Security Directory

B

balneotec GmbH

balneotec.de

67

balneotec GmbH is a specialized service provider in the hospitality sector focused on premium hotel modernization and renovation, particularly hotel bathrooms and rooms. The company positions itself as a holistic solution provider offering aesthetic, hygienic, and sustainable renovations tailored to hotel brands. Their market position is supported by strategic partnerships with well-known manufacturers and craftsman groups, enhancing their service quality and regional capacity. The website reflects a professional and consistent brand image with comprehensive content targeting hoteliers and hotel owners seeking modernization services. Technically, the website is built on WordPress using modern plugins such as Elementor, Rank Math SEO, and UberMenu, ensuring good SEO and user experience. The site is mobile-optimized and performs moderately well, with a clean technical stack and no blocking security mechanisms detected. Privacy and cookie policies are well implemented, indicating good GDPR compliance. From a security perspective, the site enforces HTTPS and includes standard security headers, but lacks a dedicated security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be improved with explicit security disclosures and vulnerability handling mechanisms. The overall risk assessment is low with a high trustworthiness rating. Strategic recommendations include publishing a security policy, adding vulnerability disclosure information, and enhancing accessibility features to further strengthen compliance and user trust.

F

Fédération Fribourgeoise des Entrepreneurs

cppf-pbkf.ch

50

The Commission Professionnelle Paritaire Fribourgeoise du Secteur Principal de la Construction (CPPF) operates as a regional federation representing construction sector entrepreneurs in the canton of Fribourg, Switzerland. The organization provides key services including labor conventions, collective agreements, work calendars, salary scales, and professional cards, targeting construction professionals and companies within the region. The website serves as an information hub with news updates, downloadable resources, and partner information, positioning the CPPF as a trusted authority in its sector. Technically, the website is built on the Neos CMS platform leveraging the Flow PHP framework, with modern JavaScript libraries such as Swiper.js and Google Analytics integrations. The site is mobile-optimized with good SEO practices and structured data usage, reflecting a moderate to good level of digital maturity. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site enforces HTTPS and uses anonymized IP tracking in analytics, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic with a privacy policy and cookie consent mechanism present, though GDPR compliance indicators are limited. Overall, the website is professional, trustworthy, and safe for general audiences. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, expanding privacy and incident response disclosures, and continuing to monitor third-party scripts for vulnerabilities to improve security posture and compliance.

A

Altenburg-Garage AG

altenburg-garage.ch

54

Altenburg-Garage AG is a well-established automobile dealership and service provider located in the Kanton Aargau region of Switzerland. Founded in 1977, the company represents multiple licensed car brands including Cupra, Mitsubishi, Seat, Suzuki, and VW. Their business model encompasses new and used car sales, leasing, professional car servicing, and a car wash facility, targeting local customers seeking quality automotive products and services. The website reflects a strong market position with comprehensive offerings and a focus on customer satisfaction. Technically, the website is built on WordPress with modern technologies such as Bootstrap, Swiper.js, and Google Tag Manager for analytics. It is optimized for mobile devices, loads quickly, and follows good SEO and accessibility practices. The presence of structured data and social media integration further enhances its digital maturity. From a security perspective, the site uses HTTPS with good SSL configuration and secure form handling. However, it lacks explicit security headers and a dedicated security or incident response policy page. Privacy compliance is partially addressed with clear privacy and cookie policies, though a cookie consent mechanism is missing. No vulnerabilities or suspicious activities were detected in the content. Overall, Altenburg-Garage AG’s website demonstrates high professionalism, trustworthiness, and business credibility. Strategic improvements in security headers and privacy consent mechanisms would further strengthen its security posture and compliance standing.

D

diversified design

diversified.ch

49

diversified design is a Swiss-based small design agency founded in 2008, specializing in corporate identity, print media, photography, and electronic media services. The company targets businesses and individuals seeking comprehensive and tailored design solutions. The website is professionally designed using WordPress with modern plugins and demonstrates good content quality and branding consistency. Technical infrastructure includes WordPress CMS, Yoast SEO, WPBakery Page Builder, and Google Analytics for tracking. Security posture is solid with HTTPS enabled and no exposed sensitive data, though security headers and cookie consent mechanisms are lacking. The domain registration details align well with the business information, supporting legitimacy. Overall, the website is trustworthy and professional but could improve privacy compliance and security best practices.

