Security Directory

I

incert

incert.at

52

incert is a medium-sized Austrian company specializing in eCommerce and marketing technology solutions tailored for the tourism industry. Their offerings include voucher systems, gift card systems, ticketing, online shops, marketing automation, and loyalty programs. The website is professionally designed using TYPO3 CMS, with good mobile optimization and clear navigation. The technical infrastructure integrates modern analytics and marketing tools such as Microsoft Clarity and Google Tag Manager. Security posture is solid with HTTPS and standard best practices, though some security headers could be improved. Privacy compliance is basic, lacking explicit privacy and cookie policies. Overall, the site reflects a credible and established business with strong customer trust signals but could enhance transparency and compliance documentation.

G

Golfclub Wylihof

golfclub.ch

47

Golfclub Wylihof is a well-established Swiss golf club offering a 27-hole championship course, practice facilities, a restaurant, golf school, and shop. The club targets golf enthusiasts, members, and corporate clients in the Swiss Mittelland region. The website is built on WordPress with modern plugins supporting multilingual content, SEO, and user engagement. The club demonstrates commitment to sustainability through recognized certifications. Security posture is adequate with HTTPS and reCAPTCHA implemented, though some security headers and incident response details are missing. Privacy compliance is addressed with a cookie consent banner and privacy policy. Overall, the site is professional, trustworthy, and serves its audience effectively.

H

Hochschule für Technik Stuttgart

hft-stuttgart.com

59

HFT Stuttgart is a medium-sized public university of applied sciences in Germany offering a broad range of Bachelor's and Master's degree programs focused on climate literacy, resilience, and networking. The institution emphasizes practical relevance, applied research, and international cooperation. The website is built on TYPO3 CMS and integrates modern consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and consent mechanisms in place, though some security headers are missing and WHOIS data is unavailable, which slightly impacts trust. Overall, the website presents a professional and trustworthy digital presence aligned with its educational mission.

S

Studierendenwerk Gießen A.d.ö.R.

stwgi.de

50

Studierendenwerk Gießen is a regional non-profit organization providing comprehensive student services including affordable housing, food services, financial aid counseling, and social support for approximately 48,000 students across multiple universities in Germany. The website is professionally designed, well-structured, and offers rich content tailored to its target audience of students. It integrates modern web technologies and provides good mobile and accessibility support. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a detailed privacy policy. Security posture is solid with HTTPS and no exposed sensitive data, though some improvements in security headers and incident response disclosures are recommended. Overall, the website reflects a trustworthy and credible educational service provider with strong digital maturity.

T

Technische Hochschule Mittelhessen

thm-i40.de

52

The Technische Hochschule Mittelhessen (THM) website for the Smart Factory Mittelhessen (SFM) research group presents a well-structured academic and research-focused platform. It highlights the group's commitment to Industry 4.0 concepts, applied research, and collaboration with SMEs to enhance manufacturing competitiveness in Germany. The site targets students, researchers, and industry partners, offering educational programs, research projects, and practical smart factory infrastructure. The content is professionally presented in German, with clear navigation and comprehensive information about equipment, research themes, and partnerships. Technically, the website is built on Joomla CMS with modern libraries such as jQuery and Bootstrap, and includes interactive elements like Smart Slider 3. The site is mobile-optimized and accessible, though some accessibility features could be enhanced. Security-wise, HTTPS is enforced, and forms use CSRF tokens, but security headers are not explicitly detected. Privacy compliance is addressed with a privacy policy and cookie information, though no explicit consent mechanism is present. Contact information is clearly provided, enhancing business credibility. Overall, the security posture is solid but could benefit from additional security headers and incident response information. The website shows no signs of malicious activity or suspicious content, and the domain registration aligns well with the academic institution's identity. The site is safe for general audiences and maintains a high level of professionalism and trustworthiness.

S

StudiumPlus

studiumplus.de

62

StudiumPlus is a prominent educational provider specializing in dual study programs in Hessen, Germany. It offers integrated Bachelor and Master degree programs in partnership with over 1000 companies, combining academic study at Technische Hochschule Mittelhessen with practical work experience. The website is professionally designed, well-structured, and optimized for SEO and accessibility, targeting prospective students and partner companies. The technical infrastructure is based on WordPress with modern plugins for multilingual support, cookie consent, and interactive maps. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, compliant with GDPR, and provides comprehensive educational content.

Sporthotel Fuchsbachtal GmbH operates a regional hotel located in the Deisterlandschaft near Hannover, Germany, offering a blend of accommodation, gastronomy, wellness, and sports activities. The hotel targets general audiences including leisure travelers and sports professionals, with a notable reputation for hosting football teams. The website is built on TYPO3 CMS and integrates modern web technologies including jQuery and Google Analytics with privacy-conscious configurations such as IP anonymization and cookie consent mechanisms. The site is well-structured, mobile-optimized, and provides clear contact information and customer testimonials, enhancing trust and user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the website reflects a professional hospitality business with good digital maturity and compliance with GDPR requirements.

