Security Directory

N

Nachhaltig Reiden

nachhaltigreiden.ch

48

Nachhaltig Reiden is a small local community association based in Switzerland focused on promoting sustainability initiatives in the Reiden area. The website serves as an informational and engagement platform featuring educational materials, crowdfunding campaigns, and local hiking trail promotion. The organization targets local residents and environmentally conscious individuals. Technically, the website is built on WordPress using the Divi theme and several premium plugins, including Instagram Feed integration and Yoast SEO for optimization. The site is mobile-friendly and moderately performant, with good SEO practices and structured data implemented. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Business credibility is moderate with consistent branding and active social media presence but lacks explicit contact details. Overall, the website is professional and trustworthy for its community purpose but would benefit from enhanced privacy and security practices.

E

Erwachsenenbildung Seetal

eb-seetal.ch

48

Erwachsenenbildung Seetal is a small non-profit adult education association based in the Seetal region of Switzerland. The organization offers a broad and diverse range of adult education courses including languages, fitness, cultural activities, and crafts. Their website is built on Joomla CMS and provides a well-structured, content-rich platform targeting adult learners in the local community. The site includes downloadable course programs, news updates, and contact forms for course proposals and inquiries. The presence of a local sponsor (Raiffeisen bank) adds to their community credibility. Technically, the website uses modern web technologies such as Joomla, Bootstrap, and FontAwesome, with a responsive design that supports mobile users adequately. While the site performs moderately well, there is room for improvement in accessibility and SEO. Security-wise, the site uses HTTPS and includes CSRF tokens, but lacks explicit security headers and a cookie consent mechanism, which are important for compliance and protection. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements in security headers, privacy compliance, and incident response policies are recommended. The domain uses privacy protection for WHOIS data, which is justified for a small non-profit. The website content is safe for general audiences with no adult or explicit material. The business credibility is high given the clear mission, sponsor support, and professional presentation. Strategic recommendations include implementing security headers, adding cookie consent, publishing a security policy, enhancing accessibility, and maintaining up-to-date software to strengthen security and compliance.

I

IG Rottaler Ernte / Rottaler Auslese GmbH / Verein Lebendiges Rottal

genussfenster.ch

51

The website 'Rottaler Genussfenster' serves as a regional cultural and culinary platform focused on the Rottal region in Switzerland, highlighting local specialties, traditions, and events. It targets residents and visitors interested in regional food and cultural heritage, operating primarily as a non-profit or community-driven initiative. The site is built on Joomla CMS using modern templates and page builders, offering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance. The WHOIS data aligns well with the website's regional focus, supporting legitimacy and trustworthiness.

I

Internationales Zentrum der Traditionellen Bewässerung in Europa (IZTB)

iztb.org

48

The Internationales Zentrum der Traditionellen Bewässerung in Europa (IZTB) is a small non-profit organization dedicated to the preservation, research, and promotion of traditional irrigation systems as intangible cultural heritage in Europe. Founded in 2021 and based in Switzerland, the organization serves as an umbrella entity for local stakeholders across Europe, focusing on education, networking, and cultural heritage advocacy, including successful UNESCO intangible heritage listing efforts. The website reflects a professional and consistent brand presence with good content quality and multilingual support.

G

Gemeinde Roggwil BE

roggwil.ch

61

The website www.roggwil.ch serves as the official digital presence of the municipality of Roggwil BE in Switzerland. It provides residents and visitors with comprehensive information about local government services, community news, events, and administrative online tools such as the Online-Schalter. The site is well-positioned as a local government portal, focusing on public service delivery and community engagement. Technically, the site employs modern web technologies including a CMS platform (i-web), asynchronous analytics via Matomo, and responsive design ensuring good mobile usability. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy, professional, and well-maintained, serving its target audience effectively.

G

Gemeinde Melchnau

melchnau.ch

52

Gemeinde Melchnau operates as the official municipal government website for the Melchnau community in Switzerland, providing residents and visitors with comprehensive local information, administrative contacts, event agendas, and community news. The website serves as a key communication channel for local governance, public services, and community engagement. Its market position is that of a small local government entity focused on serving its constituency effectively. Technically, the website is built on WordPress 6.8.3 with a modern plugin ecosystem including Yoast SEO for search optimization, SuperPWA for progressive web app capabilities, and Contact Form 7 for user interactions. The site demonstrates good mobile optimization and moderate performance, leveraging common web technologies such as Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience. From a security perspective, the site enforces HTTPS and employs standard security practices, though explicit security headers like Content-Security-Policy and X-Frame-Options are not detected and could be improved. No vulnerabilities or exposed sensitive data were found in the HTML content. Privacy compliance is well addressed with clear privacy and cookie policies, including a consent mechanism, aligning with GDPR requirements. Overall, the website presents a low-risk profile with high trustworthiness, clear business legitimacy, and good content quality. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and publishing explicit security and incident response policies to further strengthen the security posture and compliance maturity.

