Security Directory

W

Wright & Wright Architects LLP

wrightandwright.co.uk

68

Wright & Wright Architects LLP is a London-based award-winning architectural practice specializing in sustainable, contextual, and innovative design primarily for the culture and education sectors. Their portfolio includes Passivhaus-certified projects and a strong commitment to carbon reduction and energy efficiency. The website reflects a professional and well-established firm with a clear focus on quality and sustainability. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Vimeo video integration, Google Tag Manager, and Typekit fonts. It is well-optimized for performance, mobile responsiveness, and accessibility, providing a seamless user experience. The presence of cookie consent management and privacy policies indicates good digital maturity and compliance with privacy regulations. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a public security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS lookup failed due to querying a subdomain rather than the domain itself, but the website's professionalism and trust indicators suggest legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving accessibility features to further strengthen security posture and user trust.

D

David Chipperfield Architects

davidchipperfield.com

63

David Chipperfield Architects is a well-established international architectural practice founded in 1985, with offices in multiple global cities. The company provides architectural design and related cultural and research services, targeting clients interested in high-quality architectural projects. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content about projects and news. Technically, the site uses modern web standards, is mobile optimized, and employs privacy-focused analytics. Security posture is good with HTTPS and domain protection measures, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with a clear privacy policy, but lacks a cookie consent mechanism. Overall, the website is trustworthy and professionally managed, supporting the company's market position as a leading architectural firm.

A

Allies and Morrison

alliesandmorrison.com

71

Allies and Morrison is a London-based architectural and urbanist practice focused on designing beautiful buildings and shaping enduring places with attention to detail and context uniqueness. The firm serves clients interested in architecture, urban planning, and sustainable development, positioning itself as a reputable medium-sized player in the real estate and design sector. Their website showcases a comprehensive portfolio of projects, research, and talks, reflecting a mature and professional business model. Technically, the website employs modern web technologies including Google Analytics with IP anonymization, Imgix for image delivery, and JavaScript ES6, ensuring fast performance and excellent mobile optimization. The site is well-structured with good SEO and accessibility features, although no CMS or hosting provider details are explicitly identified. From a security perspective, the site uses HTTPS with a good SSL configuration and secure form handling for newsletter subscriptions. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. No vulnerability disclosures or incident response contacts are published, representing an area for improvement. Overall, the website is professional, trustworthy, and safe for general audiences. The absence of WHOIS data is a notable anomaly but does not detract significantly from the site's credibility given the quality of content and contact transparency. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and improving WHOIS transparency to strengthen trust and compliance.

DRMA AS is a Norwegian architecture and planning firm established in 2006, specializing in community-focused architectural design, planning, placemaking, and landscape architecture. The company positions itself as a local expert with a global outlook, demonstrated by participation in international exhibitions and collaborations. Their website showcases multimedia content highlighting their projects and approach, targeting clients interested in innovative and community-driven architectural solutions. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Mapbox GL JS for mapping features. The site is mobile-optimized with good design quality and user experience, though some accessibility and SEO optimizations could be improved. No CMS or hosting provider details were identified. From a security perspective, the site uses HTTPS with good SSL configuration but lacks security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No forms or analytics scripts were detected, indicating minimal data collection and tracking. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, DRMA's website is professional and trustworthy but would benefit from enhanced privacy compliance, security headers, and accessibility improvements to strengthen its security posture and regulatory adherence.

A

Arkitektur- og designhøgskolen i Oslo (AHO)

aho.no

72

Arkitektur- og designhøgskolen i Oslo (AHO) is a leading international scientific college specializing in education and research in architecture, design, and landscape architecture. The institution targets students, researchers, and professionals in these fields, offering a range of study programs and fostering collaboration with industry and public sectors. The website reflects a well-established educational entity with a strong market position in Norway and internationally. Technically, the site is built on the Vortex CMS platform, hosted on infrastructure associated with the University of Oslo, and employs modern web technologies with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are absent. Privacy compliance is well addressed with comprehensive policies and GDPR adherence. Overall, the site is professional, trustworthy, and content-rich, supporting the institution's credibility and reputation.

