Security Directory

L

Landeshauptstadt Hannover

hannover.de

55

The website www.hannover.de serves as the official portal for the city and region of Hannover, Germany. It provides comprehensive information and services for citizens, tourists, and businesses, including cultural events, tourism highlights, public services, and economic development resources. The portal is well-positioned as a trusted government resource with a broad target audience encompassing residents, visitors, and local enterprises. The business model focuses on public service delivery and regional promotion. Technically, the site employs modern web technologies such as React components, Matomo analytics with GDPR-compliant consent management, and a CMS likely based on EZ Publish. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate to fast performance profile. The infrastructure appears robust and professionally maintained. From a security perspective, the site enforces HTTPS, uses consent management for privacy compliance, and avoids exposing sensitive data. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities. The WHOIS data aligns with the official nature of the site, confirming legitimacy and consistency. Overall, the site presents a low-risk profile with high trustworthiness and professionalism. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure mechanisms to further enhance transparency and security posture.

A

active elements GmbH

active-elements.de

57

active elements GmbH is a well-established German agency specializing in web design, print design, SEO, and digital marketing services. With nearly two decades of experience, the company serves businesses and organizations seeking comprehensive digital and print marketing solutions. Their offerings include modern web development using TYPO3 and WordPress, creative print projects, SEO optimization, Google AdWords campaign management, and client training through e-learning and on-site sessions. The company emphasizes personalized service and full support, positioning itself as a trusted partner in the regional market around Hannover and Garbsen. Technically, the website is built on a modern stack including HTML5, CSS3, JavaScript, Bootstrap, and CMS platforms TYPO3 and WordPress. Hosting is provided by Hetzner, a reputable German hosting provider, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with privacy-conscious analytics via Matomo. Cookie consent and GDPR-compliant privacy policies are implemented, reflecting a mature digital presence. From a security perspective, the site uses HTTPS with strong SSL configuration and secure form handling. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which are recommended for enhanced protection. No vulnerabilities or suspicious elements were detected in the content or scripts. Overall, active elements GmbH presents a professional, trustworthy, and technically sound online presence. The company demonstrates good compliance with privacy regulations and offers a comprehensive suite of services for digital and print marketing. Strategic improvements in security transparency and incident response readiness would further strengthen their security posture.

P

Praktikumsjahr GbR

praktikumsjahr.de

54

Praktikumsjahr GbR operates an educational platform focused on providing school leavers in Germany with the opportunity to explore multiple professions through a structured internship year. The platform facilitates digital management of applications, offers monthly stipends, and partners with over 100 companies, positioning itself as a niche leader in practical career orientation. The website is professionally designed, mobile-optimized, and rich in relevant content, including testimonials, partner logos, and press references, enhancing its credibility and trustworthiness. Technically, the site employs modern web technologies such as Bootstrap, Font Awesome, Google Analytics, Hotjar, and Cookiebot for consent management, hosted on Google Cloud infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though it lacks explicit security headers and a published security policy. Privacy compliance is strong with comprehensive GDPR-aligned policies and clear contact information. Overall, the site presents a low-risk profile with no detected vulnerabilities or suspicious content.

S

Stafftastic GmbH

ausbildungsradar.de

56

Ausbildungsradar.de is a German educational platform focused on supporting companies and associations in retaining and recommending applicants within regional or association-based training programs. The platform is positioned as a niche service enhancing digital collaboration in apprenticeship and training sectors. The business is likely small-sized and operates primarily in Germany, with Stafftastic GmbH as the associated company. Technically, the website employs modern JavaScript technologies, Cookiebot for GDPR-compliant cookie management, and Plausible Analytics for privacy-friendly traffic analysis. Hosting is via Google Cloud DNS, indicating a reliable infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security policy or incident response contacts are published. Privacy compliance is strong, with a comprehensive privacy policy linked on a partner domain. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

P

PluSport Behindertensport Schweiz

plusport.ch

49

PluSport Behindertensport Schweiz is a well-established Swiss non-profit organization dedicated to promoting sports and inclusion for children, youth, and adults with disabilities. Founded in 1960, it serves as the national competence center offering a wide range of services including sport camps, clubs, education, elite sports, and events. The organization targets individuals with disabilities as well as inclusive participants, supported by a strong partnership network including Swiss Olympic and Swiss Paralympic. The website reflects a professional and accessible digital presence with multilingual support and clear navigation.

Swiss PGA is the professional golf association in Switzerland, offering education programs, tournaments, and member services for golf professionals and apprentices. The website is well-structured and targets golf professionals and enthusiasts within Switzerland. It provides comprehensive information about education, tournaments, and membership benefits, positioning itself as a key national association in the golf sector. Technically, the website uses a modern tech stack including Contao CMS, jQuery, Bootstrap, and various JavaScript libraries for sliders and UI enhancements. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. Analytics are implemented via Google Analytics and Google Tag Manager. From a security perspective, the site enforces HTTPS and uses secure forms for login. However, it lacks important security headers and published security policies. Privacy compliance is partial, with a cookie consent banner but no visible privacy policy or terms of service. WHOIS data confirms the legitimacy of the domain and its alignment with the Swiss PGA organization. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security documentation to improve compliance and user trust.

