Security Directory

V

Værsågod AS

vaersaagod.no

60

Værsågod AS is a small Norwegian digital agency specializing in modern, accessible website development. Founded in 2012, the company offers front-end and back-end development, creative coding, CMS solutions, and ongoing support and maintenance. Their client portfolio includes reputable Norwegian organizations, positioning them as a trusted boutique agency in the technology sector. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site uses modern web technologies and CDNs, ensuring fast performance and good accessibility. Security posture is solid with HTTPS enforced, though explicit security headers and privacy policies are absent, representing areas for improvement. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is reasonable for this business type. Overall, the website demonstrates high professionalism and trustworthiness with minor gaps in privacy compliance and security disclosures.

S

Sørby Utleie AS

sorbyutleie.no

57

Sørby Utleie AS is a well-established Norwegian company specializing in the rental of machinery and equipment primarily for construction, industrial, and private sectors. Founded in 2009, the company emphasizes quality, service, and sustainability, offering nationwide delivery and green solutions. Their digital presence is professional, featuring a modern, responsive website with integrated search and self-service rental options. The company maintains active social media profiles and demonstrates trustworthiness through certifications like Miljøfyrtårn and customer references. Technically, the website employs modern web technologies, including lazy loading, custom fonts, and a proprietary platform, ensuring good performance and accessibility. Security posture is solid with HTTPS and nonce-based script/style protection, though there is room for improvement in explicit security headers and incident response disclosures. Privacy compliance is adequate with clear privacy and cookie policies, but lacks a consent mechanism. Overall, the site reflects a mature business with a strong market position in equipment rental in Norway.

T

Talormade

talormade.no

56

Talormade is a specialty coffee roastery and bakery based in Oslo, Norway, established around 2018. The company offers freshly made bakery products and specialty coffee, including a subscription membership for regular coffee bean deliveries. Their market position is that of a local specialty retailer with a strong community presence and multiple physical locations. Technically, the website is built on Craft CMS, uses modern JavaScript, and integrates Google Analytics and reCAPTCHA for security and analytics. The site is well-designed, mobile-optimized, and uses HTTPS with appropriate security headers, indicating a good security posture. However, it lacks explicit privacy and cookie policies, as well as incident response and vulnerability disclosure information, which are important for compliance and trust. Overall, the website is professional and trustworthy but could improve privacy compliance and security transparency.

A

AS Vinmonopolet

vinmonopolet-aret-oppsummert.no

57

Vinmonopolet is a Norwegian government-owned retail monopoly responsible for the sale of alcoholic beverages. This website serves as a 2024 summary of their activities, focusing on responsible alcohol sales, sustainability, and corporate transparency. The site targets Norwegian consumers and stakeholders interested in Vinmonopolet's operations. Technically, the site uses modern web standards, custom fonts, and optimized images, delivering a fast and mobile-optimized experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are absent. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site is professional, trustworthy, and aligned with the official Vinmonopolet brand.

B

Bigadan A/S

bigadan.com

60

Bigadan A/S is a Denmark-based company specializing in the development, construction, operation, and ownership of modular biogas systems and circular energy ecosystems. With over 40 years of experience, the company serves industrial, agricultural, municipal, and energy consumer clients by providing end-to-end solutions including biomass sourcing, biogas plant construction, biomethane production, biogenic CO2 capture, and nutrient-rich fertilizer production. The website reflects a mature and professional business with a strong market position in the renewable energy sector. Technically, the website is well-implemented with modern technologies, fast performance, and excellent mobile optimization. Security posture is good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with clear privacy and cookie policies, though no explicit consent mechanism is present. Contact is primarily via web forms, with no direct emails or phone numbers published. Overall, the site is trustworthy, professional, and aligned with industry standards.

S

Staysville

staysville.no

52

Staysville is a small hospitality business specializing in serviced hotel apartments located in central Stavanger, Norway. Founded in 2023, it offers modern, fully furnished apartments with hotel-like services for short and long-term stays. The website presents a professional and consistent brand image targeting tourists and business travelers seeking flexible accommodation options. The business model focuses on providing personalized services such as easy self check-in, laundry facilities, and fully equipped kitchens, positioning itself as a niche apartment hotel provider in the Stavanger market. Technically, the website uses modern web technologies including JavaScript, CSS, SVG graphics, Google Tag Manager for analytics, and Cookiebot for GDPR-compliant cookie consent management. The site is mobile-optimized with good SEO and accessibility basics, though some accessibility enhancements could be made. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is evident through a privacy policy and cookie consent mechanism, though terms of service and security policies are absent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. No WAF or content blocking was detected, allowing full content analysis.