Transborder Studio is a small architecture practice founded in 2013, specializing in architecture, urbanism, and interior design with a focus on sustainable and cultural projects. The website serves as a portfolio showcasing key projects primarily located in Norway and Venice. The business targets clients interested in green living and cultural spaces, positioning itself as a niche player in the architecture sector. Technically, the website uses modern web standards with HTML5, CSS3, and JavaScript, and images are delivered via the imgix CDN. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, and no contact information or incident response details are provided, which impacts trust and compliance. Overall, the site is professional and functional but could improve in transparency and security best practices.

S

Snøhetta

snohetta.com

58

Snøhetta is a globally recognized transdisciplinary architecture and design firm focused on creating meaningful places that connect societies and the environment. Their website showcases a broad portfolio of projects across architecture, landscape, interior, product, and brand experience disciplines, targeting clients and partners in the design and real estate sectors. The digital infrastructure is modern, leveraging lazy loading, video loops, and a likely Craft CMS backend, hosted on a CDN for performance. Security posture is moderate with HTTPS and CSRF tokens present but lacking explicit security headers and formal privacy or cookie policies. The absence of WHOIS data reduces domain trustworthiness, though the professional content and social media presence support legitimacy. Overall, the site is well-designed and user-friendly but would benefit from enhanced privacy compliance and security transparency.

B

Dein City-Guide & Stadt-Magazin mit Aktivitäten für Basel | BaselLive

basellive.ch

57

BaselLive.ch is a local media platform serving as a city guide and lifestyle magazine for Basel, Switzerland. It provides curated content including event listings, cultural stories, shopping guides, and culinary tips targeting residents and visitors interested in exploring Basel. The platform leverages social media channels and newsletters to engage its audience and promote city activities. Technically, the website uses modern web technologies with JavaScript modules, CSS, and integrates advertising via AdButler and analytics through Plausible and Google Tag Manager. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the site enforces HTTPS and uses asynchronous script loading but lacks explicit security headers and formal privacy or cookie policies. No contact emails or phone numbers are explicitly provided, and no vulnerability disclosure or incident response information is found. Overall, the website is safe, trustworthy, and well-positioned as a local media outlet but would benefit from enhanced privacy compliance and security transparency.

I

IG Rottaler Ernte

erntefest.ch

47

The website erntefest.ch represents the IG Rottaler Ernte, a small regional organization dedicated to organizing the annual Rottaler Erntefest, a cultural and culinary event celebrating the Rottaler region in Switzerland. The site provides information about the event, its history, partners, and sponsors, targeting local audiences interested in regional traditions and products. The business model is community and non-profit focused, emphasizing regional culture and local product promotion. Technically, the website is built with basic HTML, CSS, and JavaScript without a detected CMS or advanced frameworks. It offers moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is minimal with no detected HTTPS enforcement or security headers, and no incident response or vulnerability disclosure information is provided. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism or terms of service. Overall, the site is trustworthy and consistent with its regional cultural mission but would benefit from improved security and privacy practices.

M

Maison de la Tourbière

mdt-ne.ch

60

Maison de la Tourbière is a small Swiss ecotourism establishment focused on scientific, cultural, and hospitality services dedicated to the study, promotion, and protection of peatlands. The website is professionally designed using the Wix platform, providing a good user experience with clear content relevant to its target audience interested in environmental conservation and ecotourism. The technical infrastructure is modern and leverages Wix's Thunderbolt framework, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though explicit security headers and privacy policies are missing, representing areas for improvement. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

E

EnergieSchweiz

local-energy.swiss

66

The website local-energy.swiss represents EnergieSchweiz, a Swiss federal government program aimed at promoting energy efficiency and renewable energy through voluntary measures targeted at cities, municipalities, and regions. The site provides information on various programs such as project funding, energy regions, smart city initiatives, and mobility solutions. The content is professionally presented, consistent with Swiss government branding, and designed to serve a public sector audience. Technically, the website employs modern web standards with responsive design and uses MailerLite for email marketing. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and privacy compliance mechanisms such as cookie consent and privacy policies. WHOIS data is privacy protected, which is typical for government-related domains, and the domain appears legitimate and consistent with its stated purpose. Overall, the site is trustworthy and serves as an authoritative resource for energy-related programs in Switzerland.

