Security Directory

A

anstiftung

anstiftung.de

46

anstiftung.de is the website of a German non-profit organization dedicated to promoting, networking, and researching community-driven initiatives such as intercultural and urban community gardens, open workshops, repair initiatives, and neighborhood revitalization projects. The organization targets a general audience interested in community development, sustainability, and DIY culture. The website is built on Joomla CMS with modern technologies like Bootstrap and FontAwesome, providing a good user experience with clear navigation and mobile optimization. The site includes active blog content, social media integration, and newsletter subscription options, reflecting a mature digital presence. Security posture is adequate with HTTPS and CSRF protections but lacks advanced security headers and published security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and aligned with its non-profit mission.

T

tabmag / publish! Content-Marketing-Agentur

tabmag.de

55

tabmag is a German-based digital magazine platform and content marketing service provider specializing in transforming traditional print content into interactive, responsive digital magazines. The company operates under the umbrella of the publish! Content-Marketing-Agentur and targets organizations such as companies, associations, and clubs seeking modern digital publishing solutions. The website demonstrates a high level of digital maturity with modern technologies, multimedia content, and interactive tools like a cost-saving calculator. Security posture is solid with HTTPS and form validation, though some enhancements like CSP headers and incident response contacts could improve it further. Privacy compliance is well addressed with clear privacy and terms pages, though a cookie consent mechanism is not evident. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

M

Musikosmos

musikosmos.de

44

Musikosmos is a German-based online blog and informational platform focused on music retail, education, and cultural events. It provides detailed articles about music learning methods, product news, and music festivals, targeting musicians, educators, and music enthusiasts. The site also promotes partner online shops and physical retail stores specializing in musical instruments and accessories. Technically, the website is built on WordPress using the Twenty Twelve theme, enhanced with jQuery and Matomo analytics for user tracking. The site is moderately optimized for mobile and SEO, with a good content structure and consistent branding. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and cookie consent mechanisms. Privacy policy is present and GDPR compliant, though cookie consent is missing. No direct contact emails or phone numbers are published, which may impact user trust and support accessibility. Overall, the domain registration data aligns well with the website content and business focus, indicating legitimacy and consistency.

B

Börsenblatt

boersenblatt.net

70

Börsenblatt.net is a leading German trade magazine website serving the book industry, providing news, background information, and services for book retailers and publishers. The site is professionally designed, mobile-optimized, and integrates multiple analytics and advertising technologies, including Google Analytics, Matomo, and Revive Adserver. The website demonstrates a mature digital infrastructure with comprehensive cookie consent management and GDPR compliance. However, the WHOIS data for the domain is unavailable, which raises moderate concerns about domain registration transparency. No explicit contact emails or phone numbers are present on the site, which could impact user trust and business credibility. Overall, the website is secure with proper HTTPS and security headers, and it maintains a high level of content quality and user experience.

K

Kontainer

kontainer.com

62

Kontainer is a Denmark-based technology company specializing in digital asset management, product information management, and image bank solutions. Established in 2000, it serves businesses seeking efficient digital content management through a B2B SaaS platform. The website reflects a professional and consistent brand image with a focus on user experience and mobile responsiveness. Technically, the site leverages modern frameworks such as Nuxt.js and Vue.js, ensuring a contemporary and performant digital presence. Security posture is solid with HTTPS enabled and domain protections in place, though improvements like DNSSEC and explicit security policies could enhance trust further. Overall, Kontainer presents a credible and mature digital footprint suitable for its market segment.

J

Jazzcampus / Hochschule für Musik Basel

jazzcampus.com

64

Jazzcampus is an educational institution specializing in jazz music education located in Basel, Switzerland. It operates as part of the Hochschule für Musik Basel under the Fachhochschule Nordwestschweiz FHNW umbrella. The website presents a professional and comprehensive digital presence, offering detailed information about study programs, music courses, events, and affiliated organizations. The site is well-structured, mobile-optimized, and integrates multimedia content such as Vimeo videos to enhance user engagement. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements in cookie consent and security headers are recommended. The absence of WHOIS data for the domain raises concerns about domain registration transparency, but the strong institutional affiliation and content quality support legitimacy. Overall, the site serves its educational mission effectively with a trustworthy and professional online presence.

M

Musikschule Basel

musikschule-basel.ch

65

Musikschule Basel is a well-established music education institution based in Basel, Switzerland, offering a wide range of musical education services including individual and group instrumental and vocal lessons, ensembles, choirs, and music projects for children, youth, and adults. The website reflects a strong market position as a competence center for musical education with a comprehensive offering and clear target audience. Technically, the website employs modern JavaScript and Google Tag Manager for analytics, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policy and incident response information are not present. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

A

Allegra Academy

allegra.academy

65

Allegra Academy is an educational platform specializing in bike tourism and slow traffic mobility, primarily serving the Graubünden region in Switzerland. The website offers online courses with multimedia content and certificates, targeting professionals involved in bike tourism such as product managers, municipal employees, hotel staff, and guides. The platform is positioned as a niche educational resource with a focus on enhancing knowledge and service quality in the bike tourism sector. Technically, the site is built on WordPress using popular plugins like LearnDash for LMS functionality, WooCommerce for e-commerce, and Elementor for design. It employs modern web technologies and is mobile-optimized with good SEO practices. Security-wise, the site uses HTTPS and Google Tag Manager but lacks some security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism but no clear privacy or terms of service pages. No direct contact or incident response information is provided, which could be improved to enhance trust. Overall, the site is professional, secure, and credible but could benefit from enhanced privacy and security disclosures.