R

Robert-Enke-Stiftung

robert-enke-stiftung.de

59

The Robert-Enke-Stiftung is a German non-profit foundation dedicated to promoting open dialogue about depression and other mental illnesses, as well as supporting suicide prevention projects. The website reflects a strong commitment to mental health awareness through educational initiatives, social engagement opportunities, and partnerships with prominent sports organizations. The foundation targets a broad audience including individuals affected by mental health issues, students, and the sports community. The business model is centered on non-profit activities, fundraising, and community outreach. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as jQuery, Lottie animations, and SVG graphics. It is hosted on a CDN ensuring fast performance and excellent mobile optimization. The site includes a cookie consent mechanism compliant with GDPR, enhancing privacy compliance. Navigation is clear and content is professionally presented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses a cookie consent banner, but lacks explicit security policy pages or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data shows consistent domain registration with no suspicious patterns, supporting the legitimacy of the organization. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for a non-profit organization focused on sensitive health topics. Strategic improvements could include publishing a dedicated security policy, vulnerability disclosure information, and enhancing security headers to further strengthen the security posture.

S

Sportbuzzer

sportbuzzer.de

63

Sportbuzzer is a German-language media portal focused on fitness, nutrition, health, and sport topics. It serves a broad audience including beginners and experienced athletes, providing articles, tips, and podcasts. The site is part of the RedaktionsNetzwerk Deutschland partnership, indicating a reputable media affiliation. Technically, the site uses modern web technologies including React, Google Tag Manager, and a consent management platform to comply with cookie regulations. The site is well-structured, mobile-optimized, and uses HTTPS with good security practices. However, explicit privacy and terms of service pages are not found in the provided content, and direct contact information such as emails or phone numbers is missing, which could impact user trust and compliance. Overall, the site presents a professional and trustworthy media presence in the German fitness and health niche.

H

HUBIT Datenschutz

hubit.de

54

HUBIT Datenschutz is a German-based consultancy specializing in data protection and GDPR compliance services since 2008. The company offers a range of services including external data protection officer roles, audits, training, and a proprietary whistleblower system. Their market position is supported by over 16 years of experience and a client base exceeding 200 companies, primarily targeting medium-sized enterprises and corporate groups. The website reflects a professional and consistent brand image with clear service offerings and a focus on practical, interdisciplinary solutions combining legal and IT expertise. Technically, the site is built on WordPress using the Divi theme, with common plugins such as Contact Form 7 and Honeypot for form security. The site is mobile-optimized and performs moderately well, though some improvements in accessibility and SEO could be made. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and a cookie consent mechanism. Overall, the domain registration data is limited due to DENIC privacy policies but shows no suspicious indicators, and the website content aligns well with the business claims, supporting a high legitimacy score.

S

SV Werder Bremen

werder.de

70

SV Werder Bremen operates a professional football club website providing fans and stakeholders with news, match schedules, ticketing, and media content. The site is built on a modern Nuxt.js framework with Tailwind CSS styling and integrates third-party services such as Cookiebot for consent management and Google Tag Manager for analytics. The website demonstrates good technical maturity with responsive design and accessibility considerations. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. The domain registration aligns well with the business's German origin, supporting legitimacy. Overall, the site is professional, trustworthy, and well-positioned to serve its audience effectively.

L

Lloretparty.de

lloretparty.de

60

Lloretparty.de is a private German-language online blog established since 2001, focusing on youth travel, city trips, online marketing, job applications, and rehabilitation sports marketing. The website serves a niche audience of young travelers and marketing professionals seeking free information and tips. Technically, the site is built on WordPress using the Divi theme and Yoast SEO plugin, hosted on rzone.de servers. The site demonstrates moderate technical maturity with good SEO and mobile optimization but lacks some advanced security headers and explicit privacy policies. Security posture is adequate with HTTPS enabled and cookie consent implemented, but improvements are recommended in security headers and incident response transparency. Overall, the website is accessible, trustworthy, and safe for general audiences, with no adult or questionable content detected.

R

Rehasport Marketing

rehasport-marketing.de

51

Rehasport Marketing is a specialized marketing agency based in Germany, focusing on providing marketing services such as web design, SEO, print media, and consulting primarily for health-related sectors including Übungsleiter, Therapiepraxen, Fitnessstudios, and Sportvereine. The website demonstrates a professional and consistent brand presence with good content quality and SEO optimization, leveraging WordPress with the Divi theme and Rank Math PRO plugin. The technical infrastructure is modern and supports mobile responsiveness and GDPR cookie compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although the absence of explicit privacy and security policies and security headers suggests room for improvement. Overall, the site is trustworthy and functional but would benefit from enhanced privacy compliance and security documentation.

P

Pixel-Puls Grafikdesign Werbemittel aus Herrenberg

pixel-puls.de

72

Pixel-Puls is a small German graphic design business based in Herrenberg, specializing in creative and professional graphic design services including logo creation, print media, wedding marketing, and web design. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern and SEO-optimized infrastructure. The site is well-designed, mobile-optimized, and provides a clear navigation structure, although it lacks explicit privacy and terms of service pages. Security posture is adequate with HTTPS and GDPR cookie compliance, but could be improved by adding security headers and incident response information. Overall, the site is trustworthy and professional, serving local clients with a focus on quality and transparency.

