Security Directory

K

Kniv-Web GmbH

kniv-web.ch

65

Kniv-Web GmbH is a Swiss-based digital agency specializing in web design, e-commerce solutions, SEO, and online marketing services. With over 25 years of experience, the company targets small and medium-sized businesses primarily in the March and Höfe districts of Switzerland. Their service offerings include professional website development, progressive web apps, online shops, branding, and video production, positioning them as a comprehensive digital partner for local businesses. Technically, the website leverages modern web technologies including PWA capabilities, Google Fonts, and integrates with analytics and cookie consent management tools. Hosting is provided by a Swiss company, Worldsoft AG, ensuring local infrastructure alignment. The site is mobile-optimized, SEO-friendly, and demonstrates good performance and accessibility standards. From a security perspective, the site enforces HTTPS and employs a robust cookie consent mechanism compliant with GDPR. However, explicit security policies and incident response contacts are not publicly disclosed, representing an area for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional, trustworthy, and compliant digital presence with strong business credibility. Strategic enhancements in security transparency and formal incident response processes would further strengthen their security posture and client trust.

W

Worldsoft AG

worldsoft.ch

68

Worldsoft AG is a well-established Swiss technology company specializing in comprehensive web project solutions including domain registration, website building, email marketing, online shops, CRM, and hosting services. With over 25 years of experience, the company targets businesses and professionals seeking integrated digital tools to enhance their online presence. Their market position is strengthened by strong customer satisfaction, certifications, and a broad product portfolio. Technically, the website demonstrates a modern and performant infrastructure using proprietary CMS technology, progressive web app features, and integration with third-party widgets for enhanced user engagement. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a published security policy or incident response contacts, which are recommended for further strengthening the security posture. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. Overall, the risk assessment is low with no indications of malicious activity or content safety concerns. Strategic recommendations include implementing security headers, publishing a vulnerability disclosure policy, and enhancing transparency around incident response to further build trust and resilience.

Worldsoft AG operates as a technology company specializing in smart internet business solutions, likely centered around content management systems and web services. The website currently displays a maintenance message with minimal content, including a user login form and a company contact email. The business appears to target other businesses or users seeking internet business solutions, positioning itself as a specialized provider in this niche. Technical infrastructure is basic, with HTML and CSS usage and no advanced frameworks or analytics detected. The site lacks modern security features such as HTTPS enforcement and security headers, which lowers its security posture. The absence of privacy and cookie policies indicates non-compliance with common data protection standards. Overall, the website presents a basic digital presence with room for significant improvements in security, compliance, and content richness.

M

Messen.de

messen.de

53

Messen.de is a well-established online platform providing a comprehensive calendar and overview of trade fairs and exhibitions primarily in Germany, Austria, Switzerland, and the Netherlands. It serves exhibitors, visitors, event organizers, and service providers by offering detailed event information, ratings, and news updates. The platform positions itself as a key resource in the German-speaking trade fair market, leveraging structured data and a user-friendly interface to deliver relevant content without requiring login. Technically, the website employs modern JavaScript frameworks, integrates Google Tag Manager, and uses a consent management platform to comply with GDPR regulations. Advertising and tracking are managed through reputable networks such as Criteo and Sourcepoint. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response details are absent. Overall, the site is professional, trustworthy, and compliant with privacy standards, making it a reliable resource for its target audience.

T

Tobias Erlach

tobiaserlach.com

47

Tobias Erlach operates a professional web presence focused on providing conversion-focused web design and marketing integration services under the brand The Web Accelerator. The website positions Tobias as a creative business consultant and designer, targeting businesses seeking to improve their online sales through effective website design. The site includes a portfolio, newsletter, and YouTube channel to engage the audience and share insights. Technically, the website is built on WordPress with a modern theme and uses Cloudflare DNS and Google Analytics for tracking. The site is well-optimized for SEO and mobile devices, with a cookie consent mechanism ensuring GDPR compliance. Security posture is good with HTTPS enabled, though DNSSEC is not enabled and security headers are not detected, representing areas for improvement. No explicit security or incident response policies are published, and no contact emails or phone numbers are listed, relying on a contact form instead. Overall, the website is professional, trustworthy, and safe for general audiences.

C

Cubus Medien Verlag GmbH

schulbau.online

55

SCHULBAU.online is a professional German platform focused on educational construction, offering a magazine, trade fairs, and events targeting architects, school authorities, and planners. The business is operated by Cubus Medien Verlag GmbH, a medium-sized company based in Hamburg, Germany, founded in 2025. The website is built on WordPress with modern plugins and SEO tools, providing a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though DNSSEC is not enabled and security headers could be improved. Privacy compliance is strong with accessible privacy and cookie policies. Overall, the site is trustworthy and well-positioned in its niche.

