Technically, the website is built on WordPress with modern plugins and frameworks, optimized for SEO, mobile responsiveness, and accessibility. Privacy compliance is well addressed with GDPR-aligned policies and consent management. Security posture is solid with HTTPS and some best practices, though some security headers could be improved. No critical vulnerabilities or suspicious elements were detected. Overall, the site is professional, trustworthy, and well-maintained, serving its purpose effectively.

blaueQuelle Kommunikationsgesellschaft mbH is a small, professional advertising agency based in Germany, serving primarily the Göttingen and Kassel regions. The company offers a comprehensive range of services including web design, SEO, Google Ads management, print advertising, corporate design, and marketing workshops. Their market position is strengthened by memberships in local business organizations, indicating a trusted regional presence. The website reflects a clear business focus on helping clients improve their online visibility and branding through integrated marketing solutions. Technically, the website is built on the ProcessWire CMS platform and utilizes Matomo analytics with privacy-conscious settings such as disabled cookies and Do Not Track enabled. The site is mobile-optimized and demonstrates good SEO practices with proper meta tags and structured navigation. Hosting is managed via INWX, a reputable provider, and HTTPS is enforced, ensuring secure communications. From a security perspective, the site benefits from HTTPS and privacy-aware analytics but lacks visible security headers and a cookie consent mechanism, which are recommended for GDPR compliance. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website content, showing a consistent and legitimate domain registration without privacy protection, appropriate for this business type. Overall, the website presents a professional and trustworthy digital presence with moderate technical sophistication and a good security posture. Strategic improvements in security headers and cookie consent would enhance compliance and user trust further.

F

Fibbl

fibbl.com

56

Fibbl is a technology platform specializing in delivering 3D product experiences and content aimed at enhancing B2B sales, go-to-market strategies, and eCommerce efficiency. The company offers services including 3D viewers, virtual try-on solutions, and augmented reality experiences, positioning itself as a key player in the digital product experience market. Founded in 2015, Fibbl has established a medium-sized business presence with a focus on innovative technology solutions for brands. The website infrastructure is built on WordPress, leveraging modern JavaScript libraries such as Swiper.js and integrating multiple marketing and analytics tools including HubSpot, Google Tag Manager, TikTok Pixel, Facebook Pixel, LinkedIn Insight Tag, Dreamdata Analytics, and Hotjar. Cookie consent is managed via Cookiebot, ensuring compliance with cookie regulations and providing users with granular control over cookie preferences. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism, but lacks explicit security policy documentation and incident response contact information. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration is consistent with the business age and shows no suspicious patterns, enhancing trustworthiness. Overall, Fibbl demonstrates a solid technical and business foundation with good privacy compliance and marketing transparency. Strategic improvements include publishing comprehensive privacy and security policies, incident response details, and enhancing security headers to further strengthen the security posture.

T

TourCert

tourcert.org

52

TourCert is a well-established non-profit organization specializing in sustainable tourism certification, consulting, and training. Founded in 2009, it serves tourism companies, destinations, and travelers with a comprehensive portfolio of services aimed at promoting responsible tourism practices. The website reflects a mature digital presence with multilingual support and a strong emphasis on transparency and community engagement. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security measures include HTTPS, Google reCAPTCHA, and cookie consent mechanisms, though some security headers and DNSSEC are missing. The domain registration is consistent with the organization's history and shows no suspicious patterns. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

H

HotelNetSolutions GmbH

hotelnetsolutions.de

60

HotelNetSolutions GmbH is a specialized technology company providing SaaS solutions tailored for the hospitality industry, focusing on hotel booking engines, channel management, and related backend systems. Their product suite includes OnePageBooking, RateDistributor, VoucherBooking, and HotelControl, targeting hoteliers and hotel groups primarily in Germany. The company positions itself as a niche provider with a strong emphasis on integrating hotel operations with modern internet technologies to enhance booking experiences and operational efficiency. Technically, the website is built on WordPress with Elementor, leveraging modern SEO and analytics tools such as Google Analytics and Google Tag Manager. Hosting is provided by Hetzner, a reputable German hosting provider, ensuring reliable infrastructure. Security posture is solid with HTTPS, reCAPTCHA, and GDPR-compliant cookie consent mechanisms, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website reflects a professional and trustworthy business with good digital maturity and compliance standards.