S

Swiss Greenkeepers Association

greenkeeper.ch

50

The Swiss Greenkeepers Association website serves as an informational platform for a niche professional association in Switzerland. It provides basic content welcoming visitors and likely offers resources and news relevant to greenkeepers. The website uses a traditional tech stack including jQuery, Bootstrap, and the Contrexx CMS platform, indicating a moderate level of digital maturity. However, the site lacks modern enhancements such as comprehensive privacy policies, cookie consent mechanisms, and advanced SEO or accessibility features. Security posture is minimal with no evident security headers or incident response information, and the use of outdated JavaScript libraries may expose the site to vulnerabilities. Overall, the site is functional but would benefit from modernization and enhanced security and privacy compliance.

S

Sportschule Dürnten

sportschulebubikon.ch

58

Sportschule Dürnten is a specialized private educational institution in Switzerland focused on integrating academic education with professional sports training for youth and young athletes. The school offers tailored programs in tennis, polysport, golf, and equestrian disciplines, emphasizing a family-friendly, stress-free environment that supports both school success and athletic development. It also provides mental training, career orientation, and preparation for sports gymnasium admission and US sports scholarships. The institution maintains partnerships with local sports clubs, therapy providers, and fitness centers to enhance its offerings. Technically, the website is built with standard HTML and CSS, presenting well-structured, content-rich pages with good design quality and navigation clarity. However, it lacks advanced technical features such as CMS usage, modern frameworks, or analytics tools. Mobile optimization and accessibility are basic but functional. Security measures are minimal, with no visible security headers or privacy and cookie policies, indicating areas for improvement in compliance and protection. From a security perspective, the site uses HTTPS (assumed but not explicitly confirmed), but lacks essential security headers and incident response contacts. No forms or user data collection mechanisms are present, reducing immediate risk exposure. The absence of privacy and cookie policies suggests non-compliance with GDPR and related regulations, which should be addressed promptly. Overall, the website is professional and trustworthy, serving a niche educational market with clear business credibility. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, and adding incident response information to improve compliance and security posture.

P

PING

ping.com

73

PING is a well-established golf equipment manufacturer and retailer with a mature online presence dating back to 1993. The company offers a broad range of golf clubs, bags, accessories, and apparel, targeting golf enthusiasts and players of all levels. Their business model combines e-commerce retail with custom fitting and trade-in services, positioning them strongly in the golf retail market. The website demonstrates a professional design, clear navigation, and comprehensive product information, supporting a positive user experience. Technically, the site leverages modern JavaScript libraries, analytics tools, and integrates with reputable payment gateways, hosted likely on Microsoft Azure with Kentico CMS. Security posture is solid with HTTPS, domain transfer protections, and consent management via Osano, though DNSSEC is not enabled and explicit security policies are not published. Overall, the site is trustworthy, privacy compliant, and well-optimized for performance and accessibility.

Restaurant TS Green Inn is a small hospitality business located in Switzerland offering European-Asian fusion cuisine with facilities for dining and event hosting. The website presents a professional design built on WordPress with the Divi theme, providing clear navigation and relevant content such as menus and event information. Technically, the site uses standard web technologies and is mobile optimized, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS enabled but lacks important security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the business appears legitimate and trustworthy with room for improvement in security and compliance.

B

BRAUEREI FALKEN AG

falken.ch

48

Brauerei Falken AG is a Swiss brewery company based in Schaffhausen, specializing in the production and retail of beers, spirits, and related merchandise. The company operates an online shop and offers event services, targeting adult consumers and beer enthusiasts primarily in Switzerland. The website is professionally designed, featuring clear navigation, age verification for alcohol compliance, and active social media engagement. Technically, the site is built on TYPO3 CMS with Bootstrap and Font Awesome, integrating Google Tag Manager for analytics and marketing. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and headers could be improved. Overall, the website reflects a mature digital presence consistent with a medium-sized regional brewery.

B

Bijoux Rederer

bijoux-rederer.ch

52

Bijoux Rederer is a small retail business specializing in watches and jewelry, operating since 2006 in Hinwil, Switzerland. The company offers a range of products including gold, silver, and fashion jewelry, as well as watch repair and related services. The website is built on the Worldsoft CMS platform, utilizing technologies such as jQuery, Bootstrap, and Revolution Slider, providing a visually appealing and mobile-optimized experience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and cookie consent mechanisms. The business information is consistent with domain registration data, indicating legitimacy and stability. Overall, the website serves its local retail audience effectively but could improve privacy compliance and security practices.

A

Association Suisse des Golfeurs Indépendants

asgi.ch

70

The Association Suisse des Golfeurs Indépendants (ASGI) operates a well-established website serving the Swiss golf community with membership services, official handicap management via the Swiss Golf Card, and a comprehensive calendar of golf events and training courses. The site targets golf enthusiasts in Switzerland and maintains a consistent brand presence with over 25 years of history. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and Google services, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of security headers and privacy policy pages indicates room for improvement in compliance and security best practices. Overall, the domain registration aligns well with the business claims, supporting the site's legitimacy.

