Security Directory

B

Bank Avera

bank-avera.ch

74

Bank Avera is a Swiss banking institution offering a broad range of financial services including accounts, credit cards, mortgages, loans, asset management, pension solutions, and e-banking. The website targets both private and corporate clients primarily in Switzerland, positioning itself as a regional bank with a focus on personalized banking solutions. The digital infrastructure supports online account opening and integrates modern web technologies such as Concrete CMS, Google Tag Manager, and Mapbox for location services. Security measures include HTTPS, Google reCAPTCHA v3 on forms, and token-based form submissions, reflecting a mature security posture. However, the absence of explicit cookie consent and published security policies suggests areas for compliance improvement. Overall, the website is professional, trustworthy, and well-structured, supporting the bank's credibility and customer engagement.

A

Andermatt Sedrun Disentis

disentis-sedrun.ch

66

Andermatt Sedrun Disentis operates as a regional tourism destination website promoting the Disentis Sedrun area in Switzerland. The site targets tourists interested in mountain sports, cultural events, and leisure activities. The business model focuses on destination marketing and providing information and services related to tourism. The website is built on modern web technologies including Nuxt.js and integrates Google Analytics and Tag Manager for tracking. The technical infrastructure is moderately optimized for performance and mobile responsiveness. Security posture is good with HTTPS and security headers implemented, but lacks visible privacy and cookie policies, which impacts compliance. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and explicit contact information. Strategic recommendations include adding comprehensive privacy and cookie policies, improving accessibility, and publishing security and incident response information.

V

Val Surses

valsurses.ch

66

Val Surses is a regional tourism website promoting winter sports, accommodations, and events in the Val Surses area of Switzerland, including Savognin and Bivio. The site targets tourists interested in skiing, ski tours, and local cultural events. The business model focuses on providing information and booking services to visitors, positioning itself as a key regional tourism facilitator. Technically, the website is built on Drupal 10, uses modern JavaScript libraries such as Swiper.js, and integrates Google Tag Manager and Fusedeck for analytics and tracking. The site is mobile-optimized and accessible with good SEO practices. Security posture is strong with HTTPS and security headers implemented, though explicit privacy and terms policies are missing. Overall, the site is professional and trustworthy but could improve privacy compliance and contact transparency.

ペライチは日本市場向けに特化したホームページ作成ツールを提供する中規模テクノロジー企業であり、2013年創業の安定した事業基盤を持っています。600種類以上のテンプレートと多彩な機能を備え、専門知識不要で誰でも簡単に高品質なWebサイトを作成可能です。技術的にはAWSを基盤とし、Next.jsを含むモダンな技術スタックを活用し、Google AnalyticsやMixpanelなど複数の分析ツールを導入してデータドリブンな運営を行っています。セキュリティ面ではHTTPSを完全に実装し、ドメインの移管保護も設定されていますが、DNSSEC未導入やセキュリティポリシーの公開不足が改善点です。プライバシー面ではプライバシーポリシーは整備されているものの、クッキー同意メカニズムが未実装であり、GDPR対応は限定的です。全体として高品質で信頼性の高いサービスを提供しているものの、さらなるセキュリティ強化とプライバシー対応の充実が推奨されます。

N

Naturpark Insel Usedom

naturpark-usedom.de

52

Naturpark Insel Usedom operates as a regional non-profit nature park organization dedicated to the conservation and education of the diverse ecosystems on the island of Usedom, Germany. The website serves as an information hub for visitors, nature enthusiasts, and educational groups, providing details about the park's landscapes, wildlife, events, and opportunities for community involvement. The organization holds a recognized certification as a Qualitäts-Naturpark, reinforcing its credibility and commitment to quality standards in nature conservation. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as Leaflet for interactive maps and Swiper for image sliders. It employs Matomo analytics, a privacy-focused tracking solution, and integrates a comprehensive cookie consent mechanism via CCM19, demonstrating a mature approach to privacy compliance. The site is hosted on servers associated with mvnet.de, with HTTPS enforced, ensuring secure communications. From a security perspective, the site benefits from HTTPS and privacy-respecting analytics but lacks explicit security headers like CSP or HSTS, which could enhance its security posture. There is no visible security policy or incident response contact information, which are areas for improvement. No vulnerabilities or suspicious activities were detected in the content or technical setup. Overall, the website presents a professional, trustworthy, and user-friendly platform aligned with its mission. It effectively balances content quality, technical implementation, privacy compliance, and business credibility, making it a reliable resource for its audience.

N

Naturpark Am Stettiner Haff

naturpark-am-stettiner-haff.de

52

Naturpark Am Stettiner Haff is a regional nature park located in northeastern Germany near the Polish border, offering natural landscapes, cultural sites, and educational events. The website serves as an informational and promotional platform for visitors and nature enthusiasts, highlighting the park's features, events, and conservation efforts. It holds a recognized quality certification as a 'Qualitäts-Naturpark' and targets tourists and local visitors interested in nature and culture. The business model is non-profit and government-related, focusing on environmental education and regional tourism promotion. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as Leaflet for interactive maps and Swiper for image sliders. It employs a cookie consent management system (CCM19) and Matomo for analytics, indicating a moderate level of digital maturity and privacy awareness. Hosting is regional, consistent with the park's location, and the site demonstrates good mobile optimization, accessibility, and SEO practices. From a security perspective, the site uses HTTPS and a cookie consent mechanism but lacks explicit security headers like CSP or a published security policy. No incident response contacts or vulnerability disclosure mechanisms are evident. The absence of these elements suggests room for improvement in security posture, although no critical vulnerabilities or exposures were detected in the content. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, providing a safe and informative experience for its audience. Strategic enhancements in security headers, incident response transparency, and expanded contact information would further strengthen its security and compliance stance.