M

Marketing Agentur Herrenberg im Kreis Böblingen

marketingwelt-lipp.de

61

Marketingwelt Lipp is a small, professional marketing agency based in Herrenberg, Germany, specializing in online marketing, web design, SEO, social media, graphic design, and consulting services. The company targets local businesses and startups, offering a full-service marketing approach with over 26 years of experience and a solid customer base. The website is built on WordPress using the Divi theme, integrating marketing tools like Matomo Analytics and Rank Math SEO plugin, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks published privacy policies and security headers, indicating room for improvement in compliance and security best practices. Overall, the site is professional and trustworthy, but could enhance transparency and security to better align with GDPR and industry standards.

B

Bundesinstitut für Öffentliche Gesundheit (BIÖG)

loveline.de

66

Loveline.de is a German government-backed youth portal providing comprehensive educational content on love, friendship, health, appearance, sex, and contraception. It targets teenagers and offers interactive videos, anonymous question submission, and consultation center search services. The website is professionally designed, mobile-optimized, and highly accessible, reflecting a mature digital presence. Technically, it is built on TYPO3 CMS with Matomo analytics hosted locally in Germany, ensuring privacy compliance and data protection. Security posture is solid with HTTPS and anonymized analytics, though explicit security headers and incident response policies are absent. WHOIS data is minimal but consistent with the website's government affiliation. Overall, the site is trustworthy, safe for general audiences, and compliant with GDPR requirements.

P

Pompes funèbres ANGELIS

pfa.fr

59

Pompes funèbres ANGELIS is a small, family-owned funeral services company based in Orléans, France, providing a range of services including funeral organization, cemetery marble works, pre-arranged funeral contracts, and repatriation abroad. The company emphasizes personalized service with a single point of contact and operates 24/7 to support families during difficult times. The website is built on the e-monsite CMS platform using Bootstrap 4 and includes modern web technologies such as jQuery and Google Analytics for tracking. The site is well-structured, mobile-optimized, and provides clear contact information and service descriptions. From a security perspective, the website uses HTTPS and implements a cookie consent mechanism compliant with GDPR. However, no advanced security headers or explicit security policies are detected, and WHOIS data for the domain is unavailable, which slightly reduces trustworthiness. There is no evidence of a vulnerability disclosure policy or security incident response contacts. Overall, the site presents a professional and trustworthy front for its business sector. The risk assessment indicates moderate security maturity with room for improvement in security headers, transparency, and WHOIS data availability. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving accessibility features. The website's content is safe for general audiences, with no adult or explicit material detected.

C

Cmsbox GmbH

cmsbox.ch

57

Cmsbox GmbH is a Swiss-based technology company specializing in a proprietary content management system designed to simplify website editing and enable rapid custom web design implementation. The company targets businesses and web professionals seeking efficient CMS solutions with a focus on ease of use and responsive design. Their market position is niche, emphasizing Swiss software quality and personalized service. Technically, the website employs modern web standards, integrates Google Analytics, Tag Manager, and reCAPTCHA for security and analytics, and uses their own Cmsbox CMS platform. The site is mobile-optimized and presents a professional user experience. Security posture is solid with HTTPS and anti-bot measures, though lacking explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professional, with clear contact information and social media presence. Recommendations include enhancing privacy compliance and security transparency to improve trust and compliance.

The website for landeshauptstadt-hannover.de is the official municipal site for the city of Hannover, Germany. However, the current content is minimal and consists solely of a placeholder page indicating that a new website is under construction. There is no substantive business or service information presented. The domain and hosting appear legitimate and consistent with a government entity, but the site lacks essential content and compliance features at this time. From a technical perspective, the site does not reveal any modern technologies, scripts, or CMS platforms. There is no evidence of HTTPS or security headers, and no privacy or cookie policies are present. The site does not collect user data or provide contact forms, limiting its digital maturity and user engagement capabilities. Security posture is weak due to the absence of HTTPS and security best practices. No incident response or vulnerability disclosure information is available. The WHOIS data is consistent with a legitimate government domain, but the lack of content and security features significantly lowers the overall trust and compliance scores. Overall, the site is currently non-functional as a public information portal and requires substantial development to meet modern standards for security, privacy, and user experience.

H

hannoverimpuls GmbH

hannoverimpuls.de

65

hannoverimpuls GmbH is a regional economic development agency based in Hannover, Germany, focused on supporting startups, business founding, innovation, and internationalization. The organization acts as a key player in the regional economic ecosystem, providing consulting, funding facilitation, and networking services to entrepreneurs and businesses. The website reflects a professional and comprehensive digital presence with rich content, event promotion, and success stories that reinforce its market position. Technically, the website employs modern JavaScript libraries such as jQuery, Swiper.js, and Matomo for analytics, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with a cookie consent mechanism that complies with GDPR requirements. However, no explicit CMS or hosting provider details are evident, suggesting a custom or proprietary platform. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent controls. There is no evidence of security.txt or a published security policy, which could be improved. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is minimal but consistent with a legitimate regional government-related entity. Overall, hannoverimpuls GmbH demonstrates a strong digital maturity and compliance posture with a professional and trustworthy online presence. Strategic improvements in security policy transparency and vulnerability disclosure could further enhance trust and resilience.

