Security Directory

K

Kaschemme Basel

kaschemme.ch

61

Kaschemme Basel operates as a local cultural venue in Switzerland offering concert, nightclub, and bar services along with event space rentals. The business is supported by a cultural association founded in 2020, emphasizing music, art, and society. The website is built on the Squarespace platform, integrating standard web technologies and marketing tools such as Mailchimp for newsletter signups. Social media presence is active on Facebook, Instagram, and YouTube, enhancing community engagement. Technically, the site is moderately optimized for performance and mobile use, though accessibility features are basic. Security posture is adequate with HTTPS enforced but lacks advanced headers like HSTS and CSP. Privacy compliance is minimal with no visible privacy policy or terms of service pages, though a cookie consent banner is present. Overall, the site is trustworthy and legitimate, with domain registration consistent with business claims.

H

hirscheneck

hirscheneck.ch

63

Hirscheneck is a small hospitality business based in Switzerland, offering restaurant services and a vibrant cultural program including concerts and club events. The website reflects a local venue focused on community engagement through live music and dining experiences. Technically, the site is built on the Webflow platform, utilizing Adobe Typekit fonts and jQuery, providing a modern and responsive user experience with moderate performance. However, the site lacks critical privacy and security documentation such as privacy policies, cookie consent mechanisms, and security headers, which impacts its overall security posture. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. The domain registration data is consistent with the business profile, indicating legitimacy. Overall, the website is safe for general audiences but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

F

Fondation Beyeler

fondationbeyeler.ch

51

Fondation Beyeler is a well-established Swiss museum specializing in modern and contemporary art, located in Riehen/Basel. The institution offers a rich program of exhibitions, educational workshops, events, and a museum shop, targeting art enthusiasts, families, and educators. The website reflects a mature digital presence with multilingual support and comprehensive visitor information. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates various third-party services for analytics and marketing. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

F

Freizeitzentrum Landauer

landauer.ch

67

Freizeitzentrum Landauer is a community leisure center based in Riehen, Switzerland, providing a wide range of indoor and outdoor activities, event hosting, and social spaces for children, youth, and adults. The website reflects a local government or non-profit operated facility focused on community engagement and cultural activities. The digital infrastructure is built on Drupal 10 with modern JavaScript libraries and includes privacy-conscious analytics via Matomo. The site is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. Security posture is good with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are absent. Overall, the domain registration data aligns well with the website's community focus, indicating legitimacy and trustworthiness.

D

Don Bosco Basel GmbH

donboscobasel.ch

48

Don Bosco Basel GmbH operates a music and cultural center in Basel, Switzerland, serving as a hub for various local cultural institutions including orchestras and choirs. The organization provides rehearsal spaces and hosts concerts and cultural events, positioning itself as an important non-profit cultural venue in the region. The website is built on TYPO3 CMS and employs modern web technologies such as Google Tag Manager and Google Fonts, indicating a moderate level of digital maturity. The site is mobile optimized and provides clear navigation and relevant content for its target audience of cultural organizations and the general public interested in music and culture. Security posture is solid with HTTPS enabled and no visible vulnerabilities, although the absence of security headers and cookie consent mechanisms suggests room for improvement. Overall, the website reflects a professional and trustworthy presence aligned with the organization's mission and local cultural ecosystem.

M

Museum Tinguely Basel

tinguely.ch

74

Museum Tinguely Basel is a cultural institution dedicated to the largest collection of kinetic works by Jean Tinguely. The museum offers a variety of services including exhibitions, events, guided tours, workshops, and digital multimedia content. It targets a broad audience including families, schools, and art enthusiasts, positioning itself as a leading museum in Basel, Switzerland. The website reflects a professional and well-structured digital presence with comprehensive event listings and visitor information. Technically, the site uses modern web technologies including JavaScript, CSS, Google Tag Manager, and Cookiebot for consent management, likely built on Adobe Experience Manager CMS. The site is mobile optimized, accessible, and SEO friendly. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and a formal security policy is absent. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, professional, and well-maintained, supporting the museum's mission and visitor engagement.

K

Kulturhuus Häbse

haebse-theater.ch

70

Kulturhuus Häbse is a small, community-focused cultural venue based in Basel, Switzerland, offering theater performances, events, and gastronomy services. The website is professionally designed using the Squarespace platform, featuring good mobile optimization and clear navigation. It integrates ticket sales through partner platforms and maintains active social media channels. The technical infrastructure is modern and secure, with HTTPS and HSTS properly configured. Privacy compliance is addressed through a cookie consent banner and a data protection page, though explicit terms of service and security policies are absent. Overall, the site reflects a trustworthy and legitimate cultural institution with a solid digital presence.