D

Dark Design Group

darkdesigngroup.no

61

Dark Design Group is a multidisciplinary design collective based in Norway, comprising architecture, landscape architecture, interior design, and planning firms. Founded in 2020, the group leverages collaboration among its subsidiaries DARK Arkitekter, Lark Landskap, and Zinc interiørarkitekter to deliver comprehensive design solutions. The website reflects a professional and cohesive brand presence targeting clients in the architecture and urban planning sectors. Technically, the site is built on WordPress using Elementor and related plugins, offering a modern and responsive user experience with good SEO practices. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response policies. Privacy policies are present and GDPR compliant, though cookie consent mechanisms could be improved. Overall, the site is trustworthy and well-maintained, with room for enhancements in security and privacy transparency.

A

Amedia

amedia.no

74

Amedia is the largest publisher of local newspapers in Norway, operating a broad portfolio including 92 local newspapers, Nettavisen, Nationen, multiple local websites, trade journals, and a local radio station. The company focuses on delivering high-quality journalism and local news coverage across the country, targeting Norwegian local media consumers and advertisers. The website reflects a professional media publishing business with a clear market position as a leading local media entity in Norway. Technically, the website is built on Joomla CMS with Yootheme UIkit framework, integrating modern web technologies such as Google Tag Manager and Cookiebot for analytics and consent management. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. It employs a comprehensive cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. The absence of WHOIS data limits domain registration insights, but the professional web presence and structured data support legitimacy. Strategic recommendations include publishing security policies, adding vulnerability disclosure mechanisms, and enhancing performance and accessibility further.

S

Stiftung SanaCERT Suisse

sanacert.ch

44

Stiftung SanaCERT Suisse operates as a Swiss foundation dedicated to certifying quality assurance in the healthcare sector, focusing on hospitals and long-term care facilities. The website sanacert.ch serves as an informational platform targeting healthcare providers and organizations within Switzerland, emphasizing their certification services and quality standards. The business model is non-profit and specialized, positioning the foundation as a trusted entity in healthcare quality certification within the Swiss market. Technically, the website employs a modern but straightforward technology stack including jQuery, Bootstrap, FontAwesome, and Google services such as reCAPTCHA and Maps API. The site is mobile-optimized and presents a professional design with clear navigation, although it lacks advanced SEO and accessibility features. Hosting details are not explicitly identified, but the site uses HTTPS with a strong SSL configuration. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, indicating a baseline security posture. However, it lacks important security headers and does not publish privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided, representing gaps in security transparency and readiness. Overall, the website is trustworthy and professionally presented but requires improvements in privacy compliance and security best practices to enhance its risk posture. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure process.

A

ARTISET Zürich

artiset-zh.ch

55

ARTISET Zürich is a regional non-profit association representing service providers for people with support needs in the canton of Zurich, Switzerland. The organization acts as an important stakeholder advocating for its members in health and social policy, offering a variety of services including events, knowledge resources, and quality certifications. The website is professionally designed using Silverstripe CMS and modern web technologies, providing clear navigation and mobile optimization. It includes a cookie consent mechanism and integrates Google Analytics 4 for user behavior tracking. Security posture is good with HTTPS enforced, though security headers and incident response policies are absent. Contact information is clearly presented, enhancing business credibility. Overall, the website is trustworthy and well-aligned with its stated mission.

A

Allianz Pflegeversorgung

allianzpflegeversorgung.ch

46

The Allianz Pflegeversorgung website represents a regional healthcare alliance coordinating nursing and care services for the municipalities of Dietlikon, Wallisellen, and Wangen-Brüttisellen in Switzerland. The alliance focuses on strategic planning, capacity management, and ensuring efficient and patient-centered care delivery. The website clearly communicates its mission and member organizations, providing contact details and links to partner care centers. Technically, the site is built on WordPress with standard plugins such as Yoast SEO and WP Statistics, indicating a moderate level of digital maturity. The site is mobile-optimized and SEO-friendly but lacks published privacy and cookie policies, which are important for compliance. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though security headers are missing and incident response information is absent. Overall, the site is trustworthy and professional but could improve compliance and security transparency.