B

Bundesamt für Umwelt BAFU

onlinetool-klimaanpassung.ch

65

The website www.onlinetool-klimaanpassung.ch is an official Swiss government platform operated by the Bundesamt für Umwelt (BAFU) under the Eidgenössisches Departement für Umwelt, Verkehr, Energie und Kommunikation (UVEK). It provides an online tool aimed at Swiss municipalities to help them understand and adapt to local climate change risks. The platform offers localized hazard information and practical measures based on experiences from comparable communities, positioning itself as a trusted resource for public sector climate adaptation efforts. Technically, the site is built using modern web technologies including Angular 17.3.8 and Kendo UI components, ensuring a contemporary user experience. The site is multilingual (German, French, Italian) and includes video content to engage users. While the site is moderately optimized for performance and mobile use, there is room for improvement in accessibility and SEO. No major technical issues or vulnerabilities were detected in the provided HTML content. From a security perspective, the site uses HTTPS and employs some best practices such as disabling video downloads. However, explicit security headers are not visible in the HTML content, and no vulnerability disclosure or incident response information is provided. Privacy compliance is partially addressed with a privacy and contact page, but no cookie consent mechanism is evident. Overall, the security posture is adequate but could be enhanced with additional headers and transparency. The overall risk assessment is low given the official nature of the site, absence of suspicious content, and consistent WHOIS data confirming legitimacy. Strategic recommendations include implementing security headers, adding cookie consent, improving accessibility, and publishing a vulnerability disclosure policy to strengthen trust and compliance.

D

Das Gebäudeprogramm

dasgebaeudeprogramm.ch

68

Das Gebäudeprogramm is a Swiss government-supported initiative focused on promoting energy efficiency in buildings through subsidies and consulting. The website serves as an information hub for private homeowners and builders in Switzerland, providing detailed guidance on energy-saving measures, subsidy applications, and success stories. The program is positioned as a key pillar in Swiss energy and climate policy, backed by federal and cantonal authorities. Technically, the website employs modern web standards with HTTPS, security headers, and Matomo analytics, reflecting a mature digital infrastructure. The security posture is strong with no evident vulnerabilities, though privacy compliance could be enhanced by adding cookie consent mechanisms and explicit data retention policies. Overall, the site is professional, trustworthy, and well-aligned with its governmental mission.

station.plus is an online TV station dedicated to communicating architecture as a discipline that impacts society and everyday life. The platform uses video content to explore architectural themes beyond traditional plans and models, emphasizing societal and political implications. The website presents a rich catalog of documentary series and thematic content aimed at a broad audience interested in architecture and its broader context. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and embeds YouTube videos for content delivery. The site is mobile optimized with good navigation and content relevance. However, there is a lack of visible privacy, cookie, or terms of service policies, and no contact or business registration information is provided, which impacts trust and compliance. Security headers and explicit security policies are not detected, suggesting room for improvement in security posture. WHOIS data is not publicly available due to privacy protections, which is common for media platforms but reduces transparency. Overall, the site is professional and content-rich but would benefit from enhanced privacy, security, and contact transparency.

A

ARCH+ Verlag GmbH

archplus.net

57

ARCH+ Verlag GmbH operates a well-established German architecture and urbanism magazine with a strong digital presence. The website serves as a platform for magazine sales, event promotion, and architectural discourse, targeting professionals, students, and enthusiasts in the architecture sector. The business model centers on publishing quarterly issues in print and digital formats, supplemented by events and advertising. The company holds a leading position in its niche market in Germany with international outreach through English content and social media engagement. Technically, the website employs modern web standards, including HTML5, CSS3, and JavaScript, with embedded video content and Google Tag Manager for analytics and marketing. The site is hosted on Namespace4You infrastructure and shows moderate performance with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though improvements are recommended such as enabling DNSSEC and adding security headers. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and aligns well with the company's business objectives.

