Security Directory

Z

Zammad

zammad.com

75

Zammad is a medium-sized technology company founded in 2012, specializing in open source helpdesk and ticketing software designed to streamline customer service operations. The company positions itself as a provider of powerful yet user-friendly solutions that integrate multiple communication channels and offer extensive features such as multilingual support, automation, and various integrations. Their market presence is supported by strong branding, customer testimonials, and a focus on digital sovereignty. Technically, the website demonstrates a modern and responsive design with fast performance and good SEO practices. The use of Matomo analytics indicates a privacy-conscious approach to user tracking. Security-wise, the site enforces HTTPS and employs domain transfer protections, but lacks visible security headers and explicit incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR, though improvements in cookie consent and security transparency are recommended.

The website 'Bloggers Unite' hosted at xperta.es is a basic WordPress blog platform primarily serving general audiences with blog content. The site currently contains minimal content, including the default 'Hello world!' post, indicating it may be newly established or under development. The business model appears to be content publishing with no evident commercial or transactional services. Technical infrastructure is based on WordPress CMS with standard web technologies such as HTML5, CSS3, and JavaScript. The site demonstrates moderate mobile optimization and basic SEO but lacks advanced technical or security features. Security posture is minimal with no detected security headers or policies, and the site lacks privacy, cookie, or terms of service documentation. The domain registration is privacy protected, which is common for small personal blogs but limits trust signals. Overall, the site scores low to moderate on content quality, security, and privacy compliance, reflecting a basic web presence without professional or business-grade features.

D

DOSB New Media GmbH

sporteurope.tv

8

The website sporteurope.tv is operated by DOSB New Media GmbH, a German media company founded in 2018. It appears to be a sports media platform targeting European sports fans, particularly German-speaking audiences. The business model focuses on sports streaming and content delivery, positioning itself as a niche regional sports media provider. The technical infrastructure uses modern frontend technologies such as Bootstrap and Font Awesome, with moderate performance and good mobile optimization. However, the website lacks visible privacy and cookie policies, contact information, and security headers, indicating gaps in privacy compliance and security posture. No WAF or blocking mechanisms were detected, and the domain registration details are consistent and legitimate. Overall, the website presents a basic but functional digital presence with room for improvement in security and compliance.

J

juris GmbH

landesrecht-mv.de

10

The website 'Landesrecht Mecklenburg-Vorpommern' is an official legal information portal operated by juris GmbH in cooperation with the Justice Ministry of Mecklenburg-Vorpommern, Germany. It provides free access to consolidated state laws, administrative regulations, and court decisions, targeting citizens and legal professionals. The business model focuses on public service and legal transparency, positioning itself as a trusted government resource. Technically, the site uses modern web technologies including React and Webpack, with a CMS platform (jportal) tailored for legal content management. The site is mobile-optimized and accessible, though performance is moderate. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

L

Landesregierung Mecklenburg-Vorpommern

regierung-mv.de

10

The website www.regierung-mv.de is the official government portal for the state of Mecklenburg-Vorpommern, Germany. It serves as a comprehensive information hub for the state's government activities, ministries, press releases, and public services. The portal targets citizens, media, and stakeholders interested in regional governance and public affairs. It offers rich content including ministerial information, news, events, and accessibility features such as content in sign language and easy language. Technically, the site uses standard web technologies with a likely custom CMS, providing good mobile optimization and accessibility. Security-wise, it implements cookie consent mechanisms and uses HTTPS, but lacks explicit security headers and incident response information. The WHOIS data aligns with the official government entity, confirming legitimacy. Overall, the site is professional, trustworthy, and well-maintained, with room for improvement in security policy transparency and technical security headers.

T

Telia Company

teliacompany.com

76

Telia Company is a leading telecommunications provider operating primarily in the Nordic and Baltic regions. The company offers a broad range of connectivity and digital services targeting both consumer and enterprise customers. Their market position is strong, supported by a consistent brand presence and a focus on sustainability and corporate governance. The website reflects a mature digital presence with modern technologies and a professional design. The technical infrastructure is built on React and modern web standards, ensuring good performance and mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and GDPR-compliant privacy and cookie policies. However, the absence of publicly available WHOIS data suggests privacy protection, which is common for large enterprises. Overall, the website and company demonstrate a high level of professionalism and trustworthiness.

R

Radionix

radionix.com

64

Radionix is a security systems provider specializing in integrated intrusion detection, access control, fire alarm, and video monitoring solutions. Positioned as part of the KEENFINITY Group, Radionix targets commercial, educational, financial, and retail sectors with a focus on delivering mission-critical security technology. The website presents a professional and comprehensive digital presence with multimedia content and clear navigation, supporting a medium-sized enterprise profile. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript libraries such as Swiper.js for interactive content. The site is mobile-optimized and accessible, with good SEO practices evident. HTTPS is enforced, and embedded content uses privacy-conscious YouTube no-cookie domains. However, the absence of explicit security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. From a security posture perspective, the site shows good practices such as no exposed sensitive data and secure iframe usage. The lack of a published security policy, incident response contacts, or vulnerability disclosure reduces transparency and preparedness. The missing WHOIS data for the domain is a notable concern, impacting trust and legitimacy assessments despite the professional site content. Overall, Radionix's website is well-designed and functional, but the domain registration opacity and limited direct contact information suggest the need for enhanced transparency and security governance to strengthen trust and compliance.