Z

Zinc

zinc.no

57

Zinc is a Norwegian interior architecture firm specializing in creating functional, aesthetic, and identity-driven spaces primarily for commercial and institutional clients. They are part of the Dark Design Group, which includes sister companies Dark Arkitekter and Lark Landskap, indicating a multidisciplinary approach to design and architecture. Their portfolio includes projects for prominent clients such as Aker BP, KPMG, and Accenture, positioning them as a reputable player in the Norwegian interior architecture market. Technically, the website is built on modern web standards, likely using Craft CMS, with optimized images, lazy loading, and custom fonts. The site is mobile-optimized and accessible, with good SEO practices. Security-wise, the site uses HTTPS and includes CSRF tokens, but lacks some security headers and visible privacy or cookie policies, which are areas for improvement. The absence of WHOIS data is a notable concern, reducing the trustworthiness of the domain registration. However, the professional presentation, clear contact information, and social media presence mitigate some of these concerns. Overall, the website reflects a mature digital presence but would benefit from enhanced transparency regarding privacy and security policies.

P

Promenaden

promenaden.no

64

Promenaden is a website dedicated to promoting a vibrant and inspiring area in the heart of historic Oslo, Norway. The site targets a general audience interested in cultural and historical experiences. The business model appears to focus on area promotion and cultural engagement, positioning itself as a local attraction. The website demonstrates a good level of digital maturity with modern technologies such as Google Tag Manager and Cookiebot for analytics and consent management. The design is professional, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. Privacy compliance is well addressed through detailed cookie consent mechanisms and GDPR-aligned practices. However, the absence of WHOIS registrant data and explicit contact information slightly reduces business credibility. Overall, the site is trustworthy and professionally maintained, suitable for its promotional purpose.

F

FCC Products AS

fccproducts.no

53

FCC Products AS is a Norwegian company specializing in outdoor cooking and lifestyle products, including grills, pizza ovens, fire pits, furniture, and accessories. The website presents a professional and well-structured digital presence with rich content such as recipes, articles, and product information targeting consumers interested in enhancing their outdoor cooking experience. The company is positioned as a reputable brand in Norway with a clear focus on quality and customer engagement through social media and newsletters. Technically, the website uses modern JavaScript frameworks, Google Tag Manager for analytics, and Cookiebot for privacy compliance, hosted on a CDN for performance optimization. The site is mobile-optimized and accessible, providing a smooth user experience. Security posture is good with HTTPS enforced and cookie consent implemented, though there is room for improvement by adding security headers and explicit incident response contacts. The absence of WHOIS data reduces domain trustworthiness, but the website's content and contact information support legitimacy. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a trustworthy and professional online presence.

B

Bizbrains

bizbrains.com

64

Bizbrains is a Denmark-based technology company specializing in supply chain integration and automation solutions. Their flagship product, Link™, offers scalable SaaS and on-premise deployment options designed to connect various business workflows including e-commerce, logistics, and customs. The company emphasizes compliance with key regulations such as NIS2 and GDPR, targeting medium-sized businesses in manufacturing, wholesale, retail, and logistics sectors. The website demonstrates a professional and modern digital presence with strong branding and customer testimonials.

N

Norske Tog AS

norsketog.no

59

Norske Tog AS is a Norwegian state-owned enterprise responsible for procuring, owning, and managing passenger train vehicles in Norway. The company holds a key position in the national transportation sector, focusing on ensuring modern and efficient rolling stock for passenger rail services. Their website provides comprehensive information about their projects, train types, sustainability efforts, and investor relations, targeting both the general public and industry stakeholders. Technically, the website is well-implemented with modern JavaScript, SVG graphics, and privacy-focused analytics (Plausible). It is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though explicit security headers and incident response information are absent. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the site projects professionalism and trustworthiness, though the lack of WHOIS data from the Norid registry is a notable gap requiring verification. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms.

R

Røroshotellene

roroshotellene.no

53

Røroshotellene is a hospitality business operating in Røros, Norway, offering hotel accommodations, local dining experiences, event hosting, and family-friendly activities. The website positions the company as a regional hospitality provider with a focus on authentic local experiences and tailored events. The digital infrastructure is modern, leveraging JavaScript, CSS, and privacy-respecting analytics (Plausible). The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is good with HTTPS enforced and secure form handling, though some security headers and cookie consent mechanisms are missing. WHOIS data is unavailable, likely due to privacy protection, but the website's professionalism and consistent business information support legitimacy. Overall, the site is well-suited for its target audience of tourists, business clients, and families seeking hospitality services in Røros.

A

Aspelin Eiendom

aspelineiendom.no

59

Aspelin Eiendom is a well-established Norwegian real estate company founded in 1977, specializing in complex urban development projects aimed at creating attractive city environments and spaces. The company holds a strong market position supported by numerous industry awards and a professional digital presence. Their website reflects a mature digital infrastructure with modern technologies, responsive design, and privacy-conscious analytics. Security posture is solid with HTTPS and no evident vulnerabilities, though some security headers could be improved. The absence of WHOIS data suggests privacy protection, which aligns with corporate best practices. Overall, the company demonstrates professionalism, trustworthiness, and compliance with privacy regulations.