G

golfimport.ch

ugigolf.ch

51

Golfimport.ch is a Swiss-based e-commerce retailer specializing in golf equipment and accessories, serving golf enthusiasts with a wide range of products including clubs, balls, shoes, clothing, GPS devices, and training aids. The website is built on the PepperShop platform and employs modern web technologies such as jQuery, Bootstrap, and Splide.js for a responsive and user-friendly experience. Tracking and marketing tools like Google Tag Manager and Facebook Pixel are integrated for analytics and advertising purposes. Security posture is solid with HTTPS enforced and standard security headers present, though explicit privacy and cookie policies are not found, indicating room for compliance improvement. Contact options are primarily via a contact form, with no direct emails or phone numbers visible. WHOIS data confirms the domain's legitimacy and consistency with the business profile. Overall, the site presents a professional and trustworthy online retail presence with moderate technical and privacy compliance maturity.

N

Nailfashion by Theresa Richard

nailtheresa.ch

42

Nailfashion by Theresa Richard is a small local nail studio business based in Rapperswil, Switzerland, specializing in professional nail care and creative nail designs including natural nails, French Pearl nails, and Gellack. The website presents a professional and consistent brand image targeting local customers seeking quality nail services. The business has been established since 2016, with clear contact information and a user-friendly website built on WordPress. Technically, the site uses common WordPress plugins for galleries, testimonials, and sliders, with basic mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security measures.

E

ENERGETIX GmbH & Co. KG

energetix.tv

62

ENERGETIX GmbH & Co. KG is a German company specializing in magnetic jewelry and wellness products, operating primarily through a direct sales business model. The website targets consumers interested in wellness and magnetic jewelry, as well as potential business partners and hosts for home parties. The company positions itself as a niche market leader in Europe with a focus on combining design and wellness benefits. Technically, the website is built on WordPress with Bootstrap and jQuery, featuring modern web technologies and analytics tools such as Google Analytics and Cloudflare Insights. The site is mobile-optimized and provides a good user experience with clear navigation and multilingual support. Security posture is adequate with HTTPS enabled and privacy compliance through cookie consent and a comprehensive privacy policy. However, the absence of WHOIS data and lack of explicit security headers and incident response information slightly reduce trustworthiness. Overall, the website is professional, trustworthy, and compliant with GDPR, but could improve security transparency and WHOIS data availability.

P

Umleitung

pccaddie.net

49

The domain pccaddie.net currently serves as a simple redirect to https://www.pccaddie.de/, providing no direct content or business information on its own. The domain is well-established, having been registered since 2002, which suggests a mature business presence. However, the lack of content, metadata, or security and privacy policies on this domain limits the ability to assess its direct security posture or compliance. Technically, the site is minimal with no scripts or tracking detected, indicating a low digital footprint on this domain itself. Security posture cannot be fully evaluated due to the absence of content and security headers. Overall, the domain appears legitimate but functions solely as a redirect, pushing users to the main business site.

S

Spider AF

sp-trk.com

70

Spider AF is a specialized technology company founded in 2017 that provides digital marketing security solutions focused on combating ad fraud, click fraud, and invalid leads. The company targets businesses and marketers seeking to protect their advertising budgets from fraudulent activities. Their market position is supported by trust from over 500 companies and positive user ratings. Technically, the website is built on Webflow and hosted on AWS, integrating modern marketing and analytics tools such as Google Tag Manager, HubSpot, Intercom, and Visual Website Optimizer, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and domain registration protections in place, though improvements can be made by enabling DNSSEC and publishing explicit security and privacy policies. Overall, the website is professional, safe, and trustworthy, but lacks some compliance documentation and direct contact information.

株

株式会社Faber Company

audience-mieruca.com

53

Audience Mieruca is a Japanese SaaS platform specializing in AI-driven web analytics and optimization tools. The company, operated by 株式会社Faber Company, offers a suite of services including user behavior analysis, SEO and SERP monitoring, AI chatbot support, and monitoring of AI search engines. The platform targets a broad audience from beginners to agencies, focusing on mobile-friendly web optimization. Technically, the website is built using modern frameworks such as Next.js and React, hosted on AWS infrastructure, and integrates Google Analytics and Tag Manager for tracking. The site demonstrates good performance and mobile optimization but lacks some advanced SEO and privacy compliance features. Security posture is solid with HTTPS and no exposed sensitive data, though improvements are recommended in DNSSEC and security headers. Overall, the domain registration and business information are consistent and trustworthy, supporting a medium-sized technology company profile.

B

Bundesministerium für Digitales und Verkehr (BMV)

erneuerbarekraftstoffe.de

50

The website erneuerbarekraftstoffe.de is an official German government initiative managed by the Bundesministerium für Digitales und Verkehr (BMV). It focuses on promoting renewable fuels through a comprehensive funding and development program aimed at reducing greenhouse gas emissions in the transportation sector. The site provides detailed information on various funding measures, development platforms, and market ramp-up strategies for renewable fuels such as advanced biofuels and power-to-liquid fuels. The target audience includes policymakers, industry stakeholders, researchers, and applicants for funding programs. Technically, the site is built on WordPress with Elementor and supports multilingual content, indicating a mature digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms in place, though explicit privacy and terms of service policies are not found. Overall, the site is professional, trustworthy, and aligned with government standards, but could improve privacy compliance documentation.