Telex, a brand under Bosch Global, specializes in communication solutions for radio dispatch and aviation sectors, offering hardware and software products designed for high-pressure environments. The company has a strong market presence with over 50 years of legacy, targeting professional users in telecommunications and transportation industries. The website reflects a mature digital infrastructure with modern technologies, consent management, and comprehensive legal compliance. Security posture is solid with HTTPS enforcement and domain protection, though improvements like DNSSEC and explicit security headers could enhance it further. Overall, the site is professional, trustworthy, and well-structured, supporting Telex's reputation as a reliable communication solutions provider.

B

Bosch Global

rtsintercoms.com

66

RTS Intercom Systems, a brand under Bosch Global, specializes in advanced professional intercom systems tailored for broadcasting, live events, and critical communication environments. With a legacy spanning 50 years, RTS offers a comprehensive portfolio including digital matrix intercoms, wireless systems, partyline intercoms, headsets, and innovative cloud-based communication solutions such as RVOC. The company is positioned as a market leader with multiple industry awards and a strong reputation for reliability and innovation. The website reflects a mature digital presence with excellent content quality, clear navigation, and professional branding consistent with Bosch's standards. Technically, the site employs modern web technologies, including Google Tag Manager and consent management tools, ensuring compliance with privacy regulations and good SEO practices. Security posture is strong with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, RTS demonstrates a robust business and digital maturity suitable for its enterprise-level operations.

D

Dynacord

dynacord.com

67

Dynacord is a well-established professional audio company specializing in high-quality amplifiers, system controllers, and sound system software for commercial and fixed installations. The company benefits from a strong brand presence, supported by its parent company Bosch, and targets professional audio engineers and commercial integrators. The website reflects a mature digital presence with excellent content quality, clear navigation, and mobile optimization. Technically, the site uses modern web technologies including Google Tag Manager and a consent management platform, integrated with a CMS API. Security posture is solid with HTTPS enforced and domain registration consistent with the business history, though some improvements in security headers and explicit security policies could be made. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

D

Deutscher Tennis Bund

dtb-tennis.de

72

The Deutscher Tennis Bund (DTB) operates the official tennis federation website for Germany, providing comprehensive information on national teams, training programs, membership offers, and tennis events. The site targets tennis enthusiasts, players, coaches, and fans within Germany, positioning itself as the authoritative source for tennis-related content in the country. The business model is non-profit and focused on sports promotion and community engagement. Technically, the website leverages Adobe Experience Manager (AEM) as its CMS, hosted on Adobe's cloud infrastructure, and integrates modern technologies such as Cookiebot for consent management, Google Tag Manager for analytics, and Smart AdServer for advertising. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses secure cookies, and implements consent mechanisms aligned with GDPR. While explicit security headers are not fully visible in the HTML, the use of reputable third-party services and secure hosting suggests a strong security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and compliance with privacy regulations. Strategic recommendations include enhancing visible security policies, publishing incident response contacts, and verifying security headers to further strengthen trust and security culture.

B

Basler Kantonalbank

bkb.ch

76

Basler Kantonalbank is a well-established Swiss cantonal bank providing a broad range of financial services to private customers, including banking accounts, investment advisory, mortgages, and pension planning. The website reflects a professional and consistent brand presence targeting private banking clients primarily in Switzerland. The technical infrastructure uses modern web technologies with a cookie consent mechanism implemented via OneTrust, ensuring basic privacy compliance. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and published security policies. No blocking or WAF interference was detected, allowing full content access. Overall, the website demonstrates a mature digital presence suitable for a large financial institution.

R

RaiseNow

raisenow.ch

72

RaiseNow operates a professional SaaS platform focused on enabling nonprofits, associations, and changemakers to efficiently collect donations and manage payments both locally and globally. The website demonstrates a strong market position with over 54,000 organizations trusting their technology, including well-known NGOs such as UNICEF and Amnesty International. The platform offers a comprehensive suite of fundraising tools, payment acceptance solutions, community engagement features, and integration capabilities, positioning itself as a key player in the nonprofit technology sector. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies including Google Analytics 4, Google Tag Manager, and FontAwesome. The site is mobile-optimized, well-structured, and includes SEO best practices. Cookie consent mechanisms and privacy policies indicate a good level of GDPR compliance. However, explicit security headers are not clearly visible in the provided data, suggesting room for improvement in security hardening. From a security perspective, the site uses HTTPS and implements cookie consent, but lacks publicly visible security policies or incident response contacts. The absence of WHOIS registrant data is a concern but does not currently undermine the site's legitimacy given the professional presentation and reputable client base. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, RaiseNow's website reflects a mature digital presence with solid business credibility and moderate technical sophistication. Strategic recommendations include enhancing security header implementation, publishing security policies, and improving transparency around incident response. Monitoring the WHOIS data situation is advised to ensure ongoing trustworthiness.