The website represents the official online presence of the municipality of Fischbach in the canton of Luzern, Switzerland. It serves as an informational portal providing residents and visitors with access to community news, political information, administrative services, and local events. The site is clearly targeted at local citizens and stakeholders, offering relevant municipal content in German. The business model is that of a government service provider, focusing on transparency and community engagement. Technically, the website employs modern front-end technologies including Bootstrap 5 for responsive design, jQuery, and Swiper.js for interactive elements. It uses Matomo for analytics, reflecting a privacy-conscious approach. The site is mobile-optimized and shows good navigation clarity and content relevance. However, no CMS or hosting provider details were detected, and accessibility features are basic. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, indicating GDPR compliance. No critical vulnerabilities or exposed sensitive data were found. However, security headers are missing, and there is no explicit security or incident response policy published. The WHOIS data confirms the domain's legitimacy as an official municipal site with consistent registration details. Overall, the website is professional, trustworthy, and well-suited for its purpose. Strategic improvements could include adding security headers, publishing terms of service and incident response contacts, and enhancing accessibility compliance to further strengthen security posture and user trust.

G

Gemeinde Grossdietwil

grossdietwil.ch

58

Gemeinde Grossdietwil operates as the official municipal government website for the Grossdietwil community in Switzerland. It provides residents and visitors with comprehensive local information, including administrative services, news updates, community events, education resources, and tourism guidance. The website positions itself as a central hub for municipal engagement and public service delivery, emphasizing local culture and lifestyle. Technically, the site is built on WordPress using the Avada theme and Fusion Builder, integrating modern web technologies such as Google reCAPTCHA and Google Analytics for security and analytics purposes. The site demonstrates good digital maturity with responsive design, SEO optimization, and structured data implementation. Security posture is solid with HTTPS enforcement and anti-bot measures, though it could benefit from enhanced HTTP security headers and published security policies. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations, making it a reliable resource for its target audience.

G

Gemeinde Altbüron

altbueron.ch

50

The website altbueron.ch serves as the official digital presence of the municipality of Altbüron in Switzerland. It provides comprehensive information about local governance, community events, societal services, education, building and environmental matters, as well as leisure and mobility options. The site targets residents and visitors seeking municipal services and community engagement. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries such as jQuery, Modernizr, and Owl Carousel, and integrates Google Maps API for location services. The design is professional, mobile-optimized, and accessible, with clear navigation and structured content. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks some security headers and formal policies such as privacy and cookie policies. No incident response or data protection officer contact information is provided, which are areas for improvement. Overall, the website is trustworthy and legitimate, consistent with its governmental role, but could enhance privacy compliance and security posture to better protect users and meet regulatory standards.

V

Verein Region Oberaargau

oberaargau.ch

62

Verein Region Oberaargau is a regional non-profit organization focused on promoting and shaping life, work, and leisure in the Oberaargau region of Switzerland. Their key services include energy consulting, regional development, and regional politics. The website is built on the Wix platform, leveraging Wix's proprietary frameworks and hosting services. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and some script-based security hardening, but lacks advanced security headers and formal vulnerability disclosure mechanisms. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website presents a professional and trustworthy image consistent with a small regional government or non-profit entity.

Verein Lebendiges Rottal is a small regional non-profit organization dedicated to nature and cultural preservation in the Rottal region of Switzerland. It operates as a local section of the BirdLife family, offering community engagement through events, conservation projects, and membership opportunities. The website reflects a well-structured and content-rich platform that communicates its mission effectively to its target audience of nature enthusiasts and local residents. Technically, the site is built on the Jimdo Creator CMS platform, utilizing standard web technologies including jQuery and Google Analytics for visitor insights. The site is mobile-optimized and provides clear navigation and event information. Security-wise, the website enforces HTTPS, includes standard security headers, and implements a cookie consent mechanism, indicating a good security posture for a small non-profit. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which could be improved to enhance trust and compliance. Overall, the domain registration data aligns well with the website's claims, supporting its legitimacy and trustworthiness.