W

Wellnesshotel Golfpanorama

golfpanorama.ch

67

Wellnesshotel Golfpanorama is a premium hospitality business located in Lipperswil, Switzerland, specializing in wellness, golf, and luxury accommodation services. The website presents a comprehensive range of offerings including hotel rooms, spa and wellness treatments, golf packages, restaurant services, and business seminar facilities. The business targets leisure travelers, wellness enthusiasts, and corporate clients, positioning itself as a 4-star superior hotel in the Bodensee region. The site is professionally designed with multilingual support and strong branding consistency. Technically, the website employs modern JavaScript libraries, Google Tag Manager, Cookiebot for consent management, and integrates third-party booking and chat services. The CMS appears to be Kirby, supporting a well-structured and responsive design optimized for mobile devices. SEO and accessibility features are well implemented, contributing to a positive user experience. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, with a solid security posture and effective business presentation. Strategic improvements in security headers and incident response disclosures could further enhance the security maturity and trustworthiness of the site.

T

THE GAME MAGAZINE 2.0

thegame.golf

63

THE GAME is a niche golf lifestyle magazine targeting German-speaking countries and international golf enthusiasts, focusing on luxury and quality. The website is professionally designed using Squarespace, featuring rich media content including videos and images, and social media integration. Security posture is strong with HTTPS and HSTS enabled, but lacks explicit privacy and cookie policies, as well as contact information, which impacts privacy compliance and business credibility scores. WHOIS data is unavailable due to privacy or query failure, which is common for such businesses but slightly reduces trust. Overall, the site presents a professional image suitable for its market segment.

G

GPG Sports AG

sonnenwende-charity.com

44

Sonnenwende Charity Golfturnier is a Swiss-based non-profit organization that hosts an annual charity golf tournament to raise funds for children with rare diseases. The event is organized by GPG Sports AG and features notable guests such as golf legend Gary Player. The website is built on WordPress using Elementor and includes multimedia content such as videos and image galleries highlighting past events. While the site is professionally designed and provides relevant content for its target audience, it lacks critical privacy and cookie policies and does not provide explicit contact information. The absence of WHOIS data for the domain raises some concerns about domain registration transparency. Overall, the website demonstrates a good business credibility and content quality but requires improvements in privacy compliance and security best practices.

G

Goldgelb Zeit und Raum GmbH

goldgelb.ch

51

Goldgelb Zeit und Raum GmbH is a Swiss-based marketing and media production agency specializing in advertising photography, videoproduction, virtual reality, drone aerial photography, web design, SEO, and AI-generated artwork. The company targets businesses and professionals seeking high-quality visual communication services to enhance their brand presence across web and print media. Their market position is that of a niche regional agency with a strong focus on creative and technological solutions for visual marketing. Technically, the website is built on WordPress using modern plugins such as WPBakery Page Builder, Yoast SEO, and Slider Revolution. It integrates Google Analytics and Google Tag Manager for tracking and marketing purposes. The site is mobile-optimized with good SEO practices and moderate performance. Some minor issues with lazy loading images were noted but do not significantly impact user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating good privacy compliance. However, security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and should be added to enhance security posture. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data confirms the legitimacy of the domain with consistent registrant information matching the business identity. Overall, the website presents a professional and trustworthy digital presence with good content quality and compliance. Strategic recommendations include enhancing security headers, fixing minor technical issues, and publishing explicit security and incident response policies to further strengthen trust and security culture.

T

Thurgau Golf

thurgaugolf.ch

51

Thurgau Golf is a regional sports organization dedicated to promoting golf in the Thurgau canton of Switzerland. The organization primarily focuses on organizing annual golf championships including the Thurgauer Golf Meisterschaft and Senioren Meisterschaft, fostering youth development, and supporting senior players. The website serves as an information hub for tournament details, results, and organizational information, targeting golf enthusiasts and players in the region. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile optimized and includes SEO best practices such as structured data and meta tags. Security posture is solid with HTTPS enforced and a GDPR-compliant cookie consent mechanism, though it lacks advanced security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

D

dialoop GmbH

dialoop.de

56

dialoop GmbH is a specialized technology service provider based in Germany, offering a broad range of digital communication solutions including web development, email marketing, mobile applications, customer loyalty management, and user experience design. The company positions itself as an experienced partner with over two decades of market presence, serving both enterprises and agencies with tailored digital services. Their website reflects a professional and consistent brand image, supported by detailed client references and comprehensive service descriptions. Technically, the website employs a modern technology stack including PHP frameworks (Symfony, Laravel), JavaScript frameworks, and CMS platforms like TYPO3 and WordPress. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security measures include HTTPS enforcement, CSRF tokens, and captcha on forms, but lack some HTTP security headers and cookie consent mechanisms. From a security perspective, the site demonstrates good practices with secure form handling and no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure reduces transparency. WHOIS data is limited due to DENIC privacy policies but shows consistent DNS management aligned with the brand. Overall, dialoop GmbH presents a trustworthy and professional digital presence with solid technical and security foundations. Strategic improvements in privacy compliance and security transparency would further enhance their risk posture and client trust.