Bänziger Hug is a Swiss-based design agency founded in 2011 by Samuel Bänziger and Olivier Hug. The agency specializes in print and interactive design, offering services such as book design, exhibitions, publications, identities, and website design primarily for cultural institutions, businesses, and individuals. The company has a strong market position within its niche, supported by numerous prestigious design awards, indicating a high level of professional recognition and trust. Technically, the website is built using modern web standards including HTML5, CSS3, and JavaScript, with the use of Modernizr for feature detection and Google Analytics for visitor tracking. The site is mobile optimized and performs moderately well, though accessibility features are basic. The absence of a CMS or hosting provider information limits deeper infrastructure insights. From a security perspective, the website benefits from HTTPS with excellent SSL configuration, but lacks important security headers such as Content-Security-Policy and X-Frame-Options. No forms or input fields are present, reducing attack surface, but the absence of privacy and cookie policies indicates compliance gaps. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website content. Overall, the website is professional and trustworthy in appearance and content, but the lack of WHOIS transparency and privacy compliance policies present moderate risks. Strategic improvements in security headers, privacy documentation, and domain registration transparency are recommended to enhance trust and compliance.

N

Nora Vögeli Grafik Design

noravoegeli.com

60

Nora Vögeli Grafik Design is a small, professional design atelier based in Zürich, Switzerland, specializing in art direction, graphic design, branding, and spatial design. The website showcases a comprehensive portfolio of projects including corporate design, event branding, publications, and digital applications, targeting clients seeking creative design services primarily in the Zürich region. Technically, the site is built on the Squarespace platform, leveraging modern web technologies such as HTTPS with HSTS, Google Fonts, and YouTube embeds, providing a moderate performance and good mobile optimization. Security posture is solid with HTTPS and HSTS, but lacks additional security headers and formal privacy or cookie policies. The absence of WHOIS data limits domain legitimacy verification, though the professional presentation and content quality suggest a legitimate business. Overall, the site is well-designed and functional but would benefit from enhanced privacy compliance and clearer contact information to improve trust and security.

J

Julian Humm Gestaltung und Entwicklung

julianhumm.com

60

Julian Humm Gestaltung und Entwicklung is a small design and development office based in Basel, Switzerland, specializing in visual communication and publication solutions for both digital and analog spaces. The company offers services including branding, web design, poster creation, and identity development, targeting clients who require professional visual communication systems. The website showcases a portfolio of projects and client references, indicating a solid market presence within its niche. Technically, the website is built using modern technologies such as Svelte and Swiper.js, with good mobile optimization and a clean, professional design. However, there is a lack of privacy and cookie policies, and no security headers were detected, which are areas for improvement. The WHOIS data for the domain is missing or indicates the domain may not be registered, which is unusual but the website content and contact information suggest a legitimate business. Overall, the site is safe, professional, and trustworthy, but would benefit from enhanced security and privacy compliance measures.

K

Kanzlei Dr. Peter Unmüßig

kanzlei-unmuessig.de

55

Kanzlei Dr. Peter Unmüßig is a small, regionally established German law firm specializing in traffic law, labor law, inheritance law, tenancy law, administrative offenses, insurance law, and civil law. The firm operates from a main office in Gundelfingen with multiple branch offices, and is a member of the Apraxa cooperative network of law firms. The website provides comprehensive legal service information, attorney biographies, and detailed privacy and legal disclaimers, targeting private clients and businesses seeking legal representation. Technically, the website uses legacy jQuery and standard HTML/CSS with moderate performance and basic mobile optimization. Security posture is moderate with no HTTPS or security headers explicitly confirmed, and an outdated jQuery version poses a potential risk. Privacy compliance is strong with a detailed GDPR-compliant privacy policy, though no cookie consent mechanism is present. Overall, the site is professional and trustworthy but would benefit from technical and security updates.

The Meldestelle Sportmanipulation website serves as an official German government-related platform dedicated to combating manipulation in sports competitions and betting fraud. It provides a secure and anonymous whistleblower system, supported by a reputable law firm, to encourage fair play and integrity in sports. The site targets sports enthusiasts, athletes, and the general public interested in maintaining fairness in sports. The business model is a state-mandated reporting and advisory service, positioning itself as a trusted authority in the niche of sports integrity. Technically, the website is built using the Government Site Builder CMS, employs modern web standards including HTML5, CSS3, and JavaScript, and integrates Matomo for web analytics with a clear cookie consent mechanism. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a moderate to good digital maturity. Hosting details are not explicit, but HTTPS is enforced, ensuring secure communications. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent with opt-out options. However, no explicit security headers were detected in the provided data, and there is no published security or incident response policy. No vulnerabilities or exposed sensitive data were found. The absence of a vulnerability disclosure policy or security.txt file suggests room for improvement in transparency and incident handling readiness. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and official branding. The WHOIS data is minimal but does not raise significant concerns given the governmental nature of the site. Recommendations include publishing formal security policies, adding security headers, and establishing a vulnerability disclosure mechanism to enhance security posture and user trust.