F

Fullerton Tool Company

fullertontool.ca

47

Fullerton Tool Company is a family-owned manufacturing business specializing in the design and production of solid carbide cutting tools for various industries. The company operates primarily in North America with dedicated websites for Canada, USA, and Mexico markets. Their product offerings include end mills, drills, reamers, saws, and custom tooling services, supported by just-in-time delivery and regrinding services. The website is professionally designed, multilingual (French focus on this site), and provides clear contact information and resources for clients and distributors. Technically, the site is built on WordPress with WooCommerce and several plugins for enhanced functionality, including search filters and cookie consent management. Security posture is adequate with HTTPS and domain locks but lacks DNSSEC and explicit security headers. Privacy compliance is supported by visible cookie and privacy policies with consent mechanisms. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

E

Emineo - so geht digital

emineo.ch

51

Emineo is a well-established Swiss IT consulting and software engineering company with over 200 employees and nearly two decades of experience. The company specializes in SAP consulting, software engineering, business applications, data analytics, digital supply chain, and artificial intelligence services. Their market position is strong within Switzerland, targeting businesses and organizations seeking digital transformation and IT solutions. The website reflects a professional and consistent brand image with comprehensive service offerings and a clear focus on technology-driven solutions. Technically, the website is built on WordPress using modern plugins such as Elementor and Slider Revolution, with SEO optimizations and structured data implemented. The site is mobile-optimized and performs moderately well, leveraging common marketing and analytics tools including Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. Security posture is good with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The security posture is solid but could benefit from explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is supported by a cookie consent mechanism and a privacy policy, though terms of service and data protection officer information are not evident. The WHOIS data aligns well with the business claims, showing a consistent and legitimate registration. Overall, Emineo presents a trustworthy and professional digital presence with room for enhancements in security transparency and privacy documentation. Strategic recommendations include improving security headers, publishing security and incident response policies, and enhancing accessibility features to further strengthen compliance and user trust.

S

Swiss Bankers Association

swissbanking.ch

67

The Swiss Bankers Association (SBA) is a prominent industry association representing Swiss banks and financial institutions. The website serves as a comprehensive platform for advocacy, information dissemination, and engagement with stakeholders in the Swiss banking sector. It offers detailed content on banking stability, regulation, digital finance, and sustainable finance, targeting banks, financial intermediaries, clients, and regulators. The SBA holds a strong market position as the leading representative body for Swiss banking, providing key services such as publications, events, and political engagement. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, with modern JavaScript integrations including Google Tag Manager and Usercentrics for consent management. The site is mobile-optimized with good SEO and accessibility features, though some accessibility aspects could be improved. Performance is moderate, with a professional and consistent design that enhances user experience. From a security perspective, the site enforces HTTPS with excellent SSL configuration and uses a consent management platform for cookies, reflecting good privacy compliance. However, explicit security headers are not detected, and there is no publicly available security policy or incident response contact information. No vulnerabilities or exposed sensitive data were found, indicating a solid security posture but with room for improvement in transparency and security best practices. Overall, the SBA website is a trustworthy, professional, and well-maintained platform that effectively supports its business objectives. Strategic recommendations include enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen trust and compliance.

A

A Bankers Journey

abankersjourney.com

46

The website 'A Bankers Journey' serves as a promotional platform for a biography book about Edmond J. Safra, a notable figure in global finance. It targets readers interested in financial history and banking biographies, offering news, endorsements, multimedia, and event information related to the book and its author, Daniel Gross. The site positions itself as a niche resource with a professional presentation and consistent branding, leveraging social media channels to extend its reach. Technically, the site is built on WordPress with popular plugins such as WPBakery Page Builder and Complianz for GDPR compliance. It uses standard web technologies including jQuery, Bootstrap, and Owl Carousel. Hosting is via GoDaddy, and the site employs HTTPS with a valid SSL certificate. Performance is moderate with good mobile optimization, though accessibility and SEO could be improved. From a security perspective, the site has basic protections including HTTPS and a cookie consent mechanism. However, it lacks advanced security headers and DNSSEC is not enabled, which are recommended for enhanced security. No privacy policy or terms of service pages were found, which is a compliance gap. No incident response or vulnerability disclosure information is provided. Overall, the website is safe, professional, and credible for its purpose but would benefit from improved privacy documentation and enhanced security configurations to strengthen trust and compliance.

O

Oscarware Inc

oscarwareinc.com

52

Oscarware Inc is a small US-based company specializing in manufacturing and selling high-quality grill toppers designed for outdoor cooking enthusiasts. Established in 1989, the company has a strong niche market presence with products made in the USA, emphasizing quality and safety. Their e-commerce website is professionally designed, featuring clear navigation, product showcases, and customer engagement through recipes and tips. The company leverages modern digital marketing and analytics tools to optimize customer experience and sales. Technically, the website is built on WordPress with WooCommerce, hosted on HostGator, and uses various third-party integrations for marketing and analytics. Security posture is good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is basic with policies present but limited GDPR indicators. Overall, the website and business demonstrate credibility and professionalism with room for security and compliance improvements.

A

Afton Scientific DE

aftonscientific.de

52

Afton Scientific DE is a well-established pharmaceutical contract manufacturing and lab services provider with over 30 years of experience. The company specializes in aseptic filling of injectable drugs, analytical and microbiological lab services, and offers ready-to-fill sterile components. Their market position is strong with regulatory compliance including FDA registration, cGMP adherence, and DEA registration. The website is professionally designed, well-branded, and targets pharmaceutical and biotech companies requiring specialized manufacturing services. Technically, the website is built on WordPress with modern plugins and technologies such as Google Tag Manager, reCAPTCHA Enterprise, and GDPR-compliant cookie management. The site is mobile-optimized, accessible, and SEO-friendly. Hosting is via EuroDNS with secure HTTPS connections. Security posture is solid with form protection and consent management, though explicit security headers and a published security policy or incident response contacts are missing. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies. Overall, the website and domain demonstrate high legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further improve trust and compliance.