K

kHaus AG

khaus.ch

46

kHaus AG operates as a cultural and community hub in Basel, Switzerland, offering event spaces, coworking offices, and opportunities for co-creation and cultural engagement. The website reflects a medium-sized organization focused on providing spaces for cultural events, seminars, workshops, and coworking with a family atmosphere. Their market position is local and community-oriented, targeting individuals and groups interested in culture and coworking. Technically, the website employs modern web technologies including jQuery, ConsentFriend for consent management, Google Analytics for performance tracking, and Google reCAPTCHA for security. The site is mobile-optimized with good SEO practices and moderate performance. Consent management is robust, supporting GDPR compliance with clear cookie consent mechanisms. From a security perspective, the site uses HTTPS with good SSL configuration and implements Google reCAPTCHA to protect forms from spam. However, explicit security headers are missing, and there is no published security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations. The risk level is low, but enhancing security policies and transparency would further strengthen their posture.

Kaserne Basel is a prominent cultural venue in Switzerland specializing in contemporary theater, dance, performance, and popular music. The website serves as a platform to showcase upcoming events, artist residencies, workshops, and discourse series, targeting a broad audience interested in the arts. The business model revolves around event hosting, cultural programming, and community engagement, positioning Kaserne Basel as a key player in the Swiss cultural landscape. Technically, the website is built using modern web technologies including SvelteKit and leverages cloud storage and third-party services like MailerLite for newsletters and Google Analytics for minimal user tracking. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. Hosting appears to be provided by Infomaniak, a reputable Swiss provider. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes several security headers. Google Analytics is configured with privacy-conscious settings such as IP anonymization and disabled ad personalization. However, the absence of explicit privacy and cookie policies, as well as lack of incident response contact information, represent compliance and transparency gaps. Overall, the website is professional and trustworthy with a solid security posture but would benefit from improved privacy compliance and clearer user consent mechanisms. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing a security.txt file, and enhancing accessibility and incident response transparency.

M

Markthallen AG Basel

altemarkthalle.ch

58

Markthallen AG Basel operates the Markthalle Basel, a vibrant marketplace and hospitality venue offering food stands, regional markets, fresh produce, bars, and event spaces. The website positions the business as a community hub in Basel, Switzerland, targeting a general audience interested in local food and events. The business model focuses on retail and hospitality services with additional offerings such as catering, room rentals, and guided tours. Technically, the website is built on WordPress with WooCommerce and integrates modern plugins for SEO, cookie consent, and analytics. The site demonstrates good digital maturity with responsive design and SEO optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the website is trustworthy, compliant with GDPR, and professionally maintained, supporting a medium-sized business in the hospitality sector.

The website youronlinechoices.eu serves as an informational platform funded by the internet advertising industry to educate users and companies about online behavioural advertising and privacy. It supports a pan-European self-regulatory initiative aimed at enhancing transparency and user control over data used for interest-based advertising. The site targets both internet users concerned about privacy and companies seeking to adopt industry best practices. Technically, the website uses legacy technologies such as jQuery 1.7.1 and custom JavaScript, with basic mobile optimization and moderate performance. There is no evidence of modern CMS or advanced frameworks. Security posture is limited, with no visible security headers or HTTPS verification in the provided data, and outdated libraries present potential vulnerabilities. Privacy compliance is weak, lacking explicit privacy or cookie policies and consent mechanisms. Business credibility is moderate, supported by consistent branding and industry backing but lacking direct contact information or certifications. Overall, the site is functional and informative but requires improvements in security, privacy compliance, and technical modernization.

S

Stiftung Mercator

aufruhr-magazin.de

56

AufRuhr Magazin is a non-profit media publication operated under the Stiftung Mercator umbrella, focusing on social, cultural, and environmental topics such as European integration, climate protection, and cultural education. The website serves a general audience interested in these areas, providing articles, videos, and newsletters to disseminate educational content. The business model is centered on non-commercial media outreach supported by a reputable foundation, positioning itself as a niche but trusted source in its domain. Technically, the website is built on WordPress using the Nucleus theme and incorporates modern web technologies including jQuery, Yoast SEO, and Borlabs Cookie for GDPR-compliant cookie management. It employs push notifications via OneSignal and uses Matomo and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good SEO practices and moderate performance. From a security perspective, the site enforces HTTPS and implements JavaScript error logging and cookie consent mechanisms. However, explicit security headers like CSP or X-Frame-Options are not evident, and no formal security policy or incident response contacts are published. No vulnerabilities or exposed sensitive data were detected, indicating a solid security posture for a non-profit media site. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with a strong affiliation to Stiftung Mercator enhancing its credibility. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility compliance to further strengthen its security and user trust.

TouristDataShop AG operates as a specialized provider of digital tourism data and booking solutions in Switzerland, primarily focusing on the Holidu Smart Destination platform. The company targets destinations, cities, and accommodation providers, offering services including sales, support, shared services, and helpdesk functions. Their market position is that of a niche player within the Swiss tourism technology sector, leveraging partnerships and integrations to enhance their offerings. Technically, the website is built on the Contao CMS platform, utilizing modern web technologies such as jQuery and Google Tag Manager for analytics and tracking. The site is mobile-optimized with good navigation and content quality, though some accessibility features could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website reflects a professional and trustworthy business presence with room for enhancements in security and privacy transparency.