TuS Glarum is a local German sports club offering a wide range of sports and fitness activities for all age groups, including gymnastics, ball sports, dance, and rehabilitation programs. The website serves as an information portal for members and the local community, providing schedules, news, and contact details. The club maintains an active presence on social media platforms such as Facebook and Instagram, enhancing community engagement. Technically, the website is built on the Clansphere CMS platform, utilizing standard web technologies including HTML, CSS, and JavaScript. It employs legacy components such as FCKeditor and Ajax scripts. The site is hosted via INWX nameservers, indicating a German hosting provider. Performance and mobile optimization are moderate, with basic accessibility and SEO features implemented. From a security perspective, the website lacks visible security headers and modern security policies. The use of an outdated editor and absence of cookie consent mechanisms highlight areas for improvement. The email address is obfuscated to reduce spam, but no explicit incident response or security policy pages are present. The domain WHOIS data is consistent and transparent, supporting the legitimacy of the site. Overall, the website is functional and trustworthy for its community sports purpose but would benefit from enhanced security measures, privacy compliance improvements, and modernization of technical components to reduce risk and improve user trust.

S

Sparkasse

sportabzeichen-wettbewerb.de

57

The Sportabzeichen-Wettbewerb website is a professionally designed platform promoting a national sports competition initiative supported by the Sparkassen-Finanzgruppe in Germany. It focuses on encouraging both athletic achievement and social engagement through the Deutsches Sportabzeichen. The site offers information about participation, prizes, and related projects, targeting athletes, sports clubs, and community organizers. Technically, the site is built on a Laravel-based framework, uses modern web standards including HTTPS, and integrates Google Analytics for visitor tracking. The cookie consent mechanism is robust and GDPR compliant. Security posture is solid with CSRF protections and secure cookie handling, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-branded, and serves its non-profit sports promotion mission effectively.

T

tabmag / publish! Content-Marketing-Agentur

tabmag.de

55

tabmag is a German-based digital magazine platform and content marketing service provider specializing in transforming traditional print content into interactive, responsive digital magazines. The company operates under the umbrella of the publish! Content-Marketing-Agentur and targets organizations such as companies, associations, and clubs seeking modern digital publishing solutions. The website demonstrates a high level of digital maturity with modern technologies, multimedia content, and interactive tools like a cost-saving calculator. Security posture is solid with HTTPS and form validation, though some enhancements like CSP headers and incident response contacts could improve it further. Privacy compliance is well addressed with clear privacy and terms pages, though a cookie consent mechanism is not evident. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

K

Kontainer

kontainer.com

62

Kontainer is a Denmark-based technology company specializing in digital asset management, product information management, and image bank solutions. Established in 2000, it serves businesses seeking efficient digital content management through a B2B SaaS platform. The website reflects a professional and consistent brand image with a focus on user experience and mobile responsiveness. Technically, the site leverages modern frameworks such as Nuxt.js and Vue.js, ensuring a contemporary and performant digital presence. Security posture is solid with HTTPS enabled and domain protections in place, though improvements like DNSSEC and explicit security policies could enhance trust further. Overall, Kontainer presents a credible and mature digital footprint suitable for its market segment.

J

Jazzcampus / Hochschule für Musik Basel

jazzcampus.com

64

Jazzcampus is an educational institution specializing in jazz music education located in Basel, Switzerland. It operates as part of the Hochschule für Musik Basel under the Fachhochschule Nordwestschweiz FHNW umbrella. The website presents a professional and comprehensive digital presence, offering detailed information about study programs, music courses, events, and affiliated organizations. The site is well-structured, mobile-optimized, and integrates multimedia content such as Vimeo videos to enhance user engagement. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements in cookie consent and security headers are recommended. The absence of WHOIS data for the domain raises concerns about domain registration transparency, but the strong institutional affiliation and content quality support legitimacy. Overall, the site serves its educational mission effectively with a trustworthy and professional online presence.

The website www.alinaguenter.ch is a professional portfolio site for an individual artist and illustrator based in Switzerland. It showcases various projects including illustrations, graphic design, book design, and exhibition design. The site targets art enthusiasts and potential clients in creative sectors. The business model is primarily service-based, focusing on creative commissions and client work. The website is built on WordPress using the Lay theme, indicating a moderate level of digital maturity with a focus on visual presentation and portfolio management. Mobile optimization is good, and the site loads with moderate performance. Security posture is basic with HTTPS enabled but lacks security headers and formal privacy or cookie policies, which are important for compliance and trust. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the site is safe for general audiences and professionally presented but would benefit from enhanced privacy compliance and security best practices.

W

wemakeit Ltd

wemakeit.com

69

wemakeit Ltd operates a well-established crowdfunding platform specializing in creative projects such as art, music, literature, and innovative ideas. Founded in 2014 and based in Switzerland, the platform has facilitated over 7,900 successful projects with a strong community of over 720,000 members. The business model centers on enabling project creators to raise funds through community engagement and offers additional services such as crowdfunding consultancy and webinars. The platform maintains a consistent brand presence and leverages partnerships with various specialized channels to expand its reach. Technically, wemakeit employs a modern web stack including Ruby on Rails with Turbo (Hotwire) for dynamic content delivery, Cloudinary for image hosting, and Matomo Tag Manager for analytics. The website is well-optimized for mobile devices, accessible, and SEO-friendly, though performance is moderate. Hosting details are partially known, with domain registration through EuroDNS S.A. The platform uses HTTPS with valid SSL but lacks DNSSEC and some security headers, which are recommended for enhanced security. From a security perspective, the platform demonstrates good practices such as HTTPS enforcement and CSRF protection in forms. However, the absence of DNSSEC, security headers, and explicit incident response contacts indicates areas for improvement. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but the lack of a cookie consent mechanism is a notable gap given GDPR requirements. No critical vulnerabilities or adult content were detected, and the website is fully accessible without WAF blocking. Overall, wemakeit presents a trustworthy and professional crowdfunding platform with strong business credibility and a solid technical foundation. Strategic enhancements in security headers, DNSSEC, and privacy consent mechanisms would further strengthen its security posture and compliance standing.