N

Naturpark Feldberger Seenlandschaft

naturpark-feldberger-seenlandschaft.de

50

Naturpark Feldberger Seenlandschaft is a regional nature park in Germany focused on conservation, education, and tourism. The website provides comprehensive information about the park's natural environment, wildlife, conservation projects, and visitor services. It targets nature enthusiasts, tourists, and the local community, operating as a non-profit entity with a recognized quality certification from the Verband Deutscher Naturparke e.V. The website is built on TYPO3 CMS and incorporates modern web technologies including interactive maps and Matomo analytics, reflecting a moderate to good level of digital maturity. Privacy compliance is well addressed with GDPR-aligned policies and a consent management platform. Security posture is adequate with HTTPS and no exposed sensitive data, though it lacks some advanced security headers and formal security policies. Overall, the site is professional, trustworthy, and safe for general audiences.

N

Naturpark Flusslandschaft Peenetal

naturpark-flusslandschaft-peenetal.de

52

Naturpark Flusslandschaft Peenetal is a regional nature park in Germany dedicated to conservation, education, and tourism. The website serves as an informational portal providing detailed content about the park's natural features, events, and educational programs. It targets nature enthusiasts, tourists, and environmental educators. The business operates as a non-profit or government-affiliated entity with a strong regional presence and recognized certification as a Qualitäts-Naturpark. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as Leaflet for interactive maps and Swiper for image sliders. It employs Matomo analytics for privacy-conscious visitor tracking and integrates a comprehensive cookie consent mechanism via CCM19. The site demonstrates good mobile optimization, accessibility, and SEO practices, hosted on mvnet.de infrastructure. From a security perspective, the site uses HTTPS with excellent SSL configuration and implements privacy-friendly analytics and cookie consent. However, it lacks explicit security headers and does not provide a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. It provides a safe and informative user experience with no adult or questionable content. Strategic improvements include enhancing security headers, publishing a security policy, and adding explicit contact details for incident response.

N

Naturpark Mecklenburgische Schweiz und Kummerower See

naturpark-mecklenburgische-schweiz.de

52

Naturpark Mecklenburgische Schweiz und Kummerower See is a regional nature park organization in Germany focused on conservation, education, and tourism. The website provides comprehensive information about the park, including guided tours, events, and educational resources. It targets nature enthusiasts, tourists, and educational groups, positioning itself as a quality-certified nature park with a strong regional presence. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries for maps and UI, and is hosted on regional infrastructure. The site is mobile-optimized, accessible, and SEO-friendly. Security-wise, HTTPS is enforced, cookie consent is implemented with granular controls, and privacy-respecting analytics (Matomo) is used. However, explicit security policies and incident response information are not published. Overall, the site is trustworthy, professional, and compliant with GDPR, with no critical vulnerabilities detected.

N

Naturpark Nossentiner/Schwinzer Heide

naturpark-nossentiner-schwinzer-heide.de

52

The Naturpark Nossentiner/Schwinzer Heide website represents a regional nature park in Germany focused on conservation, education, and tourism. The site offers detailed information about the park's natural features, events such as mushroom walks, and educational programs. It targets nature enthusiasts, tourists, and local communities. Technically, the site is built on TYPO3 CMS with modern front-end technologies and includes a cookie consent mechanism compliant with GDPR. Analytics are handled via Matomo, ensuring privacy-conscious tracking. Security posture is good with HTTPS enforced, though some security headers are missing. No critical vulnerabilities or suspicious content were detected. Overall, the site is professional, trustworthy, and well-structured, supporting the park's mission effectively.

N

Naturpark Sternberger Seenland

naturpark-sternberger-seenland.de

52

Naturpark Sternberger Seenland operates as a regional nature park authority and tourism promoter in Mecklenburg-Vorpommern, Germany. The website provides comprehensive information about the park's natural features, events, and educational offerings, targeting nature enthusiasts, families, and tourists. The business model is non-profit, focusing on environmental education and regional promotion. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries like Leaflet for maps, and integrates Matomo for analytics, reflecting a mature digital infrastructure with good mobile optimization and accessibility. Security posture is solid with HTTPS and consent management in place, though security headers and explicit security policies could be enhanced. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though contact information is primarily via forms rather than direct emails or phone numbers.

B

Biosphärenreservatsamt Schaalsee-Elbe

schaalsee.de

50

The website www.schaalsee.de represents the UNESCO Biosphärenreservat Schaalsee, a regional nature conservation and education entity in Germany. It provides comprehensive information about the biosphere reserve, including natural habitats, conservation efforts, educational programs, tourism, and partner initiatives. The site targets nature enthusiasts, tourists, educators, and regional stakeholders. Technically, the site is built on TYPO3 CMS, uses modern frontend libraries like Swiper.js, and integrates Matomo for analytics along with a consent management platform for GDPR compliance. The website is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism, but lacks explicit security policy pages, incident response contacts, or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data shows consistent domain registration with German name servers, supporting legitimacy. Overall, the site demonstrates a good security posture and privacy compliance suitable for a government/non-profit organization. The risk level is low, with recommendations to enhance security transparency by publishing security policies and incident response contacts, and to consider a vulnerability disclosure mechanism. The website's content is safe for general audiences, focusing on environmental education and regional tourism without any adult or questionable content.