L

le19ieme.ch

le19ieme.ch

53

Le19ieme.ch is the official website of a small hospitality business operating a restaurant and bar located at the golf course in Neuchâtel, Switzerland. The business offers seasonal and daily menus, event hosting, and a scenic dining experience targeting local residents, golf enthusiasts, and business clients. The website is professionally designed using WordPress with modern UIkit framework and SEO optimization via Yoast plugin. Contact information including phone, email, and physical address is clearly presented, along with social media presence on Instagram and Tripadvisor, enhancing trust and customer engagement. However, the site lacks visible privacy and cookie policies, which are important for GDPR compliance and user trust.

T

Tarifverbund OSTWIND

steigensieum.ch

51

The website steigensieum.ch serves as a promotional and informational portal for OSTWIND, a major public transport tariff association in Eastern Switzerland and Liechtenstein. It provides detailed information about monthly and yearly subscriptions, corporate offers, ticket comparisons, and alternatives to car commuting such as P+Rail. The site integrates with official OSTWIND and Swiss public transport services, offering users direct links to purchase tickets and subscriptions. The target audience includes commuters, seasonal travelers, and corporate employees seeking efficient public transport options. The website is professionally designed, content-rich, and well-branded, reflecting a strong market position in the regional transportation sector. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries such as jQuery and Swiper.js for interactive elements. It uses Google Maps API for mapping features and employs Matomo and Google Analytics for user tracking. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and a cookie consent mechanism, which are recommended for GDPR compliance. Overall, the security posture is solid with no critical vulnerabilities detected. However, improvements in privacy compliance and explicit security policies would enhance trust. The domain uses privacy-protected WHOIS, which is justified for this business type. The website demonstrates high professionalism and trustworthiness, supported by official partner links and social media presence. Strategic recommendations include implementing a cookie consent banner, publishing a security policy and incident response contacts, enhancing security headers, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

S

Swiss Quality Hotels

swissqualityhotels.com

52

Swiss Quality Hotels is a hospitality-focused business specializing in curated hotel listings and bookings within Switzerland. Established in 2003, the company targets travelers seeking high-quality accommodations including city, mountain, and lake hotels. The website is multilingual, professionally designed, and optimized for mobile users, reflecting a mature digital presence. Technically, it is built on WordPress with modern JavaScript and integrates Google Analytics via Google Tag Manager for visitor insights. Security posture is strong with HTTPS enforced, standard security headers present, and a comprehensive cookie consent mechanism ensuring GDPR compliance. However, there is room for improvement in DNS security and publishing formal security policies. Overall, the site is trustworthy and well-positioned in its niche market.

I

IN4OUT AG

in4out.ch

58

IN4OUT AG is a Swiss-based IT services company specializing in digital transformation, IT outsourcing, managed services, and security solutions. Positioned as a regional expert and Microsoft Gold Partner, the company targets businesses seeking comprehensive IT support and cloud services. Their website reflects a professional and consistent brand image with clear service offerings and customer engagement channels. Technically, the site is built on Orchard CMS and leverages common analytics tools such as Google Analytics and Piwik/Matomo, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS and avoids exposing sensitive data but lacks explicit security headers and a cookie consent mechanism, which are areas for improvement. WHOIS data confirms the legitimacy and transparency of the business, matching the website's claims and location. Overall, the website presents a trustworthy and professional front for IN4OUT AG, with moderate tracking and good business credibility.

BKW is a well-established energy company operating in Italy and other European countries, focusing on energy solutions, power grid management, and infrastructure & buildings. The website reflects a professional corporate presence with a clear emphasis on investor relations and sustainability. The technical infrastructure is modern, leveraging TYPO3 CMS, Google Tag Manager, and Usercentrics for consent management, indicating a mature digital presence. Security posture is strong with HTTPS and consent mechanisms, though explicit security policies and incident response details are not publicly disclosed. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements.

BKW is a large energy and infrastructure company operating primarily in Germany and Switzerland, offering innovative solutions in energy, building, and infrastructure sectors. The website is professionally designed using TYPO3 CMS and modern JavaScript technologies, indicating a mature digital infrastructure. The presence of cookie consent mechanisms via Usercentrics and Google Tag Manager for analytics shows attention to privacy and data collection compliance, although explicit privacy and terms of service pages were not found in the provided content. Security posture is moderate with HTTPS usage implied but lacks visible security headers and formal security policies or incident response contacts. Overall, the website is trustworthy and well-positioned in its market segment but could improve transparency and security documentation.