V

vttrando.fr

vttrando.fr

56

VTTrando.fr is a specialized French website dedicated to mountain biking enthusiasts and event organizers, offering a comprehensive calendar of VTT events and a platform for free event publication. The site is well-positioned in its niche market, providing valuable services such as interactive maps, regional event listings, and a blog with relevant content. Technically, it leverages WordPress CMS with modern libraries like Bootstrap and jQuery, integrates Google Maps and reCAPTCHA for enhanced user experience and security, and uses Matomo for analytics alongside Ezoic for advertising. The website demonstrates good SEO practices and mobile optimization, ensuring accessibility and usability for its audience. Security-wise, the site enforces HTTPS, uses consent management for cookies, and employs reCAPTCHA to protect forms, though it lacks explicit security policy and incident response disclosures. The absence of WHOIS data suggests privacy protection, which is typical for small niche sites and does not detract from its legitimacy. Overall, VTTrando.fr presents a professional, trustworthy, and user-friendly platform with moderate to good security and privacy compliance.

Cranio-Petra.ch is a website for Petra Müller, a small local healthcare provider specializing in craniosacral therapy in Rapperswil, Switzerland. The business offers complementary therapy services aimed at supporting physical and psychological wellbeing. The website is built on the cm4all CMS platform, hosted by Hostpoint, and uses older but functional web technologies such as jQuery 1.7 and Prototype 1.7.3. The site provides clear contact information and links to relevant professional associations, enhancing its credibility. However, it lacks advanced security policies and modern compliance features such as cookie consent mechanisms and incident response disclosures. The website is accessible without any WAF or blocking mechanisms, indicating open availability to users.

The website www.lionhearts.ch is currently inaccessible beyond a Cloudflare security challenge page, which prevents direct content analysis. The site appears to be protected by Cloudflare's Turnstile captcha, indicating a security posture that includes bot mitigation and access control. Due to this, no business-specific content, contact information, or policies are visible, limiting the ability to assess the company's market position, services, or compliance status. Technically, the site leverages Cloudflare's security infrastructure but lacks visible metadata or structured data for further analysis. Security posture is difficult to evaluate fully; however, the presence of Cloudflare protection suggests some baseline security measures. Overall, the site scores low on content quality, privacy compliance, and business credibility due to the lack of accessible information. Strategic recommendations include reducing access restrictions for legitimate users, publishing clear privacy and cookie policies, and providing transparent business contact details to improve trust and compliance.

B

bewegt-sein.ch Praxis für Osteopathie | Jacqueline Labèr

bewegt-sein.ch

42

bewegt-sein.ch is a small healthcare practice specializing in osteopathy and physiotherapy services located in Bubikon, Switzerland. The website provides detailed information about the practitioner Jacqueline Labèr, her qualifications, and the range of osteopathic treatments offered, targeting local clients seeking holistic healthcare solutions. The business operates a private practice with a focus on musculoskeletal and pediatric conditions. Technically, the website uses a traditional web stack with jQuery, Google Maps API, and several UI libraries such as Owl Carousel and Magnific Popup. The site is moderately optimized for mobile and SEO, with a clear navigation structure and good content quality. However, there is no detected CMS or advanced platform integration. From a security perspective, the website uses HTTPS but lacks visible security headers and published privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is provided. The site does not use analytics or tracking scripts, indicating minimal user tracking. Overall, the website is professional and trustworthy for its business purpose but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

W

Wirtschaftsförderung in der Region Hannover

wirtschaftsfoerderung-hannover.de

65

Wirtschaftsförderung in der Region Hannover is a regional government economic development organization focused on supporting businesses, startups, and innovation in the Hannover area. The website provides comprehensive information on business location, financing, founding support, innovation, workforce development, and events. It targets entrepreneurs, companies, investors, and regional stakeholders, positioning itself as a key facilitator for economic growth in the region. Technically, the site uses a custom CMS with modern JavaScript libraries such as jQuery and Swiper.js, and employs Matomo for privacy-conscious analytics. The site is well-optimized for mobile and accessibility, with a clear navigation structure and professional design. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly documented. Overall, the site demonstrates a mature digital presence aligned with governmental standards and regional economic goals.