S

StiftungSchweiz

spendenschweiz.ch

58

SpendenSchweiz is a Swiss non-profit online donation platform operated by StiftungSchweiz, offering donors access to over 900 charitable organizations and projects. The platform facilitates easy, secure donations and enables users to start their own fundraising campaigns. The website is professionally designed, SEO optimized, and uses modern WordPress technologies including jQuery, Slick Carousel, and Intercom for user engagement. Google Analytics and Google Tag Manager are employed for traffic analysis. Security posture is strong with HTTPS and secure forms, though explicit privacy and cookie policies are missing, which impacts compliance. No incident response or vulnerability disclosure information is provided. Overall, the platform is trustworthy and well-positioned in the Swiss charitable sector, but could improve transparency and privacy compliance.

I

iart ag

fluxdock.io

47

Fluxdock is a Swiss-based business offering modular and flexible workspace rentals located in the urban Dreispitz area near Basel. The company targets SMEs and organizations seeking agile, collaborative project spaces with options for short-term and long-term rentals. The website presents a professional and consistent brand image with clear service descriptions and partner affiliations. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Swiper.js, and is mobile-optimized with moderate performance. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA, but lacks DNSSEC and security headers, and does not have an active cookie consent mechanism. The WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the site is trustworthy and business credible but could improve privacy compliance and security best practices.

S

Schule für Gestaltung Basel

sfgbasel.ch

70

Schule für Gestaltung Basel is a well-established educational institution based in Basel, Switzerland, specializing in design and art education. The website presents a comprehensive range of courses and programs targeting talented young individuals, experienced professionals, and anyone interested in developing their creative skills. The institution offers foundational courses, vocational training, higher education, and public continuing education, positioning itself as a key regional player in design education. Technically, the website is built on modern frameworks such as Next.js and uses DatoCMS for content management, ensuring a responsive and user-friendly experience. Cookie consent is managed via Cookiebot, reflecting awareness of privacy regulations. However, the site lacks explicit privacy policies, terms of service, and security policies, which are important for compliance and trust. From a security perspective, the site uses HTTPS with excellent SSL configuration but does not implement common security headers or publish incident response contacts or vulnerability disclosure policies. No signs of WAF or blocking mechanisms were detected, and no analytics or tracking scripts beyond cookie consent were found, indicating a privacy-conscious approach. Overall, the website is professional, trustworthy, and content-rich, but it would benefit from enhanced privacy and security documentation to improve compliance and user trust.

株

株式会社カビネット

kabinett.com

58

株式会社カビネット is a Japanese IT company specializing in cloud services, software system development, and design content production. Established in 1998, it serves primarily business clients in Japan with a focus on delivering customer value through IT and communication. The company maintains a professional web presence with clear service descriptions, case studies, and recruitment information, positioning itself as a reliable mid-sized IT service provider. Technically, the website uses modern JavaScript libraries such as jQuery and Slick Carousel, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and well-structured with good SEO practices. However, there is no visible cookie consent mechanism, which is a compliance gap given the use of tracking scripts. From a security perspective, the website uses HTTPS and displays trust certifications like the Privacy Mark and Secom Trust Systems badge, indicating a commitment to privacy and security. Nonetheless, the absence of DNSSEC, security headers, and explicit security or incident response policies suggests room for improvement in security posture. Overall, the website is professional, trustworthy, and functional with moderate technical sophistication. Strategic improvements in privacy compliance and security practices would enhance its risk profile and user trust.

F

Filmexplorer

filmexplorer.ch

61

Filmexplorer is a Swiss non-profit association dedicated to providing a rich cultural media platform focused on film as an experiential art form rather than a commodity. The website offers curated film critiques, interviews, podcasts, and festival coverage, targeting film enthusiasts and cultural audiences primarily in Switzerland. The platform maintains a consistent and professional brand image with excellent content quality and user experience. Technically, the website employs modern web technologies including Swiper.js for interactive sliders, a consent manager for GDPR-compliant cookie handling, and Google Analytics for visitor insights. The site is mobile-optimized and SEO-friendly, though no specific CMS or hosting provider details are evident. Performance is moderate with good accessibility features. From a security perspective, the site uses HTTPS with an effective cookie consent mechanism and email obfuscation to reduce spam. However, it lacks explicit security policies, incident response contacts, and terms of service pages. No critical vulnerabilities or suspicious content were detected, and WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, Filmexplorer presents a trustworthy, well-maintained cultural media website with strong privacy compliance and a clear focus on its niche audience. Strategic improvements could include publishing security policies and incident response information to enhance transparency and trust.