BKW is a large Swiss enterprise specializing in energy, buildings, and infrastructure solutions. The company positions itself as an innovator balancing prosperity with environmental concerns, serving a broad audience including businesses and consumers. Their website is professionally designed using TYPO3 CMS, with good SEO, accessibility, and mobile optimization. They employ modern technologies such as Google Tag Manager and Usercentrics for analytics and consent management. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response information are not publicly available. The WHOIS data is missing or inaccessible, which raises transparency concerns but does not detract from the professional presentation and trust signals on the site. Overall, the website is safe, business-focused, and compliant with privacy regulations.

B

Bundesinstitut für Öffentliche Gesundheit (BIÖG)

bioeg.de

66

The Bundesinstitut für Öffentliche Gesundheit (BIÖG) is a German federal government health institute dedicated to public health education, research, and prevention. The website serves as a comprehensive platform providing health information, research studies, and resources aimed at the general population and health professionals. It maintains a strong market position as an official government entity with a clear mission to promote health and well-being in Germany. The site is well-branded, consistent, and trusted by its audience. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies such as jQuery and Slick Slider for interactive content. It is optimized for mobile devices and accessibility, with good SEO practices. Hosting appears to be local to Germany, supporting data privacy and compliance requirements. Analytics are handled via Matomo with strong privacy protections including IP anonymization and no cookies without consent. From a security perspective, the site enforces HTTPS and employs privacy-conscious analytics. However, it lacks explicit security policy documentation and incident response contact details, which are recommended for transparency and preparedness. No vulnerabilities or suspicious activities were detected. The site complies well with GDPR and provides clear cookie consent mechanisms. Overall, the BIÖG website is a professional, secure, and privacy-compliant platform that effectively supports its public health mission. Strategic improvements include publishing a formal security policy and enhancing incident response transparency to further strengthen trust and security posture.

B

Bundesinstitut für Öffentliche Gesundheit (BIÖG)

bzga.de

66

The Bundesinstitut für Öffentliche Gesundheit (BIÖG) is a German federal public health institute operating under the Federal Ministry of Health. It focuses on promoting healthy lifestyles, disease prevention, and public health education through research, information dissemination, and advisory services. The website serves as a comprehensive platform for health-related information targeting the general population, healthcare professionals, and risk groups in Germany. It offers extensive resources including studies, audiovisual media, and practical guidance on various health topics. Technically, the website is built on the TYPO3 CMS platform, employs Matomo analytics with strong privacy protections, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS enforcement and privacy-conscious analytics, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site reflects a professional, trustworthy government entity with high content quality and compliance with GDPR and cookie consent regulations.

S

Stadt Wallisellen

wallisellen.ch

61

Stadt Wallisellen operates an official municipal website providing comprehensive information and digital services to its residents and stakeholders. The site covers a broad range of topics including local politics, administration, education, culture, and public services, positioning itself as the primary digital interface for the community. The website demonstrates a solid technical infrastructure using modern web standards, responsive design, and privacy-conscious analytics (Matomo) with user consent mechanisms. Security posture is good with HTTPS enforced and secure form implementations, though some security headers could be improved. Overall, the site is trustworthy, professional, and well-aligned with its government entity status.

S

Stadt Dübendorf

duebendorf.ch

58

Stadt Dübendorf operates an official municipal website serving the residents and visitors of Dübendorf, Switzerland. The site provides comprehensive information about city services, news, events, and digital administrative functions such as the Online-Schalter. The website targets local citizens and stakeholders, positioning itself as a reliable government portal with a focus on accessibility and user engagement. The business model is that of a public service provider, offering transparent and accessible municipal services online. Technically, the website employs a modern CMS platform (i-web CMS) with JavaScript frameworks and libraries such as Owl Carousel and Matomo for analytics. It integrates Google Tag Manager for marketing and tracking purposes while maintaining user privacy through consent mechanisms. The site is mobile-optimized and accessible, with clear navigation and structured content. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses secure login forms. However, it lacks explicit HTTP security headers which could enhance protection against common web threats. No vulnerabilities or exposed sensitive data were detected. The site holds an ISO 27001 certification, indicating a mature security framework. Privacy policies and cookie consent are well implemented, supporting GDPR compliance. Overall, the website is trustworthy, professional, and well-maintained with a strong focus on user privacy and security. Strategic improvements could include adding security headers, publishing incident response contacts, and implementing a vulnerability disclosure policy to further enhance security posture and transparency.