N

New Generations

newgenerationsweb.com

36

New Generations is a European media and cultural platform focused on emerging architectural practices since 2013. It provides a space for knowledge exchange, events, publications, and networking for architects across Europe. The website is built on SilverStripe CMS, uses modern web technologies including Bootstrap and jQuery, and integrates Google Analytics and reCAPTCHA for user interaction and spam protection. The security posture is moderate with HTTPS enabled and reCAPTCHA implemented, but lacks some security headers and DNSSEC. Privacy and cookie policies are absent, which impacts compliance. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

R

Reka

reka.ch

70

Reka operates as a Swiss-based company specializing in family-friendly holiday and leisure services, primarily through its Reka-Card discount payment system and holiday offerings in Switzerland and Europe. The website reflects a professional and consistent brand presence targeting families and leisure travelers. Technically, the site employs modern web standards including HTML5, CSS3, and Bootstrap grid, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks visible security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance and security transparency are recommended to enhance trust and compliance.

Davos Klosters is a prominent tourism organization promoting holidays and outdoor activities in the Swiss Alps, specifically in the Graubünden region. The website offers comprehensive information and booking options for skiing, hiking, biking, and cultural events, targeting tourists seeking alpine experiences. The company holds a strong market position as a leading alpine destination with a professional online presence and integrated e-commerce capabilities. Technically, the site is built on modern frameworks like Nuxt.js and Vue.js, ensuring fast performance, mobile optimization, and good SEO practices. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although dedicated security and incident response policies are not explicitly found on the site. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, professional, and well-aligned with its business goals.

A

Avacon AG

avacon-shop.de

66

Avacon AG operates the Avacon Shop, an e-commerce platform specializing in energy-related products and services including electromobility, photovoltaic systems, energy storage, and electrical installations. The website targets consumers and businesses in Germany seeking comprehensive energy solutions. The platform is built on the Shopware CMS and hosted by Hetzner, leveraging modern web technologies and marketing tools such as Google Tag Manager and Facebook Pixel. The site features a professional design with good navigation and mobile optimization, supporting customer account management and product browsing. Security posture is adequate with HTTPS and secure forms, though lacks explicit security headers and published privacy or cookie policies. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate business presence.

The Federal Ministry of Food and Agriculture (BMLEH) operates an official government website providing comprehensive information on topics such as food and nutrition, consumer protection, farming, animal welfare, rural regions, forests, fisheries, international affairs, and digitalisation. The site targets the general public, stakeholders in agriculture and food sectors, and international partners, serving as a key communication and service platform for the ministry. The website is well-structured, professionally designed, and consistent with government branding standards. Technically, the website is built on the Government Site Builder CMS platform, utilizing modern web standards including HTML5, CSS3, and SVG graphics. It incorporates Matomo analytics for anonymous visitor statistics and implements a granular cookie consent mechanism compliant with GDPR. Mobile optimization and accessibility features are well addressed, ensuring a good user experience across devices. From a security perspective, the site enforces HTTPS with excellent SSL configuration and includes standard security headers such as Content-Security-Policy and Strict-Transport-Security. The cookie consent banner clearly distinguishes necessary cookies from optional tracking and third-party content cookies. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, representing areas for improvement. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. The domain appears legitimate and consistent with official government use. No WAF or content blocking was detected, allowing full content accessibility. Strategic recommendations include publishing detailed security policies, providing incident response contact channels, and establishing a vulnerability disclosure process to enhance security posture and transparency.