D

Derivative

derivative.ca

66

Derivative is a Canadian software company specializing in TouchDesigner, a visual development platform targeting creative professionals and media artists. The company has a strong market position in the niche of media server and visual development software, supported by an active community and comprehensive learning resources. The website reflects a mature digital presence with professional design and consistent branding. Technically, the site is built on Drupal 7 with modern JavaScript libraries and hosted on AWS infrastructure, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain transfer protections, though DNSSEC is not enabled and security policies are not publicly documented. Privacy compliance is partial, with privacy and terms pages present but lacking cookie consent mechanisms. Overall, the site is trustworthy and professional, with room for improvement in security and privacy transparency.

M

Musik-Akademie Basel

musik-akademie.ch

11

Musik-Akademie Basel is a well-established educational institution specializing in musical education across all levels, including higher education, talent development, and cultural events. It holds a strong market position in Basel, Switzerland, with a history spanning over 150 years. The website reflects a professional and comprehensive digital presence, offering detailed information about courses, institutes, and events, targeting music students, educators, and cultural audiences. Technically, the site employs modern web technologies with good mobile optimization and accessibility, and integrates Google Tag Manager for analytics with user consent mechanisms. Security posture is solid with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates high trustworthiness and compliance with privacy regulations, making it a credible and reliable resource for its audience.

K

Kulturstiftung Basel H. Geiger | KBH.G

kbhg.ch

46

Kulturstiftung Basel H. Geiger (KBH.G) is a small non-profit cultural foundation based in Basel, Switzerland, focused on contemporary art exhibitions and public cultural programs. The website presents a professional and consistent brand image with clear navigation and relevant content targeting art enthusiasts and the general public interested in cultural events. The business model centers on hosting exhibitions and related public programs, positioning itself as a regional cultural institution with a specialized audience. Technically, the site uses a modern but simple tech stack including jQuery, Slick Carousel, Material Design Icons, and Matomo analytics, providing a good user experience with moderate performance and mobile optimization. Security posture is adequate with HTTPS usage and privacy-respecting analytics, but lacks published privacy and cookie policies, security headers, and explicit incident response contacts. Overall, the site is trustworthy and safe with no adult or questionable content detected.

Brogramming is a small, specialized web development business operated by Fabian Voegeli based in Zürich, Switzerland. The company focuses on delivering custom web development projects primarily for cultural heritage institutions, academia, art galleries, and architecture firms. Their portfolio demonstrates expertise in modern web technologies including Next.js, React, Craft CMS, WordPress, and Gatsby, reflecting a mature and technically competent digital infrastructure. The website showcases a broad network of partners and clients, reinforcing its niche market position. Technically, the website employs a modern tech stack with frameworks like React and Next.js, and integrates Google Analytics for user tracking. The site is mobile optimized with good SEO practices, though accessibility features are basic. Hosting and DNS are managed through Key-Systems GmbH and firestorm.ch DNS servers. Performance is moderate, with room for improvement in security configurations. From a security perspective, the site lacks visible security headers and DNSSEC is not enabled, which are areas for enhancement. The domain is secured with clientTransferProhibited status, and HTTPS is presumed but not explicitly confirmed in the data. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. No incident response or vulnerability disclosure information is provided, limiting transparency in security management. Overall, the website is professional and trustworthy with a solid business foundation and technical implementation. However, it would benefit from improved security practices and formalized privacy compliance to enhance user trust and regulatory adherence.

The website www.alinaguenter.ch is a professional portfolio site for an individual artist and illustrator based in Switzerland. It showcases various projects including illustrations, graphic design, book design, and exhibition design. The site targets art enthusiasts and potential clients in creative sectors. The business model is primarily service-based, focusing on creative commissions and client work. The website is built on WordPress using the Lay theme, indicating a moderate level of digital maturity with a focus on visual presentation and portfolio management. Mobile optimization is good, and the site loads with moderate performance. Security posture is basic with HTTPS enabled but lacks security headers and formal privacy or cookie policies, which are important for compliance and trust. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the site is safe for general audiences and professionally presented but would benefit from enhanced privacy compliance and security best practices.

The website scoutingdays.info is currently inaccessible beyond a security challenge page, likely implemented by a Web Application Firewall (WAF). The visible content is minimal, consisting primarily of a redirect countdown and a security check powered by BitNinja.IO. The site metadata indicates the use of outdated content management systems such as Joomla 1.5 and WordPress 2.5, which are no longer supported and pose significant security risks. No meaningful business information, contact details, or privacy policies are available, limiting the ability to assess the site's legitimacy or business operations. The WHOIS data is not publicly available, with the registrar identified as Identity Digital Inc., but no creation or expiry dates or registrant details are disclosed, suggesting privacy protection or unsupported TLD WHOIS services. Overall, the site exhibits a low level of digital maturity and security posture, with critical gaps in transparency and compliance.

F

FUNDAMENT

fundament.finance

49

FUNDAMENT is a Swiss-based digital financing platform focused on providing innovative financing solutions for SMEs and startups. The platform acts as an ecosystem orchestrator, connecting capital-seeking companies with investors and offering services such as consulting, enabling, community building, and digital securities issuance. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it leverages WordPress with the Avada theme, integrates modern JavaScript libraries, and uses HubSpot and Google Analytics for marketing and analytics. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the domain WHOIS data is limited due to privacy and TLD restrictions but shows no suspicious indicators. The website is trustworthy, compliant with GDPR, and positioned as a niche player in the Swiss digital finance sector.