The Biosphärenreservat Südost-Rügen website serves as the official online presence for the UNESCO-recognized biosphere reserve in Southeast Rügen, Germany. It provides comprehensive information about the region's unique cultural landscape, natural environment, and ongoing sustainability projects. The site targets local residents, visitors, and environmental enthusiasts, offering educational content, event announcements, and partner information. The business model is non-profit and government-affiliated, focusing on conservation and regional promotion. Technically, the website employs a traditional but effective tech stack including Bootstrap and jQuery, with Matomo analytics for privacy-conscious user tracking. The site is mobile responsive and well-structured, though it lacks some modern CMS features and advanced accessibility implementations. Performance is moderate, with no critical errors detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks important security headers and a cookie consent mechanism, which are recommended for compliance with EU regulations. No incident response or vulnerability disclosure policies are published, which could be improved to enhance trust and security posture. Overall, the website is trustworthy, professionally maintained, and aligned with its mission. Strategic improvements in privacy compliance and security hardening would further strengthen its position and user confidence.

N

Nationalparkamt Vorpommern

nationalpark-jasmund.de

49

Nationalpark Jasmund is a German national park website representing the smallest national park in Germany, renowned for its ancient beech forests designated as UNESCO World Heritage. The site serves as an informational and educational platform targeting nature enthusiasts, visitors, and volunteers, offering details on the park's natural features, events, and conservation efforts. The business operates within the government and non-profit sectors, focusing on environmental preservation and public engagement. Technically, the website is built on TYPO3 CMS, employs Matomo for analytics with user consent, and embeds multimedia content responsibly. Security posture is solid with HTTPS and consent mechanisms, though it lacks some advanced security headers and formal security policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with no detected adult or questionable content.

N

Nationalpark Vorpommersche Boddenlandschaft

nationalpark-vorpommersche-boddenlandschaft.de

49

The website www.nationalpark-vorpommersche-boddenlandschaft.de serves as the official digital presence for the Nationalpark Vorpommersche Boddenlandschaft, the third largest national park in Germany. It provides comprehensive information about the park's natural environment, history, visitor guidelines, events, and educational programs. The site targets nature enthusiasts, visitors, and educational groups, offering detailed content in German with English language support. The business model is primarily informational and educational, supported by government or non-profit funding, with a strong emphasis on conservation and public engagement. Technically, the website is built on TYPO3 CMS, a mature open-source content management system, and employs Matomo for analytics, ensuring privacy-conscious user tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Security is adequate with HTTPS enforced and a consent management platform in place, though it lacks some advanced security headers and explicit security policies. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. However, the absence of a published security policy or incident response contact is a minor gap. Overall, the domain registration data aligns well with the website content, indicating legitimacy and consistency. The overall risk profile is low, with recommendations focusing on enhancing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms to further strengthen trust and resilience.

M

Müritz-Nationalpark

mueritz-nationalpark.de

50

The Müritz-Nationalpark website represents a well-established German national park authority providing comprehensive information about the park, its nature, educational programs, and visitor services. The site targets nature enthusiasts, educational institutions, and volunteers, positioning itself as a leading government/non-profit entity in environmental conservation and public education. The business model is non-commercial, focusing on conservation, education, and sustainable tourism. Technically, the website is built on TYPO3 CMS, uses modern mapping technologies like Leaflet with OpenStreetMap tiles, and integrates Matomo for analytics, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. No critical vulnerabilities or exposed sensitive data were found. Overall, the site is trustworthy, professional, and compliant with GDPR, though it could improve transparency around security and incident response. The domain registration aligns with the regional network, supporting legitimacy. No adult or questionable content is present, making it safe for general audiences.

H

Heureka Group a. s.

dendopravyzdarma.sk

67

Heureka Group a. s. operates a comprehensive e-commerce service platform primarily serving Slovakia and the Czech Republic. The company offers advertising solutions, data analytics, affiliate programs, and marketplace services tailored for e-shops and brands. Their blog and webinar content demonstrate active engagement with their target audience, focusing on e-commerce growth and marketing strategies. Technically, the website employs modern tracking and consent management tools such as Google Tag Manager, Visual Website Optimizer, and Didomi, indicating a mature digital infrastructure. The site is well-structured, mobile-optimized, and maintains good SEO practices. Security-wise, the site enforces HTTPS and uses consent management but lacks explicit security headers and incident response contacts, which are recommended for improvement. The WHOIS data is privacy protected, a common practice for commercial entities, and the domain appears legitimate based on content and business consistency. Overall, the website presents a professional, trustworthy, and compliant digital presence with room for enhanced security transparency.

R

Radionix

radionix.com

64

Radionix is a security systems provider specializing in integrated intrusion detection, access control, fire alarm, and video monitoring solutions. Positioned as part of the KEENFINITY Group, Radionix targets commercial, educational, financial, and retail sectors with a focus on delivering mission-critical security technology. The website presents a professional and comprehensive digital presence with multimedia content and clear navigation, supporting a medium-sized enterprise profile. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript libraries such as Swiper.js for interactive content. The site is mobile-optimized and accessible, with good SEO practices evident. HTTPS is enforced, and embedded content uses privacy-conscious YouTube no-cookie domains. However, the absence of explicit security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. From a security posture perspective, the site shows good practices such as no exposed sensitive data and secure iframe usage. The lack of a published security policy, incident response contacts, or vulnerability disclosure reduces transparency and preparedness. The missing WHOIS data for the domain is a notable concern, impacting trust and legitimacy assessments despite the professional site content. Overall, Radionix's website is well-designed and functional, but the domain registration opacity and limited direct contact information suggest the need for enhanced transparency and security governance to strengthen trust and compliance.