F

Fachagentur Nachwachsende Rohstoffe e.V.

bauerhubert.de

41

Bauer Hubert is an educational website operated by Fachagentur Nachwachsende Rohstoffe e.V., a German non-profit organization focused on renewable raw materials. The site targets children and parents by providing educational stories, games, comics, and audio plays to promote awareness of sustainable resources. The website is well-branded, consistent, and supported by official German government and agency partners, reflecting a strong market position in educational content for renewable energy and sustainability. Technically, the website is built on TYPO3 CMS with Foundation CSS and uses jQuery and Matomo analytics with cookies disabled, indicating a privacy-conscious approach. The site is hosted on servers associated with agenturserver domains, suggesting professional hosting. The website is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. From a security perspective, Bauer Hubert enforces HTTPS and disables cookies in analytics, which is positive. However, it lacks visible security headers, a cookie consent mechanism, and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. WHOIS data is consistent with the website's claims, showing legitimacy and stable domain registration. Overall, the website presents a low-risk profile with good business credibility and technical implementation but could improve privacy compliance and security posture by adding cookie consent, security headers, and formal security policies.

C

Cubus Medien Verlag GmbH

schulbau-messe.de

54

SCHULBAU.online is a professional German platform focused on educational construction, offering a magazine, trade fairs, and think tanks targeted at architects, school authorities, and planners. The website is well-positioned as a leading resource in the education construction sector in Germany, supported by a medium-sized company, Cubus Medien Verlag GmbH. The technical infrastructure is based on a modern WordPress CMS with relevant plugins for e-commerce, events, SEO, and multilingual support, hosted under a reputable registrar. Security posture is good with HTTPS and cookie consent mechanisms, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is strong, with clear GDPR-aligned privacy and cookie policies. Overall, the site is trustworthy, professionally designed, and content-rich, serving a general audience interested in educational infrastructure.

F

Fachagentur Nachwachsende Rohstoffe e.V. (FNR)

charta-fuer-holz.de

43

The website www.charta-fuer-holz.de represents the 'Charta für Holz 2.0' initiative managed by the Fachagentur Nachwachsende Rohstoffe e.V. (FNR), a German non-profit agency focused on promoting sustainable wood use and forestry. The site serves as an information hub for government bodies, industry stakeholders, researchers, and the public, offering resources, event information, and project updates related to renewable raw materials and wood construction. The business model is non-profit and government-supported, positioning the organization as a key player in Germany's sustainable forestry sector. Technically, the website is built on TYPO3 CMS with modern front-end technologies including jQuery, Foundation CSS, and Slick Carousel. It is mobile-optimized and provides a good user experience with clear navigation and professional design. Analytics are implemented via Matomo with cookies disabled, reflecting a privacy-conscious approach. However, the site lacks a cookie consent mechanism and some security headers, which are areas for improvement. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. No major vulnerabilities or security incidents are evident. The absence of a published security policy or incident response contact reduces transparency but does not indicate immediate risk. WHOIS data is consistent and supports the legitimacy of the domain and organization. Overall, the website is professional, trustworthy, and well-aligned with its mission. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, and publishing security and incident response policies to enhance compliance and trust.

F

Fachagentur Nachwachsende Rohstoffe e.V. (FNR)

holzbauplus-wettbewerb.info

62

The website holzbauplus-wettbewerb.info serves as the official platform for the Bundeswettbewerb HolzbauPlus 2025/26, a German federal competition promoting sustainable wood construction projects. It is managed by the Fachagentur Nachwachsende Rohstoffe e.V. (FNR) under the auspices of the German Federal Ministry of Food, Agriculture and Homeland. The site provides comprehensive information about competition goals, categories, jury, archives, and an online application portal. The content is professionally presented, targeting builders, planners, and stakeholders interested in sustainable building practices in Germany. Technically, the website is built on TYPO3 CMS with modern frontend frameworks such as Foundation and uses privacy-conscious Matomo analytics with cookies disabled. The site is mobile-optimized and demonstrates good SEO and accessibility basics. HTTPS is enforced, but security headers are missing, and no cookie consent mechanism is present, indicating areas for improvement in security and privacy compliance. From a security perspective, the site shows a solid posture with secure forms and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and cookie consent could be addressed to enhance compliance and protection. The WHOIS data is malformed and lacks detailed registrant information, likely due to privacy protection, but the website's official nature and government affiliation support its legitimacy. Overall, the website is trustworthy, professionally maintained, and serves an important government function promoting sustainable construction. Strategic recommendations include implementing security headers, adding cookie consent for GDPR compliance, and publishing security and incident response policies to further strengthen trust and compliance.