E

EasyGov

easygov.ch

73

EasyGov is an official Swiss government digital platform designed to streamline administrative and regulatory processes for companies operating in Switzerland. It offers a comprehensive suite of services including company registration, VAT and social insurance registration, debt enforcement proceedings, trade mark protection, and electronic signing with qualified electronic signatures. The platform is positioned as a trusted, centralized online desk supported by the Swiss Confederation, cantons, and municipalities, aiming to reduce administrative burdens and costs for businesses and authorities alike. Technically, EasyGov employs a modern Angular framework with responsive design, ensuring accessibility across devices. The site integrates privacy-compliant cookie consent mechanisms and embeds privacy-enhanced YouTube videos. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements could be made by adding explicit security headers and publishing a security.txt file. Overall, the platform demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource for Swiss businesses.

S

SpeedAdmin ApS

speedadmin.com

61

SpeedAdmin ApS is a Denmark-based company specializing in SaaS solutions for music schools and services, offering comprehensive software to manage planning, teaching, attendance, and finances. The company has established a strong market presence in Europe, trusted by over 600 schools across 10 countries. Their website reflects a professional and consistent brand image, supported by certifications such as ISAE3000 and AAA Silver 2024, enhancing their credibility. Technically, the website is built on Webflow and leverages modern web technologies including Google Analytics, Microsoft Clarity, and various tracking pixels for marketing and analytics purposes. The site is fast, mobile-optimized, and SEO-friendly, though accessibility features could be improved. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published incident response policies. The WHOIS data is unavailable, which slightly reduces trustworthiness; however, the website's content quality, certifications, and clear contact information mitigate concerns. Overall, the site demonstrates a mature digital infrastructure suitable for its business domain, with room for security and compliance enhancements. Strategic recommendations include adding security headers, publishing incident response and vulnerability disclosure policies, improving accessibility, and adding a Terms of Service page to strengthen legal clarity and user trust.

D

Duesenberg

duesenberg.de

60

Duesenberg is a German manufacturer and retailer of premium guitars and related musical instruments, known for combining traditional craftsmanship with modern design and artist collaborations. The website positions the brand as a niche player targeting musicians and guitar enthusiasts globally, with a strong emphasis on quality and innovation. The digital infrastructure is built on modern web technologies including Bootstrap, jQuery, and Google Tag Manager, with good mobile optimization and user experience. Privacy compliance is well addressed through a comprehensive privacy policy and cookie consent mechanism. Security posture is solid with HTTPS and privacy-enhanced video embeds, though some security headers and incident response details are missing. Overall, the website is professional, trustworthy, and well-suited for its business purpose.

B

BOSS Corporation

boss.info

70

BOSS Corporation operates a comprehensive global website showcasing its world-leading product lineup of guitar effects processors, multi-effects, loop stations, and related audio equipment. The brand is well-established in the music technology industry, targeting musicians and audio professionals worldwide. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Kentico CMS, Adobe Analytics, and OneTrust for privacy compliance. Security posture is solid with HTTPS enforced and a vulnerability disclosure policy publicly available, though explicit security headers could be improved. The absence of WHOIS data is likely due to privacy protection and does not detract from the site's legitimacy given its strong brand presence and professional content. Overall, the site demonstrates a mature digital infrastructure with moderate user tracking balanced by privacy mechanisms.

M

Mediawerk GmbH

mediawerk.ch

47

Mediawerk GmbH is a Swiss-based content creation agency specializing in video production, photo production, social media, and web development services. The company positions itself as a modern, fresh, and creative agency targeting businesses and individuals in Switzerland seeking professional content creation. The website showcases a portfolio of projects and client testimonials, reinforcing its market presence and credibility. Technically, the website is built on WordPress using popular plugins such as Elementor and Yoast SEO, with a modern tech stack including jQuery, Bootstrap, and various JavaScript libraries for enhanced user experience. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and explicit security or incident response policies. There is no cookie consent mechanism, which is a compliance gap given GDPR relevance. No vulnerabilities or suspicious content were detected. Overall, the website is professional and trustworthy, with clear business contact information and consistent branding. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance the site's security posture and compliance standing.

Dissenter GmbH is a Swiss-based small technology company specializing in the creation of web applications, interactive exhibits, apps, and print design services. Founded in 2006 and currently led by experienced professionals, the company serves a diverse clientele including government entities and well-known corporations. Their service offerings span web design, app development, interactive POS solutions, and print media, positioning them as a niche provider in the digital and classical communication space. Technically, the website employs modern web technologies such as HTML5, CSS, JavaScript, and integrates Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and provides clear navigation, though it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS usage but missing explicit security headers and incident response information. Overall, the domain registration data aligns well with the company's claims, supporting legitimacy. Strategic improvements in privacy compliance and security headers would enhance trust and regulatory adherence.