*

*zünder Startup-Förderung Zentralschweiz

zuender.ch

54

The website zuender.ch represents *zünder Startup-Förderung Zentralschweiz, a startup accelerator and investment facilitation program focused on innovative startups in Central Switzerland. It offers an accelerator program, coaching, networking, and investment opportunities, positioning itself as the leading startup booster in the region. The site targets startups, young entrepreneurs, investors, students, and interested parties, providing a comprehensive ecosystem for startup growth and visibility. Technically, the site is built on WordPress with the Breakdance theme, enhanced by Yoast SEO, HubSpot marketing and analytics tools, and Google reCAPTCHA Enterprise for form security. The site demonstrates good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and no detected vulnerabilities. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Contact information is clearly provided via email, phone, and multiple contact forms. Overall, the site is professional, trustworthy, and well-positioned in its market niche.

A

Auridis Stiftung

auridis-stiftung.de

40

Auridis Stiftung is a German non-profit foundation dedicated to fostering a society where children grow up well. The website serves as an informational platform about the foundation's mission and social projects. Technically, the site is built on WordPress using the Divi theme and employs jQuery for scripting. The hosting and DNS are managed via CSC DNS services, indicating professional infrastructure management. However, the website lacks critical compliance and security features such as privacy and cookie policies, security headers, and explicit contact information. This limits its trustworthiness and compliance posture. The site is accessible without WAF or security challenges, but the absence of security best practices and compliance documentation suggests room for improvement in governance and risk management.

D

Deutsche Kinder- und Jugendstiftung

dkjs.de

49

Deutsche Kinder- und Jugendstiftung (DKJS) is a German non-profit foundation dedicated to supporting the healthy development and future prospects of young people in Germany through education and participation initiatives. The organization operates with a clear focus on structural impact in education and youth involvement, offering projects, publications, and community engagement. Their market position is that of an established and reputable non-profit in the German education sector, targeting youth, educational institutions, and municipalities. Technically, the DKJS website is built on WordPress, utilizing modern web technologies such as jQuery, Alpine.js, and Swiper.js for interactive UI components. The site is mobile-optimized, accessible, and employs cookie consent mechanisms compliant with GDPR, including the Borlabs Cookie plugin and push notifications via WonderPush. Performance is moderate with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and uses cookie consent for privacy compliance. However, it lacks explicit security headers and a public security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent and indicates a legitimate domain registration. Overall, the website presents a professional, trustworthy, and privacy-conscious digital presence suitable for its non-profit educational mission. Strategic improvements could include publishing a formal security policy, adding security headers, and establishing a vulnerability disclosure process to enhance security posture and stakeholder trust.

G

Gebäudeversicherung Bern

gvb.ch

65

Gebäudeversicherung Bern (GVB) is a well-established regional insurance provider specializing in obligatory building insurance for the Canton of Bern, Switzerland. With over 200 years of history, GVB offers comprehensive insurance products including obligatory building and construction period insurance, as well as voluntary insurance products through its subsidiaries. The website targets property owners and residents in Bern, providing detailed information on insurance services, claims, fire prevention, and natural hazard protection. The company maintains a strong market position as a trusted insurer in the region.

W

wemakeit Ltd

wemakeit.com

69

wemakeit Ltd operates a well-established crowdfunding platform specializing in creative projects such as art, music, literature, and innovative ideas. Founded in 2014 and based in Switzerland, the platform has facilitated over 7,900 successful projects with a strong community of over 720,000 members. The business model centers on enabling project creators to raise funds through community engagement and offers additional services such as crowdfunding consultancy and webinars. The platform maintains a consistent brand presence and leverages partnerships with various specialized channels to expand its reach. Technically, wemakeit employs a modern web stack including Ruby on Rails with Turbo (Hotwire) for dynamic content delivery, Cloudinary for image hosting, and Matomo Tag Manager for analytics. The website is well-optimized for mobile devices, accessible, and SEO-friendly, though performance is moderate. Hosting details are partially known, with domain registration through EuroDNS S.A. The platform uses HTTPS with valid SSL but lacks DNSSEC and some security headers, which are recommended for enhanced security. From a security perspective, the platform demonstrates good practices such as HTTPS enforcement and CSRF protection in forms. However, the absence of DNSSEC, security headers, and explicit incident response contacts indicates areas for improvement. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but the lack of a cookie consent mechanism is a notable gap given GDPR requirements. No critical vulnerabilities or adult content were detected, and the website is fully accessible without WAF blocking. Overall, wemakeit presents a trustworthy and professional crowdfunding platform with strong business credibility and a solid technical foundation. Strategic enhancements in security headers, DNSSEC, and privacy consent mechanisms would further strengthen its security posture and compliance standing.