F

Fachagentur Nachwachsende Rohstoffe e.V. (FNR)

klav.de

45

KLAV is a German government-affiliated competence center focused on reducing food waste across the supply chain sectors including primary production, processing, trade, and out-of-home catering. It operates as part of the National Strategy to reduce food waste and collaborates with economic actors, policymakers, and scientists. The website is professionally designed using TYPO3 CMS and modern frontend technologies, providing comprehensive information, seminar offerings, and sector dialogue facilitation. The technical infrastructure is solid with good mobile optimization and accessibility. Security posture is strong with HTTPS and privacy-conscious analytics (Matomo with disabled cookies), though explicit cookie consent and security policies are missing. Contact information is clearly presented, enhancing trust and credibility. Overall, KLAV presents a trustworthy and authoritative online presence aligned with its governmental mission.

F

Fachagentur Nachwachsende Rohstoffe e. V. (FNR)

klimaanpassung-wald.de

44

The website www.klimaanpassung-wald.de is an official government-related platform operated by the Fachagentur Nachwachsende Rohstoffe e. V. (FNR) that provides comprehensive information and support for the climate-adapted forest management funding program in Germany. It serves private and communal forest owners by offering program details, document submission options, and relevant news. The site is well-positioned as an authoritative source within the forestry and environmental protection sector, supported by government ministries. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and uses Matomo for privacy-conscious analytics. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced, though some security headers are missing and privacy policies are not explicitly presented. Contact information is clearly provided, enhancing trust and credibility.

K

kolle.dev

kolle.dev

50

Kolle.dev is a small digital collaboration service based in Germany, focusing on supporting digital projects through project management, design, programming, and long-term support. The website presents a professional and clean design using modern technologies such as Nuxt.js and Tailwind CSS, indicating a good level of digital maturity. The site is fast, mobile-optimized, and provides clear information about its services and partner projects. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies, which are important for compliance and trust. Overall, the risk is moderate with recommendations to improve privacy compliance and security headers to enhance trust and regulatory adherence.

S

Single: the music & video app for Shopify

single.xyz

68

Single.xyz is a specialized e-commerce platform integrated with Shopify, enabling musicians and content creators to sell music, videos, and memberships directly to their audience. Founded in 2020, the company positions itself as a niche player in the digital media sales market, leveraging Shopify's infrastructure to provide seamless sales and livestream capabilities. The website demonstrates a good level of technical maturity, utilizing modern JavaScript frameworks, Shopify Liquid templates, and multiple marketing and analytics tools such as HubSpot, Facebook Pixel, and Google Analytics. Hosting is managed via AWS infrastructure with DNS services from Amazon Route 53, ensuring reliable performance and scalability. Security posture is adequate with HTTPS enforced and domain transfer protections in place; however, the absence of DNSSEC and some security headers indicates room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which could expose the company to regulatory risks. Overall, the website is professional and functional but would benefit from enhanced privacy and security transparency.

J

Jensen + Heitz

jensenheitz.com

57

Jensen + Heitz is a creative media production company based in Switzerland, specializing in motion graphics and video content. Their website showcases various projects and collaborations with notable brands, indicating a niche presence in the creative media industry. The site is professionally designed using the Squarespace platform, offering good mobile responsiveness and a visually appealing user experience. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the active and professional website presence. Security measures such as HTTPS and HSTS are properly implemented, but additional security headers and privacy compliance measures are lacking. Contact information is minimal, limited to an email address and Instagram profile, with no phone or physical address provided. Overall, the website demonstrates a moderate level of digital maturity and security posture but requires improvements in privacy compliance and domain registration transparency.

L

Laurids Jensen Photographer

lauridsjensen.com

48

Laurids Jensen operates a professional photography portfolio website showcasing editorial, commissioned, and moving image works. The business is positioned as a niche creative service provider in the media industry, targeting clients and collaborators in the art and editorial sectors. The website content is well-structured and visually oriented to highlight the photographer's work, with a consistent branding approach and good user experience. Technically, the website is built using standard web technologies including HTML5, CSS, JavaScript, and jQuery, hosted by cyon.ch. It employs Google Analytics and Google Tag Manager for visitor tracking but lacks advanced CMS or frameworks. The site is mobile optimized with moderate performance and basic accessibility features. However, there is room for improvement in SEO and technical modernization. From a security perspective, the site uses HTTPS and has domain transfer protections enabled but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, and no incident response contacts are provided, indicating gaps in compliance and security readiness. The use of tracking scripts without visible consent mechanisms also raises privacy concerns. Overall, the website is a legitimate, small-scale professional portfolio with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and incident response readiness would enhance trust and reduce risk.

T

Treestate Productions

treestate.de

63

Treestate Productions is a small media production company based in Germany, specializing in film, photography, and 3D content creation. The website presents a professional and visually appealing interface showcasing their media portfolio. The company maintains an active social media presence on LinkedIn, Facebook, and Instagram, reinforcing their brand identity. The site is built on WordPress with modern plugins for SEO and GDPR compliance, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. Overall, the website is trustworthy and functional, serving its niche audience effectively.

BHEND DESIGN STUDIO GMBH is a small Swiss-based design studio specializing in product and furniture design. The website reflects a professional and focused business with clear contact information and a privacy policy, targeting design professionals and manufacturers. The technical infrastructure is built on WordPress with modern plugins and Google Tag Manager for analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks some security headers and cookie consent mechanisms, which are recommended for improved compliance and protection. Overall, the website is trustworthy and well-maintained, with room for enhancements in security and privacy compliance.