K

Kloster St. Urban

st-urban.ch

61

Kloster St. Urban is a historic cultural and event venue located in Switzerland, offering event hosting, cultural programming, and tourism experiences. The website reflects a well-established business with a strong market position as a heritage site and event location, evidenced by its nomination for the Swiss Location Award®. Technically, the site is built on WordPress with modern SEO and analytics tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

G

Gemeinde Pfaffnau

pfaffnau.ch

72

Gemeinde Pfaffnau operates as the official municipal government website for the Pfaffnau community in Switzerland, providing a broad range of administrative and public services including online service portals, political information, social services, safety resources, economic data, and leisure activities. The website targets local residents and stakeholders, positioning itself as a trusted source of municipal information and services. The business model is that of a public sector entity focused on community service and governance. Technically, the website is built on the Swiss GOViS eGovernment CMS platform, utilizing modern JavaScript libraries such as jQuery, Flickity, and Magnific Popup to enhance user experience. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Privacy and cookie consent mechanisms are robustly implemented, reflecting compliance with GDPR and Swiss data protection standards. From a security perspective, the site enforces HTTPS and employs cookie consent controls, but lacks explicit HTTP security headers and publicly available security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the municipal entity, supporting a high trust level. Overall, the website presents a professional, secure, and privacy-conscious digital presence appropriate for a local government entity. Strategic recommendations include enhancing security headers, publishing a security policy and vulnerability disclosure framework, and maintaining up-to-date third-party libraries to further strengthen security posture.

IG Rottaler Ernte is a small regional non-profit organization focused on promoting high-quality regional food products and cultural heritage in the Rottal area of Switzerland. The organization primarily operates through the annual Rottaler Erntefest event and ongoing projects to support local producers and regional specialties. The website content is primarily informational, targeting local consumers and enthusiasts of regional foods. Technically, the website is built with basic HTML, CSS, and JavaScript without modern frameworks or CMS, showing moderate performance and basic mobile optimization. Security posture is minimal with no detected security headers or privacy policies, indicating room for improvement in compliance and protection. Overall, the website is trustworthy but lacks advanced security and privacy features.

K

Kanton Luzern

lu.ch

65

The website www.lu.ch serves as the official digital portal for the Canton of Luzern, Switzerland. It provides comprehensive information about the cantonal government, parliament, administration, municipalities, courts, and citizens' rights. The site also offers news updates, digital services through the my.lu.ch portal, and access to statistical and geographic data. It targets residents, government officials, businesses, and tourists within the region, positioning itself as the authoritative source for cantonal governance and public services. Technically, the website employs a modern technology stack including jQuery, VideoJS, Moment.js, Slick Slider, and CookieConsent for user experience and compliance. The site is well-optimized for mobile devices, accessible, and SEO-friendly. It uses HTTPS with strong SSL configuration and includes a cookie consent mechanism aligned with GDPR requirements. Analytics are conducted via Piwik (Matomo), ensuring moderate user tracking with privacy considerations. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks explicit visible security headers such as CSP or X-Frame-Options in the provided data. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain is registered to the official government entity, enhancing trust and legitimacy. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for a government entity. Recommendations include enhancing security headers, publishing a security policy and incident response contact, and considering a security.txt file for vulnerability disclosures to further strengthen security posture.

B

Biodiversia GmbH

biodiversia.ch

48

Biodiversia GmbH is a small Swiss company specializing in biodiversity promotion and sustainable regional development, primarily serving public and private clients in the Bern, Luzern, Aargau, and Solothurn regions. Their key services include project management, consulting, communication, event organization, invasive species management, and education for sustainable development. The website is professionally designed with clear navigation and relevant content, targeting environmentally conscious organizations and stakeholders. Technically, the site uses older JavaScript libraries such as jQuery 1.6.4 and Modernizr, with basic mobile optimization and SEO. Security posture is moderate but could be improved by updating libraries, adding security headers, and enforcing HTTPS. Privacy compliance is limited, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and functional but would benefit from technical and compliance enhancements.