T

TPC - Transports publics du Chablais SA

aomc2030.ch

55

The website www.aomc2030.ch represents TPC - Transports publics du Chablais SA, a regional public transportation entity in Switzerland focused on the AOMC 2030 infrastructure project. The site provides detailed project updates, images, and information aimed at the general public and local community, emphasizing safety and service improvements. The business operates in the transportation sector with a medium-sized organizational footprint. Technically, the website is built on WordPress, leveraging modern JavaScript libraries such as jQuery, Fancybox, and Slick Carousel, delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though it lacks explicit security headers and incident response policies. Privacy compliance is well addressed with GDPR-aligned cookie consent and a privacy policy in French. Overall, the site is professional, trustworthy, and safe, with no signs of malicious activity or adult content.

Chablais Heli Club is a small Swiss helicopter flight school and service provider based at the Bex aerodrome near the Swiss Alps. The company offers a range of helicopter pilot training licenses, including private, professional, and instructor certifications, as well as helicopter rental services. Their market position is regional, targeting individuals interested in helicopter flight training and recreational flying. The website is built on WordPress with a modern tech stack including Visual Composer, Bootstrap, and various JavaScript libraries. It features multimedia content and social media integration, providing a good user experience and mobile optimization. Security posture is moderate with HTTPS enabled and CAPTCHA on forms, but lacks important security headers and explicit privacy and cookie policies, indicating compliance gaps. No WAF or blocking mechanisms were detected, and the site content is safe for general audiences. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security hardening.

F

Fred Fischer

fredfischer.fr

54

Fred Fischer is a freelance web designer and WordPress expert based in Lille, France, offering specialized services including responsive WordPress theme development, plugin creation, SEO optimization, and web accessibility. The website presents a professional portfolio and emphasizes a user-centric approach combining form and function. The business targets clients directly and agencies seeking expert WordPress development and web design services. Technically, the site is built on WordPress with modern frameworks such as Materialize CSS and uses Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security posture is good with HTTPS enforced and minimal plugin use, though security headers and explicit privacy policies are lacking. The absence of WHOIS data limits domain legitimacy verification, which slightly impacts trust. Overall, the website is professional, secure, and well-positioned for its niche market.

W

Websamurai AG

websamurai.ch

50

Websamurai AG is a Swiss-based innovative web agency with offices in Aarau and Zürich, specializing in web design, programming, online shops, mobile apps, APIs, CMS systems, and online marketing services. The company targets both B2B and B2C clients and has nearly a decade of experience, positioning itself as a trusted and creative partner in the digital space. Their website reflects a professional and modern digital presence, leveraging WordPress CMS and various marketing and analytics tools to optimize user engagement and performance. Security posture is strong with HTTPS, reCAPTCHA, and obfuscated emails, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, with active consent mechanisms. Overall, the company demonstrates a mature digital infrastructure and a solid market position in the Swiss technology sector.

F

Fédération Fribourgeoise des Entrepreneurs

ffe-fbv.ch

53

The Fédération Fribourgeoise des Entrepreneurs (FFE-FBV) is a regional business federation based in Switzerland, primarily serving the construction and manufacturing sectors. The organization offers a range of services including professional training (initial, continuing, and advanced), administrative and technical support, labor market organization, and advocacy for its members. The website reflects a well-established entity with a clear market position supported by recognized certifications such as eduQua and ISO 9001. Their target audience includes entrepreneurs, construction professionals, trainees, and local businesses within the Fribourg region. The business model is membership-based, focusing on providing value-added services and fostering professional development.

S

Staatssekretariat für Bildung, Forschung und Innovation SBFI

berufsentwicklung.swiss

50

The website berufsentwicklung.swiss is an official platform managed by the Swiss State Secretariat for Education, Research and Innovation (SBFI). It serves as a comprehensive resource for vocational education and career development in Switzerland, providing detailed handbooks, ongoing revision information, and related documents. The site targets organizations of the working world and stakeholders involved in vocational training, positioning itself as a trusted government information portal. Technically, the site is built on WordPress with modern SEO and analytics tools like Matomo, hosted under a reputable registrar and DNS provider. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is solid with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is partial, with a privacy policy linked but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its governmental mission.

M

Medeco Cleantec

medeco-cleantec.de

50

Medeco Cleantec is a German-based company specializing in environmentally friendly cleaning solutions, pioneering the Green Cleaning concept. Their offerings include micro dry steam cleaners, air sterilization devices, and surface refinement products, targeting both businesses and consumers seeking chemical-free cleaning. The website is well-structured, professionally designed, and optimized for SEO and mobile use, leveraging WordPress and multiple plugins for enhanced functionality. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are not found. The domain is legitimate and consistent with the business profile, using Cloudflare for DNS and CDN services.