N

Nouvelle Noire Type Foundry

nouvellenoire.ch

57

Nouvelle Noire Type Foundry is a Swiss-based company specializing in the design, publication, and distribution of high-quality retail and custom typefaces. The company targets designers and corporate clients across various sectors, offering bespoke font solutions and logo refinement services. Their market position is that of a niche, high-quality Swiss type foundry with a focus on elevating design projects through typography. Technically, the website is built on a modern WordPress CMS platform with WooCommerce integration, utilizing common industry tools such as Google Analytics, Google Tag Manager, and Mailchimp for marketing and analytics. The site demonstrates good mobile optimization and SEO practices, supported by the Yoast SEO plugin and structured data markup. Security-wise, the site benefits from HTTPS encryption and a cookie consent mechanism, but lacks published privacy policies, terms of service, and incident response information, which are important for compliance and trust. Overall, the website is professional and functional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

A

Alena Stählin

alenastaehlin.ch

61

Alena Stählin is a Swiss graphic designer operating a small design studio specializing in publications, branding, posters, exhibition design, and web design. The business targets clients primarily in the cultural, educational, and artistic sectors, including museums, schools, institutions, and individual professionals. The website presents a professional portfolio with clear contact information and showcases multiple awards and notable clients, indicating a reputable market position within its niche. Technically, the website is built using modern web technologies, specifically the SvelteKit framework, and demonstrates good mobile optimization and user experience. However, there is a lack of visible security headers, privacy policies, and cookie consent mechanisms, which indicates room for improvement in compliance and security posture. From a security perspective, the site uses HTTPS (implied by the URL), but no additional security policies or incident response contacts are provided. No forms or data collection mechanisms were detected, reducing immediate data protection risks. The absence of privacy and cookie policies, however, may pose compliance risks under GDPR or similar regulations. Overall, the website is professional and trustworthy in terms of business credibility and content quality but requires enhancements in privacy compliance and security best practices to reduce risk and improve user trust.

H

Hostpoint AG

code-zh.com

40

The website code-zh.com is currently displaying a minimal placeholder page indicating that the PHP version used is no longer supported. The domain is registered since 2012 and is hosted by Hostpoint AG, the largest Swiss web hosting provider managing over a million domain names. The business focus is on web hosting and domain management services targeted primarily at Swiss customers. The website content is minimal and lacks essential elements such as privacy policies, cookie consent mechanisms, terms of service, and contact information, which negatively impacts user trust and compliance with regulations such as GDPR. Technically, the site uses outdated PHP, jQuery 3.6.0, and standard web fonts but lacks modern security headers and SEO optimizations. Security posture is weak due to the unsupported PHP version and absence of security best practices. Overall, the site is accessible without WAF or security blocks but requires significant improvements in content, security, and compliance to meet professional standards.

I

it’s mee

its-mee.com

53

it’s mee is a small visual communication agency based in Basel, Switzerland, specializing in conceptualizing and designing visual identities, exhibitions, websites, and publications. The website serves as a professional portfolio showcasing their projects primarily in the cultural and publication sectors. The company appears to be well-established with a domain age consistent with its founding date in 2017. The business targets clients seeking high-quality visual communication services in the local region. Technically, the website is built on WordPress using common libraries such as jQuery, Masonry.js, and MediaElement.js, with SEO optimization via the All in One SEO plugin. Hosting is provided by a German hosting provider. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Analytics are handled by Matomo, indicating some privacy-conscious tracking. From a security perspective, HTTPS is enabled, but DNSSEC is not configured, and no security headers are detected, which are areas for improvement. There is no visible privacy or cookie policy, nor any incident response or security policy pages, indicating compliance gaps especially regarding GDPR. Contact information is clearly provided, but no forms are present on the homepage. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to improve its risk posture and user trust.

R

Rocket Ruby

rocketruby.ch

51

Rocket Ruby is a small, established visual communication studio based in Basel and Luzern, Switzerland, operating since 2011. The company specializes in comprehensive design solutions including corporate design, web development, infographics, and book design, targeting businesses and organizations seeking professional visual communication services. The website reflects a consistent and professional brand image with a portfolio of diverse projects demonstrating their expertise. Technically, the site is built on WordPress, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is provided via email and physical address, but no phone or social media links are available. Overall, the website is trustworthy and professional, with room for improvement in security and privacy transparency.

P

Prolog AG

prolog.work

62

Prolog AG is a Basel-based digital agency specializing in sustainable web solutions that integrate strategy, design, and technology to deliver lasting digital success. The company serves a diverse clientele, including cultural institutions, startups, and established organizations, offering services ranging from UX/UI design and development to digital strategy and e-commerce solutions. The website reflects a mature digital presence with a professional portfolio showcasing recent projects and collaborations. Technically, the site is built on modern frameworks like Nuxt.js and employs best practices such as responsive design and lazy loading for media assets. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a privacy policy present but lacking explicit GDPR compliance statements and no cookie consent mechanism. Overall, the website and domain registration data indicate a trustworthy and credible business with a strong market position in the Swiss digital agency sector.