G

Gesundheitscluster Lengg

gesundheitscluster.ch

53

Gesundheitscluster Lengg is a Swiss healthcare cluster association that coordinates specialized healthcare, research, and educational institutions in the Lengg area of Zurich. The organization fosters collaboration and innovation among its members to enhance patient care, research, and education. The website reflects a mature digital presence built on WordPress, featuring modern SEO practices, structured data, and interactive elements such as contact and newsletter forms protected by Google reCAPTCHA. Security posture is strong with HTTPS and spam protection, though some HTTP security headers could be improved. Privacy policies and cookie consent mechanisms are present and GDPR compliant. Overall, the site is professional, trustworthy, and well-optimized for its target audience of healthcare professionals, patients, and local authorities.

H

Holidu GmbH

tomas-travel.com

67

Holidu GmbH operates Holidu Smart Destination, a comprehensive platform offering destination management solutions combining advanced technology and personalized services. The company targets tourism destinations and hosts, providing booking systems, guest management, and marketing tools. Their market position is strong in the German hospitality sector, supported by subsidiaries like Bookiply, T-Smart, and Lohospo. Technically, the website employs modern JavaScript frameworks, cloud hosting on AWS, and integrates analytics and marketing tools effectively. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms, though some enhancements like security.txt and explicit incident response policies could improve maturity. Overall, the site is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence suitable for its business domain.

S

Schweizer Bäuerinnen & Bauern

schweizerbauern.ch

53

Schweizer Bäuerinnen & Bauern is a well-established Swiss agricultural organization focused on providing comprehensive information about Swiss farming, promoting local farm products, and engaging the community through stories, videos, and an online shop. The website targets Swiss consumers interested in agriculture and fresh farm products, offering tools such as a farm shop locator and seasonal calendar. Technically, the site is built on WordPress with modern plugins for SEO, multilingual support, and GDPR compliance, demonstrating a mature digital infrastructure. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for its audience.

C

Call-Up Communication & Design

call-up.ch

50

Call-Up Communication & Design is a Swiss-based web design agency specializing in affordable and professional web solutions for small and medium-sized enterprises (KMU) across Switzerland. With over 20 years of experience and more than 650 customer projects completed, the company offers a comprehensive range of services including web design, CMS implementation (notably Contao), e-commerce solutions, hosting, SEO, and online marketing. Their market position is that of a trusted local agency with a strong portfolio and client references. Technically, the website is built on modern web standards with a CMS backend, uses common JavaScript libraries, and is mobile optimized with good SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though some security headers and explicit policies are missing. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and well-aligned with the business claims. Recommendations include enhancing privacy compliance with cookie consent, publishing a security policy, and adding incident response contacts to improve trust and compliance.

Auto Lang - Shop operates a specialized e-commerce platform focused on Mercedes-Benz branded automotive accessories and lifestyle products, targeting primarily German-speaking customers in Switzerland. The website presents a professional and consistent brand image with a clear market niche in premium automotive merchandise. The business model revolves around online retail with fast shipping and a curated product selection. Technically, the site leverages Shopify's robust e-commerce infrastructure, modern JavaScript modules, and integrates multiple marketing and analytics tools such as Facebook Pixel and Klaviyo, indicating a mature digital marketing approach. Security posture is strong with HTTPS enforcement, security headers, and CAPTCHA protections, although explicit privacy and terms of service documentation are missing, which could impact compliance. Overall, the site is trustworthy and well-implemented but would benefit from enhanced transparency and compliance documentation.

The website www.bg-salenstein.ch is currently inaccessible beyond a Cloudflare security challenge page that requires human verification via Turnstile captcha. Due to this, no substantive business content, contact information, or policies are visible. The site appears to be protected by Cloudflare's WAF, which limits the ability to analyze its technical infrastructure or security posture in detail. The lack of visible content and metadata prevents assessment of the company's market position, services, or compliance status. The domain uses privacy protection in WHOIS, which is common for small or private entities but reduces transparency. Overall, the site is currently not analyzable beyond the WAF challenge, resulting in a low AI score and limited insights.

K

Kompetenzzentrum Soziale Dienste Seerücken

sdseeruecken.ch

67

Kompetenzzentrum Soziale Dienste Seerücken is a regional government entity providing social services to the communities in the Seerücken area of Switzerland. The website serves as an information hub for residents, offering news, service descriptions, and contact details. It maintains a professional and accessible design, supporting multiple municipalities with links to partner sites. The technical infrastructure includes modern JavaScript libraries such as jQuery and Font Awesome, and it is built on the GOViS CMS platform. The site is mobile-optimized and implements accessibility best practices. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. Analytics are handled via Matomo, emphasizing privacy. However, the site lacks explicit security policy and incident response contact pages, which could enhance trust and preparedness. Overall, the site is trustworthy, well-maintained, and suitable for its public service role.