S

Sauter Informatik AG

si-cube.ch

52

Sauter Informatik AG is a Swiss IT company founded in 1991, specializing in IT solutions including software, hardware, and custom website development. Their proprietary CMS platform, SI-CUBE, offers fixed-price, professional, and responsive websites targeted primarily at small and medium-sized enterprises in the region. The company emphasizes ease of use, professional design, and ongoing support. Technically, the website uses a modern but basic tech stack including jQuery, Bootstrap, and custom scripts, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and CAPTCHA protections, but lacks advanced security headers and formal policies. Privacy compliance is limited due to absence of privacy and terms of service pages. Overall, the website is professional and trustworthy, reflecting a legitimate business with consistent WHOIS data and clear contact information.

R

Roland Corporation

roland.com

76

Roland Corporation operates a comprehensive global website showcasing its leadership in manufacturing and distributing electronic musical instruments and related audio equipment. The company targets musicians, producers, and audio professionals with a broad product portfolio including keyboards, synthesizers, guitars, percussion, and digital recording tools. The website demonstrates a mature digital presence with rich multimedia content, clear navigation, and integration of modern web technologies such as Adobe Analytics and OneTrust for privacy compliance. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response contact details could be improved. The absence of WHOIS data reduces domain registration transparency but does not detract from the evident legitimacy of the brand and its digital assets. Overall, the site reflects a professional, enterprise-grade digital footprint aligned with Roland's market position.

M

Musik Spiri

spiri-shop.ch

43

Musik Spiri is a specialized retail and rental business focused on musical instruments and accessories, operating primarily in Switzerland with physical stores in Winterthur and Meilen. The website serves as an e-commerce platform showcasing a wide range of products including harps, woodwind, brass instruments, percussion, and related accessories. The business targets musicians and music enthusiasts in the regional market, offering both sales and rental services. The company maintains a consistent brand presence with clear contact information and social media engagement. Technically, the website employs modern web technologies such as jQuery, Bootstrap, Google Analytics, and reCAPTCHA, ensuring a functional and user-friendly experience with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and use of CAPTCHA, though it lacks advanced security headers and explicit security policies. Privacy compliance is basic but present, with cookie consent and privacy policy available. Overall, the website is professional, trustworthy, and well-positioned for its market segment.

S

Spiri AG

spiri-trompete.ch

52

Spiri AG is a Swiss-based manufacturer specializing in custom and modular trumpets, leveraging a unique System Vario to cater to diverse musical needs. The company targets musicians and trumpet enthusiasts seeking personalized instruments, positioning itself as a niche player in the manufacturing sector. The website reflects a professional and consistent brand image with clear contact channels and product information. Technically, the site is built on the cm4all CMS platform, hosted by Hostpoint, and uses legacy JavaScript libraries alongside modern tools like Google Tag Manager. While the site is mobile-optimized and accessible, it lacks some modern security headers and explicit privacy compliance mechanisms. Security posture is solid with HTTPS and secure forms, but could be improved with additional headers and incident response information. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

F

FundCom AG

fundcom.ch

57

FundCom AG is a small, owner-managed marketing and fundraising agency based in Zurich, Switzerland, founded in 2018. The company specializes in marketing communication and fundraising consultancy, targeting non-profit organizations and institutions seeking effective communication and fundraising strategies. The website is professionally designed using WordPress with Elementor and optimized for performance with NitroPack, reflecting a modern digital infrastructure. The presence of structured data and social media links enhances their online credibility. Security posture is strong with HTTPS, security headers, and cookie consent via Cookiebot, although explicit privacy and terms of service policies are missing. Overall, the website and WHOIS data align well, indicating a legitimate and trustworthy business.

K

Kanton Solothurn

so.ch

67

The website so.ch serves as the official digital portal for the Canton of Solothurn, Switzerland, providing comprehensive government information, public services, and administrative resources. It targets residents, businesses, and stakeholders within the canton, offering structured navigation to departments such as government, parliament, judiciary, and administration. The site leverages TYPO3 CMS, ensuring a stable and scalable content management environment. Technical infrastructure includes modern web technologies, Google Fonts, Matomo analytics for user insights, and reCAPTCHA for form security. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though improvements can be made by adding security headers and cookie consent mechanisms. Overall, the site reflects a professional government presence with high trustworthiness and good user experience.

Ausstellungsraum Klingental operates as a cultural exhibition space in Switzerland, focusing on hosting art exhibitions and providing free consultations for cultural workers. The website presents a clear schedule of upcoming events and exhibitions, targeting artists, cultural professionals, and the general public interested in contemporary art. The business model appears to be non-profit or cultural institution-oriented, with a local/regional market position. Technically, the website is built using Vue.js with deferred JavaScript loading, indicating a modern frontend framework usage. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Hosting details and CMS are not explicitly identified. From a security perspective, the website lacks visible security headers, privacy policies, cookie consent mechanisms, and contact information for security or data protection concerns. No analytics or tracking scripts were detected, which reduces privacy risks but also indicates limited data-driven insights. The absence of HTTPS enforcement details and security best practices lowers the security posture. Overall, the website is functional and professionally designed for its cultural purpose but requires improvements in privacy compliance, security hardening, and contact transparency to enhance trust and regulatory adherence.