C

ClubDesk

clubdesk.com

61

ClubDesk is a Swiss-based online club management software provider offering a comprehensive SaaS platform for associations and clubs to manage members, accounting, events, and websites. The company targets a broad range of clubs including sports, cultural, and hobby groups, with a strong presence in Switzerland and Germany. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Contao CMS, jQuery, and Google Tag Manager. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit privacy policies are missing. The business demonstrates legitimacy through transparent WHOIS data and partnerships with reputable financial and sports organizations. Overall, ClubDesk presents a mature digital infrastructure with a strong market position in the club management software niche.

K

KEENFINITY Group

keenfinity-group.com

72

KEENFINITY Group is a global leader in providing innovative security and professional communication solutions, partnering with renowned brands such as Bosch, Dynacord, and Electro-Voice. Their website showcases a comprehensive portfolio of products and services including video systems, intrusion alarms, access control, public address, conference systems, and electronics manufacturing services. The company targets businesses and organizations seeking advanced security and communication technologies. Technically, the website is built on modern web technologies with good mobile optimization, SEO, and performance. Security posture is solid with HTTPS and consent management, though explicit security policies and incident response contacts are not published. The absence of WHOIS registration data is a notable concern for domain legitimacy, though the professional website and strong brand associations mitigate some risk. Overall, KEENFINITY presents a credible and professional digital presence with room for improvement in transparency and security disclosures.

The website www.overenezakaznikmi.sk is a Slovak language platform focused on customer verification and review aggregation services. It targets a general audience in Slovakia, providing a service platform that likely helps businesses and consumers verify customer feedback. The site demonstrates a modern design with mobile optimization and basic accessibility features. Technically, it employs Google Analytics and Google Tag Manager for user tracking and analytics, alongside a privacy consent mechanism via the Privacy Center SDK, indicating some level of GDPR awareness. However, the absence of an explicit privacy policy and terms of service reduces its privacy compliance maturity. Security-wise, the site uses HTTPS but lacks visible security headers and detailed security policies, which suggests room for improvement in its security posture. No critical vulnerabilities or adult content were detected, and the domain WHOIS data is privacy protected, which is common for small businesses but slightly reduces transparency. Overall, the website scores moderately in content quality, technical implementation, security, privacy compliance, and business credibility, resulting in an overall AI score of 68.

The website garancianakupu.sk operates as a Slovak e-commerce purchase guarantee platform affiliated with Heureka Group a.s. It provides customers with assurances on purchases made through the Heureka Košík system, including money-back guarantees and support for order issues. The site targets Slovak online shoppers and certified e-shops, positioning itself as a trusted intermediary in the Slovak e-commerce market. The business model revolves around enhancing consumer confidence and supporting e-shops with certification and guarantee services. Technically, the website uses AngularJS for frontend rendering, includes Google Analytics for tracking, and employs modern HTML5 and CSS3 standards. The site is mobile-optimized and presents a professional design with clear navigation. However, it lacks advanced accessibility features and modern frameworks. No CMS or hosting provider details are evident from the content. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks visible security headers and published security or incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. The domain WHOIS data is consistent and indicates a legitimate, established business presence since 2009. Overall, the website is functional, trustworthy, and professionally presented but would benefit from enhanced privacy compliance, security hardening, and transparency regarding data protection and incident response.

N

Nationale Naturlandschaften in Mecklenburg-Vorpommern

natur-mv.de

50

The website www.natur-mv.de serves as an official informational portal for the National Natural Landscapes in Mecklenburg-Vorpommern, Germany. It provides detailed information about various national parks, biosphere reserves, and nature parks in the region, targeting nature enthusiasts, tourists, and visitors interested in environmental conservation and outdoor activities. The site features event announcements, interactive maps, and educational content, positioning itself as a key regional resource for nature-related tourism and conservation awareness. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs modern web technologies such as Leaflet.js for interactive maps and Swiper.js for image sliders. It integrates Matomo analytics with user consent mechanisms, ensuring compliance with privacy regulations. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site uses HTTPS and implements cookie consent banners, reflecting adherence to GDPR requirements. However, explicit security headers and a dedicated security policy or incident response contact are not evident. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the website's regional and governmental nature, supporting its legitimacy. Overall, the site maintains a solid security posture but could benefit from enhanced security header implementation and formal vulnerability disclosure policies. The overall risk assessment is low, with the website presenting a trustworthy, professional, and privacy-conscious platform. Strategic recommendations include adding security headers, publishing a security policy or incident response contact, and considering a vulnerability disclosure framework to further strengthen security and trust.

T

TITLIS Bergbahnen AG

titlis.ch

72

TITLIS Bergbahnen AG operates a leading mountain tourism website promoting the TITLIS mountain region in Central Switzerland. The site offers information on skiing, hiking, cable cars, accommodation, restaurants, and events, positioning itself as a premier destination for tourists and adventure seekers. The technical infrastructure is modern, leveraging Next.js and React frameworks, with integrated analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for consent management. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit privacy and terms of service pages are not detected in the provided content. Overall, the website is professional, well-branded, and trustworthy, supporting the business's market position.