A

Apotheke Meyer Roggwil AG

apotheke-meyer.ch

49

Apotheke Meyer Roggwil AG is a local Swiss pharmacy and health center based in Roggwil, Switzerland. The company offers a broad range of pharmacy retail products, medical services including vaccinations, health analyses, and holistic complementary medicine. It positions itself as a community-focused, independent pharmacy with a strong emphasis on customer service and health education through events and a health blog. The website is professionally designed with clear navigation and good mobile optimization, supporting a positive user experience for its target audience. Technically, the site uses the SIQUANDO Pro CMS platform with jQuery and includes cookie consent mechanisms and privacy policies aligned with GDPR requirements. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though security headers and incident response contacts could be improved. WHOIS data confirms the legitimacy and consistency of the business registration. Overall, the website reflects a trustworthy, professional small healthcare business with a solid digital presence.

F

fenaco Genossenschaft

landimelchnau.ch

62

The website landi.swiss/de-CH/cooperative/landi-melchnau-buetzberg represents the LANDI Melchnau-Bützberg, an agricultural cooperative in Switzerland under the parent organization fenaco Genossenschaft. The cooperative supports local farmers and private persons with agricultural supplies, retail goods, and energy services including fuel stations and electric vehicle charging. The website is built on a modern Angular framework with integration of Google Tag Manager and a cookie consent mechanism, indicating a moderate level of digital maturity. However, it lacks explicit privacy policy and terms of service pages, which are important for compliance and user trust. Security posture is generally good with HTTPS and domain transfer protection, but DNSSEC is not enabled, and security headers are not explicitly detected. Overall, the site is professional and trustworthy but could improve privacy compliance and security hardening.

T

tchncs

tchncs.de

59

tchncs.de is a small, individual-operated platform based in Germany that provides a curated collection of open-source software services. The website hosts and links to various federated social media instances, collaboration tools, chat platforms, blogging, development, and gaming services. It operates on a donation-funded, ad-free model, targeting users interested in privacy-respecting and decentralized technology solutions. The platform emphasizes community and open-source values, positioning itself as a niche provider in the federated software ecosystem. Technically, the website uses standard web technologies including jQuery and SVG graphics, with hosting inferred to be through INWX based on nameservers. The site is moderately optimized for performance and mobile devices, with a clear and consistent branding approach. SEO and accessibility are basic but functional. Analytics are implemented via a privacy-friendly service (Plausible Analytics), indicating a focus on minimal user tracking. From a security perspective, the site uses HTTPS (assumed from URL scheme and modern practices), but lacks explicit security headers and published security policies. No incident response or vulnerability disclosure information is available, which could be improved to enhance trust and compliance. The WHOIS data is consistent with the website's claims, showing legitimate registration without privacy protection, appropriate for an individual operator. Overall, tchncs.de presents a trustworthy and well-maintained platform for open-source and federated services, with room for improvement in security policies and privacy compliance mechanisms. Strategic recommendations include implementing security headers, publishing incident response contacts, and adding cookie consent to align with GDPR best practices.

Informationsdienst Holz operates a specialized informational website focused on indoor air quality and wood construction, targeting planners, builders, and construction companies in Germany. The site provides neutral, factual content including research, legal questions, and recommendations to support healthy indoor environments. The business model centers on expert consulting and information dissemination rather than direct sales. Technically, the website uses a moderate technology stack including jQuery and WOW.js for animations, and Matomo for privacy-conscious analytics. The site is mobile-optimized with good SEO practices but lacks some modern security headers and cookie consent mechanisms. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but could be improved by adding security policies and headers. Overall, the site is trustworthy and professional, with clear contact information and regularly updated content. No adult or questionable content is present, making it safe for general audiences.

D

Katalog bauphysikalisch und ökologisch geprüfter Holzbauteile - dataholz.eu

dataholz.eu

50

The website dataholz.eu serves as a specialized catalog and resource platform for wood construction materials, components, and planning aids, primarily targeting professionals in the wood construction industry such as architects, engineers, and building authorities. It offers a curated collection of ecologically and physically tested wood products and building components, supported by accredited testing institutions. The site is well-structured, bilingual (German and English), and regularly updated with technical content and online seminars, reflecting a mature and professional business presence in Austria. Technically, the site is built on TYPO3 CMS with Bootstrap 5 and integrates Google Tag Manager for analytics, demonstrating a modern and maintainable infrastructure. The website is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security-wise, the site uses HTTPS and implements a comprehensive cookie consent mechanism with opt-in and revocation features, aligning with GDPR requirements. However, it lacks explicit security headers and a published security policy or incident response contacts, which are recommended for enhanced security posture. WHOIS data is not publicly available due to EURid privacy policies, but the domain and website content appear consistent and legitimate for the business sector. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy and professional resource in its niche.