G

Gemeinde Muttenz

hagnau-schaenzli.ch

51

The website www.hagnau-schaenzli.ch serves as an official municipal government portal for the community of Muttenz, Switzerland, focusing on urban development projects in the Hagnau and Schänzli areas. It provides detailed information about cooperative neighborhood planning procedures and private construction concepts, targeting local residents and stakeholders interested in community development. The site is positioned as a trusted source for project updates and community engagement within the local government sector. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies such as Google Analytics and Google Tag Manager for visitor tracking and performance monitoring. The site demonstrates moderate performance and good mobile optimization, with a clear navigation structure and professional design. However, it lacks some advanced accessibility features and explicit SEO enhancements beyond basic meta tags. From a security perspective, the site enforces HTTPS with anonymized IP tracking in Google Analytics, which is a positive privacy measure. Nonetheless, it lacks critical HTTP security headers and does not implement a cookie consent mechanism, which are important for GDPR compliance and overall security posture. No incident response or vulnerability disclosure policies are published, and no contact information is readily available on the homepage, which could hinder user trust and support. Overall, the website is a reliable and professional municipal information portal with room for improvement in privacy compliance and security best practices. Strategic enhancements in cookie consent, security headers, and transparent contact channels would strengthen its trustworthiness and regulatory adherence.

S

Swiss Public Services

publicjobs.ch

53

Publicjobs.ch is a specialized Swiss job portal focusing on socially meaningful jobs within the public administration sector and related organizations such as non-profits, healthcare, education, and energy. The platform offers job listings, employer profiles, and candidate account management primarily targeting job seekers interested in public sector employment in Switzerland. The website is well-branded and consistent, with a clear focus on its niche market. Technically, it uses a combination of Bootstrap, jQuery, and various third-party analytics and tracking services, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and secure login forms, but lacks some security headers and published security policies. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism despite extensive tracking. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

C

codingcircle.net

codingcircle.net

41

CodingCircle.net is a small network platform focused on connecting web development professionals in cities such as Berlin, Munich, Vienna, and Bristol. The website provides a minimal but clear description of its purpose as a network for web developers. The technical infrastructure is based on WordPress CMS with jQuery, hosted under a domain registered in 2021, which aligns with the site's modest scope and recent establishment. The site is accessible without any blocking or WAF interference, and it uses HTTPS with a registrar-enforced clientTransferProhibited status, enhancing domain security. From a security perspective, the site has a basic posture with HTTPS enabled but lacks advanced security headers and DNSSEC. There is no evidence of cookie consent mechanisms or comprehensive privacy compliance, which could be improved to meet GDPR standards. No contact information or incident response channels are provided, limiting transparency and user trust. The absence of analytics and advertising scripts suggests minimal user tracking, which is positive for privacy. Overall, the site is safe with no adult or questionable content detected. It serves a niche community with basic content and moderate technical implementation. The security and privacy posture is adequate but could benefit from enhancements in policy disclosures, security headers, and contact transparency. The AI score reflects these findings, indicating a functional but basic website with room for improvement in compliance and security best practices.

B

Basics09

basics09.de

38

Basics09 is a Berlin-based design agency specializing in transmedia concepts primarily serving the art, culture, design, science, and education sectors. The company offers services including visual identity, campaigns, strategy, publication, exhibition graphics, and website design. Their market position is that of a niche, small-sized agency with a professional and consistent brand presence. The website reflects a high level of digital maturity with modern technologies such as Alpine.js, lazy loading, and embedded Vimeo videos, delivering excellent user experience and mobile optimization. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though lacking explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security transparency.

P

PARAT.cc GbR

parat.cc

51

PARAT.cc is a Munich-based design studio specializing in corporate design, branding, UI/UX, and campaign design primarily for cultural, political, and business sectors. The website showcases a professional portfolio with diverse projects including exhibitions, campaigns, and publications, indicating a niche market position focused on creative and cultural branding services. The business targets organizations seeking high-quality design and branding solutions with a strong emphasis on cultural relevance. Technically, the website employs a modern but lightweight tech stack including jQuery, Video.js, Masonry, and Matomo analytics, reflecting a custom-built platform rather than a common CMS. The site is mobile-optimized with good performance and basic accessibility features. SEO is basic but sufficient for the niche. Security posture is solid with HTTPS enforced and consent-based analytics tracking via Matomo. However, the site lacks advanced security headers and formal security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a trustworthy and professional image with low risk. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and adding vulnerability disclosure information to improve transparency and trust.

B

BKK24

bkk24.de

60

BKK24 operates as a statutory health insurance provider in Germany, offering a wide range of healthcare services with a focus on comprehensive coverage and customer support. The website positions itself as a reliable and accessible insurer with nationwide presence and 24/7 service availability. The business model centers on statutory health insurance, targeting insured individuals and employers within Germany. The website content is professionally presented, consistent with the healthcare industry standards, and compliant with GDPR regulations. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Bootstrap for responsive design and user interaction. Cookiebot is integrated for cookie consent management, reflecting a mature approach to privacy compliance. Hosting is managed via kasserver.com, with secure HTTPS connections and moderate performance. SEO and accessibility are adequately addressed, though some improvements in accessibility could be beneficial. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. The absence of a public security policy or incident response contact suggests room for improvement in transparency and readiness. Analytics usage is moderate, primarily via self-hosted Matomo and etracker, with clear data retention policies. Overall, BKK24's website demonstrates a solid digital presence with good privacy and security practices aligned with its business sector. Strategic enhancements in security headers, incident response disclosure, and accessibility would further strengthen its posture. The site is trustworthy, professional, and suitable for its target audience.