S

Schule Salenstein im Grund

schule-salenstein.ch

58

Schule Salenstein im Grund is a local primary education institution based in Salenstein, Switzerland. The website serves as an informational portal for students, parents, staff, and the local community, providing school news, event calendars, contact information, and administrative resources. The site is built on the i-web CMS platform and uses Matomo analytics with a user consent mechanism, reflecting a moderate level of digital maturity. The content is well-structured, primarily in German, and targets a general audience interested in local education services. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with responsive design for mobile devices. While the site uses HTTPS and secure login forms, it lacks visible advanced security headers and explicit security policies. The performance is moderate, and accessibility features are present, contributing to a good user experience. From a security perspective, the site demonstrates basic best practices such as HTTPS enforcement and no exposed sensitive data. However, it lacks publicly available incident response or vulnerability disclosure policies. Privacy compliance is addressed through a privacy and cookie policy with consent mechanisms, aligning with GDPR requirements. The domain registration data is consistent with the website's claims, indicating legitimacy and trustworthiness. Overall, Schule Salenstein im Grund's website is a professional, secure, and compliant educational portal with room for improvement in security policy transparency and technical security headers. The risk level is low, with recommendations focusing on enhancing security posture and policy disclosures.

S

Digitale Themen- und Erlebniswege – smarTrails

smartrails.ch

64

The website smartrails.ch presents itself as a digital platform focused on thematic and experience trails, likely serving a niche market in Switzerland. The site uses modern web technologies such as Nuxt.js, Vue.js, and Tailwind CSS, indicating a contemporary technical infrastructure with good mobile optimization and user experience. However, the content is basic and lacks comprehensive business and contact information, which limits the depth of user engagement and trust signals. Security posture is weak due to the absence of security headers and explicit policies, and privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site is functional and professionally designed but requires significant improvements in security, privacy, and business transparency to enhance trust and compliance.

The website gmd-tg.ch currently serves as a default hosting start page provided by TRINTEC Hosting, indicating that the domain is hosted by TRINTEC and redirects users to the main site trintec.ch. The business focus appears to be web hosting services, targeting a general audience primarily in Switzerland. The site content is minimal, with no privacy, cookie, or terms of service policies present, and limited contact information consisting of an email and physical address. Technically, the site uses basic HTML and CSS without modern frameworks or CMS, and lacks mobile optimization and accessibility features. Security posture is weak due to absence of HTTPS and security headers, and no incident response or vulnerability disclosure information is provided.

S

Stolz WEB GmbH

stolzweb.ch

47

Stolz WEB GmbH is a Swiss-based small technology company specializing in custom web development, online shops, and web applications. Founded in 2012, the company offers tailored software solutions including their proprietary CMS 'Simpli', targeting designers, agencies, and businesses seeking bespoke digital solutions. The website reflects a professional and consistent brand image with clear service descriptions and customer testimonials, positioning Stolz WEB as a reliable niche player in the Swiss web development market. Technically, the site employs modern web technologies such as HTML5, CSS, JavaScript, PHP, and Bootstrap, with a moderate performance profile and good mobile optimization. Analytics are implemented using Google Analytics with IP anonymization and Matomo, indicating some privacy awareness. Security posture is adequate with HTTPS enabled but lacks standard security headers and explicit security policies. Contact information is comprehensive and clearly presented, though privacy and terms policies are missing. Overall, the website is trustworthy and professional but could improve in privacy compliance and security best practices.

B

Basler Kantonalbank

baslerkantonalbank.ch

76

Basler Kantonalbank is a well-established regional Swiss bank providing a broad range of financial services to private customers. The website targets private clients with offerings including accounts, cards, investment advisory, mortgages, and pension planning. The bank maintains a professional online presence with consistent branding and a clear navigation structure. Technically, the website uses modern web technologies and implements cookie consent via OneTrust, ensuring compliance with basic privacy standards. Security posture is strong with HTTPS enforced and good SSL configuration, although explicit security headers and incident response information are not publicly available. Overall, the website reflects a mature digital infrastructure suitable for a large financial institution, with room for improvement in transparency around privacy policies and security disclosures.

E

eProtocole

eprotocole.fr

56

eProtocole is a French-based company specializing in the digitalization and collaborative management of security protocols primarily for the transportation and logistics sectors. Their SaaS platform facilitates communication and compliance between various stakeholders such as order givers, commissionaires, transporters, and drivers. The website is professionally designed using WordPress and modern web technologies, featuring SEO optimization and mobile responsiveness. Security measures include HTTPS enforcement and use of reCAPTCHA, although explicit security headers and policies are not fully implemented or published. The absence of WHOIS data limits domain legitimacy verification, but the website's content and social media presence support its credibility. Privacy compliance is partial, with cookie consent mechanisms present but no clear privacy or terms of service pages. Overall, the site presents a solid business offering with room for improvement in transparency and security documentation.