N

Norsk Redaktørforening

nored.no

59

Norsk Redaktørforening is a Norwegian professional association representing approximately 820 members from various editorially controlled media outlets across Norway. The organization advocates for editorial independence, freedom of information and expression, and favorable conditions for editor-led media. They provide advisory services, ethical and legal guidance, and organize events and training for their members. The website reflects a mature digital presence with modern technologies such as Next.js and Sanity CMS, and uses privacy-focused analytics (Fathom). Security posture is adequate with HTTPS enforced, but lacks some security headers and explicit privacy/cookie policies. Contact information is clearly presented, supporting member engagement and trust. Overall, the site is professional, well-structured, and trustworthy, serving a specialized media professional audience.

N

Norske arkitekters landsforbund

arkitektforbundet.no

71

Norske arkitekters landsforbund (NAL) is a well-established Norwegian non-profit professional association for architects, founded in 2001. The organization focuses on promoting good architecture and representing architects' common interests in Norway. Their services include membership benefits, professional courses, architecture competitions, publications, and political advocacy. The website reflects a mature digital presence with clear navigation, relevant content, and active engagement with its target audience of architecture professionals and students in Norway. Technically, the site uses modern JavaScript libraries, a consent management platform (Usercentrics), Google Analytics, and Google reCAPTCHA to secure forms and comply with privacy regulations. The CMS is Umbraco, indicating a professional content management approach. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security policies and headers could be improved. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

X

XLENT Norge

xlent.no

74

XLENT Norge is a Norwegian IT consulting company specializing in technology leadership, solution architecture, system development, CRM, and digital strategy. It operates as part of the XLENT Consulting Group with a combined workforce of 550 employees across Norway and Sweden. The company targets Norwegian IT sector clients and professionals seeking career opportunities in IT consulting. Their website reflects a professional and consistent brand image with clear service offerings and a focus on digital transformation and cybersecurity. Technically, the website employs modern JavaScript technologies, Matomo analytics, and cookie consent mechanisms, hosted likely behind Cloudflare infrastructure. Security posture is strong with HTTPS and cookie consent but lacks explicit security headers and published security policies. Privacy compliance is well addressed with comprehensive privacy and cookie policies. Overall, the website is trustworthy, well-designed, and serves as a credible digital presence for the company.

S

Spoon

spoonagency.no

63

Spoon is a Norwegian creative and strategic communications agency established in 1998, offering a broad range of services including strategy, concept development, design, content marketing, video production, and employer branding. The company positions itself as an expert in authentic, creative, and insight-driven communication, targeting businesses and organizations seeking to enhance their brand presence and engagement. The website reflects a mature digital presence with professional design, structured data, and integration of marketing and analytics tools such as HubSpot and Google Tag Manager. Technically, the site is built on WordPress with modern JavaScript libraries and demonstrates good mobile optimization and SEO practices. Security posture is strong with HTTPS enabled and use of nonce attributes in scripts, though some security headers are not explicitly detected. Privacy compliance is partial, with a cookie policy and consent mechanism present but lacking a dedicated privacy policy or terms of service pages. Contact information is primarily via a contact form, with no explicit emails or phone numbers found. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

N

NILs Årbok

interiorogmobler.no

65

NILs Årbok is a Norwegian niche media publication focused on celebrating and showcasing the best work by interior architects and furniture designers in Norway. The website serves as a content platform featuring articles, projects, and industry advertisements, targeting professionals and enthusiasts in the interior design sector. Technically, the site is built on Craft CMS with SEOmatic for SEO optimization, uses Google Tag Manager and Analytics for tracking, and implements a comprehensive cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS and CSRF protections, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and well-optimized for its audience and purpose.

P

Proba AS

proba.no

10

Proba AS is a Norwegian analysis and consultancy company specializing in the welfare sector, providing research and advisory services to public sector clients and welfare organizations. The company has an established market presence since 2013, focusing on delivering relevant knowledge with professional depth and engagement. The website is built on WordPress with a modern theme and plugins, reflecting a moderate level of digital maturity with good mobile optimization and user experience. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of security headers and published privacy or incident response policies indicates room for improvement. Overall, the site is professional and trustworthy but would benefit from enhanced compliance documentation and security best practices.