T

Travail.Suisse Formation

ts-formation.ch

54

Travail.Suisse Formation is a Swiss non-profit organization focused on improving access to public continuing education for all adults, especially targeting people with disabilities and low qualifications. It operates under a government performance agreement with the Swiss State Secretariat for Education, Research and Innovation (SBFI). The website is professionally designed using Drupal 10, with good mobile optimization and accessibility features. It provides comprehensive information about its projects, partners, and news related to inclusive education. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The WHOIS data aligns well with the website's claims, indicating a legitimate and consistent registration. Overall, the site is trustworthy, compliant with privacy regulations, and serves as a credible resource in the Swiss education sector.

I

Institute for Service Excellence

die-101-besten.com

42

Die 101 Besten D/A/CH is a specialized hospitality ranking and publishing business focusing on the top 101 luxury hotels in Germany, Austria, Switzerland, and South Tyrol. Founded in 2021, it operates a professional website showcasing hotel rankings, partner collaborations, and event information. The company targets luxury travelers and hospitality professionals within the D/A/CH region, positioning itself as a niche leader in hotel rankings and related events. The website is well-structured, visually appealing, and optimized for mobile devices, providing a good user experience.

A

Amauri Champeaux

tarteaucitron.io

56

tarteaucitron.io is a specialized GDPR-compliant cookie consent management platform founded in 2020 by Amauri Champeaux in France. The company offers a SaaS solution with an online dashboard, automatic service detection, and integration with Google Consent Mode v2. The platform is open source, enhancing transparency and trust. The target audience includes website owners and developers seeking to comply with privacy regulations. The website is built on WordPress with a modern theme, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and anti-spam measures, though explicit security policies and headers could be improved. Privacy compliance is strong, with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in its niche.

M

Mercy Air Switzerland

mercyair.ch

57

Mercy Air Switzerland is a small non-profit organization specializing in humanitarian air transport to assist people in need, primarily in Africa. The website serves as a platform to share mission reports, newsletters, and facilitate donations. It targets donors, supporters, and the humanitarian community. The organization holds a ZEWO certification, indicating trustworthiness and compliance with Swiss charity standards. Technically, the website is built on WordPress using the Enfold theme, with modern web technologies and plugins such as CleanTalk for anti-spam and Google Translate for multilingual support. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS, uses security headers, and has anti-spam measures, but lacks a dedicated security policy or incident response information. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. Overall, the website is professional, trustworthy, and secure with minor areas for improvement in security transparency and accessibility.

H

Heli-Züri AG

heli-zueri.ch

47

Heli-Züri AG is a Swiss-based helicopter flight school and service provider specializing in private and professional pilot licenses, helicopter sightseeing flights, business taxi flights, wedding flights, and film/photo flights. The company also operates a webshop for gift vouchers, targeting individuals and businesses interested in helicopter experiences. The website is built on WordPress with modern plugins and technologies, offering a good user experience and mobile optimization. Security measures include HTTPS and Google reCAPTCHA v3 on forms, but lack advanced security headers and comprehensive privacy compliance mechanisms. Overall, the site reflects a small but professional business with clear contact information and consistent branding.

M

Malix.Studio

malix.studio

57

Malix.Studio is a specialized media production company based in the Jura region of Switzerland, offering professional video production services including studio rental, live streaming, webinars, and virtual studio capabilities. Their business model focuses on providing high-quality, customizable video production environments tailored to the needs of SMEs in the Swiss market. The website demonstrates a solid digital presence with professional design and clear service offerings. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and performance optimization, though minor backend errors and lack of explicit privacy policies indicate areas for improvement. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit policies. Overall, the site is trustworthy and professional, with moderate risk due to minor technical and compliance gaps.

J

Job Board Doctor

jobboarddoctor.com

57

Job Board Doctor is a specialized consulting and advisory service focused on improving job boards and talent acquisition technology. The website offers expert guidance on revenue generation, strategy, analysis, and start-up support for job boards and recruiting sites. The business targets job board owners, recruiters, and talent acquisition professionals globally. The site is built on WordPress with a modern tech stack including Google Analytics and AdSense for monetization and tracking. The content is professional, well-structured, and optimized for SEO and mobile devices. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. WHOIS data is missing, raising concerns about domain registration legitimacy despite the site's professional appearance and long-standing content history. Overall, the site is credible but would benefit from improved transparency on domain registration and enhanced security practices.

L

Livesystems AG

livesystems.ch

54

Livesystems AG is a prominent Swiss company specializing in digital out-of-home and online advertising, operating across multiple locations with a medium-sized workforce. The company benefits from being part of Swiss Post, enhancing its market credibility and reach. The website reflects a professional digital presence with multilingual support, modern design, and clear marketing messaging targeting advertisers in Switzerland. Technically, the site is built on WordPress with a robust tech stack including SEO and cookie compliance plugins, ensuring good performance and user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates a mature digital infrastructure and compliance with GDPR, supporting its business credibility and trustworthiness.