W

Worldsoft AG

worldsoft.info

68

Worldsoft AG is a well-established Swiss technology company specializing in comprehensive web project solutions including domain registration, website building, email marketing, online shops, CRM, and hosting services. With over 25 years of experience, they serve a broad business audience across Europe, positioning themselves as a reliable and professional provider. Their website reflects a mature digital presence with clear branding, extensive product offerings, and strong customer trust indicators such as high Google review ratings and multiple certifications. Technically, the website employs modern web technologies including progressive web app capabilities, custom CMS, and third-party widgets for enhanced user engagement. The site is well-optimized for mobile devices, fast loading, and SEO-friendly. However, some security best practices like explicit security headers and published incident response policies could be improved. From a security perspective, the site uses HTTPS and shows no obvious vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Contact information is transparent and professional, supporting business credibility. Overall, the website and business demonstrate a strong security posture and digital maturity, though there is room for improvement in formalizing security policies and enhancing transparency around vulnerability disclosures. The domain WHOIS data is privacy protected, which is typical for this business type and does not raise immediate concerns. Strategic recommendations include implementing security headers, publishing incident response and vulnerability disclosure information, and maintaining ongoing security audits to sustain trust and compliance.

K

Kniv-Web GmbH

kniv-web.ch

65

Kniv-Web GmbH is a Swiss-based digital agency specializing in web design, e-commerce solutions, SEO, and online marketing services. With over 25 years of experience, the company targets small and medium-sized businesses primarily in the March and Höfe districts of Switzerland. Their service offerings include professional website development, progressive web apps, online shops, branding, and video production, positioning them as a comprehensive digital partner for local businesses. Technically, the website leverages modern web technologies including PWA capabilities, Google Fonts, and integrates with analytics and cookie consent management tools. Hosting is provided by a Swiss company, Worldsoft AG, ensuring local infrastructure alignment. The site is mobile-optimized, SEO-friendly, and demonstrates good performance and accessibility standards. From a security perspective, the site enforces HTTPS and employs a robust cookie consent mechanism compliant with GDPR. However, explicit security policies and incident response contacts are not publicly disclosed, representing an area for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional, trustworthy, and compliant digital presence with strong business credibility. Strategic enhancements in security transparency and formal incident response processes would further strengthen their security posture and client trust.

W

Worldsoft AG

worldsoft.ch

68

Worldsoft AG is a well-established Swiss technology company specializing in comprehensive web project solutions including domain registration, website building, email marketing, online shops, CRM, and hosting services. With over 25 years of experience, the company targets businesses and professionals seeking integrated digital tools to enhance their online presence. Their market position is strengthened by strong customer satisfaction, certifications, and a broad product portfolio. Technically, the website demonstrates a modern and performant infrastructure using proprietary CMS technology, progressive web app features, and integration with third-party widgets for enhanced user engagement. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a published security policy or incident response contacts, which are recommended for further strengthening the security posture. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. Overall, the risk assessment is low with no indications of malicious activity or content safety concerns. Strategic recommendations include implementing security headers, publishing a vulnerability disclosure policy, and enhancing transparency around incident response to further build trust and resilience.

L

Landeshauptstadt Hannover

herrenhausen.de

52

The website 'Herrenhäuser Gärten - Hannover.de' serves as the official online presence for the Herrenhäuser Gardens and the Museum Schloss Herrenhausen, operated by the Landeshauptstadt Hannover (City of Hannover). It provides comprehensive visitor information, event details, group tours, and ticketing services, targeting tourists, families, and cultural enthusiasts. The site is well-positioned as a leading cultural and botanical attraction in Hannover, supported by consistent branding and professional content. Technically, the website employs modern web standards including HTML5, CSS3, SVG graphics, and JavaScript, with Matomo analytics for user tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The CMS appears custom or proprietary, typical for government sites. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. No vulnerabilities or exposed sensitive data were detected. However, the site lacks a visible cookie consent mechanism and dedicated security or incident response policies, which are recommended for enhanced GDPR compliance and transparency. Overall, the website is trustworthy, professionally maintained, and provides a safe user experience. Strategic improvements in privacy consent and security transparency would further strengthen its compliance and user trust.