Telex, a brand under Bosch Global, specializes in communication solutions for radio dispatch and aviation sectors, offering hardware and software products designed for high-pressure environments. The company has a strong market presence with over 50 years of legacy, targeting professional users in telecommunications and transportation industries. The website reflects a mature digital infrastructure with modern technologies, consent management, and comprehensive legal compliance. Security posture is solid with HTTPS enforcement and domain protection, though improvements like DNSSEC and explicit security headers could enhance it further. Overall, the site is professional, trustworthy, and well-structured, supporting Telex's reputation as a reliable communication solutions provider.

B

Bosch Global

rtsintercoms.com

66

RTS Intercom Systems, a brand under Bosch Global, specializes in advanced professional intercom systems tailored for broadcasting, live events, and critical communication environments. With a legacy spanning 50 years, RTS offers a comprehensive portfolio including digital matrix intercoms, wireless systems, partyline intercoms, headsets, and innovative cloud-based communication solutions such as RVOC. The company is positioned as a market leader with multiple industry awards and a strong reputation for reliability and innovation. The website reflects a mature digital presence with excellent content quality, clear navigation, and professional branding consistent with Bosch's standards. Technically, the site employs modern web technologies, including Google Tag Manager and consent management tools, ensuring compliance with privacy regulations and good SEO practices. Security posture is strong with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, RTS demonstrates a robust business and digital maturity suitable for its enterprise-level operations.

E

Electro-Voice

electrovoice.com

54

Electro-Voice is a well-established professional audio equipment company with a history spanning over 90 years, specializing in loudspeakers, microphones, and sound system solutions. The website reflects a mature digital presence with comprehensive product information, support resources, and a strong brand identity supported by active social media channels. The technical infrastructure leverages modern web technologies including Google Tag Manager and a consent management platform, ensuring compliance with privacy regulations. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response details are absent. The absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy, but the overall business credibility remains high based on content quality and external trust signals. Strategic recommendations include enhancing transparency around security policies and improving business contact information visibility.

D

Dynacord

dynacord.com

67

Dynacord is a well-established professional audio company specializing in high-quality amplifiers, system controllers, and sound system software for commercial and fixed installations. The company benefits from a strong brand presence, supported by its parent company Bosch, and targets professional audio engineers and commercial integrators. The website reflects a mature digital presence with excellent content quality, clear navigation, and mobile optimization. Technically, the site uses modern web technologies including Google Tag Manager and a consent management platform, integrated with a CMS API. Security posture is solid with HTTPS enforced and domain registration consistent with the business history, though some improvements in security headers and explicit security policies could be made. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

E

Eidgenössischer Jodlerverband

ejv.ch

47

The Eidgenössischer Jodlerverband is a Swiss non-profit association dedicated to promoting traditional Swiss yodeling and related cultural activities. The organization offers educational courses, organizes events and festivals, and provides resources such as a music club for its members and the wider community interested in Swiss folk music. The website reflects a focused cultural mission with a clear target audience of choirs, instructors, and enthusiasts. The business model is typical for a non-profit cultural association, relying on membership, events, and educational offerings. The site positions itself as a key national entity in the Swiss folk music scene.

Z

Zürcher Schneesportverband

zsv.ch

47

The Zürcher Schneesportverband (ZSV) is a Swiss non-profit sports association dedicated to promoting youth participation in various winter sports disciplines including Alpine skiing, cross-country skiing, biathlon, ski jumping, snowboarding, and freestyle skiing. The organization operates primarily within the Zurich region and serves as a key regional player in winter sports development. Their website provides event information, educational workshops, and resources to support athletes and enthusiasts. The site is well-structured, professionally designed, and uses modern web technologies to deliver content effectively to its target audience. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and several popular plugins such as Yoast SEO and Contact Form 7. It employs Google Analytics and Tag Manager for user tracking and performance monitoring. The site is mobile-optimized and uses HTTPS with a strong SSL configuration, ensuring secure data transmission. However, it lacks some advanced security headers and a cookie consent mechanism, which are recommended for enhanced compliance and security. From a security perspective, the site demonstrates good practices such as secure forms and no visible exposure of sensitive data. There is no evidence of a published security policy or incident response contacts, which could be improved to enhance trust and readiness. The WHOIS data aligns well with the website's claims, showing consistent registrant information and no privacy protection, supporting the site's legitimacy. Overall, the ZSV website is a credible, well-maintained platform serving its community effectively. Strategic improvements in privacy compliance and security policy transparency would further strengthen its security posture and user trust.

D

Deutscher Tennis Bund

dtb-tennis.de

72

The Deutscher Tennis Bund (DTB) operates the official tennis federation website for Germany, providing comprehensive information on national teams, training programs, membership offers, and tennis events. The site targets tennis enthusiasts, players, coaches, and fans within Germany, positioning itself as the authoritative source for tennis-related content in the country. The business model is non-profit and focused on sports promotion and community engagement. Technically, the website leverages Adobe Experience Manager (AEM) as its CMS, hosted on Adobe's cloud infrastructure, and integrates modern technologies such as Cookiebot for consent management, Google Tag Manager for analytics, and Smart AdServer for advertising. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses secure cookies, and implements consent mechanisms aligned with GDPR. While explicit security headers are not fully visible in the HTML, the use of reputable third-party services and secure hosting suggests a strong security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and compliance with privacy regulations. Strategic recommendations include enhancing visible security policies, publishing incident response contacts, and verifying security headers to further strengthen trust and security culture.

