Security Directory

E

expoya GmbH

expoya.com

59

Expoya GmbH operates a specialized digital marketing platform focused on enhancing online visibility through AI-powered SEO tools, geo-optimization, and automated landing page creation. The company targets e-commerce shops, regional service providers, and businesses seeking to reduce dependency on paid ads by improving organic search rankings. Their platform integrates modern web technologies such as React and Next.js, ensuring a responsive and performant user experience. The website demonstrates strong privacy compliance with clear cookie consent mechanisms and comprehensive privacy policies. However, the absence of WHOIS domain registration data introduces some uncertainty regarding domain legitimacy. Security posture is generally strong with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are lacking. Overall, Expoya presents as a professional and trustworthy service provider with room for improvement in transparency and security disclosures.

A

Awelty

awelty.fr

50

Awelty is a well-established French web agency based in Amiens, specializing in digital solutions including website creation, e-commerce, custom software development, and AI integration. With over 20 years of experience, the company positions itself as a regional leader in Hauts de France, offering comprehensive digital transformation services to businesses. Their portfolio includes diverse projects such as AI-powered virtual assistants, mobile applications, and SaaS platforms, demonstrating technical maturity and innovation. Technically, the website employs a modern technology stack including PHP Symfony, Flutter, Firebase, and cloud services from Google Cloud and AWS. The site is mobile-optimized, uses Bootstrap 4 for responsive design, and integrates multiple analytics and marketing tools such as Google Analytics, Matomo, and Facebook Pixel. The CMS appears proprietary or custom-built by Awelty, supporting their specialized service offerings. From a security perspective, the site enforces HTTPS and uses secure external scripts. However, some security headers like Content-Security-Policy and X-Frame-Options are missing, which could be improved. No WHOIS registrant data is available, indicating privacy protection, which is common and justified for this type of business. The site lacks explicit privacy and security policies, which is a compliance gap. Overall, Awelty presents a professional, trustworthy digital presence with strong business credibility and technical implementation. The main risks relate to privacy policy transparency and security header enhancements. Strategic improvements in these areas would strengthen compliance and security posture.

A

Agenda Culturel

agendaculturel.fr

61

Agenda Culturel is a French media platform specializing in aggregating cultural event information such as concerts, theater, festivals, and exhibitions across France. It serves both general audiences seeking cultural outings and professionals in the cultural sector who manage event programming. The platform offers a comprehensive event listing service, a professional announcement space, and a cultural news magazine, supported by a mobile application. Technically, the website leverages modern frameworks including Symfony UX and Stimulus JS, with integration of analytics and advertising services such as Matomo and Google Adsense. The site demonstrates good design, mobile optimization, and accessibility, with a strong focus on GDPR compliance through an embedded consent management platform. Security posture is solid with HTTPS and security headers in place, though explicit security policies and incident response contacts are not publicly disclosed. WHOIS data is unavailable, which slightly impacts trust but the overall professional presentation and compliance measures support legitimacy. Strategic recommendations include publishing security and incident response policies and enhancing direct contact information availability.

E

E-confiance

e-confiance.fr

57

E-confiance is a French SaaS company specializing in providing a comprehensive platform for collecting, managing, and publishing authentic customer reviews online. Their service targets businesses seeking to enhance their reputation and increase sales by leveraging transparent and verified customer feedback. Positioned as a trusted third-party review platform and an official Google reviews partner, E-confiance offers integration tools, analytics, and widgets to display reviews across websites and communication channels. Technically, the website is built on the e-monsite CMS platform, utilizing modern web technologies such as Bootstrap 4, jQuery, Google Fonts, and Google Tag Manager. The site is mobile-optimized with good SEO practices and includes a cookie consent mechanism compliant with GDPR. The login system uses email link authentication, enhancing security by avoiding password storage. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks explicit HTTP security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data due to privacy protection slightly reduces transparency but is common for commercial websites. Overall, E-confiance presents a professional, trustworthy, and compliant online presence with a solid technical foundation. Strategic improvements in security headers and incident response transparency would further enhance their security posture and trustworthiness.

M

Madate

madate.fr

57

Madate is a French SaaS company offering a comprehensive online appointment scheduling software tailored for various professional sectors such as beauty, medical, sports, education, and public services. The platform enables businesses to optimize their scheduling, reduce no-shows through automated reminders and prepayments, and integrate with popular tools like Google Calendar and Stripe for payments. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options including phone and login portals for users. Technically, the site leverages modern web technologies including Bootstrap 4, jQuery, and Google Analytics, hosted on the e-monsite CMS platform. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, but the site’s professionalism and business consistency support its legitimacy. Overall, Madate presents a trustworthy and functional online booking solution with room for enhanced security transparency.