R

Raiffeisen Schweiz Genossenschaft

raiffeisen.ch

75

Raiffeisen Schweiz Genossenschaft is the second largest Swiss banking group, specializing in retail and corporate banking services. Founded in 1899, it offers a broad range of financial products including mortgages, investment services, insurance, and e-banking solutions. The website targets both private and business customers, providing comprehensive information and digital services. Technically, the site is built on Adobe Experience Manager with modern JavaScript frameworks and is optimized for mobile and accessibility. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site reflects a mature, trustworthy financial institution with a professional online presence.

K

Error

klsm.ch

51

The domain klsm.ch currently hosts an error page served by the Wix platform indicating that the domain is not connected to an active website. There is no business information, contact details, or content describing any services or products. The website uses AngularJS and jQuery libraries and is hosted on Wix infrastructure. The technical implementation is basic and lacks SEO, accessibility, and performance optimizations. Security posture is minimal with no visible HTTPS or security headers in the provided content. Privacy and cookie policies are absent, indicating non-compliance with GDPR and related regulations. Overall, the website is non-functional and does not provide any business or user value at this time.

R

RZ-magoo

rzmagoo.com

50

RZ-magoo is a small manufacturing business specializing in handcrafted new generation woodwind instruments, specifically hybrid clarinets, produced in the Czech Republic and Switzerland. The company targets professional and amateur musicians seeking high-quality clarinet instruments and accessories. The website is professionally designed using WordPress and the Divi theme, featuring clear navigation and relevant content about their products and artists. Contact information is well provided, supporting business credibility. Technically, the site uses modern web technologies and is hosted on Websupport.cz, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy and cookie policies are missing, indicating compliance gaps. No analytics or advertising scripts were detected, suggesting minimal user tracking. Overall, the website presents a trustworthy and professional front for a niche musical instrument manufacturer.

BKW is a large Swiss energy and infrastructure company focused on developing sustainable solutions in energy, buildings, and infrastructure sectors. The website presents a professional and comprehensive digital presence with multilingual support, targeting customers, businesses, public sector, investors, and media. The business model centers on providing energy solutions, power grid management, and infrastructure services, positioning BKW as a key player in the Swiss energy market. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript modules, Google Tag Manager for analytics, and Usercentrics for consent management. The site is fast, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Security best practices such as HTTPS and consent mechanisms are implemented, though explicit security policies and incident response contacts are not publicly disclosed. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, improvements could be made by publishing formal security policies and vulnerability disclosure mechanisms. Privacy compliance is robust with clear privacy and cookie policies and GDPR adherence. Business credibility is high, supported by consistent branding, official reports, and active social media channels. Overall, BKW's website reflects a trustworthy, professional, and secure corporate digital presence suitable for its industry and audience.

The website www.koelliker-saibene.ch is a small personal or hobbyist site operated by Annemarie Koelliker and Roberto Saibene, showcasing travel photography and accompanying Tonbildshows (audio-visual presentations) from various countries. The site targets travel enthusiasts and photography lovers, offering galleries and photo books. Technically, the site is built on the Jimdo Creator platform, leveraging Jimdo's hosting and CDN infrastructure. It uses HTTPS and includes a cookie consent mechanism, but lacks advanced security headers and formal security or privacy policies. No contact emails or phone numbers are provided, limiting direct communication. The site is accessible without WAF or blocking mechanisms and contains no adult or questionable content. Overall, the site is functional and professionally presented for its niche but could improve in security and compliance documentation.

H

Hotel Bären Suhr

baeren-suhr.ch

60

Hotel Bären Suhr is a small-sized hospitality business located in Switzerland, offering comfortable business hotel accommodations, restaurant dining, and event hosting services. It operates as part of the regional hotel group AARGAUHOTELS.CH and holds a Swiss Quality Hotels certification, indicating a commitment to quality and service excellence. The website is professionally designed with clear navigation, comprehensive content, and strong branding consistency, targeting business travelers and event organizers in the region. Technically, the website is built on WordPress 6.8.2, utilizing modern web technologies such as jQuery, Swiper.js, and Google Fonts. It integrates analytics tools like Matomo and Google Analytics 4, and employs Google reCAPTCHA for form security. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. From a security perspective, the website enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. While basic security best practices are observed, including secure forms and no exposed sensitive data, the site could improve by implementing additional security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or suspicious activities were detected. Overall, the website presents a low-risk profile with a high legitimacy score based on consistent WHOIS data and transparent business information. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and considering a vulnerability disclosure policy to further strengthen security posture.

H

Hotel Villmergen

hotel-villmergen.ch

59

Hotel Villmergen is a medium-sized business hotel located centrally in Villmergen, Switzerland, offering 57 rooms and a unique Spanish grill restaurant called El Toro. The hotel caters primarily to business travelers and local visitors, providing accommodation, dining, and event hosting services. It operates under the parent company AARGAUHOTELS.CH and holds Swiss Quality Hotels certification, enhancing its market credibility. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the site is built on WordPress with modern libraries and plugins, including analytics and cookie consent tools, ensuring compliance and performance. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, though it lacks explicit security policies or incident response information. Overall, the domain registration aligns well with the business profile, indicating legitimacy and trustworthiness.