K

Kulturdirektoratet

kulturdirektoratet.no

11

Kulturdirektoratet is a Norwegian government agency under the Ministry of Culture and Equality, dedicated to promoting arts and culture nationwide. The website serves as an official portal providing information on grant schemes, cultural policies, publications, and guidance for artists and cultural organizations. It maintains a strong market position as a key governmental cultural institution in Norway. Technically, the website is built on modern web technologies including Craft CMS, Alpine.js, and uses privacy-focused Matomo analytics. It employs Cloudflare services inferred from cookies and CDN usage, ensuring fast performance and excellent mobile optimization. The site implements a comprehensive cookie consent mechanism via CookieYes, reflecting good privacy compliance. From a security perspective, the site uses HTTPS with strong SSL configuration and includes essential security headers. No vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the website is professional, trustworthy, and well-maintained, with clear contact information and social media presence. The lack of public WHOIS data is due to privacy protection, which is justified for a government entity. The site poses low risk and aligns well with compliance and security best practices.

R

Rabbithole

rabbithole.co.uk

10

Rabbithole is a small UK-based design studio specializing in strategic website design, web development, and graphic design. The company positions itself as a thoughtful and unordinary creative agency with a professional portfolio showcasing diverse projects. The website is built on WordPress with a custom theme and modern JavaScript technologies, featuring rich media content such as images and videos to highlight their work. The site is well-optimized for SEO and mobile devices, providing a good user experience with clear navigation and professional design quality. Security-wise, the website uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers and formal privacy or terms of service documentation. The WHOIS data confirms a consistent and legitimate domain registration aligned with the business profile. Overall, the website demonstrates a mature digital presence suitable for a small creative agency but would benefit from enhanced privacy and security documentation to improve compliance and trust.

T

Tyréns Sverige AB

tyrens.se

10

Tyréns Sverige AB is a leading Swedish consultancy specializing in societal building, urban planning, infrastructure, and sustainability solutions. The company offers a broad range of engineering and architectural services targeting public and private sector clients focused on sustainable development. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content showcasing projects and expertise. Technically, the site uses modern technologies including Umbraco CMS, Google Tag Manager, and Cookiebot for consent management, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. The absence of WHOIS data for the exact domain suggests subdomain usage or registration under a parent domain, but the overall legitimacy is supported by consistent business information and linked subsidiary domains. Overall, the site is trustworthy, professional, and well-structured, supporting Tyréns' market position as a major player in Sweden's infrastructure and urban development sector.

한

한국여성건축가협회 (Korean Institute of Female Architects)

kifaonline.com

9

The Korean Institute of Female Architects (한국여성건축가협회) is a professional non-profit organization dedicated to supporting and promoting female architects in Korea. The website serves as a hub for membership services, event announcements, publications such as newsletters and eBooks, and advocacy for women in architecture. It targets female architecture professionals, students, and related stakeholders within Korea. The organization appears established with a consistent brand presence and active social media engagement.

M

Mextropoli

mextropoli.mx

9

Mextropoli is a prominent architecture and urbanism festival held in Mexico City, attracting over 100,000 attendees. The website serves as an informational platform for the event, providing details about venues, exhibitors, and programming. The site is built on WordPress and leverages common web technologies such as jQuery and Slick Carousel, with analytics implemented via Google Tag Manager and Facebook Pixel. While the site is visually appealing and mobile-optimized, it lacks critical privacy and security disclosures such as privacy and cookie policies, and does not provide direct contact information. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and formal policies. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and transparency measures.

S

Students' Union UCL

studentsunionucl.org

10

Students' Union UCL is a well-established non-profit organization representing University College London students. The website serves as a central hub for student engagement, providing access to support services, events, clubs, and representation. The organization has a strong market position within the education sector, supported by a consistent brand and comprehensive content. Technically, the website is built on Drupal 10 with modern web technologies and integrates analytics and user behavior tracking tools such as Google Analytics and Hotjar. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS and anonymized analytics, though improvements are recommended in security headers and vulnerability disclosure. Privacy compliance is mostly met with a clear privacy policy, but cookie consent mechanisms are lacking. Overall, the domain registration data aligns well with the organization's profile, supporting legitimacy and trustworthiness.