W

Le meilleur logiciel de gestion d’entreprise 2025 en France

wuro.fr

57

Wuro.fr is a French SaaS platform offering a comprehensive online business management and invoicing software targeted primarily at French SMEs, entrepreneurs, and associations. The website positions itself as the leading business management software in France for 2025, providing tools for invoicing, commercial management, HR management, and performance analytics. The platform supports multiple company types and emphasizes ease of use and compliance with French tax laws. Technically, the site uses modern web technologies including Bootstrap 4, jQuery, and integrates analytics tools such as Google Analytics, Facebook Pixel, and Ahrefs Analytics. The site is mobile-optimized and uses HTTPS with valid SSL certificates, ensuring secure communications. However, no explicit cookie consent mechanism or privacy banner was detected, which may pose compliance risks under GDPR. The WHOIS data for the domain is missing, which reduces trustworthiness from a domain registration perspective and warrants further verification. Overall, the website is professional, content-rich, and trustworthy from a business and technical standpoint, but could improve privacy compliance and security header implementation.

S

SIF - Scuola in fattoria

scuolainfattoria.ch

46

Scuola in fattoria is a Swiss educational organization providing farm-based learning experiences primarily targeting children, families, and educators interested in agriculture and nature. The website is professionally designed using WordPress, featuring modern web technologies such as Flickity for carousels and Google Fonts for typography. The site is mobile optimized and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and secure forms, but lacks advanced security headers and formal privacy or cookie policies. No vulnerability disclosure or incident response information is provided, indicating room for improvement in security transparency. Overall, the website is trustworthy and suitable for its educational purpose, but should enhance privacy compliance and security best practices to improve user trust and regulatory adherence.

L

L’école à la ferme (EàF)

ecolealaferme.ch

49

L’école à la ferme (EàF) is a Swiss educational initiative focused on providing experiential learning opportunities for students at farms. The website presents a niche educational service aimed at schools and educators interested in practical farm-based learning. The business operates primarily in the education sector within Switzerland and appears to be a small-sized organization. Technically, the website is built on WordPress, utilizing standard web technologies such as Google Fonts and Flickity for UI components. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security posture. No blocking or WAF challenges were detected, allowing full content access. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

E

Einwohnerverein Gottlieben

einwohnerverein-gottlieben.ch

53

Einwohnerverein Gottlieben is a local non-profit community association based in Gottlieben, Switzerland. The website serves as an information hub for residents, providing news, event calendars, gardening group details, and general information about the community. The site targets local residents and community members, focusing on engagement and information dissemination. The business model is typical for a community association, relying on volunteer or membership support rather than commercial revenue streams. The website is well-branded and consistent with the organization's identity.

B

Bad Egelsee

bad-egelsee.ch

60

Bad Egelsee is a public family and sports swimming facility located in Kreuzlingen, Switzerland. It offers a variety of aquatic and wellness services including a 25-meter sport pool, family pools, sauna, and steam baths, targeting families, sports enthusiasts, and health-conscious visitors. The website is professionally designed with clear navigation and content relevant to its audience. Technically, the site uses modern JavaScript frameworks such as Alpine.js and integrates Matomo for privacy-focused analytics. The site is mobile optimized and includes a cookie consent mechanism, reflecting good privacy practices. Security posture is solid with HTTPS enforced, though it lacks some advanced security headers and formal security policies. Overall, the domain registration uses privacy protection, which is justified for this type of public leisure business. The site is trustworthy and well-maintained, with no indications of malicious activity or content blocking.

R

Regionalplanungsgruppe Kreuzlingen

regiokreuzlingen.ch

51

Regio Kreuzlingen is a regional government planning group serving the Kreuzlingen district in Switzerland, coordinating development and infrastructure across 14 municipalities with approximately 52,000 residents. The website provides information about regional initiatives including agglomeration programs and a bike rental system called Regivelo. The organization positions itself as a key regional planning authority with a focus on sustainable development and inter-municipal cooperation. Technically, the website is built on WordPress using the Divi theme, enhanced with SEO and newsletter plugins, and implements standard privacy and cookie consent mechanisms. Security posture is solid with HTTPS and security headers, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-structured, serving its public sector audience effectively.

G

GARANT Türen und Zargen GmbH

garant.de

57

GARANT Türen und Zargen GmbH is a German manufacturer specializing in interior and functional doors, offering a wide range of products including premium door edges and digital configurator tools. The company targets architects, planners, carpenters, dealers, and end customers, positioning itself as an established player within the manufacturing sector under the Arbonia Group umbrella. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates analytics and social media effectively. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policies or incident response information. Overall, the site is compliant with GDPR and provides comprehensive contact details, supporting business credibility and trust.