S

S3pweb

s3pweb.com

62

S3pweb is a French-based company specializing in the aggregation, formatting, and secure management of telematics data for the transport sector. Their platform consolidates data from multiple telematics systems into a unified format, targeting professionals in road transport and logistics. The company offers key services such as 'Le Pass Traçabilité', 'Map&Truck', and 'B-UNIC', positioning itself as a niche provider focused on transport data traceability and interoperability. The website reflects a professional and consistent brand image with clear business messaging and partner endorsements. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including Google Fonts, Google Tag Manager, reCAPTCHA, and smooth scrolling libraries. Hosting is via Amazon S3 and DNS is managed through Microsoft Online, indicating a robust and scalable infrastructure. The site is mobile-optimized, fast-loading, and includes accessibility considerations, contributing to a positive user experience. From a security perspective, the site employs HTTPS with a good SSL configuration, uses reCAPTCHA to protect forms, and implements a cookie consent mechanism compliant with GDPR. However, there is room for improvement by enabling DNSSEC, adding security headers, and publishing formal security policies or incident response contacts. No critical vulnerabilities or suspicious content were detected. Overall, S3pweb demonstrates a solid digital presence with a high level of professionalism and trustworthiness. The domain registration details align well with the business profile, supporting legitimacy. Strategic recommendations include enhancing security posture with additional headers and policies, and expanding transparency around incident response and vulnerability disclosure.

G

Gedtrans

gedtrans.com

60

Gedtrans operates a specialized SaaS platform focused on transport document management, targeting transport subcontractors and orderers primarily in France and Europe. The platform facilitates the collection, verification, and real-time tracking of legal transport documents, helping clients comply with regulatory obligations and streamline their operational processes. With over 12,000 customers annually and a 5-year market presence, Gedtrans positions itself as a leader in its niche. Technically, the website is built on WordPress with modern frameworks like Bootstrap and jQuery, integrating essential tools such as Google reCAPTCHA for form security and Matomo for analytics. The site demonstrates good mobile optimization, SEO practices, and GDPR compliance through cookie consent mechanisms and a comprehensive privacy policy. From a security standpoint, the site enforces HTTPS and employs standard best practices, though it lacks explicit HTTP security headers and a published security policy or incident response plan. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain introduces a minor trust concern but does not detract significantly from the overall legitimacy given the professional presentation and business consistency. Overall, Gedtrans presents a secure, compliant, and professionally managed online presence suitable for its business domain, with recommendations to enhance security headers and incident response transparency to further strengthen trust and resilience.

B

B2P Connect

b2pconnect.com

57

B2P Connect is a French company specializing in digital solutions for the supply chain and transport sectors. Their offerings include freight exchange platforms, document management, shared traceability, pallet management, security protocol management, secure data sharing, telematics portals, recruitment platforms, and multi-service concierge solutions. The company targets B2B clients in transport and logistics, positioning itself as an established provider with a consistent brand and a network of partners. Technically, the website is built on WordPress using Elementor and integrates modern analytics tools such as Google Analytics and Matomo. The site is well-optimized for SEO and mobile devices, with GDPR-compliant cookie consent mechanisms in place. Security posture is good with HTTPS enforced, but lacks explicit security policies and incident response information. WHOIS data is missing or unavailable, which slightly reduces trust but the website content and partner references support legitimacy. Overall, the site is professional, content-rich, and trustworthy for its business audience.

R

Renault Trucks France

renault-trucks.fr

65

Renault Trucks France is a prominent commercial vehicle dealership and manufacturer specializing in heavy trucks and utility vehicles, including electric models. The company operates under the Renault Trucks brand, serving the French market with a broad range of new and used trucks. The website reflects a mature digital presence with consistent branding and comprehensive product offerings. Technically, the site leverages modern analytics and marketing technologies such as Google Tag Manager, Matomo, and HubSpot, integrated within a Drupal CMS framework. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are absent. WHOIS data is unavailable due to AFNIC's response, likely indicating privacy protection, which is justified for a large commercial entity. Overall, the site is trustworthy, professional, and compliant with basic privacy regulations.

P

PTV Logistics

ptvlogistics.com

73

PTV Logistics operates as a global leader in providing advanced software solutions for route planning, optimization, real-time transport visibility, and delivery management. Their SaaS offerings target logistics and transport managers aiming to improve efficiency, reduce costs, and support sustainable road logistics. The company emphasizes a self-learning SaaS suite backed by over 40 years of expertise, positioning itself strongly in the transportation software market. Technically, the website is built on Drupal 10 with modern frontend technologies including Tailwind CSS and JavaScript frameworks. It integrates Google Tag Manager and reCAPTCHA for analytics and security. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforced, cookie consent mechanisms, and bot protection via reCAPTCHA. However, the absence of explicit incident response contacts, vulnerability disclosure, and terms of service pages indicates areas for improvement. The lack of WHOIS data limits domain trust verification, though the professional website presence suggests legitimacy. Overall, the website presents a secure, professional, and privacy-compliant front for PTV Logistics, with recommendations to enhance transparency and domain trustworthiness.

A

AS 24

as24.com

63

AS 24 is a well-established European fuel and mobility services provider targeting professional transport companies, especially heavy goods vehicles. The company operates a large network of service stations and offers a range of services including fuel cards, toll payment solutions, fleet management, and electric vehicle charging. The website is professionally designed using Drupal 10, with good content quality and multilingual support. Privacy compliance is well addressed through a comprehensive cookie consent mechanism. However, the lack of publicly available WHOIS data and absence of explicit security policies or incident response contacts slightly reduce trustworthiness. Overall, the site demonstrates a mature digital presence aligned with its business sector.