S

Schweizerischer Turnverband

stv-fsg.ch

60

The Schweizerischer Turnverband (Swiss Gymnastics Federation) operates the website stv-fsg.ch as the official national body for gymnastics in Switzerland. The site provides extensive information on various gymnastics disciplines, training programs, events, memberships, and partnerships. It targets athletes, trainers, clubs, and sports enthusiasts within Switzerland, positioning itself as a key non-profit organization in the Swiss sports sector. The business model focuses on member services, education, event management, and sponsorship collaborations. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Google Tag Manager and Hotjar for analytics and user experience insights. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Privacy and cookie consent mechanisms are well implemented, reflecting compliance with GDPR requirements. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, representing areas for improvement. The WHOIS data confirms the domain's legitimacy and consistency with the organization's identity. Overall, the website is professional, trustworthy, and well-maintained, with a strong focus on user privacy and compliance. Strategic enhancements in security transparency and contact information would further strengthen its posture.

S

Swiss Sailing

swiss-sailing.ch

65

Swiss Sailing is the official Swiss national association dedicated to sailing, windsurfing, kitesurfing, and wingfoiling. It serves as the governing body for these sports in Switzerland, providing event organization, training programs, and athlete development. The website reflects a well-established organization with a clear focus on both recreational and competitive sailing communities. It maintains strong partnerships with recognized insurers and sport promotion entities, and is affiliated with international sailing bodies such as World Sailing and Swiss Olympic. The target audience includes sailing clubs, athletes, officials, and enthusiasts across Switzerland. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, incorporating modern web technologies such as Google Tag Manager for analytics and Google Fonts for typography. The site is mobile optimized, accessible, and SEO friendly, with a clear navigation structure and professional design. Performance is moderate, with no major technical issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks publicly available formal security policies and incident response contacts. No security headers were detected in the provided data, suggesting room for improvement in hardening the site against common web threats. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, Swiss Sailing presents a trustworthy and professional online presence with strong business credibility and compliance posture. Strategic recommendations include publishing a formal security policy, enhancing security headers, and providing incident response contact information to improve transparency and security readiness.

C

Clientis AG

clientis.ch

72

Clientis AG operates as a leading outsourcing provider for banks in Switzerland, enabling clients to focus on their core business while benefiting from cost advantages and innovations. The website presents a professional and consistent brand image, targeting banking institutions and their customers. The technical infrastructure leverages modern web technologies including React and Liferay CMS, with integrated analytics tools such as Matomo and Microsoft Clarity to monitor user interactions. The site is mobile optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be enhanced further. Security posture is solid with HTTPS enforced and standard security headers implied, but explicit security policies and incident response information are not published, representing an area for improvement. Privacy compliance is well addressed with comprehensive privacy and cookie policies and an active consent mechanism. Overall, the website reflects a mature digital presence appropriate for a medium-sized financial services company.

B

Basler Kantonalbank

bkb.ch

76

Basler Kantonalbank is a well-established Swiss cantonal bank providing a broad range of financial services to private customers, including banking accounts, investment advisory, mortgages, and pension planning. The website reflects a professional and consistent brand presence targeting private banking clients primarily in Switzerland. The technical infrastructure uses modern web technologies with a cookie consent mechanism implemented via OneTrust, ensuring basic privacy compliance. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and published security policies. No blocking or WAF interference was detected, allowing full content access. Overall, the website demonstrates a mature digital presence suitable for a large financial institution.

T

Thurgauer Kantonalbank

tkb.ch

70

Thurgauer Kantonalbank (TKB) is a well-established Swiss universal bank serving primarily the canton of Thurgau. Founded in 1871, it offers a broad range of financial services including retail banking, investment products, mortgage financing, and digital banking through its OLIVIA platform. The website reflects a mature digital presence with comprehensive product information, clear navigation, and strong branding consistency. The bank positions itself as a trusted regional financial institution with a focus on personalized advisory and modern digital services. Technically, the site employs modern analytics and consent management tools, ensuring GDPR compliance and user privacy. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

D

digicube AG

bienen.ch

58

bienen.ch is a comprehensive Swiss platform dedicated to providing high-quality, scientifically grounded information about honey and wild bees, beekeeping, and environmental issues. The platform is supported by organizations focused on improving bee health and habitats, offering educational resources, services, and a marketplace for beekeeping supplies. The website targets beekeepers, environmentalists, and the general public interested in bees within Switzerland. Technically, the site is built on a modern WordPress infrastructure with a rich plugin ecosystem, optimized for performance, mobile responsiveness, and accessibility. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and minimal user tracking via Plausible Analytics. Overall, the site demonstrates high professionalism, trustworthiness, and a strong alignment between WHOIS data and business claims.

R

RaiseNow

raisenow.ch

72

RaiseNow operates a professional SaaS platform focused on enabling nonprofits, associations, and changemakers to efficiently collect donations and manage payments both locally and globally. The website demonstrates a strong market position with over 54,000 organizations trusting their technology, including well-known NGOs such as UNICEF and Amnesty International. The platform offers a comprehensive suite of fundraising tools, payment acceptance solutions, community engagement features, and integration capabilities, positioning itself as a key player in the nonprofit technology sector. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies including Google Analytics 4, Google Tag Manager, and FontAwesome. The site is mobile-optimized, well-structured, and includes SEO best practices. Cookie consent mechanisms and privacy policies indicate a good level of GDPR compliance. However, explicit security headers are not clearly visible in the provided data, suggesting room for improvement in security hardening. From a security perspective, the site uses HTTPS and implements cookie consent, but lacks publicly visible security policies or incident response contacts. The absence of WHOIS registrant data is a concern but does not currently undermine the site's legitimacy given the professional presentation and reputable client base. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, RaiseNow's website reflects a mature digital presence with solid business credibility and moderate technical sophistication. Strategic recommendations include enhancing security header implementation, publishing security policies, and improving transparency around incident response. Monitoring the WHOIS data situation is advised to ensure ongoing trustworthiness.