C

Convergence Media

convergencemedia.fr

57

Convergence Media is a French digital communication and marketing agency specializing in serving SMEs, artisans, independents, and liberal professions. With over 15 years of experience, the agency offers a comprehensive suite of services including digital strategy, SEO, social media management, editorial content, video production, and print media. Their market position is that of a trusted, client-focused agency with a multi-lever approach to enhancing client visibility and brand reputation. The website reflects a professional and consistent brand image with clear service offerings and client testimonials, indicating a solid reputation in their sector. Technically, the website is built on CMS Made Simple and leverages modern web technologies such as Bootstrap, jQuery, Vimeo API, and Matomo analytics. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is strong with HTTPS enforced and secure form handling, though some security headers are missing and no explicit security policy or incident response information is published. Overall, the security posture is good with no visible vulnerabilities or exposed sensitive data. Privacy compliance is mostly addressed with a clear privacy policy and GDPR references, but lacks a cookie consent mechanism. The WHOIS data is unavailable, which slightly reduces trust but the professional presentation and contact transparency mitigate concerns. Strategically, the agency should enhance security headers, implement cookie consent, and publish security and incident response policies to improve compliance and trust. Regular audits of third-party scripts and continued focus on privacy will further strengthen their security and compliance stance.

R

RWD Schlatter AG

rwdschlatter.ch

59

RWD Schlatter AG is a well-established Swiss manufacturer specializing in custom design and function doors, producing approximately 80,000 wooden doors annually. With over 140 years of experience and a strong market position as a leading Swiss provider, the company offers a broad range of products including door blanks, door elements, and accessories, emphasizing security features such as fire, sound, and burglary protection. The website reflects a mature digital presence built on TYPO3 CMS, featuring modern technologies and compliance with privacy regulations through a comprehensive cookie consent mechanism. Social media integration and a dedicated service portal enhance customer engagement and support. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. Overall, the domain registration and WHOIS data align well with the company's claims, supporting legitimacy and trustworthiness.

Verbandsgemeinde Prüm operates as a local government administrative body in Germany, providing a comprehensive range of public services and information to residents and visitors within its jurisdiction. The website serves as an official portal offering news, event updates, citizen services, and tourism information, positioning itself as a trusted regional authority. The target audience primarily includes local citizens, businesses, and tourists seeking official information and services. The business model is centered on governmental public service and community engagement.

R

Région capitale suisse

regioncapitalesuisse.ch

50

Région capitale suisse is a regional government association representing five Swiss cantons and multiple municipalities, focused on strengthening the region as a political, economic, and innovative living space. The website presents a clear and professional digital presence built on TYPO3 CMS, with bilingual support and a focus on regional development themes such as transport, health, and smart infrastructure. The technical infrastructure is moderate with common libraries and Google Analytics implemented with privacy considerations. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security policies or incident response information. Overall, the site is trustworthy and well-aligned with its governmental mission.

L

Link Arkitektur A/S

linkkompass.ai

66

Link Arkitektur A/S operates the website linkkompass.ai, offering a digital sustainability dialogue tool called LINK Kompass® aimed at guiding projects and businesses through environmental and social sustainability requirements. The company is positioned as a leading Scandinavian architectural business with a focus on strategic sustainability consulting. The website is built on Drupal 10, uses Cookiebot for GDPR-compliant cookie consent, and supports multiple languages including Norwegian Bokmål. The technical infrastructure is modern and well-implemented, with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website reflects a professional and trustworthy business presence in the sustainability consulting sector.

D

Dr.Dünner – Naturpräparate & Arzneimittel aus der Schweiz

drduenner.com

49

Dr.Dünner is a Swiss-based company specializing in natural supplements and pharmaceutical products, combining traditional herbal knowledge with modern scientific research. The company positions itself as a trusted expert in natural health products, targeting consumers seeking high-quality, scientifically founded wellness solutions. The website reflects a medium-sized business with consistent branding and a professional online presence, including social media engagement. Technically, the site is built on WordPress using popular themes and plugins, optimized for SEO and mobile devices, with moderate performance. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks some security headers and explicit privacy policies. WHOIS data is missing or unavailable, which slightly impacts trust but does not negate the professional appearance and content quality. Overall, the site is safe, well-designed, and credible for its industry.

G

Galliker Transport AG

galliker.com

76

Galliker Transport AG is a well-established Swiss transport and logistics company offering a wide range of national and international services including car, cargo, food, frigo, and healthcare logistics. The company positions itself as a market leader in food logistics within Switzerland and operates a large fleet and multiple locations across several countries. The website reflects a mature digital presence with multi-language support and comprehensive service descriptions. Technically, the site uses modern tracking and analytics tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, integrated with a responsive design and good SEO practices. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policy and incident response information are not published. The WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration transparency, but the professional website and business information mitigate this risk. Overall, the site is trustworthy and professionally managed, serving a B2B audience in the transportation sector.

The website www.ottos.ch is currently inaccessible due to a Cloudflare security challenge page that blocks access to the actual content. As a result, no business information, contact details, or policy documents are available for review. The technical infrastructure indicates the use of Cloudflare's Turnstile captcha for bot mitigation, but no further technology stack or CMS details can be determined. Security posture cannot be assessed due to lack of accessible content and headers. Overall, the site is effectively blocked from analysis, limiting any meaningful security or compliance evaluation.