T

TEN Co., Ltd.

atelier-ten.com

48

TEN Co., Ltd. operates a regional chain of beauty and nail salons primarily located in Aichi Prefecture, Japan. The company emphasizes personalized hair styling services that fit individual lifestyles and hair types, supported by a professional website that facilitates information dissemination and online reservations. The business is well-established with a domain age dating back to 2006, reflecting a mature market presence. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and responsive design to provide a good user experience across devices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, indicating areas for compliance and security improvement. Overall, the website is professional, trustworthy, and serves its target audience effectively, though it would benefit from enhanced privacy compliance and security hardening.

S

SMEC

smec.com

66

SMEC is a global engineering and consultancy firm specializing in infrastructure, energy, transport, and international development sectors. The company operates in over 40 countries and emphasizes sustainable and practical solutions. Their website is built on WordPress and integrates common analytics and tracking tools such as Google Analytics and MonsterInsights. The site is professionally designed with good content quality and clear navigation, targeting government and private sector clients. Security posture is adequate with HTTPS and reCAPTCHA usage, but could be improved by adding more security headers and explicit incident response policies. The absence of WHOIS data reduces transparency but the website content and branding suggest a legitimate and established business.

W

Werkstatt für Gestaltung WfG AG

wfg.ch

55

Werkstatt für Gestaltung WfG AG is a Swiss-based company specializing in the design and retail of furniture and accessories, including sofas, felt bags, and leather bags. The company operates an e-commerce platform built on Magento, targeting primarily German-speaking Swiss customers. The website presents a professional design with good navigation and mobile optimization, supporting a positive user experience. The business model focuses on direct online sales and retail of design products, positioning itself as a niche regional player in the furniture retail sector. From a technical perspective, the website leverages a modern Magento stack with RequireJS, jQuery, and Magento PageBuilder components. The platform is well-structured, though performance is moderate and some SEO and accessibility features could be improved. Security-wise, the site enforces HTTPS with valid SSL certificates and uses form key protections. However, it lacks several important security headers such as Content-Security-Policy and HSTS, and does not provide explicit incident response or vulnerability disclosure information. Overall, the security posture is adequate but could benefit from enhancements to headers and incident response transparency. Privacy compliance is basic, with a privacy and cookie policy present but no GDPR-specific indicators or data protection officer contact. The absence of direct contact emails or phone numbers reduces immediate trust signals, though a contact form is available. There are no signs of malicious content or adult material, and the domain registration data aligns well with the business claims, supporting legitimacy. The website scores a 75 overall on AI evaluation, reflecting good content quality and business credibility, moderate technical implementation, and room for improvement in security and privacy compliance. Strategic recommendations include implementing stronger security headers, adding vulnerability disclosure and incident response contacts, enhancing privacy compliance transparency, and improving SEO and accessibility features.

V

Val Surses

val-surses.ch

65

Val Surses is a regional tourism website promoting winter sports, accommodations, and activities in the Val Surses area of Switzerland, including Savognin and Bivio. The site targets tourists interested in winter holidays and outdoor experiences, offering booking services and information about local events and weather. Technically, the website is built on Drupal 10, uses Google Tag Manager for analytics, and includes a chat widget for user interaction. The site is mobile-optimized with a professional design and good navigation. Security-wise, the site uses HTTPS and has cookie consent mechanisms denying ad personalization and storage by default, but lacks explicit privacy policy and terms of service pages, which are important for GDPR compliance. No security incidents or vulnerabilities are evident from the content. Overall, the website is legitimate, professional, and safe for general audiences, but could improve privacy transparency and contact information to enhance trust and compliance.

S

Swissgrid

swissgrid.ch

66

Swissgrid is the national transmission grid operator in Switzerland, responsible for the safe, stable, and efficient operation of the country's extra-high-voltage electricity grid. The company plays a critical role in ensuring Switzerland's electricity supply security and is actively involved in planning and building the grid of the future to support the energy transition. The website reflects a mature and professional organization with comprehensive information about grid operations, projects, regulation, and market activities. Technically, the website is built on modern frameworks including Angular and Adobe Experience Manager, with good mobile optimization and accessibility. Security posture is strong with HTTPS, security headers, and use of reCAPTCHA for forms, although explicit incident response contacts and vulnerability disclosure mechanisms are not found. Overall, the site demonstrates high trustworthiness and compliance with privacy regulations, including GDPR. The domain registration data aligns well with the company's identity, reinforcing legitimacy. Recommendations include publishing explicit incident response contacts and vulnerability disclosure policies to further enhance security transparency.

G

GWeb Solutions GmbH

gweb.de

62

GWeb Solutions GmbH is a German-based digital transformation consultancy specializing in helping organizations digitize their processes and structures. With over 12 years of experience and more than 450 completed projects, the company positions itself as a reliable and experienced partner in the technology sector. Their website reflects a professional image with a clear focus on digital innovation and client success. The company targets organizations seeking to modernize and digitally transform their operations. Technically, the website employs modern web technologies including jQuery, FontAwesome, and integrates privacy-conscious tools such as self-hosted Matomo analytics and Google reCAPTCHA for form protection. The presence of a comprehensive cookie consent mechanism and privacy policy indicates good GDPR compliance. Security-wise, while HTTPS is used and forms are protected with reCAPTCHA, the site lacks visible security headers and published security policies, suggesting room for improvement in security posture. Overall, the website is well-designed, user-friendly, and trustworthy, with no signs of malicious content or blocking mechanisms.