E

Entrepreneurship Training

entrepreneurship-training.ch

45

Entrepreneurship Training is a consortium-led educational platform commissioned by Innosuisse, providing free entrepreneurship training modules (Module 1, 2, and 2+) targeted at aspiring entrepreneurs in the central region of Switzerland. The website is professionally designed using WordPress with modern plugins and themes, offering a good user experience and clear navigation. The technical infrastructure includes Google reCAPTCHA for form security and a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced, though some security headers could be improved. Contact information is transparent and linked to reputable academic institutions, enhancing trust. Overall, the website is a credible and well-maintained resource for entrepreneurship education.

B

BST Software

bst.software

50

BST Software is a small, established German technology company specializing in custom software development, web development, and web design services primarily serving the Mittelhessen and Rhein Main regions. The company offers a broad range of services including Microsoft .NET software development, modern web technologies such as Laravel, Vue, Angular, and Node.js, as well as CMS-based web design and web hosting. Their market position is supported by longstanding client relationships and certifications such as Microsoft Partner Network membership. Technically, the website is built on WordPress with modern frameworks and libraries, demonstrating good digital maturity. The site is mobile optimized, SEO friendly, and uses SSL encryption, although some security headers are not explicitly detected. No analytics or tracking scripts were found, aligning with their cookiefree zone policy. Security posture is solid with SSL and no visible vulnerabilities, but the absence of explicit security policies and incident response information suggests room for improvement. WHOIS data is unavailable due to TLD restrictions, but the website content and trust indicators support legitimacy. Overall, the site is professional, secure, and compliant with GDPR, though cookie consent mechanisms are not implemented due to their cookiefree stance. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and considering a cookie consent mechanism to improve compliance and user trust.

F

Fliegerschule Birrfeld

birrfeld.ch

54

Fliegerschule Birrfeld AG operates the Flugplatz Birrfeld, the leading aviation and flight training center in the canton of Aargau, Switzerland. Established in 1937, it serves as a hub for pilots, flight students, and aviation enthusiasts offering motor and glider flight training, maintenance services, and recreational flights. The website reflects a mature business with a strong local market position and a comprehensive range of aviation-related services. Technically, the site is built on WordPress with modern plugins and SEO optimizations, providing a good user experience across devices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent banners. Overall, the site is trustworthy, professional, and well-aligned with its business objectives.

The website represents the Schweizerischer Fachverband für gesundheitsbezogene Soziale Arbeit SAGES, a Swiss professional association focused on social work within healthcare and public health sectors. It serves over 1300 members and 150 institutions, providing advocacy, professional development, and networking opportunities. The organization is well-established nationally with a clear mission and active event calendar. Technically, the site is built on WordPress using the Avada theme and several popular plugins including Contact Form 7 and WPML for multilingual support. It employs Google Analytics and Google Tag Manager for tracking and uses Google reCAPTCHA v3 for form security. The site is mobile-optimized and has good SEO practices but lacks some accessibility features. Security posture is moderate with HTTPS enforced and reCAPTCHA implemented, but no visible security headers or published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy but should improve privacy compliance and security best practices to reduce risk and enhance user trust.

W

Warfare Plugins, Inc.

warfareplugins.com

57

Warfare Plugins, Inc. operates the website warfareplugins.com, offering a specialized WordPress plugin called Social Warfare that enhances social sharing capabilities for content creators and marketers. Established in 2014, the company has positioned itself as a trusted provider with over one million downloads, focusing on performance, customization, and social media optimization. The website demonstrates a mature digital presence with strong SEO, marketing integrations, and a professional design tailored to WordPress users. Technically, the site leverages a modern WordPress stack with multiple plugins for e-commerce, affiliate marketing, and GDPR compliance, ensuring a fast and responsive user experience. Security posture is solid with HTTPS enforced and domain transfer protections, though there is room for improvement in security headers and published policies. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Overall, the website is trustworthy, professional, and safe for general audiences.

M

MD Systems GmbH

digital-storytelling.ch

62

MD Systems GmbH operates the website digital-storytelling.ch, promoting Primer, a Drupal 10-based content management system tailored for organizations, products, and campaigns. The company positions itself as a provider of cost-effective, easy-to-use CMS solutions with a focus on online marketing. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options, including a contact form, email, phone, and physical address in Switzerland. The presence of partner logos and client references such as Paul Scherrer Institut and UNICEF enhances credibility. Technically, the site is built on Drupal 10, leveraging modern web technologies including JavaScript and CSS. It employs cookie compliance mechanisms with opt-in consent and integrates Google Analytics for user tracking. Security posture is solid with HTTPS enforced and anti-bot protections on forms, though it lacks explicit security headers and published security policies. No vulnerabilities or suspicious content were detected. Overall, the website demonstrates a mature digital infrastructure suitable for its business goals. The domain registration data aligns well with the business identity, supporting legitimacy. Privacy compliance is well addressed with GDPR-aligned cookie consent and a comprehensive privacy policy. However, the absence of terms of service and incident response information suggests areas for improvement. The risk profile is low with no critical security issues found. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