O

Orde van Architecten - Vlaamse Raad

architect.be

63

The Orde van Architecten - Vlaamse Raad website serves as the official platform for the Flemish Council of Architects, providing information, advice, and regulatory oversight for architects, builders, and trainees in Belgium. The site targets a professional audience including architects, trainees, and foreign architects seeking to practice in Belgium. It positions itself as a key government-related professional body with a clear mission to support and regulate the architectural profession in the Flemish region. The website content is well-structured, professionally presented, and accessible, reflecting the organization's authoritative role. Technically, the website is built on Drupal 11, leveraging modern web technologies such as SVG graphics and JavaScript modules. The site is mobile-optimized and includes accessibility certification (AnySurfer label), indicating a mature digital infrastructure focused on usability and compliance. While performance is moderate, the technical stack is contemporary and well-maintained. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, demonstrating compliance with privacy regulations such as GDPR. However, explicit security headers and incident response policies are not evident, and WHOIS data is unavailable or blocked, which slightly impacts trust. No vulnerabilities or tracking technologies were detected, and no contact information for security incidents is published. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements include enhancing security headers, publishing security policies, and improving WHOIS transparency to further strengthen trust and security posture.

U

Universitas Trunajaya Pelayanan Prima untuk Kemajuan Pendidikan dan Masyarakat

trunajaya.id

54

Universitas Trunajaya is an educational institution focused on providing quality education and public service to foster an excellent generation contributing to national and community progress. The website presents itself as a regional educational and governmental service platform in Indonesia, targeting a general audience with educational content and news updates. The business model centers on education and public service, with a small organizational size and recent establishment indicated by domain registration data. Technically, the website is built on WordPress CMS with common plugins such as Yoast SEO and uses Cloudflare for DNS and hosting infrastructure. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO practices. However, there is room for improvement in security headers and privacy compliance. From a security perspective, the site uses HTTPS and Cloudflare DNS but lacks DNSSEC and visible security headers. No privacy or cookie policies are published, and no incident response or vulnerability disclosure information is available. The domain WHOIS data shows inconsistencies with a very recent registration date and registrant details that do not clearly match the institution, which may affect trustworthiness. Overall, the website is functional and professional but requires enhancements in privacy compliance, security best practices, and clearer business legitimacy indicators to improve trust and security posture.

T

The Ogoh Ogoh Museum Indonesia

theogohogohmuseum.id

56

The Ogoh Ogoh Museum Indonesia is a cultural institution dedicated to preserving and educating about the Balinese Nyepi tradition through its collection of Ogoh-Ogoh statues. The website serves as an informational platform targeting a general audience interested in Balinese culture and heritage. The museum operates as a small entity within the government or non-profit sector, with a recent founding date consistent with the domain registration in 2025. Technically, the website is built on WordPress with common plugins like Yoast SEO and uses Cloudflare for DNS services. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features. Security posture is basic with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies, and no contact information or incident response channels are provided. Overall, the website is functional and professional but would benefit from enhanced security and compliance measures to improve trust and user confidence.

I

Indeks Daya Saing Daerah Berkelanjutan

idsdb.id

54

IDSDB Indonesia operates as an independent institution providing high-quality data and in-depth analysis to support effective decision-making for government, academia, and private sectors in Indonesia. The website presents itself as a strategic partner focused on sustainable regional competitiveness. Technically, the site is built on WordPress with modern SEO practices using Yoast SEO and jQuery, hosted with DNS managed by Cloudflare. The site is mobile-optimized and well-structured, offering good user experience and content relevance. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers, and no privacy or cookie policies are present, indicating compliance gaps. The domain registration data shows inconsistencies with a future creation date and a registrant organization that does not directly match the website branding, which slightly reduces trust. Overall, the site is functional and professional but requires improvements in security and compliance documentation.

H

Harabu Indonesia

harabu.id

56

Harabu Indonesia is a technology company specializing in innovative digital solutions aimed at supporting business and societal transformation in the era of Industry 4.0. The website presents a professional and consistent brand image, targeting businesses and government institutions in Indonesia. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses Cloudflare DNS services. The site is mobile-optimized and SEO-friendly but lacks visible security headers and privacy policies. Security posture is moderate with HTTPS enabled but no DNSSEC or advanced security headers. WHOIS data shows some inconsistencies, including a future domain creation date and registrant being the registrar company, which slightly reduces trust. Overall, the site is accessible, safe, and provides relevant content but would benefit from enhanced privacy and security disclosures.

D

DPC Partai Demokrat Bantuan untuk Korban Bencana

dpcdemokratpidie.id

58

The website dpcdemokratpidie.id represents the local branch of the Democratic Party in Pidie, Indonesia, focusing on humanitarian aid for disaster victims. It provides information about aid distribution and community support, positioning itself as a responsive political entity in the region. The site is built on WordPress with a standard theme and uses Cloudflare for DNS and CDN services. The technical infrastructure is modern and supports mobile responsiveness and SEO best practices. Security posture is adequate with HTTPS and domain transfer lock enabled, but lacks DNSSEC and advanced security headers. Privacy and cookie policies are absent, indicating compliance gaps. No direct contact information or incident response details are provided, which may affect user trust and regulatory compliance. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and contact transparency.