L

Landeshauptstadt Hannover

herrenhausen.de

52

The website 'Herrenhäuser Gärten - Hannover.de' serves as the official online presence for the Herrenhäuser Gardens and the Museum Schloss Herrenhausen, operated by the Landeshauptstadt Hannover (City of Hannover). It provides comprehensive visitor information, event details, group tours, and ticketing services, targeting tourists, families, and cultural enthusiasts. The site is well-positioned as a leading cultural and botanical attraction in Hannover, supported by consistent branding and professional content. Technically, the website employs modern web standards including HTML5, CSS3, SVG graphics, and JavaScript, with Matomo analytics for user tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The CMS appears custom or proprietary, typical for government sites. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. No vulnerabilities or exposed sensitive data were detected. However, the site lacks a visible cookie consent mechanism and dedicated security or incident response policies, which are recommended for enhanced GDPR compliance and transparency. Overall, the website is trustworthy, professionally maintained, and provides a safe user experience. Strategic improvements in privacy consent and security transparency would further strengthen its compliance and user trust.

H

Hannover Marketing und Tourismus GmbH

visit-hannover.com

61

Visit Hannover is an official tourism portal managed by Hannover Marketing und Tourismus GmbH, providing comprehensive information on hotels, sightseeing, events, congresses, and regional attractions in Hannover, Germany. The website targets tourists, business travelers, and event attendees, offering booking options and cultural highlights. Technically, the site uses modern JavaScript libraries, Matomo analytics, and Google advertising scripts, with a likely CMS based on eZ Platform. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS and consent management, though explicit security headers and policies are missing. WHOIS data is unavailable, which slightly reduces trust but the website content and branding indicate legitimacy. Overall, the site is professional, user-friendly, and compliant with GDPR.

S

Swiss Golf Managers

swissgolfmanagers.ch

64

Swiss Golf Managers (SGM) is a Swiss-based professional network focused on connecting and strengthening golf businesses across Switzerland. The organization aims to foster collaboration, information exchange, and sustainable development of the Swiss golf sport sector. Their website provides information about membership, events, and news relevant to golf club managers and related stakeholders. The site is built on the Webflow CMS platform with multilingual support via Weglot, indicating a modern and flexible technical infrastructure. The website is well-designed, mobile-optimized, and provides a good user experience, though some accessibility and SEO improvements are possible. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the domain registration data aligns well with the website's Swiss golf focus, supporting legitimacy and trustworthiness.

M

Migros

migrosgolf.ch

51

Migros Golf operates multiple golf parks in Switzerland, offering accessible golf memberships through the Migros GolfCard since 1995. The website is built on TYPO3 CMS and employs modern web technologies including jQuery and Cookiebot for cookie consent management. The site demonstrates good technical infrastructure with HTTPS and basic SEO and accessibility features. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not found. Overall, the domain registration aligns well with the business entity Migros, indicating high legitimacy and trustworthiness.

S

Swiss Golf

swissgolf.ch

50

Swiss Golf is the official umbrella organization for golf sports in Switzerland, providing comprehensive services including player development, tournament organization, and sustainability initiatives. The website is well-structured, professionally designed, and targets golf players and enthusiasts across all levels in Switzerland. It features clear navigation, rich content, and strong branding supported by reputable sponsors such as Rolex and Helsana. Technically, the site uses modern JavaScript frameworks like Vue.js and libraries such as Axios and Chart.js, ensuring a dynamic and interactive user experience. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security-wise, the website enforces HTTPS and implements a cookie consent mechanism, but lacks visible security headers and an explicit security policy or incident response contact. The WHOIS data aligns well with the website's claims, indicating a trustworthy domain registration. Overall, the site scores highly on content quality, business credibility, and privacy compliance, with minor technical and security enhancements recommended.

T

Homeland

thisishomeland.com

49

The website 'Homeland' is a small business or brand site created in 2020, built using the Framer platform. It presents minimal content focused on marketing slogans emphasizing customer satisfaction but lacks detailed business descriptions, contact information, or legal policies. The technical infrastructure relies on Framer hosting and content delivery, with basic HTTPS security but missing advanced DNS and HTTP security features. No privacy or cookie policies are present, indicating low compliance with data protection regulations. The absence of contact details and security disclosures limits trust and business credibility. Overall, the site is functional but minimalistic, suitable for a startup or brand awareness but requires enhancements for professional and secure online presence.

S

Sparkasse

sparkasseblog.de

53

Der Sparkasseblog is a professional German-language financial blog focused on the Sparkasse banking ecosystem, targeting private customers, young people, and business clients. The site provides educational content and advice related to banking, investments, taxes, and personal finance. It is positioned as a niche content provider within the finance sector, leveraging the trusted Sparkasse brand. Technically, the website is built on WordPress with a modern tech stack including jQuery, Yoast SEO, and Google Tag Manager, ensuring good SEO and moderate performance. The site is mobile optimized and offers clear navigation and search functionality. Security-wise, the site uses HTTPS with valid SSL certificates and employs Google Tag Manager for analytics. However, it lacks visible security headers, explicit privacy and cookie policies, and contact information for security or general inquiries, which are areas for improvement. Overall, the website is trustworthy and professional but could enhance its privacy compliance and security posture.