N

NAEF PARTNERS AG

naefpartners.ch

52

NAEF PARTNERS AG is a Swiss-based boutique consulting firm specializing in corporate development, sales performance, change management, and leadership coaching. The company targets business professionals and organizations seeking tailored consulting services to enhance strategy implementation and leadership effectiveness. Their market position is that of a high-end consulting boutique with a focus on personalized and human-centric business development approaches. Key services include strategy development, leadership empowerment, sales optimization, and change management interventions. Technically, the website is built on the SilverStripe CMS platform and incorporates modern web technologies such as Google Analytics and Google Tag Manager for analytics, along with jQuery-based UI components like Fancybox and Flexslider. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features could be improved. Performance is moderate with asynchronous loading of analytics scripts. From a security perspective, the site enforces HTTPS with an excellent SSL configuration and anonymizes IP addresses in Google Analytics, reflecting some privacy awareness. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options, and does not provide a cookie consent mechanism or a published security policy. No vulnerability disclosure or incident response contacts are present, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and well-aligned with the business's consulting focus. The main risks relate to privacy compliance gaps and missing security best practices. Strategic improvements in these areas would strengthen the security posture and regulatory adherence, supporting the company’s credibility and client trust.

S

schweizeraktien.net AG

schweizeraktien.net

50

schweizeraktien.net AG operates a specialized online platform providing comprehensive information, analyses, and commentary on Swiss stocks, including small caps, unlisted shares, and the OTC market. The company targets investors and financial market participants interested in Swiss equities, positioning itself as a niche content provider within the finance sector. The website is professionally designed and regularly updated, reflecting a focused business model centered on financial content delivery. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO Premium for search optimization, Wordfence for security, and Real Cookie Banner Pro for privacy compliance. Integration with Google Tag Manager and various Google services indicates a mature digital infrastructure. Performance and mobile optimization are good, though some accessibility features could be enhanced. From a security perspective, the site employs HTTPS and Wordfence firewall protections, alongside Google reCAPTCHA on forms to mitigate spam. Cookie consent mechanisms comply with GDPR and Swiss data protection laws. However, explicit security headers like Content-Security-Policy are not detected and should be implemented to strengthen defenses. No vulnerabilities or exposed sensitive data were found. Overall, the website presents a low-risk profile with strong privacy and security practices, though the absence of WHOIS registration data raises questions about domain legitimacy. Continuous monitoring of domain registration and further security hardening are recommended to maintain trust and compliance.

S

simple & co gmbh

pokus.ch

55

Pokus is a small Zürich-based digital agency operating under the legal name simple & co gmbh. The company specializes in UX design, web development, CMS solutions, creative coding, and digital concepts including WebApps, SPA, IoT, and interactive installations. Their market position is that of a niche local agency focused on delivering tailored digital solutions to businesses and organizations. The website presents a professional image with clear contact information and a skilled team, but lacks formal privacy and cookie policies, which are important for compliance. Technically, the website uses a modern technology stack including Python/Django backend and frontend frameworks like Vue and React. The presence of technologies for mobile platforms and IoT indicates a diverse technical capability. The website is moderately performant and mobile optimized, though accessibility and SEO optimizations are basic. No analytics or tracking scripts were detected, suggesting minimal user tracking. From a security perspective, the site lacks visible security headers and formal security or incident response policies. The domain uses privacy protection in WHOIS, which is common and justified for small agencies. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the security posture is moderate but could be improved by implementing security headers, HTTPS enforcement, and formal policies. The overall risk is moderate with no critical issues detected. Strategic recommendations include adding privacy and cookie policies, enhancing security headers, implementing vulnerability disclosure and incident response information, and conducting a security audit to strengthen the security posture and compliance.

B

B Studio

bossert.studio

52

The website bossert.studio currently serves as a minimal placeholder with very limited content, primarily displaying a waving hand emoji and a brief 'in progress' description. There is no substantive business information, contact details, or policies presented, indicating the site is under development or not actively maintained. The technical infrastructure is based on modern web technologies such as React and Next.js, suggesting a contemporary development approach, but the lack of content and metadata limits the site's digital maturity. Security posture is weak due to absence of visible HTTPS confirmation, security headers, and privacy compliance documentation. Overall, the site presents a low trust profile with minimal risk but also minimal utility or engagement potential at this time.

Bänziger Hug is a Swiss-based design agency founded in 2011 by Samuel Bänziger and Olivier Hug. The agency specializes in print and interactive design, offering services such as book design, exhibitions, publications, identities, and website design primarily for cultural institutions, businesses, and individuals. The company has a strong market position within its niche, supported by numerous prestigious design awards, indicating a high level of professional recognition and trust. Technically, the website is built using modern web standards including HTML5, CSS3, and JavaScript, with the use of Modernizr for feature detection and Google Analytics for visitor tracking. The site is mobile optimized and performs moderately well, though accessibility features are basic. The absence of a CMS or hosting provider information limits deeper infrastructure insights. From a security perspective, the website benefits from HTTPS with excellent SSL configuration, but lacks important security headers such as Content-Security-Policy and X-Frame-Options. No forms or input fields are present, reducing attack surface, but the absence of privacy and cookie policies indicates compliance gaps. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website content. Overall, the website is professional and trustworthy in appearance and content, but the lack of WHOIS transparency and privacy compliance policies present moderate risks. Strategic improvements in security headers, privacy documentation, and domain registration transparency are recommended to enhance trust and compliance.