P

Portal Harian OKU Selatan – Aktual, Lokal, dan Kritis

harianokuselatan.id

56

Portal Harian OKU Selatan is a local Indonesian news portal focused on delivering current and critical news with a local perspective. The website primarily serves the community interested in regional news and social issues, providing regularly updated articles about social services and government activities. The site is built on WordPress and uses Cloudflare DNS services, indicating a modern but basic technical infrastructure. The content quality is good with clear navigation and mobile optimization, but lacks formal privacy, cookie, and terms of service policies, which impacts compliance and trust. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. The domain WHOIS data shows an unusual future creation date, which may be a data anomaly but should be monitored. Overall, the site is accessible without WAF or blocking mechanisms and presents a professional local news media presence.

V

Villa Bukit Hambalang Lokasi Outbound Camping Favorit di Sentul

villabukithambalang.id

55

Villa Bukit Hambalang is a hospitality business specializing in outdoor activities such as outbound events, camping, and gatherings located in Sentul, Bogor, Indonesia. The website positions itself as a favored location for companies, schools, communities, and families seeking nature-based event experiences. The business offers comprehensive facilities including camping areas, swimming pools, multipurpose halls, and large outdoor fields. The site is built on WordPress with SEO optimization via Yoast plugin and uses common web technologies like jQuery and FontAwesome. Hosting and DNS services are managed through Cloudflare, enhancing performance and security. However, the domain WHOIS data shows an unusual future creation date, which may indicate a newly launched or test site. No privacy, cookie, or terms of service policies are present, and no direct contact information is provided on the homepage, which may affect user trust and compliance.

B

Bapera Kepulauan Riau

bapera-kepulauanriau.id

56

Bapera Kepulauan Riau is a youth organization active in the Kepulauan Riau region of Indonesia, focusing on youth development, social activities, and community service. It operates as part of the larger Barisan Pemuda Nusantara (Bapera) movement, aiming to foster nationalism, creativity, and environmental awareness among young people. The website serves as an informational platform with articles related to environmental and governmental agencies across Indonesia, reflecting a commitment to community engagement and education. Technically, the site is built on WordPress with standard plugins like Yoast SEO and uses Cloudflare for DNS services. The site is moderately optimized for performance and mobile use, with good SEO practices but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but missing key security headers and DNSSEC. No privacy or cookie policies are present, indicating compliance gaps. The domain WHOIS data shows inconsistencies with a future creation date, which raises questions about registration legitimacy. Overall, the site is functional and content-rich but requires improvements in security, privacy compliance, and domain registration transparency.

D

Disciples-Escoffier Indonesia

disciples-escoffier.id

52

Disciples-Escoffier Indonesia is a professional culinary organization dedicated to developing the skills of chefs and gastronomic practitioners in Indonesia. The organization focuses on education, training, and hosting the Young Talents Escoffier competition to promote young Indonesian culinary talents nationally and internationally while preserving the culinary heritage of Auguste Escoffier. The website is built on WordPress with a modern tech stack including Bootstrap and Google Fonts, hosted behind Cloudflare DNS. The site is accessible and well-structured with good SEO optimization but lacks explicit privacy, cookie, and terms of service policies. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. The domain WHOIS data shows inconsistencies with a future creation date, which raises concerns about registration legitimacy. Overall, the website is professional and safe for general audiences but requires improvements in privacy compliance and security best practices.

A

Awaluddin Muuri Indonesia

awaluddinmuuri.id

51

The website awaluddinmuuri.id serves as an official informational platform dedicated to Awaluddin Muuri, an Indonesian bureaucrat. It provides detailed biographical data, educational background from the Institut Pemerintahan Dalam Negeri (IPDN), and career highlights including strategic positions such as Penjabat Bupati Cilacap. The site targets a general audience interested in government and public service information within Indonesia. Technically, the site is built on WordPress with common plugins like Yoast SEO, jQuery, and Bootstrap, hosted behind Cloudflare DNS. The site demonstrates good SEO practices and mobile optimization but lacks advanced security headers and DNSSEC. Security posture is moderate with HTTPS enabled but missing some best practices. Privacy compliance is weak due to the absence of privacy and cookie policies. No contact or incident response information is provided, limiting user trust and compliance. Overall, the site is functional, informative, and professionally presented but requires improvements in privacy and security policies to enhance trust and compliance.

D

Dokter Spesialis Anak

pasienanak.id

49

The website pasienanak.id represents a healthcare service specializing in pediatric care, offering professional and attentive medical services focused on child growth and development. The business targets parents and families in Indonesia seeking specialized pediatric healthcare. The website is built on WordPress with a modern tech stack including Bootstrap and jQuery, hosted behind Cloudflare DNS but without DNSSEC enabled. The site is well-structured, mobile-optimized, and SEO-friendly but lacks critical privacy and cookie policies, as well as explicit contact information. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. The domain is newly registered in mid-2025, which is somewhat inconsistent with the volume of content and apparent business maturity.