A

Accesstech AG

accesstech.ch

49

Accesstech AG is a Swiss-based company specializing in assistive IT solutions for blind and visually impaired individuals. Their website showcases a range of products including mobile and stationary screen readers, scanner reading devices, magnification software, speech output systems, Braille displays, and printers. The company positions itself as a niche provider with a strong focus on accessibility and social inclusion through technology. The website is professionally designed, accessible, and provides clear contact information, reflecting a trustworthy and customer-focused business. Technically, the website is built on WordPress with a modern tech stack including jQuery and accessibility-focused plugins. It demonstrates good mobile optimization and accessibility features such as font size adjustments and contrast toggles. Performance is moderate, and SEO practices are adequately implemented. However, there is room for improvement in security headers and cookie consent mechanisms to enhance compliance and security posture. From a security perspective, the site uses HTTPS with a good SSL configuration and no visible vulnerabilities or exposed sensitive data. The absence of security headers and incident response information suggests potential areas for strengthening security practices. No WAF or blocking mechanisms were detected, allowing full content access. Overall, Accesstech AG's website reflects a solid business presence with a focus on assistive technology, good technical implementation, and a generally strong security posture. Strategic improvements in privacy compliance and security policies would further enhance trust and regulatory adherence.

A

AURAexchange - криптовалютный обменник USDT, RUB

auraexchange.pro

55

AURAexchange.pro is an online cryptocurrency and electronic money exchange platform primarily targeting Russian-speaking users. The service offers a modern, user-friendly interface for exchanging popular cryptocurrencies such as USDT and fiat currencies like RUB, emphasizing reliability, speed, and competitive rates. The platform collaborates with several partners to enhance its service offerings and provides user incentives such as rewards for reviews. Technically, the website is built on WordPress with jQuery and Swiper.js libraries, featuring AJAX-based forms and CAPTCHA protections to secure user interactions. Analytics are conducted via Yandex.Metrika, and a live chat widget is integrated for customer support. Security posture is moderate with HTTPS enforced and CAPTCHA usage, but lacks advanced security headers and published incident response policies. Privacy and cookie policies are absent, representing a compliance gap. Overall, the website is professional and functional with moderate risk, suitable for users seeking cryptocurrency exchange services in the Russian market.

W

welante GmbH

welante.ch

55

welante GmbH operates a specialized web-based course and seminar management software platform targeting organizations requiring efficient event and course administration. The company positions itself as a niche provider with modular SaaS offerings, emphasizing process optimization and cloud deployment. The website reflects a mature digital presence built on WordPress with modern plugins and analytics integrations. Security posture is solid with HTTPS enforcement and anti-clickjacking measures, though explicit security policies and incident response contacts are absent. Privacy compliance is partially addressed via cookie consent mechanisms but lacks a visible privacy policy or terms of service. Overall, the site is professional, trustworthy, and well-structured, supporting the company's credibility in its sector.

G

Gotomo GmbH

gotomo.ch

48

Gotomo GmbH is a specialized UX agency based in Switzerland focusing on mobile app design, UX architecture, and usability testing. The company positions itself as experts in creating intuitive mobile apps that foster loyal user bases. Their website showcases a professional portfolio with client case studies and multimedia content, targeting businesses seeking mobile UX solutions. Technically, the site is built on WordPress with a modern theme and plugins, including Yoast SEO and WPBakery Page Builder, and integrates analytics tools such as Google Analytics and Hotjar. The site is mobile-optimized and demonstrates good accessibility and SEO practices. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks explicit security headers and public security policies. Privacy compliance is limited due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the domain registration aligns well with the business identity, indicating legitimacy and trustworthiness.

C

Code Excursion

code-excursion.ch

51

Code Excursion is a Swiss-based tech education platform specializing in coding courses, workshops, and mentoring, primarily targeting women* and life-long learners. The website positions itself as a community-driven space emphasizing supportive and pressure-free learning environments. The business model revolves around educational services and coaching, with a clear focus on inclusivity and empowerment in technology.

W

Wir lernen weiter

wir-lernen-weiter.ch

52

Wir lernen weiter is a Swiss non-profit organization dedicated to bridging the digital divide by collecting, refurbishing, and distributing laptops to individuals affected by poverty across Switzerland. The organization maintains a professional online presence with a multilingual WordPress website, comprehensive privacy and cookie policies, and active social media engagement. Their business model focuses on social impact through technology redistribution and community partnerships. Technically, the website leverages modern WordPress plugins and frameworks, ensuring a good user experience and moderate performance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site reflects a trustworthy and credible non-profit entity with good privacy compliance and user engagement features.

S

Schweizerischer Blinden- und Sehbehindertenverband SBV

sbv-fsa.ch

65

The Schweizerischer Blinden- und Sehbehindertenverband SBV is the largest self-help organization for blind and visually impaired individuals in Switzerland, representing approximately 400,000 affected people. The organization is nationally structured and offers diverse support services to enable a self-determined life for its members. It collaborates closely with partners and enjoys broad patronage support. The website reflects a mature digital presence built on WordPress with modern technologies such as Bootstrap, jQuery, and integration of marketing and analytics tools like Google Tag Manager, LinkedIn Insight, and Sendinblue/Brevo. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms.