P

PS Werbung

ps-werbung.ch

64

PS Werbung (PSW) is a Swiss-based small media agency specializing in web design, graphic design, branding, and signage services primarily targeting small and medium-sized enterprises (KMU) in the Zurich region. The company offers comprehensive creative services including logo creation, corporate identity development, website design, and physical advertising solutions such as vehicle and building signage. Their market position is that of a trusted regional partner with a portfolio including long-term clients like ERF Medien. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and optimized for mobile devices. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal incident response disclosures. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional, well-branded, and trustworthy, but could improve in compliance and security transparency.

P

PS Werbung

psw.ch

64

PS Werbung (PSW) is a Swiss-based media and design agency specializing in web design, branding, graphic design, and signage solutions primarily targeting small and medium-sized enterprises (KMU) and municipalities in the Zurich area. The company offers comprehensive services from concept to realization, including logo creation, corporate identity development, and web presence design. Their portfolio demonstrates long-term client relationships and a strong local market presence. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies such as jQuery, Font Awesome, and Google Fonts. The site is well-optimized for mobile devices, has good SEO practices, and provides a professional user experience. However, some performance optimizations could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration and avoids exposing sensitive data. Nonetheless, it lacks important security headers and does not provide a security.txt or incident response contact information. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanisms. Overall, PSW's website is professional and trustworthy, but it should enhance its privacy and security posture to align with best practices and regulatory requirements. Strategic improvements in these areas will strengthen user trust and compliance.

C

Cloudrexx AG

cloudrexx.com

63

Cloudrexx AG operates a Swiss-focused cloud CMS platform targeting agencies, providing flexible and secure website creation with managed hosting and maintenance. The company positions itself as a specialized SaaS provider in the technology sector, focusing on the Swiss market. The website content is professional, well-structured, and localized in German, indicating a clear target audience of agencies in Switzerland. The technical infrastructure relies on the Cloudrexx CMS platform with a custom JavaScript framework and legacy jQuery libraries, suggesting moderate digital maturity with room for modernization. Security posture is adequate with HTTPS usage and cookie consent mechanisms, but lacks visible security headers and updated libraries, which could be improved. Privacy compliance is strong with GDPR-aligned policies and cookie management. Overall, the website is trustworthy and professional, but the absence of WHOIS registration data raises questions about domain legitimacy that should be addressed.

A

agimus web gmbh

agimus-web.ch

45

Agimus web gmbh is a small Swiss company specializing in web design, web programming, hosting, and support services primarily targeting small and medium enterprises in the Eglisau region. The website presents a professional image with clear descriptions of their services including web development and office software support. The technical infrastructure is based on Joomla CMS with Bootstrap framework and integrates Google Analytics with IP anonymization for user tracking. While the website is accessible and functional, it lacks explicit privacy and cookie policies, as well as security headers and vulnerability disclosure mechanisms, which are important for compliance and security transparency. The overall security posture is moderate with HTTPS enabled but could be improved by implementing additional security best practices. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

The website www.swisswine.com serves as an informational and promotional platform dedicated to Swiss wines, highlighting the diversity and cultural richness of Swiss wine production. It targets wine enthusiasts, tourists, and consumers interested in Swiss wines. The business model appears to be focused on education and promotion rather than direct sales. The website design is modern and visually appealing, utilizing Tailwind CSS and JavaScript libraries such as Swiper.js and Mapbox GL JS for interactive elements. However, the technical infrastructure lacks visible CMS or hosting details, and performance is moderate with good mobile optimization but basic accessibility and SEO features. Security posture is weak due to the absence of HTTPS verification in the provided data, missing security headers, and no visible privacy or cookie policies. The WHOIS data is unavailable, raising concerns about domain legitimacy and trustworthiness. Overall, the site provides relevant content but lacks critical security and compliance features, which could impact user trust and regulatory adherence.

C

Cave de La Côte

cavedelacote.ch

59

Cave de La Côte is a Swiss-based e-commerce retailer specializing in premium Vaudois and Swiss wines. The website positions itself as a provider of award-winning Swiss wines, targeting wine consumers both locally and internationally. The business model focuses on online sales with an emphasis on quality and regional authenticity. Technically, the website is built on WordPress with WooCommerce, leveraging popular plugins such as Yoast SEO and Cookiebot for SEO and privacy compliance respectively. The site demonstrates moderate digital maturity with good mobile optimization and SEO practices, though some areas like explicit privacy policies and terms of service are missing. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but could be improved with additional security headers and vulnerability disclosures. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact information.