K

Kult Byrå

kult.design

58

Kult Byrå is a small, Oslo-based technology and design agency specializing in creating visual identities, websites, and smart digital solutions for innovative clients. The website is professionally designed using modern technologies such as Astro, Preact, and Sanity CMS, reflecting a high level of digital maturity and performance. The site is mobile-optimized and accessible, with good SEO practices in place. Security posture is solid with HTTPS enabled and domain transfer protections, though DNSSEC is not enabled and security headers are missing. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the website presents a trustworthy and professional image but would benefit from enhanced privacy and security disclosures.

H

Holzforschung Austria

fenstereinbau.info

54

fenstereinbau.info is an informational website operated as a service by Holzforschung Austria, providing planning aids and tested materials for window installation according to Austrian standards (ÖNORM B 5320). The site targets professionals in the construction and window installation sectors in Austria and Germany, offering access to standards, guidelines, and a free planning tool. Technically, the website is built on the TYPO3 CMS platform, with compressed CSS and JavaScript assets, and is accessible via HTTPS. The site demonstrates good content quality, clear navigation, and mobile optimization, though accessibility features could be improved. Security posture is moderate, with HTTPS usage but lacking explicit security headers and cookie consent mechanisms. No forms or contact details are directly available on the main page, limiting direct user engagement. Overall, the domain registration is privacy protected but consistent with the business purpose, and the website maintains strong trust indicators through affiliations and certifications.

H

Holzforschung Austria

infoholz.at

53

infoholz.at is a specialized, free online question and information service targeted at professional wood users such as architects, planners, and contractors, primarily in Austria. The service is operated by Holzforschung Austria, a recognized expert organization in the wood research sector. The website provides an extensive database of answered questions and offers personalized expert responses within approximately 2-3 weeks. The business model focuses on providing professional, authoritative information without charge, positioning itself as a niche knowledge resource within the Austrian wood industry. Technically, the website is built on the TYPO3 content management system, leveraging extensions such as Powermail for form handling and Google Custom Search Engine for internal search functionality. The site uses jQuery and standard web technologies, with moderate performance and basic mobile optimization. SEO practices are adequately implemented with proper meta tags and structured navigation. However, some modern security headers are missing, and no explicit cookie consent mechanism is present. From a security perspective, the site enforces HTTPS and employs client-side form validation to protect data integrity. There is no evidence of advanced security policies or incident response contacts published. The absence of security.txt and vulnerability disclosure pages suggests limited formal security communication. Overall, the security posture is moderate but could be improved by adding security headers and formal policies. The website is trustworthy and professional, with clear business information and consistent branding. Privacy and terms of service pages are present, indicating compliance with basic GDPR requirements. No adult or questionable content is present, making it safe for general audiences. The domain WHOIS data aligns well with the website's claims, supporting legitimacy. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing formal security and incident response policies to strengthen compliance and trust.

H

Holzforschung Austria - Österreichische Gesellschaft für Holzforschung

holzforschung.at

51

Holzforschung Austria is a well-established Austrian research and testing institute specializing in the wood industry. Founded in 1948, it offers comprehensive services including research and development, product testing, certification, inspection, expert reports, and knowledge transfer through seminars and publications. The organization holds multiple accreditations and certifications, positioning itself as a trusted authority in the wood sector nationally and internationally. The website is professionally designed, content-rich, and provides clear navigation and contact options, targeting industry professionals and businesses. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and uses Matomo for privacy-conscious analytics. Security practices include session management and cookie consent, though explicit security headers and incident response policies are not evident. Overall, the site demonstrates a strong business presence with good privacy compliance and moderate security posture.

A

axapharm ag

axapharm.ch

54

axapharm ag is a Swiss pharmaceutical company specializing in the distribution and manufacturing of generics, prescription, and over-the-counter medicines. With a unique shareholder structure involving over 700 Swiss pharmacists and druggists, the company positions itself as a reliable partner in the Swiss pharmaceutical market, emphasizing Swiss quality and affordable healthcare products. The website targets healthcare professionals and consumers within Switzerland, offering product information, services, and educational resources. Technically, the website is built on WordPress with modern plugins such as Elementor and LayerSlider, integrating Google Analytics and Maps for enhanced user experience. Security measures include HTTPS enforcement and standard security headers, though there is room for improvement in privacy compliance, particularly regarding cookie consent mechanisms. Overall, the website reflects a professional and trustworthy digital presence aligned with the company's business model and market position.

B

default

berufkraut.ch

47

The website berufkraut.ch appears to be a small-scale or early-stage site with minimal content and no visible privacy, cookie, or terms of service policies. The site uses Joomla CMS with the Helix Ultimate template and SP Page Builder, indicating a modern but basic technical infrastructure. HTTPS is enabled, and a CSRF token is present, but no security headers or incident response information are found. The lack of contact information and business details limits trust and credibility. Overall, the site is accessible without WAF or blocking mechanisms but lacks substantive content and security best practices.