A

axes4

axes4.com

67

axes4 is a specialized technology company focused on providing software and services that enable organizations to create accessible PDF documents easily and efficiently. Their product suite includes tools for converting Word and PowerPoint documents into accessible PDFs, accessibility checking, and automation APIs. The company targets organizations with document accessibility needs, including government and educational institutions, as evidenced by their customer logos. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, axes4 leverages modern open-source technologies such as the Neos CMS and the Flow PHP framework, ensuring a robust and scalable platform. They employ Matomo analytics with user consent mechanisms, demonstrating a commitment to privacy. The website is served over HTTPS with no visible security vulnerabilities in the content, though explicit security headers could be improved. From a security standpoint, axes4 implements Google reCAPTCHA to mitigate spam and provides clear privacy and terms of service documentation. However, the absence of WHOIS registration details and lack of explicit incident response contacts or vulnerability disclosure policies slightly reduce the overall security transparency. No critical vulnerabilities or exposed sensitive data were detected. Overall, axes4 presents a trustworthy and professional online presence with a strong focus on accessibility and compliance. The main risk lies in the lack of publicly available WHOIS data, which could be due to privacy protection or recent registration. Strategic improvements in security headers and incident response transparency would further enhance their security posture.

A

Apfelschule

apfelschule.ch

51

Apfelschule is a Swiss non-profit educational organization dedicated to empowering blind and visually impaired individuals by teaching them how to use smartphones and modern technology effectively. Their market position is specialized, focusing on accessibility and inclusion through a variety of courses and training programs. The website reflects a well-structured educational platform with clear navigation and multilingual support through partner sites. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics and reCAPTCHA for user tracking and security. The security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and a cookie consent mechanism. Privacy compliance is good with a comprehensive privacy policy, but cookie consent is missing. Overall, the site is trustworthy, professional, and serves its target audience well.

K

Kaufmännischer Verband Zürich

wirkaufleute.ch

43

Wir Kaufleute is a professional blog operated by the Kaufmännischer Verband Zürich, a Swiss commercial association focused on education and career development in the commercial sector. The website offers well-structured, relevant content targeting apprentices, students, and commercial professionals, supported by a consistent brand identity and active social media presence. Technically, the site is built on WordPress with modern libraries and plugins, including Google Analytics for user insights. Security posture is strong with HTTPS and security headers, though privacy compliance could be improved with explicit cookie consent and GDPR details. Overall, the site is trustworthy and professionally maintained, serving as a valuable resource for its audience.

C

Обменный пункт электронных валют

coin-bank.co

50

Coin-bank.co is a Russian-language online electronic currency exchange platform operating since 2016. It offers automated, anonymous, and secure exchange services for a wide range of cryptocurrencies and fiat currencies, targeting primarily Russian-speaking users interested in crypto and electronic payments. The platform supports multiple payment systems and banking options, providing discounts, a partner program, and investment opportunities in the exchange service. Technically, the site is built on WordPress with jQuery and uses HTTPS with CAPTCHA protections on forms, indicating a moderate level of digital maturity. However, it lacks some advanced security headers and cookie consent mechanisms, which are important for compliance and security. The security posture is adequate but could be improved with better header implementation and incident response transparency. Overall, the site is trustworthy with good business credibility, supported by user reviews and partnerships with reputable review and monitoring platforms.

Perfect-change.com is an automated online currency exchange service specializing in cryptocurrencies such as Bitcoin, Litecoin, Ethereum, and stablecoins like Tether (TRC20, ERC20, BEP20). The platform also supports fiat currency exchanges via bank cards and transfers, targeting primarily Russian-speaking users. Founded in 2017, the service emphasizes fast, anonymous, and secure transactions with a flexible discount and partner program to enhance user benefits. The website is built on WordPress, leveraging common web technologies like jQuery and Bootstrap for responsive design and user experience. Hosting is provided by Beget, a known hosting provider, with domain registration through NameCheap, Inc. The domain is well-established with a long expiry date and clientTransferProhibited status, indicating stable ownership. Security measures include SSL encryption and captcha protections on forms, though some advanced security headers and DNSSEC are not implemented. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Contact information is limited to web forms without direct emails or phone numbers. The site integrates partner and review platforms to build trust and credibility. Overall, the platform presents a professional and functional service with moderate technical and security maturity.

B

BigBanK

bigbank.top

52

BigBanK operates as an electronic currency exchange service primarily targeting Russian-speaking users with English language support. The website offers automated currency exchange services, user account management including registration and login, and wallet management features. The business appears to be a small-sized entity founded in 2022, operating in the finance sector with a focus on electronic and cryptocurrency exchanges. The market position is niche, serving users needing currency exchange services with a digital-first approach. Technically, the website is built on WordPress with a reliance on jQuery libraries and integrates third-party services such as Google Fonts, Yandex Metrika, Google Analytics, and JivoSite for live chat support. The site is mobile-optimized and moderately performant but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and does not provide explicit incident response or vulnerability disclosure information. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Overall, the website is functional and moderately trustworthy but would benefit from enhanced security and privacy practices.