B

Bauhaus-Universität Weimar

uni-weimar.de

57

Bauhaus-Universität Weimar is a medium-sized public university in Germany specializing in architecture, civil engineering, design, media, and related disciplines. The website serves students, researchers, and academic partners with comprehensive information about study programs, research, and university news. The university maintains a strong brand presence and offers a well-structured, accessible, and mobile-optimized website built on TYPO3 CMS with modern web technologies. Security posture is solid with HTTPS and privacy-conscious analytics (Matomo) but lacks explicit cookie consent and published security policies. The domain registration aligns with academic networks, supporting legitimacy. Overall, the site is professional, trustworthy, and suitable for its educational mission.

S

Stiftung Architektur Dialoge Basel

architekturwochebasel.ch

50

Architekturwoche Basel is a biennial platform organized by Stiftung Architektur Dialoge Basel, focusing on international architecture and urban development events in Basel, Switzerland. The website serves as an information hub for the event, providing program details, news, partner information, and multimedia galleries. The platform targets architecture professionals, enthusiasts, and the general public interested in urban culture and development. The business operates as a non-profit entity with a clear focus on cultural and architectural engagement. Technically, the website is built on WordPress with modern web technologies including jQuery and MediaElement.js for media handling. It uses HTTPS with excellent SSL configuration and employs encrypted email links to protect contact information. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a published security or incident response policy. No critical vulnerabilities or suspicious activities were detected. Privacy compliance is partially met with a privacy policy present and GDPR considerations, but no explicit cookie consent mechanism was found. Overall, the website presents a professional and trustworthy front for the Architekturwoche Basel event, with room for improvement in security headers, cookie consent, and incident response transparency to enhance compliance and user trust.

The website at js-aa.org is currently inaccessible, returning a 403 Forbidden error page with no additional content or metadata. This prevents any meaningful analysis of the business, services, or user engagement features. The domain is registered with GMO Internet Group, a reputable registrar, and has a reasonable age since 2018, but the lack of accessible content severely limits trust and credibility assessments. Technically, the site lacks DNSSEC and visible security headers, indicating room for security improvements. No privacy, cookie, or terms of service policies are present, and no contact information is available, which further reduces compliance and user trust. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a poor user experience and low security posture.

Z

zinnobergruen gmbh

bestarchitects.de

50

The website bestarchitects.de represents the 'best architects award', a prestigious European architecture award recognizing outstanding architectural achievements. The site serves architects, industry professionals, and enthusiasts by providing award results, news, and a bookshop for related publications. The business model centers on award organization and publication sales, positioning itself as a recognized authority in the European architecture sector. Technically, the site is built on depage CMS with modern web standards, includes responsive design, and uses Google Analytics for visitor insights. Security posture is solid with HTTPS, CSRF protection on forms, and cookie consent mechanisms, though it lacks explicit security headers and published security policies. Overall, the site is professional, trustworthy, and compliant with GDPR, but could improve transparency on security and incident response. No blocking or WAF interference was detected, allowing full content access and analysis.

D

DOM publishers

dom-publishers.com

66

DOM publishers is a specialized architecture book publisher established in 2005, offering a wide range of premium books and journals focused on architecture and design. The company targets architects, educators, and students globally, leveraging a Shopify-based e-commerce platform to distribute its products worldwide. The website demonstrates a professional and consistent brand presence with clear contact information and multilingual support. Technically, the site uses modern web technologies and Shopify's infrastructure, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and form protection via hCaptcha, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is trustworthy, well-maintained, and suitable for its niche audience.

B

BSA Bund Schweizer Architekten

bsa-fas.ch

55

The Federation of Swiss Architects (BSA Bund Schweizer Architekten) is a prominent membership organization uniting over 950 members recognized for their achievements in architecture and urban development in Switzerland. The website serves as a comprehensive platform offering information about the federation, its local groups, awards, research grants, publications, and events. It targets architects, urban planners, and related professionals within Switzerland, providing multilingual support to cater to the diverse linguistic regions of the country. The business model is centered on membership services, professional networking, and advocacy within the architectural sector.