N

Nora Vögeli Grafik Design

noravoegeli.com

60

Nora Vögeli Grafik Design is a small, professional design atelier based in Zürich, Switzerland, specializing in art direction, graphic design, branding, and spatial design. The website showcases a comprehensive portfolio of projects including corporate design, event branding, publications, and digital applications, targeting clients seeking creative design services primarily in the Zürich region. Technically, the site is built on the Squarespace platform, leveraging modern web technologies such as HTTPS with HSTS, Google Fonts, and YouTube embeds, providing a moderate performance and good mobile optimization. Security posture is solid with HTTPS and HSTS, but lacks additional security headers and formal privacy or cookie policies. The absence of WHOIS data limits domain legitimacy verification, though the professional presentation and content quality suggest a legitimate business. Overall, the site is well-designed and functional but would benefit from enhanced privacy compliance and clearer contact information to improve trust and security.

Lay Theme is a specialized WordPress theme provider focused on creative professionals and portfolio websites. Established in 2015, the company offers a customizable theme with a unique layout tool called the Gridder, extensive customization options, WooCommerce shop support, and various addons to enhance website functionality. The website demonstrates a professional market position within the niche WordPress theme industry, targeting creatives who want visually appealing and customizable portfolio sites. Technically, the site leverages modern JavaScript libraries, video integration, and multiple marketing pixels, hosted on DreamHost. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the site is trustworthy and professional but could improve transparency and security practices.

The SYJMB Foundation website represents a small non-profit entity established around 2019, likely based in Switzerland. The site is built using modern web technologies such as Gatsby and React, indicating a moderate level of technical maturity. However, the content is minimal and lacks detailed business descriptions, contact information, or compliance documentation. Security posture is basic with no advanced headers or policies detected, and no privacy or cookie policies are published, which may expose the organization to compliance risks. Overall, the site is accessible and free from blocking mechanisms but would benefit from enhanced transparency and security measures.

M

Mirabella–Morganti

mirabella-morganti.ch

58

Mirabella–Morganti is a Swiss design studio founded in 2013 specializing in art, culture, and education projects. The company offers a range of creative services including visual identities, campaigns, posters, books, and digital media, with a strong emphasis on print design and typography. They also contribute to education through lecturing roles at the Zurich University of the Arts. The website reflects a professional portfolio with rich content and a consistent brand image targeting cultural and educational organizations. Technically, the site is built using Vue.js with deferred JavaScript loading, providing good mobile optimization and SEO. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact emails or phone numbers, which are areas for improvement. No WAF or blocking mechanisms were detected, and the WHOIS data aligns well with the business claims, indicating legitimacy.

A

Astrom / Zimmer & Tereszkiewicz

azt.ch

62

Astrom / Zimmer & Tereszkiewicz is a small, specialized design and development studio based in Zurich, Switzerland. They focus on creating digital and analogue tools, interfaces, and data modeling solutions aimed at transforming information into knowledge. Their market position is niche, serving clients interested in archives, research, and data visualization projects. The website showcases a professional portfolio with multiple client projects and external references, indicating a credible and established presence in their field. Technically, the site uses modern web technologies including JavaScript and React, hosted likely on DigitalOcean, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and public security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

Aio Frei is a small creative professional or artist specializing in sound art, listening performance, feminist listening practices, and related artistic projects. The website serves as a portfolio showcasing various projects, workshops, and publications. The target audience includes artists, researchers, and enthusiasts in experimental sound and performance arts. The business model is primarily portfolio-based, focusing on artistic exposure and engagement. Technically, the website is built on WordPress, utilizing jQuery and Swiper.js for frontend interactions. It is hosted by 1API GmbH and uses HTTPS with a valid SSL certificate. The site is moderately optimized for performance and mobile devices, with a responsive design and basic accessibility features. SEO optimization is basic, with essential meta tags present but no advanced structured data or rich snippets detected. From a security perspective, the website has HTTPS enabled and domain transfer protection. However, DNSSEC is not enabled, and no security headers were detected, which could be improved. There is no privacy policy, cookie policy, or terms of service, indicating gaps in compliance with GDPR and other privacy regulations. Contact information is limited to an email address, with no phone or physical address provided. No incident response or vulnerability disclosure mechanisms are present. Overall, the website is functional and professionally presented but lacks important privacy and security compliance elements. Strategic improvements in privacy policies, security headers, and DNS security would enhance trust and compliance.