S

Smaragd-Gebiet Oberaargau

gartenagglomeration.ch

36

The Smaragd-Gebiet Oberaargau website represents a regional non-profit environmental initiative focused on promoting biodiversity and sustainable landscape development in the Oberaargau region of Switzerland. The project is supported by local municipalities and the Swiss federal government, emphasizing ecological infrastructure, recreational opportunities, and protection of endangered species. The website content is primarily in German and targets local residents, environmental stakeholders, and partner organizations. Technically, the site is built on the Joomla CMS platform, utilizing modern frontend technologies such as Bootstrap 5, jQuery, and Font Awesome. The site demonstrates good mobile responsiveness and a clean, professional design. However, there is room for improvement in accessibility and SEO optimization. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the website enforces HTTPS and uses CSRF tokens in forms, but lacks several important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible cookie consent mechanism or detailed security policy published. The WHOIS data aligns well with the website's organizational claims, supporting legitimacy and trustworthiness. Overall, the website is a well-maintained informational platform for a regional environmental project with a solid technical foundation and good business credibility. Enhancements in privacy compliance and security hardening would further strengthen its posture.

The website https://tophost.ch/ currently presents only a minimal placeholder message indicating the server is online, with no additional content, metadata, or business information. This lack of content prevents meaningful analysis of the company's business model, market position, or services. Technically, the site does not reveal any technologies, frameworks, or security configurations, and no contact or policy information is available. The absence of HTTPS or security headers cannot be confirmed from the provided data, but the minimal content suggests a lack of proper security implementation. Overall, the website is not professionally developed or maintained, which poses risks to user trust and compliance. Strategic recommendations include implementing a full website with clear business and contact information, deploying HTTPS with proper security headers, and publishing privacy and cookie policies to meet regulatory requirements.

Gemeindebetriebe Roggwil (GBR) is a publicly owned municipal utility provider serving the Roggwil community in Switzerland. The organization offers essential services including electricity, water, and telecommunications infrastructure such as a fiber optic network. The website is designed to serve local residents and businesses with information, online services like address changes, and contact details. The business operates under a public law institution model since 2017, reflecting a stable local government affiliation. Technically, the website employs modern frontend technologies including Bootstrap for responsive design, jQuery, and Google reCAPTCHA for form security. The site is mobile optimized and provides a cookie consent mechanism compliant with GDPR requirements. While the site lacks explicit security policy documentation, it enforces HTTPS and uses standard security practices such as session management and CAPTCHA to protect user interactions. From a security perspective, the site demonstrates a good baseline posture with HTTPS and cookie consent but could improve by implementing security headers and publishing incident response or vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected. The domain registration data aligns well with the business identity, enhancing trustworthiness. Overall, the website is professional, trustworthy, and well-suited for its municipal utility purpose. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance to further strengthen the security and user experience posture.

S

SBB (Swiss Federal Railways)

spartageskarte-gemeinde.ch

62

The website 'spartageskarte-gemeinde.ch' serves as an informational portal for the Municipal Saver Day Pass, a discounted travel ticket offered through Swiss municipalities under the Swiss Federal Railways (SBB) umbrella. It provides detailed pricing, availability, and terms for travelers seeking economical day passes within the GA Travelcard area. The site is well-branded with official SBB logos and links to SBB's data protection and travel information pages, reinforcing its legitimacy and trustworthiness. Technically, the site is built using modern web technologies including Vue.js and ES modules, delivering a responsive and user-friendly experience. While performance and mobile optimization are good, there is room for improvement in accessibility and SEO. The site does not appear to collect personal data directly, instead relying on municipalities for ticket issuance, which reduces direct data protection risks. From a security perspective, the site uses personalized ticketing to prevent misuse and references comprehensive data protection policies hosted on the official SBB domain. However, explicit security headers and incident response contacts are not visible, suggesting areas for enhancement. No WAF or blocking mechanisms interfere with content access, and no vulnerabilities or suspicious domains were detected. Overall, the website presents a professional, secure, and trustworthy platform aligned with a large national transportation provider. Strategic improvements in privacy disclosures, security headers, and contact transparency would further strengthen its posture.

G

Gemeinde Fischbach

800jahrefischbach.ch

46

The website 800jahrefischbach.ch serves as an official municipal platform for the community of Fischbach, Switzerland, celebrating its 800-year anniversary. It provides detailed information about various events and activities planned throughout the jubilee year, targeting local residents and visitors interested in community engagement. The site emphasizes community spirit and historical celebration without commercial intent. Technically, the website is built on WordPress using the Oxygen Builder framework and includes jQuery for interactive elements. It is hosted on an unidentified provider but uses HTTPS with a valid SSL certificate, ensuring secure connections. The site is moderately optimized for performance and mobile responsiveness, though accessibility and SEO optimizations are basic. From a security perspective, the site enforces HTTPS but lacks important security headers and does not provide privacy or cookie policies, indicating gaps in compliance with modern data protection standards such as GDPR. No forms or extensive data collection mechanisms are present, minimizing exposure to data risks. Social media integration is present with official community channels. Overall, the website is trustworthy and professionally presented for its purpose but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

V

VBL AG

vbl.ch

67

VBL AG is a well-established public transportation company serving the Luzern region in Switzerland for over 125 years. The company operates bus and trolleybus services and is a regional leader in mobility solutions. The website is built on TYPO3 CMS and integrates modern technologies such as Google Tag Manager and reCAPTCHA to enhance analytics and security. The site is professionally designed with good user experience and mobile optimization, though some accessibility features could be improved. Security posture is solid with HTTPS and anti-bot measures, but lacks explicit security policies and vulnerability disclosure information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the company's identity, supporting legitimacy and trustworthiness.