Z

zinnobergruen gmbh

bestarchitects.de

50

The website bestarchitects.de represents the 'best architects award', a prestigious European architecture award recognizing outstanding architectural achievements. The site serves architects, industry professionals, and enthusiasts by providing award results, news, and a bookshop for related publications. The business model centers on award organization and publication sales, positioning itself as a recognized authority in the European architecture sector. Technically, the site is built on depage CMS with modern web standards, includes responsive design, and uses Google Analytics for visitor insights. Security posture is solid with HTTPS, CSRF protection on forms, and cookie consent mechanisms, though it lacks explicit security headers and published security policies. Overall, the site is professional, trustworthy, and compliant with GDPR, but could improve transparency on security and incident response. No blocking or WAF interference was detected, allowing full content access and analysis.

Truwant + Rodet + is a small architecture and design studio based in Basel, Switzerland, specializing in innovative architectural projects, competitions, research studios, and exhibitions. Their portfolio includes a variety of projects primarily in Switzerland with some international collaborations, emphasizing adaptive reuse, artistic installations, and academic design studios. The website reflects a professional and artistic brand image targeting architecture professionals, clients, and academic institutions. Technically, the website employs modern JavaScript frameworks such as Alpine.js and GSAP, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies. The presence of Google Analytics without a configured tracking ID and absence of privacy compliance mechanisms indicate areas for improvement. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security practices.

8

820

820.ch

56

820 is a Zurich-based architecture studio specializing in innovative designs that integrate technology and environmental considerations. Led by Nicolas König and Lewis Horkulak, the studio emphasizes techno-environmental synergies and speculative spatial scenarios to foster deeper environmental integration. Their portfolio showcases a range of projects, competitions, and installations, highlighting a strong presence in the architectural design community with multiple awards and exhibitions. Technically, the website is built on the Cargo Collective platform, utilizing modern web standards including HTML5, CSS3, and JavaScript. The site is well-optimized for mobile devices and presents a professional, visually rich portfolio. However, there is room for improvement in accessibility and SEO practices. From a security perspective, the site uses HTTPS and does not expose sensitive data or forms, reducing attack surface. Nonetheless, it lacks important security headers and does not provide explicit security policies or incident response contacts, which could be enhanced to improve trust and compliance. Overall, the website reflects a credible and professional architecture studio with a strong digital presence but would benefit from enhanced privacy, security, and compliance disclosures to align with best practices and regulatory requirements.

D

dorsa

dorsa.cc

55

Dorsa is a small, collaborative architecture practice based in Zurich, Switzerland, specializing in innovative architectural design, research, and installations. The website showcases a comprehensive portfolio of projects, academic collaborations, and exhibitions, positioning the collective as a niche player in the architecture and real estate sectors. The technical infrastructure is modern, leveraging Cargo CMS and standard web technologies, with good mobile optimization and moderate performance. Security posture is strong with HTTPS and security headers implemented, though privacy and cookie policies are absent, indicating compliance gaps. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and incident response transparency.

F

Felix Hampe, Pilzkurse und Kartierung

pilz-wissen.de

57

Felix Hampe operates a specialized educational and consulting business focused on mycology, offering mushroom courses, guided walks, consulting, and mapping services primarily in Hessen, Germany. The website presents a clear market position as a niche expert serving mushroom enthusiasts and nature lovers. The business model centers on direct service provision through seminars and personalized courses. Technically, the website is built on a modern stack with a CMS named MyWebsite, featuring responsive design and good SEO practices. Privacy compliance is well addressed with a GDPR-compliant privacy policy and cookie consent mechanisms. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers are absent and could be improved. Overall, the website is professional, trustworthy, and safe for general audiences.

O

ostseepilze.de

ostseepilze.de

47

The website ostseepilze.de is currently inaccessible, returning a 403 Forbidden error with a generic Jimdo error page. The site appears to be hosted on the Jimdo platform, a DIY website builder service, but contains no business-specific content, contact information, or policies. The lack of accessible content and security features severely limits the ability to assess the business or security posture. Technically, the site uses Jimdo's hosting and CSS assets but lacks HTTPS confirmation and security headers. No analytics or tracking scripts are present, indicating minimal digital maturity. The security posture is weak due to the absence of HTTPS and security best practices. Overall, the site appears to be inactive or under construction, resulting in a low trust and credibility score.