The website garancianakupu.sk operates as a Slovak e-commerce purchase guarantee platform affiliated with Heureka Group a.s. It provides customers with assurances on purchases made through the Heureka Košík system, including money-back guarantees and support for order issues. The site targets Slovak online shoppers and certified e-shops, positioning itself as a trusted intermediary in the Slovak e-commerce market. The business model revolves around enhancing consumer confidence and supporting e-shops with certification and guarantee services. Technically, the website uses AngularJS for frontend rendering, includes Google Analytics for tracking, and employs modern HTML5 and CSS3 standards. The site is mobile-optimized and presents a professional design with clear navigation. However, it lacks advanced accessibility features and modern frameworks. No CMS or hosting provider details are evident from the content. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks visible security headers and published security or incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. The domain WHOIS data is consistent and indicates a legitimate, established business presence since 2009. Overall, the website is functional, trustworthy, and professionally presented but would benefit from enhanced privacy compliance, security hardening, and transparency regarding data protection and incident response.

G

GWeb Solutions GmbH

gweb.de

62

GWeb Solutions GmbH is a German-based digital transformation consultancy specializing in helping organizations digitize their processes and structures. With over 12 years of experience and more than 450 completed projects, the company positions itself as a reliable and experienced partner in the technology sector. Their website reflects a professional image with a clear focus on digital innovation and client success. The company targets organizations seeking to modernize and digitally transform their operations. Technically, the website employs modern web technologies including jQuery, FontAwesome, and integrates privacy-conscious tools such as self-hosted Matomo analytics and Google reCAPTCHA for form protection. The presence of a comprehensive cookie consent mechanism and privacy policy indicates good GDPR compliance. Security-wise, while HTTPS is used and forms are protected with reCAPTCHA, the site lacks visible security headers and published security policies, suggesting room for improvement in security posture. Overall, the website is well-designed, user-friendly, and trustworthy, with no signs of malicious content or blocking mechanisms.

M

MGS Loib GmbH

mgs.de

10

MGS Loib GmbH is a medium-sized German retail company specializing in wholesale distribution of sheet music and related music products. The company operates multiple physical branches and serves music retailers and business partners. As of July 1, 2024, the wholesale operations are being transferred to music distribution services (mds) in Mainz, indicating a strategic business transition. The website is professionally designed using WordPress and the Kadence theme, providing a good user experience with clear navigation and relevant content primarily in German. Technical infrastructure includes modern web technologies and privacy-conscious analytics via Matomo. Security posture is adequate with HTTPS enforced, though improvements in security headers and explicit incident response policies are recommended. Privacy compliance is partially met with a privacy policy present but lacking a cookie consent mechanism. Overall, the website is trustworthy and professional, reflecting a credible business presence in the music wholesale retail sector.

V

Værsågod AS

vaersaagod.no

60

Værsågod AS is a small Norwegian digital agency specializing in modern, accessible website development. Founded in 2012, the company offers front-end and back-end development, creative coding, CMS solutions, and ongoing support and maintenance. Their client portfolio includes reputable Norwegian organizations, positioning them as a trusted boutique agency in the technology sector. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site uses modern web technologies and CDNs, ensuring fast performance and good accessibility. Security posture is solid with HTTPS enforced, though explicit security headers and privacy policies are absent, representing areas for improvement. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is reasonable for this business type. Overall, the website demonstrates high professionalism and trustworthiness with minor gaps in privacy compliance and security disclosures.

A

AS Vinmonopolet

vinmonopolet-aret-oppsummert.no

57

Vinmonopolet is a Norwegian government-owned retail monopoly responsible for the sale of alcoholic beverages. This website serves as a 2024 summary of their activities, focusing on responsible alcohol sales, sustainability, and corporate transparency. The site targets Norwegian consumers and stakeholders interested in Vinmonopolet's operations. Technically, the site uses modern web standards, custom fonts, and optimized images, delivering a fast and mobile-optimized experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are absent. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site is professional, trustworthy, and aligned with the official Vinmonopolet brand.

B

Bigadan A/S

bigadan.com

60

Bigadan A/S is a Denmark-based company specializing in the development, construction, operation, and ownership of modular biogas systems and circular energy ecosystems. With over 40 years of experience, the company serves industrial, agricultural, municipal, and energy consumer clients by providing end-to-end solutions including biomass sourcing, biogas plant construction, biomethane production, biogenic CO2 capture, and nutrient-rich fertilizer production. The website reflects a mature and professional business with a strong market position in the renewable energy sector. Technically, the website is well-implemented with modern technologies, fast performance, and excellent mobile optimization. Security posture is good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with clear privacy and cookie policies, though no explicit consent mechanism is present. Contact is primarily via web forms, with no direct emails or phone numbers published. Overall, the site is trustworthy, professional, and aligned with industry standards.