N

Niedersächsische Lotto-Sport-Stitung

stiftungsbericht.de

53

The website www.stiftungsbericht.de represents the Niedersächsische Lotto-Sport-Stiftung, a non-profit foundation established in 2009 by the Lower Saxony government through the merger of two prior foundations. The site primarily publishes annual foundation reports for public access, targeting a general audience interested in the foundation's activities and impact. The foundation holds a stable market position as a regional non-profit entity in Germany. Technically, the website employs modern web technologies including JavaScript ES modules, CSS, and the htmx framework, hosted on servers associated with kasserver.com. It uses Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. The site is mobile optimized with good SEO and accessibility basics, though some accessibility features could be improved. Security-wise, HTTPS is enforced with no visible sensitive data exposure, but lacks explicit security headers and formal security policies published on the site. No forms or contact details are present, limiting direct user engagement and incident response readiness. Overall, the site is professional and trustworthy but could enhance privacy and security transparency.

The website 'Bewegen.Integrieren.Fördern' serves as a crowdfunding platform operated by the Niedersächsische Lotto-Sport-Stiftung, focusing on supporting sports projects within Lower Saxony, Germany. It provides a digital venue for local sports clubs and initiatives to raise funds, featuring project listings with progress tracking and community engagement features. The platform leverages modern web technologies including React and integrates accessibility tools to enhance user experience. The site is well-structured, mobile-optimized, and includes privacy and cookie consent mechanisms aligned with GDPR requirements. Technically, the platform is built on a proprietary or custom CMS with integration of third-party services such as Google Analytics (with IP anonymization) and Eye-Able accessibility scripts. Hosting and DNS are managed via DomainControl (GoDaddy), and the site uses HTTPS with a good SSL configuration. However, there is a lack of visible HTTP security headers which could be improved to enhance security posture. From a security perspective, the site demonstrates good baseline practices including encrypted connections and user consent for cookies. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of a published security policy or incident response contact limits transparency in security management. WHOIS data is limited but does not raise concerns about legitimacy. Overall, the site is trustworthy and professionally maintained. Strategically, the platform is positioned as a regional niche crowdfunding service for non-profit sports projects, supported by a lottery sports foundation. It targets sports clubs and community members in Lower Saxony, providing a valuable service to facilitate funding and engagement. The business model is straightforward, relying on project hosting and donation facilitation. The site’s digital maturity is moderate with room for technical and security enhancements to further strengthen trust and compliance.

The website media-kit.io currently presents no accessible content, with an empty HTML body and no metadata, scripts, or forms. The domain is registered through IONOS SE under 1&1 Internet Limited in Great Britain, but the domain creation date is set in the future (June 2025), which is inconsistent and likely erroneous. The site uses Cloudflare nameservers but lacks DNSSEC and security headers, indicating a basic security posture. There are no privacy, cookie, or terms of service policies, nor any contact information or social media links, which limits user trust and compliance with data protection regulations. Overall, the website appears to be either under development or abandoned, with minimal technical or business maturity.

2

Application error: a client-side exception has occurred

24h-camions.com

54

The website www.24h-camions.com is positioned as the official portal for the 24 Heures Camions truck racing event scheduled for September 2026. It aims to provide event news, multimedia content, schedules, results, and ticketing information primarily targeting French-speaking motorsport enthusiasts. However, the current site is non-functional due to a client-side JavaScript error, severely impacting user experience and content accessibility. The technical infrastructure leverages modern web technologies such as Next.js and React, hosted likely on Google Cloud Storage with CDN support, and integrates a consent management platform (Didomi) for cookie compliance. Despite these modern tools, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with HTTPS and consent mechanisms in place but lacks visible security headers and comprehensive privacy documentation. Overall, the site requires urgent remediation of technical errors and improved transparency to enhance trust and usability.

U

Union TLF

e-tlf.com

66

Union TLF is a well-established professional organization representing the transport and logistics sectors in France. Founded in 2000, it serves a large membership base of companies involved in various transport modes and logistics services. The website reflects a mature digital presence with comprehensive information about the organization's services, regional delegations, and industry engagements. The site is professionally designed, well-structured, and optimized for SEO and accessibility, targeting transport and logistics professionals and companies in France. Technically, the site is built on WordPress with modern tools such as Matomo for analytics and Tarteaucitron for cookie consent, demonstrating a commitment to privacy and GDPR compliance. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy entity.