H

Hubertus Design

hubertus-design.ch

43

Hubertus Design is a Swiss-based design studio specializing in graphic, book, editorial, branding, and multimedia design projects. The website serves as a portfolio showcasing a wide range of creative works for cultural institutions, architects, and enterprises, positioning itself as a niche player in the design industry. The business model is project-based, focusing on delivering high-quality design services to a professional audience. Technically, the website is built on WordPress and leverages several plugins including MonsterInsights for analytics, Getwid for blocks, and Animate Blocks for animations. It uses modern web technologies such as jQuery and Google Analytics with IP anonymization and opt-out features, indicating a moderate level of digital maturity. The site is mobile optimized and has good SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS with SSL and includes some privacy-conscious configurations in analytics. However, it lacks important security headers and does not provide vulnerability disclosure or incident response information. Privacy and cookie policies are absent, which is a compliance gap. No contact information is explicitly provided, which may affect user trust and support. Overall, the website is professional and content-rich but could improve in privacy compliance and security best practices. The risk level is moderate due to missing policies and security headers, but no critical vulnerabilities or blocking mechanisms were detected.

Atelier Varga is a Swiss-based creative agency specializing in visual design, web design, corporate identity, and editorial design services. The website showcases a comprehensive portfolio of projects primarily in cultural, architectural, and artistic domains, targeting clients seeking high-quality visual communication solutions. The business operates as a small, niche design atelier with a consistent brand presence and a professional online portfolio. Technically, the website is built on WordPress, utilizing common plugins such as Yoast SEO and Google Analytics for SEO and visitor tracking. The site demonstrates good mobile optimization and moderate performance but lacks some advanced accessibility features. Security posture is adequate with HTTPS enabled and use of a security plugin, but it lacks important security headers and a vulnerability disclosure mechanism. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanism. Contact information is not explicitly provided on the homepage, which may affect user trust and compliance. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security practices.

M

mjm.cc AG

mjm.cc

40

mjm.cc AG is a Swiss-based agency specializing in design, communication, and management services. The company positions itself as a creative and strategic partner for clients seeking to make complex topics understandable and relevant through tailored solutions. The website showcases a portfolio of award-winning projects and case studies, indicating a strong market presence and professional reputation within the media sector. Technically, the website is built on WordPress with WooCommerce and utilizes popular plugins such as WPBakery Page Builder and Slider Revolution, reflecting a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS but lacks visible security headers and explicit security policies, which could be improved. The absence of WHOIS data for the domain raises some concerns about transparency, although the website content and presentation suggest legitimacy. Overall, mjm.cc AG demonstrates a solid business and technical foundation but should enhance privacy compliance and security disclosures to strengthen trust and regulatory adherence.

M

Martin Stoecklin & Melina Wilson

a-language.net

44

A Language is a small, concept-driven visual communication studio co-founded by Martin Stoecklin and Melina Wilson, specializing in design for print, web, interactive platforms, and physical spaces. The studio serves a niche market including cultural and academic institutions, artists, and businesses. The website acts as a professional portfolio showcasing their work and expertise. Technically, the site is built on WordPress, utilizing common libraries such as jQuery and Swiper.js, hosted by 1API GmbH with SSL enabled, ensuring secure connections. However, the absence of DNSSEC and security headers indicates room for improvement in security hardening. The security posture is moderate, with no critical vulnerabilities detected but lacking advanced protections and policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Contact is available only through a web form, with no direct emails or phone numbers published. Overall, the website is professional and well-designed but would benefit from enhanced security and privacy practices to improve trust and compliance.

Agenza GmbH is a specialized web agency based in Kriens near Luzern, Switzerland, focusing on WordPress websites, UX design, e-commerce solutions, and web platform development. The company serves a diverse clientele including SMEs, organizations, and startups, offering tailored digital solutions that emphasize accessibility, SEO, and user experience. Their market position is solid within the regional technology sector, supported by a portfolio of over 93 clients and positive testimonials. Technically, the website is built on WordPress using modern tools such as the Breakdance builder, WooCommerce for e-commerce, and Yoast SEO for optimization. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Analytics and marketing integrations include Google Tag Manager, Google Ads, and LinkedIn Insight, indicating a moderate level of user tracking and marketing sophistication. From a security perspective, the site enforces HTTPS and follows good practices by avoiding exposed sensitive data and using reputable third-party scripts. However, explicit security headers and a formal security policy are absent, representing areas for improvement. Privacy compliance is strong with a comprehensive privacy policy and cookie policy, though a consent mechanism is not evident. Overall, Agenza GmbH presents a trustworthy and professional online presence with a strong focus on quality and client satisfaction. The website's security posture is good but could benefit from enhanced header policies and incident response transparency. The business is credible, well-branded, and aligned with its WHOIS registration data, supporting a high legitimacy score.

InnovationsTransfer Zentralschweiz (ITZ) is a regional innovation support organization based in Central Switzerland, founded in 2021. The company focuses on assisting startups, SMEs, and private individuals with innovation development, coaching, funding facilitation, and intellectual property consulting. The website presents a professional and consistent brand image, targeting innovation-driven businesses and individuals in the region. Technically, the site is built on WordPress with the Breakdance builder and integrates SEO and analytics tools such as Yoast SEO and Google Analytics. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security and incident response policies are not published. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site is well-structured, compliant with privacy regulations, and trustworthy.

K

Klinikum Fulda gAG

klinikum-fulda.de

59

Klinikum Fulda gAG operates a large, modern hospital providing maximal healthcare services in the Osthessen region of Germany. The institution serves over 500,000 residents with inpatient and outpatient care, specialized clinics, and educational programs as a campus of the Universitätsmedizin Marburg. The website reflects a mature digital presence with comprehensive patient information, event announcements, and career opportunities. Technically, the site is built on WordPress with modern plugins and analytics tools, ensuring good performance and SEO optimization. Security posture is strong with HTTPS, cookie consent management, and no visible vulnerabilities. Privacy policies are comprehensive and GDPR compliant. Overall, the site projects high professionalism and trustworthiness.