A

ArchDaily

archdaily.com

71

ArchDaily is a globally recognized architecture media platform headquartered in Santiago, Chile, providing architecture news, project showcases, and competitions for professionals and enthusiasts worldwide. The website demonstrates a mature digital presence with modern web technologies, including JavaScript frameworks, Google Analytics, and consent management tools, ensuring a responsive and user-friendly experience across devices. Security posture is strong with HTTPS enforcement, security headers, and anti-bot measures like reCAPTCHA, although explicit security policies and incident response details are not publicly disclosed. Overall, ArchDaily presents a professional, trustworthy platform with comprehensive content and good privacy compliance, though improvements in transparency around security and data protection could enhance trust further.

L

Lund Humphries

lundhumphries.com

10

Lund Humphries is a specialized publisher and retailer of illustrated books focusing on art, architecture, and design, targeting professionals and specialists. The company has a long-standing history dating back to 1939 and maintains a professional online presence through a Shopify-based e-commerce platform. The website is well-designed, mobile-optimized, and includes comprehensive privacy and cookie policies compliant with GDPR standards. Technically, the site leverages modern web technologies and integrates analytics and marketing tools such as Google Tag Manager and Mailchimp. Security practices are robust, with HTTPS enforced, security headers present, and CAPTCHA protection on forms. However, the absence of WHOIS domain registration data raises some concerns about domain legitimacy, although the website content and branding strongly suggest a legitimate business. Contact information is primarily via web forms, with no explicit company emails or phone numbers found in the HTML.

T

The Twentieth Century Society

c20society.org.uk

55

The Twentieth Century Society is a UK-based non-profit organization dedicated to campaigning for the preservation and appreciation of outstanding 20th-century buildings. The website serves as a comprehensive platform offering news, resources, membership services, and event information, positioning the society as a reputable and established entity within the heritage conservation sector. The site demonstrates a consistent brand identity and strong partnerships with notable architectural firms and grant funders, reinforcing its credibility and influence. Technically, the website is built on WordPress and employs a modern technology stack including Google reCAPTCHA, Google Maps API, and social media integrations. The site is moderately performant with good mobile optimization and basic accessibility features. Analytics and tracking are implemented responsibly with Jetpack, Google Analytics, and Hotjar, balanced with privacy compliance measures. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, with no visible vulnerabilities or exposed sensitive data. However, some security headers could be improved to enhance protection. Privacy and cookie policies are present and GDPR compliant, supporting a strong privacy posture. Overall, the website is professional, trustworthy, and well-maintained, with a high legitimacy score based on domain age and registration data. There are no critical security or compliance issues detected, making it a low-risk digital presence for the organization.

P

Petr&Co

petrand.co

49

Petr&Co is a small creative or digital agency website primarily showcasing video content embedded from Vimeo. The site has a minimalistic design with limited textual content and navigation linking to 'work' and 'more' pages. The business description and detailed services are not explicitly provided, making it difficult to ascertain the full scope of their offerings or market position. The target audience appears to be clients or professionals interested in creative digital work. Technically, the site uses modern JavaScript frameworks such as Turbolinks and integrates Google Analytics for tracking. The embedded Vimeo player indicates a focus on multimedia content delivery. Security posture is weak due to the absence of security headers, privacy policies, and contact information. No explicit compliance or incident response policies are present. Overall, the site is functional and visually appealing but lacks critical security and compliance features, which could impact trust and regulatory adherence.

B

BARQ festival | FESTIVAL INTERNACIONAL DE CINE DE ARQUITECTURA DE BARCELONA ​

barqfestival.com

37

The BARQ Festival website represents an international architecture film festival held in Barcelona and Madrid, focusing on films related to architecture and design. The site targets architecture and film enthusiasts and operates primarily as an event organizer with ticket sales. Technically, the website is built on WordPress using the Divi theme, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published privacy or cookie policies, which are critical for compliance and trust. The absence of WHOIS registration data is a concern for domain legitimacy, although the website content is professional and consistent with a cultural event. Overall, the site is functional and trustworthy but requires improvements in privacy compliance and security best practices.

G

Gleeds

gleeds.com

76

Gleeds is a global property and construction consultancy with a long-standing history dating back to 1875. The company offers a broad range of consultancy services focused on the built environment, targeting clients in the real estate and construction sectors. The website reflects a professional brand image with consistent messaging and a clear focus on their industry expertise. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party tools such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Accessibility features are supported via the UserWay widget, enhancing usability for users with disabilities. Security posture is generally good with HTTPS enforced and anti-forgery cookies in use; however, explicit security headers are not clearly detected and no public security or incident response policies are found. The domain WHOIS data is missing or protected, which reduces trustworthiness from a registration transparency perspective. Cookie consent mechanisms are well implemented, supporting GDPR compliance. Overall, the website is professional and secure but would benefit from improved transparency in domain registration and explicit privacy and security policy disclosures.