O

ONLYLYON

onlylyon.com

64

ONLYLYON is the official territorial marketing program for the Lyon metropolitan area, focusing on promoting tourism, business investment, education, and cultural activities. The website serves as a comprehensive portal for visitors, investors, students, and event organizers, supported by a network of ambassadors and partners. The site demonstrates a strong market position as a key promoter of Lyon's international ambitions, backed by public and private stakeholders. Technically, the website is built on the Roadiz CMS platform, uses modern web technologies, and integrates Google Analytics and a cookie consent mechanism, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not published. The absence of WHOIS registration data for the domain is a notable anomaly that slightly reduces trustworthiness but does not detract from the professional presentation and content quality. Overall, the website is well-designed, user-friendly, and compliant with privacy regulations, making it a credible and authoritative source for information about Lyon's metropolitan offerings.

T

Transpolis

transpolis.fr

55

Transpolis is a specialized transportation safety and innovation center based in France, offering services such as crash testing, vehicle testing, sensor development, and simulation. The company operates two proving grounds and holds ISO 9001 certification as well as official Euro NCAP laboratory status, positioning it as a reputable player in the automotive safety testing market. The website is built on WordPress with Elementor, leveraging modern web technologies and providing a good user experience with mobile optimization and clear navigation. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although privacy policy and terms of service documents are missing, representing compliance gaps. Overall, the website reflects a professional and trustworthy business with room for improvement in privacy transparency and incident response disclosures.

U

UPTR

uptr.be

54

UPTR is a well-established Belgian professional federation representing transporters and logisticians. Founded in 1937, it provides advocacy, information, and a broad range of specialized services to its members. The website reflects a mature digital presence with multilingual support, clear navigation, and comprehensive content tailored to its target audience. Technically, the site is built on WordPress with WooCommerce and enhanced by SEO and analytics tools like Yoast SEO Premium and Matomo, indicating a modern and privacy-conscious infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some headers could be improved. Overall, the site demonstrates high professionalism and trustworthiness, with no signs of malicious activity or content safety concerns.

S

Syndicat du Pneu

syndicatdupneu.org

53

The Syndicat du Pneu website represents a well-established French trade association dedicated to the tire industry, active since 1929. It serves as a representative body for manufacturers, distributors, wholesalers, and equipment suppliers within France. The website provides industry-related information and resources, targeting professionals in the tire sector. The business model is centered on advocacy, networking, and industry representation, positioning the Syndicat du Pneu as a key stakeholder in the French tire market. Technically, the website is built on WordPress using the Divi theme, enhanced with Yoast SEO for search optimization and Burst Statistics for analytics. The site demonstrates good mobile optimization and moderate performance. The technical infrastructure is modern and standard for professional association websites, with no major technical debt or outdated components detected. From a security perspective, the site enforces HTTPS and uses standard security practices, though it lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong, with GDPR-aligned privacy and cookie policies and consent mechanisms in place. However, WHOIS data is privacy protected, limiting domain registration transparency. Overall, the website is professional, secure, and compliant, with a low risk profile. Strategic recommendations include enhancing security headers, publishing incident response policies, and improving WHOIS transparency to bolster trust further.

C

CSIAM

csiam-fr.org

45

CSIAM is a well-established French automotive industry association representing international vehicle manufacturers' subsidiaries. The organization acts as a liaison with government and public authorities, informs members about regulatory standards, and participates in future mobility planning. The website is professionally designed using WordPress with modern plugins and technologies, providing good user experience and SEO optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the website is trustworthy and credible with a moderate risk profile.

O

Organisation des Transporteurs Routiers Européens (OTRE)

otre.org

53

The Organisation des Transporteurs Routiers Européens (OTRE) is a professional organization representing the French road transport sector, primarily focusing on SMEs with patrimonial capital. The website serves as a communication and advocacy platform, providing news, events, partnerships, and regional contact information. The organization positions itself as a key representative body for transport professionals in France. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Complianz GDPR, ensuring good SEO and privacy compliance mechanisms like cookie consent. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and documented incident response. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and structure indicate a legitimate and professional entity. Overall, the site is well-designed, mobile-optimized, and provides clear contact information, supporting its credibility and user trust.

I

International Organization of Motor Vehicle Manufacturers

oica.net

59

The International Organization of Motor Vehicle Manufacturers (OICA) is a well-established global industry association founded in 1998, headquartered in Paris, France. The organization focuses on promoting safer, cleaner, and smarter automotive manufacturing practices worldwide. Its website serves as a hub for industry news, statistics, event information, and member coordination, targeting automotive professionals and stakeholders globally. The business model is non-profit and essential within the transportation sector, with a medium-sized organizational footprint. Technically, the website is built on WordPress using Elementor and several Jet plugins, supported by OVH hosting. It employs modern web technologies including hCaptcha for form security and CookieHub for cookie consent management. The site demonstrates good SEO practices with structured data and meta tags, and it is optimized for mobile devices with a moderate performance profile. From a security perspective, the site uses HTTPS and implements CAPTCHA and cookie consent mechanisms, but lacks advanced security headers and published security policies. No vulnerabilities or suspicious content were detected, but the absence of a privacy policy and terms of service pages represents a compliance gap. The WHOIS data confirms domain legitimacy and consistency with the organization's claims. Overall, the website is professional, trustworthy, and content-rich, but could improve privacy compliance and security posture by publishing relevant policies and enhancing HTTP security headers. Strategic recommendations include enabling DNSSEC, adding security and incident response policies, and conducting regular security audits to maintain trust and compliance.