P

Ponktgenaues Marketing für dein KMU

agenturponkt.ch

49

Agentur Ponkt is a Swiss marketing agency specializing in personal and effective marketing solutions tailored for small and medium-sized enterprises (KMUs). The company offers a comprehensive suite of services including design, digital marketing, social media, content creation, and photography. Their market positioning emphasizes clarity, creativity, and straightforward communication without unnecessary complexity, targeting KMUs seeking impactful marketing strategies. The website reflects a professional and consistent brand image with clear contact information and client references, indicating a trustworthy and established presence in the Swiss market. Technically, the website is built on WordPress using the Avada theme, leveraging modern web technologies such as jQuery, Google Tag Manager, Facebook Pixel, and Adobe Typekit fonts. The site is mobile-optimized and demonstrates good SEO practices through the use of Yoast SEO plugin and structured data. Performance is moderate with asynchronous loading of key scripts, ensuring a responsive user experience. From a security perspective, the site employs HTTPS with a good SSL configuration but lacks explicit security headers and visible security policies. There is no cookie consent mechanism detected, which may impact privacy compliance. Tracking technologies like Google Analytics and Facebook Pixel are used, indicating moderate user tracking. No critical vulnerabilities or exposed sensitive data were found in the HTML content. Overall, Agentur Ponkt presents a professional, secure, and user-friendly website suitable for its business model. Strategic improvements include implementing cookie consent, enhancing security headers, and publishing security and incident response policies to strengthen compliance and trust.

O

Oberaargau Classics

oberaargau-classics.ch

60

Oberaargau Classics is a small regional cultural initiative based in Switzerland, focusing on music ensembles Camerata 49 and Grenzklang. The website serves as an informational platform to promote their musical activities and events. The business model appears to be non-profit or community-oriented, targeting general audiences interested in classical and cultural music. The site is built on the Squarespace platform, leveraging modern web technologies and fonts, with a moderate performance and good mobile optimization. Security posture is strong with HTTPS and HSTS enabled, but lacks explicit privacy and terms of service documentation. Contact information is not clearly provided, which may impact user trust and compliance. Overall, the site is professional and consistent in branding but could improve privacy compliance and user engagement features.

G

Gemeinde Madiswil

madiswil.ch

61

The website www.madiswil.ch serves as the official online presence of the municipality of Madiswil in Switzerland. It provides residents and visitors with comprehensive information about local government services, political and administrative matters, community events, and public resources. The site targets local citizens and stakeholders, offering key services such as online administrative forms, event calendars, and contact directories. The business model is that of a government service portal, focusing on transparency and accessibility. Technically, the website is built on the i-web.ch CMS platform, utilizing modern web technologies including JavaScript, CSS, and HTML5. It integrates Swiss government mapping services via Leaflet and employs Matomo for privacy-conscious analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not publish a formal security policy or incident response contacts. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism aligned with GDPR requirements. No vulnerabilities or suspicious activities were detected. Overall, the website is a trustworthy and professional municipal portal with a strong focus on user accessibility and privacy. Strategic improvements could include enhancing security headers, publishing a security framework, and adding incident response contact information to further strengthen its security posture.

L

Landfrauenverein Huttwil

landfrauen-huttwil.com

48

The Landfrauenverein Huttwil website represents a local non-profit community association focused on women in the Huttwil region. The site provides information about the association's activities, events, and general information for members and interested visitors. The business model is community-oriented with no commercial transactions evident. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as HTML5, CSS3, and JavaScript. The technical infrastructure is basic but functional, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and policies. Privacy compliance is weak due to the absence of privacy and cookie policies. The domain WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and registration transparency. Overall, the website is safe, professional, and suitable for its target audience but would benefit from improved privacy and security practices.

The website klosterkilbi.ch represents the traditional Swiss festival 'Klosterkilbi' organized by the Musikgesellschaft St. Urban. It serves as an informational platform for visitors and participants, providing event dates, program details, and links to social media. The site is built on the ClubDesk Vereinssoftware platform, utilizing modern JavaScript libraries such as jQuery, Featherlight, and Owl Carousel to enhance user experience. The design is consistent and mobile-optimized, offering clear navigation and relevant content for its regional audience. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though security headers and explicit policies are absent. Privacy compliance is basic with a privacy policy and cookie consent implemented, but GDPR compliance is not explicitly confirmed. Overall, the site is trustworthy and professionally maintained, reflecting a small community organization with a long-standing tradition.