R

Rete dei Numeri Pari

numeripari.org

60

Rete dei Numeri Pari is a small Italian non-profit organization focused on social activism, peace, and anti-war initiatives. Their website serves as a platform for disseminating information, promoting social campaigns, and publishing documents and analyses related to their agenda. The site targets Italian-speaking activists and the general public interested in social justice and peace. Technically, the website is built on WordPress using popular plugins such as Elementor and Smart Slider 3, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and explicit incident response policies. Privacy compliance is supported by accessible privacy and cookie policies, though cookie consent mechanisms are not implemented. Overall, the website is professional and trustworthy with moderate business credibility and good content quality.

J

John Wolfe Compton

johnwolfecompton.com

67

John Wolfe Compton is a small, professional creative agency based in Encinitas, California, specializing in branding, marketing, advertising, and digital content creation for small to medium sized businesses primarily on the West Coast. The company blends big-agency expertise with indie pricing, offering a comprehensive suite of services including strategy, content creation, social media marketing, SEO/SEM, and advertising. Their market position is that of a niche, trusted agency with a strong portfolio and verified client reviews. Technically, the website is built on WordPress using the Salient theme and WPBakery page builder, integrating multiple analytics and marketing tools such as Google Analytics, Matomo, Mailchimp, and Klaviyo. The site is mobile optimized and performs moderately well, though some accessibility features are basic. Security posture is good with HTTPS and reCAPTCHA implemented, but lacks DNSSEC and security headers, and no explicit security or privacy policies are published. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

C

Construction Safety Association of Manitoba

constructionsafety.ca

46

The Construction Safety Association of Manitoba (CSAM) operates as a trusted regional non-profit organization providing comprehensive safety and health training, certification programs such as COR® and SECOR®, consulting services, and a wide range of safety resources targeted at the construction industry in Manitoba, Canada. Their market position is strong within the regional construction safety sector, supported by professional content and active social media engagement. The website reflects a well-structured digital presence with clear navigation and relevant content for their audience. Technically, the website is built on WordPress using modern frameworks like Bootstrap and Genesis, integrating various plugins for enhanced functionality including Google Analytics, Hotjar, and Presto Player. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks important security headers and cookie consent mechanisms, which are critical for compliance and protection. Security-wise, the site does not expose sensitive data and uses standard tracking tools, but the absence of a cookie consent banner and security policies indicates gaps in privacy compliance. The missing WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and business information appear professional and trustworthy. Overall, the risk is moderate with recommendations to enhance security headers, privacy compliance, and verify domain registration details. Strategically, CSAM should focus on improving privacy compliance by implementing cookie consent and publishing security and incident response policies. Enhancing security headers will strengthen defense against common web attacks. Verifying and updating WHOIS information will improve trustworthiness and domain legitimacy. These steps will solidify their digital trust and compliance posture while maintaining their leadership in construction safety training in Manitoba.

N

NetUSE AG

netuse.de

74

NetUSE AG is a well-established German IT service provider specializing in infrastructure, network, and IT security solutions since 1992. The company offers a broad range of services including managed services, advanced security, consulting, assessments, support, and cloud/datacenter solutions. Their market position is strong with over 30 years of experience, a loyal customer base, and a focus on personalized service. The website reflects a professional and trustworthy brand with consistent messaging and clear navigation. Technically, the website is built on WordPress with modern optimizations such as CSS and JS minification, cookie consent management via Borlabs Cookie, and privacy-respecting analytics through Matomo. Hosting is supported by Akamai CDN infrastructure, ensuring good performance and availability. The site is mobile-optimized and accessible, with proper SEO metadata and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS, uses reCAPTCHA for form protection, and manages cookie consent effectively. However, explicit security headers are not detected, and there is no publicly available security policy or incident response information. No vulnerabilities or suspicious content were found, indicating a solid security posture but with room for improvement in transparency and header hardening. Overall, the risk profile is low with a high trustworthiness rating. The company demonstrates compliance with GDPR and provides comprehensive privacy and cookie policies. Strategic recommendations include adding security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure program to further enhance trust and security maturity.

2

24kurs

24kurs.com

47

24kurs.com is a Russian-language online service specializing in monitoring currency exchange rates, particularly for cryptocurrencies and electronic money. The platform provides users with tools such as exchange rate tables, calculators, notifications, and the ability to add exchange points. It targets individuals seeking the best exchange rates and reliable exchangers, primarily within the Russian market. The business model revolves around aggregating exchange data and partnering with exchange services to offer competitive rates and bonuses. Technically, the website is built on WordPress, utilizing jQuery and several JavaScript plugins to deliver interactive features. Hosting is provided by REG.RU LLC, a reputable Russian registrar and hosting provider. Security posture is moderate, with HTTPS enabled but lacking advanced security headers and DNSSEC. Privacy compliance is limited, with a basic privacy policy present but no cookie consent mechanism or GDPR indicators. Contact information is minimal, relying on a contact form without direct emails or phone numbers. Overall, the site is functional and moderately professional but could improve in security and privacy transparency.