P

PFA

pfa-auto.fr

51

PFA (Plateforme automobile) is a prominent French automotive industry platform established in 2009, representing manufacturers, suppliers, subcontractors, and mobility actors. It serves as a strategic body for innovation, competitiveness, employment, and skills development within the French automotive sector and organizes major events such as Mondial de l’Auto. The website is professionally designed using WordPress with modern plugins and demonstrates a strong digital presence including social media integration and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are missing, representing compliance gaps. Overall, the site reflects a credible and authoritative industry platform with room for improvement in privacy and security transparency.

F

Febetra

febetra.be

45

Febetra is a well-established Belgian federation representing transporters and logistics service providers, founded in 1996. The organization provides professional assistance, legal support, and information services to its members, positioning itself as a key player in the Belgian road transport sector. The website reflects this professional stature with comprehensive content, clear navigation, and multiple contact channels. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates essential tools such as Google Analytics and Tag Manager for analytics and marketing. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score.

La Sphère des Possibles is a French communication agency established since 1992, specializing in communication consulting, event management, and business tourism services primarily in the Lyon region. The company presents itself as an innovative and comprehensive agency with a diverse team capable of addressing various client needs. The website is professionally designed using WordPress and includes rich content such as client testimonials, social media integration, and a video presentation to engage visitors. Technically, the site uses modern web technologies and plugins but lacks some security headers and has an unconfigured Google Analytics plugin. Security posture is moderate with HTTPS enforced and cookie consent implemented, but there is no visible incident response or vulnerability disclosure information. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy and reduces trustworthiness. Overall, the website is functional, professional, and safe for general audiences but would benefit from improved transparency and security practices.

E

Eurexpo Lyon | Lyon events

eurexpo.com

63

The website www.gl-lyonevents.com/fr/eurexpo-lyon serves as an informational platform focused on events at Eurexpo Lyon, a major event venue in Lyon, France. The site appears to target event organizers and attendees interested in Lyon-based events, providing venue details and event-related content. The business model centers on event promotion and support services, although explicit business details and company information are not disclosed on the site. Technically, the site is built on Drupal 10 CMS and integrates modern web technologies including YouTube APIs, lazy loading for images, Matomo analytics, and Google Tag Manager for tracking and marketing purposes. The site is mobile-optimized and includes accessibility features, contributing to a moderate user experience and performance level. Security-wise, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers and published privacy or terms policies, which are important for compliance and trust. The WHOIS data for the domain is unavailable, raising concerns about domain legitimacy and transparency. Overall, the site is functional but would benefit from enhanced security practices, clearer business disclosures, and compliance documentation to improve trust and credibility.

A

AFTRAL

aftral.com

64

AFTRAL is a leading French organization specializing in professional training and education in the transport and logistics sectors. The website offers a comprehensive catalog of courses ranging from CAP to BAC+6 levels, supported by a network of over 120 training centers and multiple campuses. The business targets professionals and students seeking qualifications and certifications in transport, logistics, and supply chain management. The site is well-structured, with clear navigation and a professional design consistent with its market position. Technically, the website is built on Drupal 7 with a variety of contributed modules and libraries such as jQuery UI and Apache Solr for search functionality. It integrates modern tracking and consent management tools including Google Tag Manager, TikTok Pixel, and Cookiebot, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though some technical debt is implied by the use of older jQuery versions. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security or incident response policies. The absence of WHOIS domain registration data raises concerns about domain legitimacy, though the website content and branding strongly suggest a legitimate and established entity. No critical vulnerabilities or exposed sensitive data were detected. Overall, AFTRAL's website presents a professional and trustworthy front for its educational services, but would benefit from enhanced transparency in privacy policies, contact information, and domain registration details to strengthen trust and compliance.

M

Mutualease

mutualease-cml.com

68

Mutualease is a French financial services brand specializing in leasing and financing professional equipment, operating under the Crédit Mutuel Leasing umbrella. The company targets a broad audience including constructors, distributors, private enterprises, and public sector actors, offering tailored leasing solutions such as credit-bail and operational leasing. The website is professionally designed, mobile-optimized, and provides comprehensive information about their services and commitments, including partnerships with reputable entities like the European Investment Fund. Technically, the site uses modern web technologies and integrates Piano Analytics for audience measurement, with a clear cookie consent mechanism ensuring GDPR compliance. Security posture is generally good with HTTPS enforced and a published vulnerability disclosure policy, though explicit security headers and incident response contacts are not visible. The absence of WHOIS data for the domain is a notable concern, suggesting possible registration anomalies, but the overall digital presence and branding indicate a legitimate business. Strategic recommendations include enhancing security headers, publishing explicit security policies, and resolving WHOIS inconsistencies to improve trust and compliance.