D

DomainProfi GmbH

domainprofi.com

63

DomainProfi GmbH operates as a specialized domain registrar and management service provider, focusing on commercial clients such as brand owners, domain traders, investors, and SEO specialists. The company is ICANN accredited, which underscores its legitimacy and commitment to industry standards. Their website is professionally designed, primarily in German, and offers detailed information about their domain-related services and solutions. The business targets medium-sized commercial customers managing large domain portfolios, positioning itself as a reliable partner in the domain registration and management market in Germany. Technically, the website is built on WordPress with Elementor, incorporating modern web technologies and security features like HTTPS and captcha for forms. However, some security headers are missing, and no cookie consent mechanism is evident, which could be improved to enhance compliance and security posture. The WHOIS data for the domain is unavailable, which slightly reduces trust but does not negate the overall professional presentation and trust signals on the site. Overall, the website demonstrates a solid technical and business foundation with room for security and compliance enhancements.

T

Top Klassik Zürcher Oberland

topklassik.ch

55

Top Klassik Zürcher Oberland is a well-established Swiss non-profit organization dedicated to promoting classical music concerts in the Zürcher Oberland region. With over 50 years of history, it offers a rich annual program of classical concerts, targeting classical music enthusiasts locally. The website serves as a platform for event information, ticket sales, and membership engagement, supported by reputable local sponsors and municipalities. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring a good user experience and SEO optimization. However, there is room for improvement in security headers and privacy compliance. The security posture is solid with HTTPS and anonymized Google Tag Manager usage but lacks advanced security headers. Overall, the site is professional, trustworthy, and safe for general audiences, though it should address privacy and cookie policy gaps to enhance compliance and user trust.

M

Müller & Schade

mueller-schade.com

58

Müller & Schade operates a professional e-commerce website specializing in music sheets, books, and musical instruments, primarily serving customers in Switzerland. The company has a long-standing history dating back to 1850 and maintains physical stores in Bern and Zurich. The website is well-structured with multiple product categories and features, including user login, registration, and a contact form with captcha protection. Technical infrastructure leverages jQuery and slick carousel for UI components, and the CMS is identified as NImQ Enterprise Shop Edition. While the website demonstrates good content quality and user experience, the absence of WHOIS data raises concerns about domain registration legitimacy. Security practices include HTTPS usage and form validation, but lack of security headers and cookie consent mechanisms indicate room for improvement. Overall, the site is functional and trustworthy from a user perspective but requires attention to domain registration transparency and enhanced privacy compliance.

M

MGS Loib GmbH

mgs.de

10

MGS Loib GmbH is a medium-sized German retail company specializing in wholesale distribution of sheet music and related music products. The company operates multiple physical branches and serves music retailers and business partners. As of July 1, 2024, the wholesale operations are being transferred to music distribution services (mds) in Mainz, indicating a strategic business transition. The website is professionally designed using WordPress and the Kadence theme, providing a good user experience with clear navigation and relevant content primarily in German. Technical infrastructure includes modern web technologies and privacy-conscious analytics via Matomo. Security posture is adequate with HTTPS enforced, though improvements in security headers and explicit incident response policies are recommended. Privacy compliance is partially met with a privacy policy present but lacking a cookie consent mechanism. Overall, the website is trustworthy and professional, reflecting a credible business presence in the music wholesale retail sector.

A

Angus Council

angus.gov.uk

67

Angus Council operates as the official local government authority for the Angus region in Scotland, providing a broad spectrum of public services including housing, council tax, benefits, planning, and community support. The website serves residents and businesses with accessible information and service portals, reflecting a mature public sector digital presence. The council maintains a strong market position as a regional government entity with a focus on community engagement and service delivery. Technically, the website is built on Drupal 10, leveraging modern web technologies and analytics tools such as Google Analytics, Google Tag Manager, and Siteimprove Analytics. The site is mobile-optimized, accessible, and incorporates a chatbot for enhanced user interaction. Performance is moderate with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. However, explicit security headers are not evident, and there is no public security policy or incident response information. No vulnerabilities or exposed sensitive data were detected, indicating a solid security posture for a government website. Overall, the website is trustworthy, professional, and compliant with privacy regulations. The absence of WHOIS data limits domain age and registrant verification, but the .gov.uk domain and content strongly support legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and establishing a vulnerability disclosure program to further strengthen security and transparency.

GoHire.io is a SaaS-based recruitment platform offering simple and user-friendly hiring software targeted primarily at small and medium businesses (SMBs). The platform is trusted by over 3000 companies worldwide, indicating a solid market presence and a focus on efficient candidate hiring processes. The website is professionally designed with good content relevance and clear navigation, optimized for mobile devices. Technically, the site uses modern analytics and marketing tools such as HubSpot and Microsoft Clarity, hosted on Amazon AWS infrastructure. However, there is a lack of visible privacy and cookie policies, which impacts privacy compliance scores. Security posture is moderate with domain registration protections in place but missing DNSSEC and security headers. Overall, the website is safe, professional, and credible but would benefit from enhanced privacy disclosures and security best practices.