B

Beer Merz AG

beermerz.ch

61

Beer Merz AG is a small architecture firm based in Basel, Switzerland, specializing in architectural design, building renovations, and project competitions. The website presents a professional portfolio of projects primarily focused on real estate and urban development. The firm targets a general audience interested in architectural services within the Basel region. Technically, the website is built using React and modern JavaScript, with a custom CMS or framework. It shows moderate performance and good mobile optimization but lacks some accessibility features. Security posture is moderate; HTTPS is implied but no explicit security headers were detected. Cookie consent is implemented, and Google Analytics is used for tracking. However, no explicit contact information, terms of service, or security policies are present on the site. The domain uses privacy protection for WHOIS data, which is justified for this business type. Overall, the website is professional and trustworthy but could improve in security and compliance transparency.

Truwant + Rodet + is a small architecture and design studio based in Basel, Switzerland, specializing in innovative architectural projects, competitions, research studios, and exhibitions. Their portfolio includes a variety of projects primarily in Switzerland with some international collaborations, emphasizing adaptive reuse, artistic installations, and academic design studios. The website reflects a professional and artistic brand image targeting architecture professionals, clients, and academic institutions. Technically, the website employs modern JavaScript frameworks such as Alpine.js and GSAP, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies. The presence of Google Analytics without a configured tracking ID and absence of privacy compliance mechanisms indicate areas for improvement. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security practices.

8

820

820.ch

56

820 is a Zurich-based architecture studio specializing in innovative designs that integrate technology and environmental considerations. Led by Nicolas König and Lewis Horkulak, the studio emphasizes techno-environmental synergies and speculative spatial scenarios to foster deeper environmental integration. Their portfolio showcases a range of projects, competitions, and installations, highlighting a strong presence in the architectural design community with multiple awards and exhibitions. Technically, the website is built on the Cargo Collective platform, utilizing modern web standards including HTML5, CSS3, and JavaScript. The site is well-optimized for mobile devices and presents a professional, visually rich portfolio. However, there is room for improvement in accessibility and SEO practices. From a security perspective, the site uses HTTPS and does not expose sensitive data or forms, reducing attack surface. Nonetheless, it lacks important security headers and does not provide explicit security policies or incident response contacts, which could be enhanced to improve trust and compliance. Overall, the website reflects a credible and professional architecture studio with a strong digital presence but would benefit from enhanced privacy, security, and compliance disclosures to align with best practices and regulatory requirements.

D

dorsa

dorsa.cc

55

Dorsa is a small, collaborative architecture practice based in Zurich, Switzerland, specializing in innovative architectural design, research, and installations. The website showcases a comprehensive portfolio of projects, academic collaborations, and exhibitions, positioning the collective as a niche player in the architecture and real estate sectors. The technical infrastructure is modern, leveraging Cargo CMS and standard web technologies, with good mobile optimization and moderate performance. Security posture is strong with HTTPS and security headers implemented, though privacy and cookie policies are absent, indicating compliance gaps. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and incident response transparency.

K

KAWAHARA KRAUSE ARCHITECTS

kawahara-krause.com

62

KAWAHARA KRAUSE ARCHITECTS is a small, specialized architectural practice based in Germany, founded in 2007. The firm offers architectural design services, academic research, exhibitions, and publications, targeting clients interested in innovative and contextually rich architecture. The website is professionally designed using modern technologies such as Nuxt.js, Vue.js, Tailwind CSS, and Sanity CMS, providing a good user experience and mobile optimization. However, the site lacks explicit privacy and cookie policies, contact information, and security headers, which are important for compliance and security. The domain registration is consistent with the business claims, indicating legitimacy and stability. Overall, the website is safe, professional, and moderately secure but would benefit from enhanced privacy compliance and security practices.

F

Federal Office of Culture (FOC)

swissartawards.ch

50

The Swiss Art Awards website is an official government platform managed by the Federal Office of Culture in Switzerland. It serves as an information hub for the Swiss Art Awards open call and related cultural events, targeting artists and cultural professionals. The site provides event dates, application deadlines, and contact information primarily via email. The business model is government-supported cultural promotion, positioning itself as a key national art awards platform. The website content is professional, relevant, and consistent with its government affiliation, enhancing trustworthiness. Technically, the website is built on WordPress 6.5.7 with the Yoast SEO plugin, ensuring good SEO optimization and mobile responsiveness. It uses HTTPS with no visible security vulnerabilities or exposed sensitive data. However, the site lacks some security headers and does not have active analytics or tracking scripts configured. The absence of privacy and cookie policies represents a compliance gap, especially under GDPR regulations. From a security perspective, the website demonstrates a solid posture with HTTPS enforcement and no visible vulnerabilities. However, it lacks formal security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for improved security maturity. The site is not blocked by any WAF or security challenge, allowing full content access. Overall, the website is a credible and professional government cultural platform with good technical implementation but requires improvements in privacy compliance and security policy transparency to enhance trust and regulatory adherence.