B

Bianchi

bianchi.ch

48

Bianchi is a well-established Swiss family business specializing in fresh food products including fish, seafood, meat, and poultry. Operating since 1881, it serves the Swiss gastronomy sector with a broad product range and a dedicated logistics network. The company maintains a professional online presence with a WordPress-based website featuring modern design and SEO optimization. Technically, the site uses popular plugins and frameworks such as Avada theme, Fusion Builder, and Revolution Slider, supported by Google Analytics and Tag Manager for tracking. Security posture is solid with HTTPS and basic security headers, though improvements are recommended in security headers and vulnerability disclosure. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the website reflects a credible and trustworthy business with room for enhanced privacy and security transparency.

L

Léguriviera Groupe

leguriviera-groupe.ch

50

Léguriviera Groupe is a Swiss-based company specializing in the selection and delivery of exceptional fruits and vegetables primarily serving the gastronomy and retail sectors in Suisse romande. The company operates a professional e-commerce platform allowing customers to order fresh produce, including fresh-cut and ready-to-eat products. Their market position is that of a trusted regional supplier with strong local partnerships and a commitment to quality and freshness. The website reflects a mature digital presence with multilingual support and comprehensive customer engagement features. Technically, the website is built on WordPress with WooCommerce and enhanced by various plugins for analytics, cookie compliance, and multilingual support. The infrastructure uses modern web technologies and tracking tools such as Google Analytics, Hotjar, and Google Tag Manager. The site is mobile optimized and SEO friendly, though performance is moderate and accessibility could be improved. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. However, it lacks advanced security headers and a publicly visible security policy or incident response information. No critical vulnerabilities or blocking mechanisms were detected, indicating a generally sound security posture but with room for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its business purpose effectively. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility to further strengthen the site's security and user experience.

The website at www.pierre-latine.com appears to be a WordPress-based site utilizing Gravity Forms and Font Awesome for icons. However, the content is minimal and primarily technical, with no substantive business or contact information visible in the provided HTML snippet. The WHOIS query for the domain returned no match, indicating that the domain may not be registered publicly or is protected by privacy services, which raises concerns about legitimacy. No privacy, cookie, or terms of service policies were found, and no contact emails or phone numbers are present, limiting the ability to verify the business identity or compliance with data protection regulations. Technically, the site uses modern iconography and form scripts but lacks visible security headers or advanced security configurations.

F

Fidutrust Gestion et Conseils SA

fidutrust.ch

50

Fidutrust Gestion et Conseils SA is a Swiss fiduciary and consulting firm established in 1983, based in Fribourg. The company offers fiduciary expertise and consulting services, emphasizing professional ethics and independence through shareholder-managers. Their market position is that of a trusted, established fiduciary firm serving professional and business clients. The website is multilingual and built on WordPress with the Divi theme, showing a moderate level of digital maturity with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policy and incident response information. Overall, the site reflects a professional and credible business with room for enhanced security transparency.

C

Culturefood CFD SA

culturefood.ch

52

Culturefood CFD SA operates as a regional wholesale distributor specializing in fresh and frozen food products for professional kitchens across Switzerland. The company emphasizes regional sourcing, freshness, and daily delivery services, positioning itself as a reliable partner in the food service industry. The website reflects a mature digital presence built on WordPress with modern SEO and performance optimizations. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and incident response disclosures are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting the company's credibility in its market niche.

Majestic Management & Consulting operates as a specialized procurement company serving the luxury hospitality and restaurant sectors in Switzerland. Their website presents a professional image with clear branding and a focus on supply chain management tailored to high-end hospitality clients. The company leverages WordPress with Elementor and Yoast SEO for content management and optimization, supplemented by Google Analytics for visitor tracking and CookieYes for cookie consent compliance. While the technical infrastructure is modern and the site is mobile-optimized, there is room for improvement in security practices, such as implementing security headers and publishing a formal privacy policy and terms of service. The absence of explicit contact information and incident response details limits transparency and trust. Overall, the website is functional and credible but would benefit from enhanced privacy and security disclosures to align with best practices and regulatory expectations.