Z

Zinc

zinc.no

57

Zinc is a Norwegian interior architecture firm specializing in creating functional, aesthetic, and identity-driven spaces primarily for commercial and institutional clients. They are part of the Dark Design Group, which includes sister companies Dark Arkitekter and Lark Landskap, indicating a multidisciplinary approach to design and architecture. Their portfolio includes projects for prominent clients such as Aker BP, KPMG, and Accenture, positioning them as a reputable player in the Norwegian interior architecture market. Technically, the website is built on modern web standards, likely using Craft CMS, with optimized images, lazy loading, and custom fonts. The site is mobile-optimized and accessible, with good SEO practices. Security-wise, the site uses HTTPS and includes CSRF tokens, but lacks some security headers and visible privacy or cookie policies, which are areas for improvement. The absence of WHOIS data is a notable concern, reducing the trustworthiness of the domain registration. However, the professional presentation, clear contact information, and social media presence mitigate some of these concerns. Overall, the website reflects a mature digital presence but would benefit from enhanced transparency regarding privacy and security policies.

R

Røroshotellene

roroshotellene.no

53

Røroshotellene is a hospitality business operating in Røros, Norway, offering hotel accommodations, local dining experiences, event hosting, and family-friendly activities. The website positions the company as a regional hospitality provider with a focus on authentic local experiences and tailored events. The digital infrastructure is modern, leveraging JavaScript, CSS, and privacy-respecting analytics (Plausible). The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is good with HTTPS enforced and secure form handling, though some security headers and cookie consent mechanisms are missing. WHOIS data is unavailable, likely due to privacy protection, but the website's professionalism and consistent business information support legitimacy. Overall, the site is well-suited for its target audience of tourists, business clients, and families seeking hospitality services in Røros.

A

Aspelin Eiendom

aspelineiendom.no

59

Aspelin Eiendom is a well-established Norwegian real estate company founded in 1977, specializing in complex urban development projects aimed at creating attractive city environments and spaces. The company holds a strong market position supported by numerous industry awards and a professional digital presence. Their website reflects a mature digital infrastructure with modern technologies, responsive design, and privacy-conscious analytics. Security posture is solid with HTTPS and no evident vulnerabilities, though some security headers could be improved. The absence of WHOIS data suggests privacy protection, which aligns with corporate best practices. Overall, the company demonstrates professionalism, trustworthiness, and compliance with privacy regulations.

D

dialoop GmbH

dialoop.de

56

dialoop GmbH is a specialized technology service provider based in Germany, offering a broad range of digital communication solutions including web development, email marketing, mobile applications, customer loyalty management, and user experience design. The company positions itself as an experienced partner with over two decades of market presence, serving both enterprises and agencies with tailored digital services. Their website reflects a professional and consistent brand image, supported by detailed client references and comprehensive service descriptions. Technically, the website employs a modern technology stack including PHP frameworks (Symfony, Laravel), JavaScript frameworks, and CMS platforms like TYPO3 and WordPress. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security measures include HTTPS enforcement, CSRF tokens, and captcha on forms, but lack some HTTP security headers and cookie consent mechanisms. From a security perspective, the site demonstrates good practices with secure form handling and no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure reduces transparency. WHOIS data is limited due to DENIC privacy policies but shows consistent DNS management aligned with the brand. Overall, dialoop GmbH presents a trustworthy and professional digital presence with solid technical and security foundations. Strategic improvements in privacy compliance and security transparency would further enhance their risk posture and client trust.

S

Stadt Wallisellen

wallisellen.ch

61

Stadt Wallisellen operates an official municipal website providing comprehensive information and digital services to its residents and stakeholders. The site covers a broad range of topics including local politics, administration, education, culture, and public services, positioning itself as the primary digital interface for the community. The website demonstrates a solid technical infrastructure using modern web standards, responsive design, and privacy-conscious analytics (Matomo) with user consent mechanisms. Security posture is good with HTTPS enforced and secure form implementations, though some security headers could be improved. Overall, the site is trustworthy, professional, and well-aligned with its government entity status.

R

Raiffeisen Schweiz Genossenschaft

raiffeisen.ch

75

Raiffeisen Schweiz Genossenschaft is the second largest Swiss banking group, specializing in retail and corporate banking services. Founded in 1899, it offers a broad range of financial products including mortgages, investment services, insurance, and e-banking solutions. The website targets both private and business customers, providing comprehensive information and digital services. Technically, the site is built on Adobe Experience Manager with modern JavaScript frameworks and is optimized for mobile and accessibility. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site reflects a mature, trustworthy financial institution with a professional online presence.

O

OSTWIND

ostwind.ch

56

OSTWIND is a regional public transport tariff association serving multiple Swiss cantons and Liechtenstein, uniting 30 transport companies under a unified zonal fare system. The website provides comprehensive information on ticketing, subscriptions, customer service, and travel tips, targeting public transport users in the region. The digital infrastructure employs modern web technologies including web components and embedded video content, with Google Tag Manager for analytics and marketing. The site is well-designed, mobile-optimized, and accessible, offering a positive user experience. Security posture is good with HTTPS enforced, but could be improved by adding standard security headers and publishing explicit security policies. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, OSTWIND’s website is professional and trustworthy, serving its audience effectively with room for security and compliance enhancements.