C

Centurion Towerhotel

centurion-towerhotel.ch

60

Centurion Towerhotel is a modern lifestyle hotel located in Windisch-Brugg, Switzerland, offering 66 design-focused rooms and apartments alongside a high-quality restaurant, Ignis Grill & Wine. The hotel targets business travelers, tourists, and event organizers, providing accommodation, dining, and event hosting services. The website reflects a professional and consistent brand image, supported by clear contact information and trust signals such as Swiss Quality Hotels certification and integrated customer reviews. Technically, the site is built on WordPress with modern libraries and plugins, including Matomo analytics and Google reCAPTCHA, ensuring a good balance of functionality and security. Security posture is strong with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, although security headers could be improved. Overall, the site is compliant with GDPR and offers a positive user experience with good mobile optimization and SEO practices.

A

AARGAUHOTELS

aargauhotels.ch

59

AARGAUHOTELS is a regional hospitality group in Switzerland operating multiple hotels and gastronomy establishments primarily in the Aargau region and Tessin. The website presents a professional and well-structured digital presence with comprehensive information about their hotels, restaurants, offers, and career opportunities. The business targets guests seeking quality accommodation and dining experiences with a focus on regional products and sustainable practices. Technically, the site is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Matomo, and Google Analytics 4, ensuring good digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is trustworthy, privacy compliant, and provides clear contact information and business transparency.

A

Aargauische Industrie- und Handelskammer (AIHK)

aihk.ch

47

The Aargauische Industrie- und Handelskammer (AIHK) is a regional chamber of commerce based in Switzerland, focused on connecting businesses with political stakeholders and supporting economic policy representation. Their key services include networking, advocacy, and business support within the Aargau region. The website is built on TYPO3 CMS and uses standard web technologies such as jQuery, Bootstrap, and FontAwesome, indicating a moderate level of digital maturity. The site is mobile optimized and presents content relevant to its target audience of companies and political entities. Security posture is limited based on the provided data, with no detected security headers or explicit incident response policies. Privacy and cookie policies are absent, which may impact compliance with GDPR. Overall, the website is professional and trustworthy, but improvements in security and privacy compliance are recommended.

S

SwissPass

swisspass.ch

57

SwissPass operates as a leading Swiss mobility and leisure platform, providing users with access to public transportation and partner offers. The website is professionally designed, multilingual, and targets the general public and travelers within Switzerland. It integrates modern web technologies such as Angular and Adobe DTM for analytics and marketing, ensuring a contemporary digital presence. The platform emphasizes user privacy with a comprehensive privacy policy and cookie consent mechanism, aligning with GDPR requirements. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit incident response contacts are absent. Overall, the website demonstrates a mature and trustworthy digital infrastructure suitable for its business domain.

T

Ticketcorner Live Club

live-club.ch

61

Ticketcorner Live Club is a membership-based event ticketing platform operated by Ticketcorner AG, Switzerland. It offers members early access to tickets, discounts, and exclusive offers primarily targeting Swiss and European customers. The website is multilingual and professionally designed, providing clear navigation and relevant content about membership benefits and event offers. The technical infrastructure is based on Squarespace CMS with integrations such as Google Tag Manager and Consentmanager.net for cookie compliance. Security posture is strong with HTTPS and HSTS enabled, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates good digital maturity and compliance with GDPR requirements.

T

tipic.swiss

tipic.ch

68

tipic.swiss is a small Swiss digital agency specializing in web development and graphic design, primarily serving clients in the Graubünden region. The company offers a range of digital and print services, emphasizing accessible technology solutions and professional design. Their website showcases a portfolio of selected projects and client logos, indicating a solid regional presence and trusted partnerships. Technically, the website is built on the Webflow platform, utilizing modern web technologies including jQuery and Lottie animations. The site is well-optimized for performance, mobile responsiveness, and SEO, with a clean and professional design. Cookie consent and privacy policies are implemented, reflecting awareness of privacy compliance requirements. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism but lacks explicit security headers and a published security policy or incident response contacts. The WHOIS data is privacy protected, which is common and justified for this business type. No suspicious indicators or vulnerabilities were detected in the provided content. Overall, tipic.swiss presents a trustworthy and professional digital presence with good technical maturity and privacy compliance. Strategic improvements in security headers and incident response transparency could further enhance their security posture and trustworthiness.