A

archaic studio

archaic-studio.com

58

Archaic Studio operates as an online magazine dedicated to architecture and architectural photography, based in Berlin, Germany. The website serves a niche audience interested in architectural aesthetics and design, offering curated content and an integrated online store for related products. The business model focuses on content curation and e-commerce within the architecture and photography domain. Technically, the site is built on the Squarespace platform, leveraging its CMS and hosting infrastructure, with additional integrations such as Google Analytics and Typekit fonts. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features. Security posture is adequate with HTTPS enabled; however, the absence of security headers and HSTS reduces overall security robustness. Privacy compliance is weak due to missing privacy and cookie policies. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy. Overall, the website is professionally designed and functional but requires improvements in security and compliance to enhance trust and reduce risk.

A

ArchitekturBasel

architekturbasel.ch

50

ArchitekturBasel is a niche media platform dedicated to architecture news and cultural events in Basel, Switzerland. The website provides news articles, event announcements, interviews, and job listings related to the architecture sector, targeting a general audience interested in regional architectural culture. Founded around 2017, it maintains a consistent brand presence with good content quality and professional design. Technically, the site is built on WordPress with modern web technologies including jQuery and Google Analytics, and it employs SEO best practices such as structured data and Open Graph tags. The site is mobile-optimized and performs moderately well in terms of speed and accessibility. Security-wise, the website uses HTTPS and some security best practices but lacks explicit security headers like Content-Security-Policy and does not provide a security.txt or vulnerability disclosure page. Privacy compliance is basic, with no visible cookie consent mechanism or detailed privacy policy indications. Overall, the site is trustworthy and legitimate, with domain registration details consistent with its business focus.

S

S AM Schweizerisches Architekturmuseum

sam-basel.org

49

S AM Schweizerisches Architekturmuseum is a Swiss cultural institution dedicated to architecture, located in Basel. The website provides information about exhibitions, events, educational programs, and a shop, targeting architecture enthusiasts and the general public interested in cultural heritage. The museum maintains a professional online presence with multilingual support and active social media channels. Technically, the site is built on Drupal 7 with modern JavaScript libraries and uses Cookiebot for GDPR-compliant cookie management. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though improvements are recommended in security headers and CMS updates. WHOIS data is unavailable due to privacy or query failure, but the website content and contact details support legitimacy. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

A

archithese

archithese.ch

53

archithese is a Swiss-based international architecture magazine and theory publication with a focus on print and digital subscriptions, events, and editorial content. The website demonstrates a professional and consistent brand presence targeting architecture professionals, students, and enthusiasts. Technically, the site is built on the Contao CMS platform, leveraging modern JavaScript libraries and frameworks to deliver a responsive and user-friendly experience. The presence of cookie consent and privacy policy pages indicates GDPR compliance awareness, though explicit security and incident response policies are not publicly disclosed. Security posture is solid with HTTPS enforced and no evident vulnerabilities, but could be improved with additional security headers and transparency. Overall, the website is trustworthy, well-maintained, and serves its niche audience effectively.

K

Knopp & Kniel GmbH

knoppkniel.com

57

Knopp & Kniel GmbH is a Swiss-based company founded in 2020, specializing in collaborative projects that promote positive societal, cultural, and environmental change. Their website reflects a professional and focused business model targeting clients and partners engaged in transformative initiatives. The company maintains a clear and consistent brand presence with accessible contact information and a cookie consent mechanism, demonstrating awareness of privacy compliance. Technically, the website is built on the Cargo Collective platform, leveraging modern web technologies and custom typography, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced, but could be improved by enabling DNSSEC and adding security headers. No advanced security or incident response policies are publicly disclosed. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business presence.

S

Studio Céline Baumann

studiocelinebaumann.com

46

Studio Céline Baumann is a specialized landscape architecture studio based in Switzerland, active since at least 2018. The website serves as a portfolio and news platform showcasing their projects, awards, publications, and exhibitions. The studio targets professionals and enthusiasts in landscape architecture and urban planning, offering design, consultancy, and academic teaching services. Technically, the website is built on WordPress using the FoundationPress theme, with modern frontend libraries like jQuery and FlexSlider. The site is moderately performant and mobile-optimized but lacks advanced accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. No contact emails or phone numbers are explicitly provided, limiting direct communication. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

B

Bund der Selbständigen Bayern

bds-bayern.de

45

Bund der Selbständigen Bayern is a well-established membership association founded in 1874, representing the interests of self-employed individuals and the independent middle class in Bavaria, Germany. The organization operates as a non-partisan, cross-industry network providing advocacy, legal advice, educational programs, and member services. Their market position is strong regionally with a history of over 150 years and a comprehensive service offering including academies, competence centers, and event organization. The website reflects a professional and consistent brand image targeting self-employed professionals and SMEs in Bavaria.