B

B2PWeb

b2pweb.com

63

B2PWeb is a well-established French freight exchange platform that connects transporters and freight forwarders, facilitating efficient freight matching and logistics operations. The company behind the platform, B2P, has a long history since 2006 and offers a suite of supply chain solutions including document management and recruitment services. The website is professionally designed, mobile-optimized, and rich in relevant content targeting transport professionals. Technically, the site runs on WordPress with modern plugins and analytics tools like Matomo, ensuring good SEO and privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The lack of WHOIS data reduces transparency but does not significantly detract from the site's legitimacy given the professional presentation and partner endorsements. Overall, B2PWeb presents a credible and mature digital presence in the transportation sector.

I

Robot Challenge Screen

iatfglobaloversight.org

39

The website iatfglobaloversight.org currently serves a robot challenge screen that blocks direct access to its content. This challenge uses a JavaScript-based proof-of-work CAPTCHA mechanism, likely implemented as a Web Application Firewall (WAF) or security measure to prevent automated access. Due to this, no substantive business or contact information is accessible on the page. The domain is registered since 2007 with a reputable registrar and shows no privacy protection, indicating legitimacy. However, the lack of accessible content limits the ability to assess the company's business model, services, or compliance policies. Technically, the site uses advanced JavaScript for the CAPTCHA and is hosted on SiteGround with Cloudfront CDN for assets. Security posture is moderate given the presence of a WAF challenge but lacks standard security headers and DNSSEC. Privacy compliance and business credibility cannot be confirmed due to lack of visible policies or contact data.

E

European Garage Equipment Association aisbl

egea-association.eu

56

The European Garage Equipment Association (EGEA) is a well-established industry association formed in 1980, representing national professional associations and companies involved in garage equipment manufacturing and importation. The association focuses on providing its members with up-to-date information on vehicle technologies, legislative requirements, and standards to maintain competitiveness in the automotive aftermarket sector. The website reflects a professional and consistent brand presence, targeting automotive industry professionals and stakeholders. Technically, the site is built on WordPress with a modern tech stack including Google Analytics and various marketing and tracking tools. Security posture is good with HTTPS enforced and privacy policies in place, though some security headers could be improved. The domain WHOIS data is privacy protected, which is typical for European domains, and no suspicious indicators were found. Overall, the site demonstrates a mature digital presence with moderate tracking and advertising integrations, suitable for its business model and audience.

C

CLEPA

clepa.eu

55

CLEPA is a prominent European association representing automotive suppliers, advocating for sustainability, innovation, and competitiveness within the European automotive supply chain. The organization targets industry stakeholders and policymakers, positioning itself as a key player in the transportation and manufacturing sectors. The website reflects a professional and consistent brand image, with clear business information and active social media presence. Technically, the website is built on WordPress and leverages modern web technologies including JavaScript libraries, Google Tag Manager, and Ajax Search Pro for enhanced user experience. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. Performance is moderate, with a well-structured front-end and use of CDN resources. From a security perspective, the site enforces HTTPS, includes essential security headers, and shows no signs of exposed sensitive data or vulnerabilities. However, it lacks a public security policy or vulnerability disclosure mechanism, which could enhance transparency and trust. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, CLEPA's website presents a low-risk profile with strong business credibility and a solid security posture. Strategic improvements in security transparency and accessibility could further strengthen its digital maturity and stakeholder trust.

U

UNIFAB - Union des Fabricants

unifab.com

46

UNIFAB - Union des Fabricants is a French non-profit association dedicated to the protection of intellectual property and the fight against counterfeiting. The organization provides consumer awareness campaigns, collaborates with customs and law enforcement, and publishes reports to support its mission. The website is professionally designed, primarily in French, and targets consumers, members, and stakeholders interested in intellectual property protection. The business model is focused on advocacy and education rather than commercial sales. Technically, the website is built on WordPress with WooCommerce, uses modern JavaScript libraries, and integrates analytics tools such as Google Tag Manager and Piwik PRO. The site is mobile-optimized and SEO-friendly, with structured data implemented for enhanced search visibility. Security-wise, the site enforces HTTPS and uses Google reCAPTCHA for forms, but lacks explicit security headers in the HTML source. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain www.unifab.com raises concerns about domain registration transparency, which impacts overall trustworthiness. Privacy policy is present and GDPR compliant, but no cookie consent mechanism was found. Overall, the website is functional, secure, and professional, but domain registration opacity and limited contact information reduce business credibility.

F

France Industrie

franceindustrie.org

61

France Industrie is a professional organization representing the unified interests of the French industrial sector. The website positions itself as the authoritative voice for industry in France, providing news, events, publications, and advocacy resources. The organization targets industry professionals, policymakers, and stakeholders within the manufacturing sector. The site is well-branded, with consistent messaging and a strong presence on social media platforms such as Twitter and LinkedIn. The business model centers on industry representation and information dissemination, with a large footprint indicated by the scale of content and events.