G

Golf Obere Alp e.V.

golf-oberealp.de

63

Golf Obere Alp e.V. is a regional golf club located in Germany's Schwarzwald region, offering a 27-hole golf course, training, tournaments, and hospitality services. The website is built on TYPO3 CMS and uses modern frontend technologies such as jQuery, Swiper.js, and FontAwesome. The site is well-structured with good content quality, including frequent news updates and event information, targeting golf enthusiasts and club members. While the site employs HTTPS and a cookie consent mechanism, it lacks explicit privacy and terms of service pages, and no direct contact information is found in the HTML content. Security headers and incident response policies are not evident, indicating room for improvement in security posture. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact channels.

G

Golfclub Engelberg-Titlis

golfclub-engelberg.ch

68

Golfclub Engelberg-Titlis operates a well-established 18-hole golf course located in Engelberg, Switzerland, offering a blend of sport and nature with a mild mountain climate. The club targets golf enthusiasts including guests, members, juniors, and seniors, providing services such as golf lessons, tournaments, a pro shop, and seasonal restaurant facilities. The website reflects a strong community focus and regional market position, supported by a GEO certification that underscores environmental and operational standards. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies with good SEO and mobile optimization. Security posture is robust with HTTPS, security headers, and secure login forms, though explicit security policies and incident response contacts are absent. Privacy compliance is addressed through a cookie consent mechanism and a privacy information page, indicating GDPR awareness. Overall, the site is professional, trustworthy, and content-rich, supporting the club's business credibility and member engagement.

V

Værsågod AS

vrs.gd

60

Værsågod AS is a small Norwegian digital agency specializing in the development of modern, accessible, and visually engaging websites. Founded in 2012, the company offers front-end and back-end development, creative coding, CMS solutions, and ongoing support and maintenance. Their client portfolio includes reputable organizations such as Snøhetta, Oslo-Filharmonien, and Bane NOR, positioning them as a trusted boutique agency in the Norwegian market. The website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the site employs modern web technologies, including HTTPS, CDNs, and optimized media delivery, ensuring fast performance and good mobile responsiveness. However, the absence of explicit privacy and cookie policies indicates a compliance gap that should be addressed. Security posture is solid with HTTPS and no visible vulnerabilities, but could be improved by adding security headers and vulnerability disclosure mechanisms. Overall, the domain appears legitimate despite the lack of WHOIS data, likely due to registry privacy policies. The site is safe for general audiences and demonstrates high professionalism and trustworthiness.

T

Treets Venner

treetsvenner.no

43

Treets Venner is a Norwegian non-profit organization dedicated to the use, preservation, and maintenance of trees and vegetation. The website serves as an educational and advocacy platform targeting environmentally conscious individuals and communities interested in tree conservation. The organization operates primarily through membership engagement, events, and informational content. The website is built on WordPress using the Twenty Fourteen theme and integrates Google Analytics and Jetpack for analytics and site management. While the site is well-structured, mobile-optimized, and secure with HTTPS, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. No direct contact information or security incident response details are provided, which could impact user trust and compliance. Overall, the site presents a professional and trustworthy image consistent with a small non-profit entity with a long-standing domain registration dating back to 2009.

S

SproutVideo

sproutvideo.com

75

SproutVideo is a well-established video hosting and live streaming platform targeting businesses and enterprises. Founded in 2010, it offers a comprehensive suite of video marketing, analytics, and privacy tools designed to help companies securely share and analyze video content. The platform is trusted by Fortune 500 companies and thousands of small and medium-sized organizations, positioning itself as a reliable and enterprise-ready solution in the video hosting market. The website reflects a mature digital presence with professional design, clear navigation, and extensive marketing and analytics integrations. Technically, SproutVideo leverages modern web technologies including HTML5, JavaScript, and CSS3, supported by AWS infrastructure and Cloudfront CDN for performance and scalability. The site integrates multiple analytics and tracking services such as Google Analytics, Facebook Pixel, TikTok Analytics, LinkedIn Insight Tag, and Microsoft Clarity, indicating a sophisticated approach to user engagement and marketing optimization. Mobile optimization and accessibility are well addressed, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with a strong SSL configuration and uses domain transfer protection. However, it lacks DNSSEC and explicit security headers, and does not publish a dedicated security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is supported by clear privacy and cookie policies with consent mechanisms, aligning with GDPR requirements. Overall, SproutVideo demonstrates a strong business credibility and technical maturity with a high level of professionalism and trustworthiness. Strategic recommendations include enhancing DNS security with DNSSEC, implementing security headers, and publishing security and vulnerability disclosure policies to further strengthen the security posture and transparency.

T

Ten4

ten4design.co.uk

72

Ten4 is a UK-based digital agency specializing in research, strategy, design, and development services for ambitious organizations. The company serves a diverse client base including prestigious institutions such as Royal Museums Greenwich, BAFTA, Channel 4, and University College London, positioning itself as a reputable player in the digital services market. Their offerings encompass UX/UI design, API integrations, content management, and secure hosting, reflecting a comprehensive digital service portfolio. The website demonstrates a high level of professionalism with rich multimedia content and clear navigation, targeting organizations seeking digital transformation and growth.