T

Trimarca AG

trimarca.ch

64

Trimarca AG is a well-established Swiss advertising and design agency founded in 1978, specializing in strategic marketing, brand concepts, and campaign development. The company targets businesses seeking creative and effective advertising solutions, primarily in the Graubünden region. Their website reflects a mature market position with a consistent brand image and a professional digital presence. Technically, the site is built on Webflow, leveraging modern web technologies and integrating analytics and consent management tools, ensuring good performance and compliance with privacy regulations. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though the absence of a formal security policy or vulnerability disclosure page suggests room for improvement. Overall, the website and business information align well with the WHOIS data, indicating a trustworthy and credible entity.

O

OSTWIND

ostwind.ch

56

OSTWIND is a regional public transport tariff association serving multiple Swiss cantons and Liechtenstein, uniting 30 transport companies under a unified zonal fare system. The website provides comprehensive information on ticketing, subscriptions, customer service, and travel tips, targeting public transport users in the region. The digital infrastructure employs modern web technologies including web components and embedded video content, with Google Tag Manager for analytics and marketing. The site is well-designed, mobile-optimized, and accessible, offering a positive user experience. Security posture is good with HTTPS enforced, but could be improved by adding standard security headers and publishing explicit security policies. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, OSTWIND’s website is professional and trustworthy, serving its audience effectively with room for security and compliance enhancements.

S

Surbana Jurong

surbanajurong.com

64

SJ Group is a global enterprise specializing in urban development, infrastructure, and managed services, owned by Temasek. The company offers a comprehensive portfolio of services including advisory, planning, design, construction, operations, and integrated solutions such as security and digital technology services. Their market position is strong with a presence in 40 countries and subsidiaries like SMEC, Atelier Ten, and Robert Bird Group. The website reflects a professional and consistent brand image with excellent content quality and SEO optimization. Technically, the website is built on WordPress with modern JavaScript libraries and integrations including HubSpot Analytics, Google Tag Manager, and Weglot for multilingual support. The site is mobile optimized, accessible, and performs moderately well. Security posture is good with HTTPS enforced and secure forms, though some security headers could be improved. Privacy compliance is adequate with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the security posture is strong with no visible vulnerabilities or exposed sensitive data. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for enterprises. The website is trustworthy, professional, and safe for general audiences. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing incident response information.

Golf & Country Club Neuchâtel is a regional golf club located in Switzerland, offering an 18-hole golf course, driving range, teaching, competitions, pro-shop, and restaurant services. The website is built on Drupal 10 and integrates Google Analytics and Google Tag Manager for visitor tracking. A cookie consent mechanism is implemented using CookieYes, providing users with detailed control over cookie categories. However, the site lacks explicit privacy policy and terms of service pages, and no direct contact information is visible on the main pages. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the website presents a professional and user-friendly experience suitable for its target audience of golf enthusiasts and local visitors.

Golf Lipperswil AG operates a well-established 4-star superior 27-hole golf course located in the canton of Thurgau, Switzerland. The website presents a comprehensive overview of the club's offerings including golf facilities, academy programs, restaurant services, and membership options. The business targets golf enthusiasts and visitors seeking quality golfing and hospitality experiences. The site is built on TYPO3 CMS, featuring modern web technologies and a cookie consent mechanism, reflecting a moderate to good level of digital maturity. Security posture is solid with HTTPS enforced and session management for members, though security headers and incident response policies are absent. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, user-friendly, and trustworthy, with no signs of malicious content or blocking mechanisms.

G

Golf Obere Alp e.V.

golf-oberealp.de

63

Golf Obere Alp e.V. is a regional golf club located in Germany's Schwarzwald region, offering a 27-hole golf course, training, tournaments, and hospitality services. The website is built on TYPO3 CMS and uses modern frontend technologies such as jQuery, Swiper.js, and FontAwesome. The site is well-structured with good content quality, including frequent news updates and event information, targeting golf enthusiasts and club members. While the site employs HTTPS and a cookie consent mechanism, it lacks explicit privacy and terms of service pages, and no direct contact information is found in the HTML content. Security headers and incident response policies are not evident, indicating room for improvement in security posture. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact channels.

G

Golfclub Engelberg-Titlis

golfclub-engelberg.ch

68

Golfclub Engelberg-Titlis operates a well-established 18-hole golf course located in Engelberg, Switzerland, offering a blend of sport and nature with a mild mountain climate. The club targets golf enthusiasts including guests, members, juniors, and seniors, providing services such as golf lessons, tournaments, a pro shop, and seasonal restaurant facilities. The website reflects a strong community focus and regional market position, supported by a GEO certification that underscores environmental and operational standards. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies with good SEO and mobile optimization. Security posture is robust with HTTPS, security headers, and secure login forms, though explicit security policies and incident response contacts are absent. Privacy compliance is addressed through a cookie consent mechanism and a privacy information page, indicating GDPR awareness. Overall, the site is professional, trustworthy, and content-rich, supporting the club's business credibility and member engagement.