The website planaconsultants.com is currently inaccessible due to a robot challenge screen that implements a client-side proof-of-work captcha mechanism. This indicates the presence of a Web Application Firewall (WAF) or similar security protection that blocks direct access to the site's content. As a result, no business descriptive content, contact information, or policy documents are available for analysis. The domain is registered with GoDaddy.com, LLC since 2015 with a long expiry date, suggesting a legitimate registration history. However, the lack of accessible content and absence of privacy or cookie policies limit the ability to assess the company's market position or services. Technically, the site uses modern JavaScript features and CDN hosting but lacks DNSSEC and visible security headers. The security posture shows some best practices in blocking automated access but lacks transparency in policies and contact channels.

A

Arup

arup.com

67

Arup is a global consultancy specializing in planning, designing, and engineering sustainable infrastructure and buildings. The company offers expertise across more than 150 disciplines, focusing on shaping the built environment with sustainability and innovation. Their market position is that of a leading enterprise-level consultancy with a broad international presence and a strong reputation for quality and impact. The website reflects a mature digital infrastructure with modern analytics, consent management, and multimedia content, indicating a high level of digital maturity. Security posture is solid with HTTPS and monitoring tools in place, though explicit security headers and a public security policy are absent. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site presents a professional, trustworthy, and well-maintained digital presence aligned with the company's global stature.

T

TC Cuadernos

tccuadernos.com

49

TC Cuadernos operates a professional e-commerce website specializing in architecture books and magazines, targeting architects, students, and enthusiasts primarily in Spain. The website is built on PrestaShop CMS with modern web technologies and includes features such as product carousels, search, user accounts, and secure checkout. Security posture is strong with HTTPS, security headers, and CAPTCHA protections, though explicit privacy and cookie policies are not clearly linked. WHOIS data is unavailable, which raises some concerns about domain legitimacy, but the website content and functionality suggest a legitimate business. Overall, the site demonstrates good digital maturity with room for improvement in privacy transparency and incident response readiness.

The website www.jynk.net represents a professional portfolio for Daniel Crabbe, a frontend engineer specializing in modern frontend technologies such as Vuejs, Nuxt, React, and WordPress development. The site showcases a variety of projects primarily in fintech, higher education, and think tank sectors, indicating a niche market positioning as a skilled freelance or consultancy developer. The business model is service-oriented, targeting clients seeking frontend engineering and design system expertise. The website content is well-structured, professional, and optimized for SEO, with good mobile responsiveness and accessibility features. Technically, the site is built on WordPress CMS with modern JavaScript frameworks and tools integrated, including TypeScript, Jest, Vitest, and Storybook JS. The use of Yoast SEO and Jetpack plugins enhances SEO and analytics capabilities. Performance is moderate with lazy loading and caching optimizations. However, no explicit hosting provider or DNSSEC information is available. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks security headers and published security policies. From a security and compliance perspective, the site lacks visible privacy, cookie, and terms of service policies, which impacts GDPR compliance and user trust. WHOIS data is missing or unavailable, raising concerns about domain registration legitimacy. Contact information is clearly provided, but no incident response or vulnerability disclosure mechanisms are published. Overall, the site is safe and professional but would benefit from improved compliance documentation and domain registration transparency. The overall risk is moderate with recommendations to implement privacy and cookie policies, add security headers, publish incident response information, and verify domain registration details to enhance trust and compliance.

신세계건설의 VILLIV 브랜드 웹사이트 serves as a lifestyle magazine and real estate information portal focused on premium residential living in South Korea. The site offers rich multimedia content including articles, videos, and newsletters targeting prospective homebuyers and lifestyle enthusiasts. The business is well-established with a domain age of over 6 years, consistent WHOIS data, and clear branding aligned with the parent company. Technically, the site uses modern web technologies such as Bootstrap, Swiper.js, and integrates marketing and analytics tools like Facebook Pixel and Google Tag Manager. Security posture is moderate with domain protection flags and HTTPS usage, but lacks explicit security headers and cookie consent mechanisms. Privacy policies and terms of service are comprehensive and publicly accessible, though GDPR compliance indicators are minimal. Overall, the site is professional, trustworthy, and well-positioned in the real estate and lifestyle content market.