W

Westermann Gruppe

westermanngruppe.de

10

Westermann Gruppe is a prominent German educational media provider offering a broad range of digital and print educational products, supported by printing and logistics services. The company holds a strong market position in the German-speaking education sector, serving educators, students, and institutions. Their website reflects a professional and consistent brand image with clear navigation and comprehensive business information. Technically, the site is built on TYPO3 CMS with modern web technologies and includes GDPR-compliant cookie consent mechanisms and privacy protections. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though formal security policies and incident response contacts are absent. Overall, the website is trustworthy, well-maintained, and compliant with relevant privacy regulations.

E

Envestnet | Yodlee

yodlee.com

10

Envestnet | Yodlee is a leading enterprise in the financial data aggregation and analytics sector, providing connected data products that empower financial institutions and fintech companies to deliver personalized financial experiences. Founded in 1999 and headquartered in San Mateo, California, Yodlee operates as a subsidiary of Envestnet and serves multiple countries including the US, Canada, UK, France, South Africa, Australia, and New Zealand. Their business model focuses on B2B SaaS offerings with key services spanning personal financial management, credit solutions, wealth management, business financial management, payment enablement, and open finance APIs. Technically, the website is built on Drupal 10 CMS and integrates a modern technology stack including Google Tag Manager, Marketo, OneTrust for cookie consent, and various analytics and marketing tools. The site demonstrates good performance, excellent mobile optimization, and accessibility features, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs security headers, and uses CAPTCHA on forms to mitigate abuse. However, it lacks publicly available dedicated security policies, incident response contacts, and vulnerability disclosure programs, which are recommended for enterprise-grade security transparency. The absence of WHOIS data for the domain is a notable anomaly, though the website content and business information strongly indicate legitimacy. Overall, the website presents a professional, trustworthy, and secure front for a major financial technology enterprise. Strategic improvements in transparency around security policies and incident response would further enhance trust and compliance posture.

S

Swiss Golf Bubikon

swissgolfbubikon.ch

10

Swiss Golf Bubikon is a well-established golf club and training facility located in Bubikon, Switzerland, serving golf enthusiasts ranging from beginners to active players and corporate clients. The website highlights their key offerings including a golf school, a 9-hole golf course, a driving range equipped with modern Toptracer technology, event hosting services, and club memberships. The business has a strong regional presence and a history dating back to 1989, positioning itself as a quality provider in the hospitality and sports sector within the Zürcher Oberland region. Technically, the website is built on WordPress with Yoast SEO plugin integration, featuring modern web technologies such as HTML5, CSS, JavaScript, and embedded multimedia content including YouTube videos. The site is mobile-optimized and demonstrates good SEO practices, although some improvements in accessibility and security headers could be made. Analytics are implemented via a custom independent analytics plugin, tracking user interactions moderately. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks advanced security headers and a dedicated security policy or incident response information. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Contact information is comprehensive and clearly presented, enhancing business credibility. Overall, the website is professional, trustworthy, and well-suited for its target audience. Strategic recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, publishing a vulnerability disclosure policy, and improving accessibility features to further strengthen the site's security posture and user trust.

S

Supporting Golf

supportinggolf.ch

48

Supporting Golf is a Swiss non-profit organization established in 2019 that financially supports the golf sport ecosystem in Switzerland. It collaborates with Swiss Golf, ASGI, and Migros GolfCard to fund professional tournaments and support Swiss golf professionals. The website is built on WordPress using Elementor and related plugins, providing a multilingual experience in German, French, and Italian. The site is well-designed with good content relevance and user experience but lacks published privacy and cookie policies, which impacts compliance. Security posture is good with HTTPS enabled and no obvious vulnerabilities, but security headers and incident response information are missing. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

S

SOLUTRANS

solutrans.fr

63

SOLUTRANS is a prominent biennial trade fair and exhibition dedicated to industrial and urban vehicles, held in Lyon, France. It serves as a global crossroads for professionals in road and urban transport, showcasing innovations in energy transition, digitalization, and regulatory compliance. The event is organized by Comexposium and supported by key industry partners such as Michelin and Aramco. The website provides comprehensive information about the event, exhibitors, conferences, and practical visitor details, supported by a modern technical infrastructure including Sitecore CMS, Bootstrap, and compliance tools like OneTrust.

M

Mystore.no AS

mystore.no

69

Mystore.no AS is a Norwegian e-commerce and retail platform provider focused on enabling entrepreneurs and businesses to start online stores and physical shops. The company offers comprehensive tools and support to simplify commerce, targeting the Norwegian market. The website is professionally designed, leveraging HubSpot CMS and integrating multiple marketing and analytics technologies such as Google Tag Manager, Microsoft Clarity, Facebook Pixel, and Visual Website Optimizer, indicating a mature digital marketing infrastructure. Security posture is generally good with HTTPS enforced and cookie consent implemented, though explicit security policies and vulnerability disclosures are absent. Overall, the website presents a trustworthy and professional front for its business services.