L

L’ECO ENTRETIEN®

ecoentretien.eu

41

L’ECO ENTRETIEN® is a French ecological automotive maintenance service focused on providing innovative and economical engine care solutions to reduce vehicle pollutant emissions. The company targets environmentally conscious vehicle owners seeking to limit over-emissions and improve air quality. The website is built on WordPress, leveraging popular plugins such as Yoast SEO and Slider Revolution, indicating a moderate level of digital maturity. The site is well-structured with good SEO practices and mobile optimization, although some accessibility features could be improved. Security posture is moderate; while HTTPS is presumably enabled, no security headers were detected, and no explicit privacy policy or terms of service pages were found. The site uses cookie consent mechanisms and Google Analytics for tracking, but lacks detailed privacy compliance documentation. Overall, the domain age and business founding date align, and the domain uses privacy protection common for small businesses. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, and providing clear contact information to improve trust and compliance.

C

concept.id AGENTUR FÜR MEDIEN

concept-id.de

53

concept.id AGENTUR FÜR MEDIEN is a well-established full-service advertising agency based in Lippstadt, Germany, with over twenty years of experience. The company offers a broad range of services including logo development, corporate design, advertising concepts, media production, print production, digital communication, event and trade fair marketing, and public relations. Their client base ranges from small owner-operated businesses to large medium-sized enterprises across Germany. The website reflects a professional and consistent brand image, with clear navigation and comprehensive content tailored to business clients. Technically, the site leverages modern technologies such as AMP and WordPress, ensuring fast performance and excellent mobile optimization. Privacy and cookie compliance are well implemented, with visible consent mechanisms and a comprehensive privacy policy. Security posture is strong with HTTPS enforced and secure form handling, though some security headers could be improved. Overall, the site demonstrates high professionalism and trustworthiness.

B

BOTfriends

botfriendsx.com

63

BOTfriends X is a conversational AI platform designed to enable businesses and developers to build, optimize, and scale virtual assistants efficiently. The platform offers a comprehensive suite of tools including AI workflow management, human handover capabilities, and integration with various NLU services. Positioned as a specialized SaaS provider in the conversational AI market, BOTfriends targets enterprises seeking advanced AI-driven customer engagement solutions. The company was founded in 2019 and operates primarily out of Germany, reflecting a medium-sized technology business profile. Technically, the website leverages modern web technologies such as Vue.js, Nuxt.js, and Vuetify, ensuring a responsive and user-friendly interface. The use of Google Fonts and Material Design Icons enhances the visual appeal and usability. Hosting and domain registration are managed through reputable providers, although DNSSEC is not enabled, representing a minor security gap. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and uses secure input types for authentication forms. However, no explicit security headers were detected in the provided data, and there is no published security or incident response policy. The absence of privacy and cookie policies reduces compliance confidence, although the platform does collect analytics data via Chatbase. The WHOIS data indicates a consistent and legitimate domain registration with no suspicious patterns. Overall, BOTfriends X presents a professional and credible online presence with a solid technical foundation. To enhance trust and compliance, it is recommended to publish comprehensive privacy and cookie policies, enable DNSSEC, and implement standard security headers. These improvements will strengthen the platform's security posture and regulatory adherence, supporting its growth in the competitive conversational AI market.

L

LF.net Netzwerksysteme GmbH

lf.net

54

LF.net Netzwerksysteme GmbH is a German-based full-service Internet Service Provider specializing in network and system services. Their offerings include a redundant internet backbone, own data center, DSL and dial-in platforms, email, firewall, virus protection, and consulting services. The company emphasizes technical independence and administrative competence through memberships in DeNIC and RIPE. The website content is primarily in German and targets business and private internet users in Germany. Technically, the site uses legacy JavaScript libraries and self-hosted infrastructure, with moderate performance and basic mobile optimization. Security posture is moderate with cookie consent implemented but lacks visible HTTPS confirmation and security headers. WHOIS data for the domain www.lf.net is missing, raising concerns about domain registration legitimacy. Overall, the website is professional but could improve technical modernization and security transparency.

P

PRÜM-Türenwerk GmbH

pruem-digital.de

57

PRÜM-Türenwerk GmbH operates a comprehensive digital platform focused on door manufacturing and related digital services. The website offers a wide range of digital tools, brochures, videos, and live demos tailored for dealers, architects, craftsmen, and end customers, reflecting a strong commitment to digital transformation within the manufacturing sector. The company is positioned as an established medium-sized manufacturer in Germany with a clear focus on integrating digital marketing and product information management into its business model. Technically, the website employs modern web technologies including HTML5, JavaScript, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and a consent management platform (Usercentrics). The site is mobile-optimized and provides a rich user experience with clear navigation and professional design. Security-wise, the site uses HTTPS with secure cookie flags and consent management but lacks explicit security headers and a public security policy or incident response information. Privacy compliance is strong with a comprehensive GDPR-compliant privacy policy and clear data protection officer contact details. Overall, the website demonstrates a mature digital presence with good security posture and privacy compliance, supporting the company's business credibility and trustworthiness.