E

Emap

emap.com

69

emap is a UK-based niche media owner with a long historical background dating back to 1887. It operates under the Metropolis Group and offers specialized content, digital media, events, and awards targeting various niche industries. The website is professionally designed using WordPress and integrates modern plugins and analytics tools, indicating a mature digital infrastructure. Security posture is generally good with HTTPS and reCAPTCHA usage, but lacks visible security headers and formal privacy/cookie policies. The absence of WHOIS data for the domain is a notable anomaly that impacts trust and credibility assessments. Overall, the site serves its target audience effectively but would benefit from enhanced transparency and security practices.

M

MIDNIGHT STUDIO IO LTD.

midnight.agency

61

Midnight Studio IO Ltd. is a UK-based small technology company specializing in web development services tailored for creative teams and design agencies. Their business model focuses on partnering with design teams to deliver high-end digital experiences, positioning themselves as a reliable and client-facing technology partner. The company showcases a strong portfolio with notable clients such as Meta, Cartier, CNN, and The North Face, indicating a solid market position in the creative technology sector. Technically, the website is built using modern frameworks including Next.js and React, with Contentful CMS integration. The site demonstrates excellent design quality, mobile optimization, and accessibility features, reflecting a mature digital infrastructure. Performance is fast, and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and includes key security headers, indicating good baseline security hygiene. However, the absence of explicit privacy and cookie policies, vulnerability disclosure mechanisms, and incident response contacts suggests areas for improvement in compliance and transparency. No critical vulnerabilities or suspicious content were detected. Overall, Midnight Studio IO Ltd. presents a trustworthy and professional online presence with strong business credibility and technical maturity. Strategic enhancements in privacy compliance and security transparency would further strengthen their security posture and user trust.

L

Literary Review

literaryreview.co.uk

52

Literary Review is a reputable UK-based literary magazine established in 1979, focusing on book reviews and literary commentary. The website serves as a digital platform for its content, subscription services, and advertising. It targets readers interested in literature and culture, maintaining a consistent brand and high-quality content. Technically, the site is built on WordPress with common plugins and tracking tools, hosted by Easyspace Ltd. The site is moderately optimized for performance and mobile use, with good SEO and basic accessibility features. Security posture is solid with HTTPS and some security best practices, though improvements in HTTP security headers and cookie consent mechanisms are recommended. Privacy policies are present and GDPR compliant, but cookie consent is lacking. Contact information is limited to email and a contact form, with no phone or physical address listed. Social media presence is active, enhancing engagement. Overall, the site is professional, trustworthy, and safe for general audiences.

D

Dezeen

dezeen.com

65

Dezeen is a globally recognized online architecture, interiors, and design magazine offering a wide range of content including news, features, awards, jobs, events, and educational courses. The website demonstrates a mature digital presence with strong branding, comprehensive content, and active social media engagement. The technical infrastructure leverages WordPress CMS, modern JavaScript libraries, and integrates multiple advertising and analytics platforms such as Google Analytics, Algolia, and Amazon Ads, indicating a well-developed digital marketing strategy. Security posture is solid with HTTPS enforced and Content Security Policy in place, though additional security headers and a public security policy could enhance trust. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user privacy and consent management. The absence of WHOIS data reduces domain trust slightly but does not detract from the overall legitimacy and professionalism of the site.

V

Vestre

vestrehabitats.no

59

Vestre Habitats is a professional website representing Vestre, a company focused on enhancing biodiversity in urban green spaces through innovative furniture design and vegetation interventions. The site targets urban planners and environmental designers, positioning itself as a niche leader in sustainable urban furniture. Technically, the website employs modern technologies including Craft CMS, Cookiebot for consent management, and Google Tag Manager for analytics, delivering a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and cookie consent mechanisms, though some security headers are missing and no explicit security policy or incident response contacts are published. The domain WHOIS data is unavailable, which slightly reduces trustworthiness, but the website content and branding are consistent and professional. Overall, the site demonstrates a mature digital presence with good privacy compliance and moderate user tracking.

V

Vestre

vestrehabitats.com

59

Vestre Habitats is a specialized initiative focused on enhancing biodiversity in urban environments through innovative furniture design and vegetation interventions. The website presents a professional and well-structured digital presence, targeting urban planners, environmentalists, and city authorities. The technical infrastructure leverages modern web technologies including Craft CMS, Cookiebot for privacy compliance, and Google Tag Manager for analytics, indicating a mature digital setup. Security posture is strong with HTTPS enforcement, appropriate security headers, and CSRF protections, though the absence of explicit security policies and incident response contacts suggests room for improvement. The lack of WHOIS data transparency is a concern for domain legitimacy, but the website content and compliance mechanisms support a generally trustworthy profile. Strategic recommendations include publishing comprehensive security and incident response policies, improving domain registration transparency, and enhancing contact availability to bolster business credibility and user trust.