A

Andreas Gminder

myko-service.de

71

Myko-Service, operated by Andreas Gminder, is a small specialized e-commerce business focused on providing products and literature related to mycology and botany. The website targets a niche audience of scientists, hobby mycologists, and mushroom pickers, offering a broad range of items including microscopy supplies, truffle products, and creative materials. The business operates primarily in Germany and has been active since 2020. The website is multilingual, enhancing accessibility to an international audience. Technically, the website is built on the Epages e-commerce platform, utilizing modern JavaScript frameworks and is hosted on servers associated with rzone.de. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO is basic but functional, and the site includes essential legal pages and cookie consent mechanisms. From a security perspective, the site uses HTTPS with a valid SSL certificate, but lacks visible advanced security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is adequate with GDPR-aligned policies and cookie consent. However, no explicit security or incident response policies are published. Overall, the website presents a trustworthy and professional front for a small niche retailer. Strategic improvements in security headers and explicit security policies could enhance trust and compliance further.

F

Felix Hampe, Pilzkurse und Kartierung

pilz-wissen.de

57

Felix Hampe operates a specialized educational and consulting business focused on mycology, offering mushroom courses, guided walks, consulting, and mapping services primarily in Hessen, Germany. The website presents a clear market position as a niche expert serving mushroom enthusiasts and nature lovers. The business model centers on direct service provision through seminars and personalized courses. Technically, the website is built on a modern stack with a CMS named MyWebsite, featuring responsive design and good SEO practices. Privacy compliance is well addressed with a GDPR-compliant privacy policy and cookie consent mechanisms. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers are absent and could be improved. Overall, the website is professional, trustworthy, and safe for general audiences.

PilzCoach Badenweiler is a small, specialized business focused on mushroom coaching, education, and related product sales in the Badenweiler region of Germany. The company offers mushroom identification workshops, educational outreach to schools and kindergartens, and sells mushroom-related books and products. Their market position is niche and local, targeting mushroom enthusiasts and nature lovers. The website is built on the One.com Web Editor platform and hosted by One.com, featuring a moderate technical infrastructure with basic SEO and mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is basic but present, with cookie consent and privacy policy pages available. Overall, the website is professional, trustworthy, and content-rich for its niche audience.

Pilzzentrum Hornberg operates as an educational institution specializing in mushroom identification and nature conservation, targeting enthusiasts and learners interested in mycology. The website is built on Joomla CMS version 3.10.11 and incorporates Usercentrics for cookie consent management, reflecting a basic level of GDPR compliance. The site presents good content quality and user experience but lacks explicit privacy policies, terms of service, and contact information, which are critical for trust and compliance. Security posture is moderate with HTTPS enabled but missing important security headers and incident response details. Overall, the domain registration data aligns well with the website's German location and business focus, indicating legitimacy. Strategic improvements in privacy documentation, security headers, and contact transparency are recommended to enhance trust and compliance.

O

ostseepilze.de

ostseepilze.de

47

The website ostseepilze.de is currently inaccessible, returning a 403 Forbidden error with a generic Jimdo error page. The site appears to be hosted on the Jimdo platform, a DIY website builder service, but contains no business-specific content, contact information, or policies. The lack of accessible content and security features severely limits the ability to assess the business or security posture. Technically, the site uses Jimdo's hosting and CSS assets but lacks HTTPS confirmation and security headers. No analytics or tracking scripts are present, indicating minimal digital maturity. The security posture is weak due to the absence of HTTPS and security best practices. Overall, the site appears to be inactive or under construction, resulting in a low trust and credibility score.

K

Kieler Pilzfreunde e.V.

kieler-pilzfreunde.de

56

Kieler Pilzfreunde e.V. is a small non-profit association based in Germany focused on mushroom education, conservation, and community engagement. The website provides information about mushroom identification, courses, exhibitions, and artistic projects involving fungi. It targets mushroom enthusiasts, nature lovers, and local community members including adults and children. The business model relies on memberships, donations, and event participation. Technically, the website is built using Incomedia WebSite X5 CMS with jQuery and standard web technologies. The site has moderate performance and basic mobile optimization. SEO is reasonably addressed with meta tags and structured navigation. However, there is no visible cookie consent mechanism or advanced accessibility features. From a security perspective, the site lacks visible security headers and explicit HTTPS confirmation in the provided data, which lowers its security posture. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic with a privacy policy present but no cookie banner. No incident response or security policies are published. Overall, the website is functional and trustworthy for its non-profit educational purpose but would benefit from improved security practices, HTTPS verification, and enhanced privacy compliance to strengthen user trust and regulatory adherence.