P

Pädagogische Hochschule Schwyz

phsz.ch

55

Pädagogische Hochschule Schwyz (PH Schwyz) is a Swiss educational institution specializing in teacher training, continuing education, and educational research. The website presents a comprehensive portfolio of bachelor and master programs, preparation courses, and professional development offerings. It serves educators, school leaders, and educational professionals with a strong regional presence and innovative research institutes. The site is well-branded, professionally designed, and provides clear contact and accreditation information, reinforcing its credibility. Technically, the website is built on TYPO3 CMS with modern web technologies including jQuery and Google Tag Manager for analytics. It demonstrates good mobile optimization, accessibility, and SEO practices. Security is robust with HTTPS enforced and appropriate security headers, although explicit security policies and incident response details are not published. Cookie consent mechanisms are in place, supporting GDPR compliance. Overall, the security posture is strong with no evident vulnerabilities or suspicious activity. The domain registration aligns well with the institution's history and location, supporting legitimacy. The website is safe for general audiences, focusing on educational content without any adult or questionable material. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to enhance transparency and trust. Regular audits of third-party scripts and continued adherence to privacy regulations will further strengthen the security and compliance stance.

The website www.jaschwyz.ch is currently inaccessible due to a Cloudflare security challenge page requiring human verification via Turnstile captcha. As a result, no business content, metadata, or contact information is available for analysis. The site appears to be protected by Cloudflare's WAF, which blocks automated access and limits visibility into the site's actual content and services. Without access to the underlying content, it is not possible to assess the company's market position, services, or technical infrastructure in detail. The security posture is difficult to evaluate beyond the presence of Cloudflare protection. Overall, the site is currently in a blocked state, preventing comprehensive analysis.

N

Niedersächsische Lotto-Sport-Stiftung

lotto-sport-stiftung.de

56

The Niedersächsische Lotto-Sport-Stiftung is a regional non-profit foundation focused on promoting sports and the integration of people with migration backgrounds in Lower Saxony, Germany. The website serves as an information and engagement platform, offering news, project details, funding opportunities, and community initiatives. It targets local organizations, sports clubs, and integration stakeholders. The foundation maintains a professional online presence with clear branding and consistent messaging aligned with its mission. Technically, the website employs modern web technologies including Vue.js and Bootstrap, with performance and mobile optimization rated as good. The use of Matomo analytics reflects a privacy-conscious approach to user tracking. However, some technical improvements are possible, such as implementing security headers and a cookie consent mechanism to enhance GDPR compliance. From a security perspective, the site uses HTTPS with a strong SSL configuration and no visible vulnerabilities in the HTML content. The absence of explicit security policies or incident response contacts suggests room for maturity in security governance. Overall, the domain registration data aligns well with the foundation's identity, supporting legitimacy and trustworthiness. The website is safe for general audiences, containing no adult or explicit content. It provides valuable resources and engagement channels for its community. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and adding cookie consent to improve compliance and user trust.

K

KraLos GmbH

kralos.eu

56

KraLos GmbH is a German cybersecurity company specializing in developing automated solutions to detect and defend against digital threats such as phishing, web attacks, and data breaches. The company targets businesses of all sizes, with a focus on medium-sized enterprises and international customers. Their key offerings include WEBOUNCER for web application protection, PHISHING GUARD for email and message threat detection, SHADOWKEY for encrypted communications, and a Web Surface Scanner for vulnerability discovery. The website is professionally designed, leveraging WordPress and Elementor, and includes GDPR-compliant cookie consent mechanisms. Social media presence on LinkedIn and Instagram supports their brand visibility. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, KraLos presents a credible and trustworthy business with a solid technical foundation and good privacy compliance.

H

Hannoversche Sportjugend

hannoversche-sportjugend.de

56

Hannoversche Sportjugend is a local youth sports organization affiliated with SSB Hannover, providing news updates and equipment rental services for sports and community events in the Hannover region. The website is built on WordPress using the Avada theme and WooCommerce plugin, indicating a moderate level of digital maturity. The site content is primarily in German and targets local sports clubs and youth. Technically, the site uses modern web technologies but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and privacy compliance mechanisms. No contact or incident response information is provided, which limits trust and compliance. Overall, the site is functional but would benefit from enhanced security, privacy policies, and clearer contact information to improve credibility and compliance.

S

Stadtsportbund Hannover e.V.

ssb-hannover.de

58

Stadtsportbund Hannover e.V. is a well-established non-profit organization dedicated to supporting and promoting club sports in Hannover, Germany. The organization provides advisory, funding, training, and networking services to over 350 sports clubs and related stakeholders. Their website reflects a professional and comprehensive digital presence with clear navigation, rich content, and a focus on community engagement. The target audience includes sports clubs, coaches, volunteers, and sports enthusiasts in the Hannover region. Technically, the website uses modern web technologies including JavaScript, jQuery, Owl Carousel, and SVG graphics, managed via the AmphiCMS platform. Accessibility features such as font size changers and visual assistance tools are implemented, and the site is mobile-optimized with good SEO practices. The presence of a consent management platform ensures compliance with privacy regulations. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or suspicious content were detected. The WHOIS data is limited but does not raise concerns about legitimacy. Overall, the website demonstrates a strong security posture, good privacy compliance, and high business credibility. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further improve trust and security maturity.