L

Loxton Walk

loxtonwalk.com

47

Loxton Walk is a newly developed commercial real estate destination located in Marylebone, London, offering flexible retail and restaurant spaces across multiple units. The website presents a professional and modern digital presence, leveraging contemporary web technologies such as SvelteKit and Google Maps API to enhance user experience. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy or registration status. The site lacks critical compliance documents such as privacy and cookie policies, and no direct contact information is provided, which may impact user trust and regulatory compliance. Security posture is moderate with HTTPS implied but no explicit security headers detected. Overall, the site appears to be in a development or pre-launch phase, requiring improvements in transparency and security to fully establish credibility.

B

Baumeister

baumeister.de

48

The website www.baumeister.de represents a German-language site branded as 'Baumeister'. The content and metadata suggest it is related to construction or a similar sector, though explicit business descriptions are not present in the provided data. The site uses WordPress CMS with Astra theme and incorporates SEO and performance optimization plugins such as Yoast SEO and WP Rocket. A cookie consent mechanism is implemented via BorlabsCookie, indicating some level of privacy compliance awareness. However, no explicit privacy policy, terms of service, or contact information are found in the analyzed content, which limits transparency and user trust. Technically, the site is moderately optimized for performance and mobile responsiveness but lacks visible security headers and detailed security policies. The domain WHOIS data shows consistent DNS name servers aligned with German hosting providers, supporting legitimacy, though registrant details are minimal. Overall, the site is functional and professional but would benefit from enhanced privacy disclosures and security practices.

L

L'Ordre des architectes

ordredesarchitectes.be

44

L'Ordre des architectes is the official professional association representing architects in the francophone and germanophone regions of Belgium. The website serves as a comprehensive resource for architects, trainees, and the public, offering directories, news, job listings, and architectural project showcases. The organization holds a strong market position as the authoritative body for architectural practice in Belgium. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and utilizes libraries such as Swiper.js and Redactor editor. The site is hosted by OVH, a reputable provider, and demonstrates good mobile optimization and SEO practices. Security posture is moderate with HTTPS usage and cookie consent mechanisms in place, but lacks visible security headers and formal security policies. Overall, the site is professional, trustworthy, and content-rich, though it could improve privacy policy visibility and security disclosures.

B

Bosch Sicherheitssysteme GmbH

boschsecurity.com

69

Bosch Sicherheitssysteme GmbH operates a professional corporate website focused on security and safety systems, particularly fire alarm and detection technologies. The company is positioned as a large enterprise within the technology and manufacturing sectors, serving industrial and commercial clients globally. The website reflects a mature digital presence with consistent branding and comprehensive content about their realignment and product offerings. Technically, the site employs modern web technologies including Google Tag Manager and custom privacy consent management, ensuring GDPR compliance and user privacy. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and a dedicated security policy page are absent. WHOIS data is unavailable from the raw output, which is unusual but the website's professional nature and corporate branding strongly support legitimacy. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

C

Carmody Groarke

carmodygroarke.com

68

Carmody Groarke is a London-based architecture practice established in 2006, specializing in cultural, heritage, and innovative architectural projects. The website serves as a professional portfolio showcasing their key projects, publications, and news updates, targeting clients and stakeholders in the architecture and real estate sectors. The firm positions itself as an established player with a focus on research, innovation, and urban heritage. Technically, the website is built using modern web technologies including React and Next.js, with content managed via Sanity CMS. The site demonstrates good mobile optimization and user experience, though some SEO and accessibility features could be enhanced. Performance is moderate with a well-structured layout and clear navigation. From a security perspective, the site uses HTTPS with a valid SSL certificate but lacks DNSSEC and security headers, which are recommended to improve security posture. No explicit security policies or incident response information is provided, indicating room for improvement in transparency and compliance. Overall, the website is professional and trustworthy with no signs of malicious content or blocking mechanisms. Privacy and cookie policies are present but basic, and no contact emails or phone numbers are explicitly listed on the homepage. Strategic recommendations include enhancing security headers, adding detailed security and incident response policies, and improving privacy compliance disclosures.

C

Caruso St John Architects

carusostjohn.com

54

Caruso St John Architects is an internationally recognized architecture firm specializing in well-crafted architectural projects, renovations, and exhibition designs. The firm has a strong market position with numerous awards, lectures, and publications highlighting their expertise and influence in the architecture sector. Their website reflects a professional and consistent brand image targeting clients and stakeholders interested in high-quality architectural services. The business operates primarily in the real estate and architectural design industry, based in the United Kingdom, with a domain age consistent with a mature and established practice. Technically, the website employs standard web technologies such as HTML5, CSS3, and JavaScript, hosted by GoDaddy.com, LLC. The site is moderately performant with good mobile optimization and accessibility features. However, there is room for improvement in security configurations, including enabling DNSSEC and implementing security headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies, and no incident response or vulnerability disclosure information is provided. The security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. No critical vulnerabilities or exposed sensitive data were detected. The website content is safe for general audiences, with no adult or questionable content. Overall, the site demonstrates high professionalism and trustworthiness but would benefit from enhanced privacy and security practices to align with best practices and regulatory requirements. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear incident response and vulnerability disclosure channels to strengthen trust and compliance.