D

Deutsche Gesellschaft für Mykologie e.V.

dgfm-ev.de

58

The Deutsche Gesellschaft für Mykologie e.V. (DGfM) is a well-established German non-profit organization dedicated to the study and promotion of mycology. The website serves as a comprehensive resource for mushroom enthusiasts, researchers, and educators, offering educational content, qualifications, events, and community forums. The organization has a strong market position within its niche, supported by a century-long history and active engagement through social media and publications. Technically, the website is built on Joomla CMS with modern libraries like Bootstrap and jQuery, and it employs Matomo analytics configured for privacy compliance. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for users, with no signs of blocking or WAF interference.

N

National Geographic

nationalgeographic.de

68

National Geographic Germany operates a comprehensive media platform delivering inspiring stories, breathtaking adventures, and brilliant photography focused on nature, science, culture, and travel. The website serves a broad audience interested in educational and adventure content, leveraging a strong global brand under the Walt Disney Company umbrella. The business model includes magazine subscriptions, online editorial content, and e-commerce through affiliated partner sites. Technically, the site is built on WordPress with Elementor and Yoast SEO, ensuring modern content management and SEO optimization. The presence of cookie consent mechanisms indicates attention to privacy compliance, although explicit privacy and terms policies are not found in the provided content. Security posture is solid with HTTPS and consent-based script loading, but could be improved with additional security headers and published policies. Overall, the site is professional, trustworthy, and well-positioned in the media sector.

The website www.tutti.ch is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) security challenge page that requires human verification via Turnstile captcha. This prevents access to any actual website content, metadata, or business information. Consequently, no meaningful business overview, technical infrastructure details, or security posture evaluation can be performed. The site appears to be protected by Cloudflare's security services, indicating an intent to mitigate automated threats or abuse. However, the lack of accessible content severely limits the ability to assess compliance, trustworthiness, or operational maturity.

A

Alias Design

alias.design

57

Alias Design is a small Italian design company specializing in furniture and design furnishings, operating an e-commerce platform built on Drupal 10 with Commerce 2. The website presents a professional and consistent brand image targeting consumers interested in Italian furnishings. The technical infrastructure leverages modern CMS technology, integrates marketing and analytics tools such as Google Tag Manager, Hotjar, and Doofinder, and employs Cookiebot for cookie consent management. Hosting appears to be on Amazon AWS infrastructure. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy and terms policies. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. Overall, the domain registration is privacy protected but consistent with the business age and type, indicating legitimacy.

U

USM

usm.com

10

USM is a Swiss-based company specializing in modular, sustainable, and timeless furniture design with a history spanning over 60 years. The company targets both commercial and residential customers, offering custom configuration tools and a variety of collections. The website reflects a mature digital presence with modern technologies such as Astro and Svelte, and integrates multimedia content including Vimeo videos. The site is well-structured, mobile-optimized, and provides comprehensive privacy and legal policies, supporting a trustworthy user experience. Security posture is generally strong with HTTPS enforced, though some improvements in security headers and cookie consent mechanisms are recommended. The absence of WHOIS data slightly reduces domain trust but does not significantly impact overall legitimacy given the professional presentation and detailed content.

D

DigiCube AG

digicube.ch

52

DigiCube AG is a Swiss-based full-service digital agency specializing in website creation, online shops, and social media management. The company targets businesses seeking to enhance their digital presence through professional web development and digital marketing services. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital infrastructure. Technically, the site leverages WordPress with modern plugins and libraries, ensuring a robust and scalable platform. Security measures such as HTTPS, reCAPTCHA, and security headers are implemented, indicating a good security posture. However, the absence of a dedicated security policy and incident response contact suggests room for improvement in security transparency. Overall, DigiCube AG presents a credible and trustworthy digital presence with compliance to GDPR and cookie regulations, suitable for its business domain.

R

Roger Lehner

rogerlehner.com

47

Roger Lehner operates a small, specialized design studio based in Germany, focusing on ambitious projects that emphasize collaboration, creativity, and accessibility. The website showcases a professional portfolio with services including branding, digital and print design, and inclusive design practices. The business targets clients seeking high-quality, dynamic visual communication solutions. Technically, the website employs modern JavaScript libraries such as Swup and Swiper for enhanced user experience and uses Umami Analytics for minimal user tracking. Hosting is provided by hosttech.de, a German hosting provider, aligning with the business location. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and does not implement cookie consent mechanisms, which are areas for improvement. Overall, the website is professional, trustworthy, and well-designed but could enhance compliance and security practices.