R

Roger Lehner

rogerlehner.com

47

Roger Lehner operates a small, specialized design studio based in Germany, focusing on ambitious projects that emphasize collaboration, creativity, and accessibility. The website showcases a professional portfolio with services including branding, digital and print design, and inclusive design practices. The business targets clients seeking high-quality, dynamic visual communication solutions. Technically, the website employs modern JavaScript libraries such as Swup and Swiper for enhanced user experience and uses Umami Analytics for minimal user tracking. Hosting is provided by hosttech.de, a German hosting provider, aligning with the business location. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and does not implement cookie consent mechanisms, which are areas for improvement. Overall, the website is professional, trustworthy, and well-designed but could enhance compliance and security practices.

A

Amadeu Antonio Stiftung

swipeaway.de

50

SwipeAway is an educational self-learning tool designed to raise awareness about recognizing hostile narratives on social media platforms and to promote digital civil courage. The project is operated by the Amadeu Antonio Stiftung, a reputable non-profit foundation in Germany, and is supported by Stiftung Mercator. The website targets a general audience interested in social media literacy and digital rights education. The business model is non-commercial, focusing on social impact and education. Technically, the website is built using modern web technologies including Nuxt.js, JavaScript, HTML5, and CSS3. It is hosted on servers associated with agenturserver, with good mobile optimization and moderate performance. The site uses HTTPS with an excellent SSL configuration but lacks some security headers that could enhance protection. The site employs minimal user tracking via the privacy-conscious Umami analytics platform. From a security perspective, the website demonstrates a solid baseline with HTTPS enabled and no exposed sensitive data. However, it lacks security headers and a cookie consent mechanism, which are important for GDPR compliance and security best practices. No incident response or security policy information is provided, and no contact information is readily available on the main page, which could impact user trust and compliance. Overall, the website is professional, trustworthy, and focused on educational content without any adult or questionable material. The domain registration data aligns well with the website's stated purpose and parent organization, indicating legitimacy. Strategic recommendations include implementing security headers, adding a cookie consent mechanism, publishing security and incident response policies, and providing clear contact information to enhance trust and compliance.

K

kollygujer

kollygujer.ch

48

kollygujer.ch is a website representing a small creative studio or agency based in Switzerland, focusing on showcasing creative work, offering a shop, and sharing content such as gossip and about pages. The business model appears to be service-oriented with an e-commerce component. The website uses basic web technologies including HTML, CSS, JavaScript, and the p5.js library for interactive graphics. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is minimal with no detected security headers or privacy policies, and no evidence of HTTPS was found in the provided data. Contact information is limited to a single email address and an Instagram social media link. The domain WHOIS is privacy protected, which is common and justified for small creative businesses. Overall, the website is functional but basic in design and security.

E

Eisen Optikergeschäft AG

eisen-optiker.ch

49

Eisen Optikergeschäft AG is a small retail optical business based in Winterthur, Switzerland, specializing in eyewear, contact lenses, and related optical services. The website serves as an informational and promotional platform showcasing their products, team, and services, targeting local customers seeking quality optical solutions. The company maintains a consistent brand presence with clear contact details and social media engagement on Instagram and Facebook. Technically, the site is built on the Zeta Producer CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript with jQuery and FlexSlider for UI components. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS but lacks several security headers and explicit security policies, indicating room for improvement in security posture and GDPR compliance. No cookie consent mechanism is present, and privacy policy coverage is basic. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

S

Sparkasse Hannover

sparkasse-hannover.de

68

Sparkasse Hannover is a prominent regional bank serving Hannover and its surrounding region, offering a broad spectrum of financial services including online banking, investment products, insurance, real estate financing, and personalized advisory services. The website reflects a mature digital presence with comprehensive content tailored to private, corporate, and young customers. The bank holds recognized certifications and awards, underscoring its market leadership and customer service excellence. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and providing a responsive, accessible user experience. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be better documented. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.

D

DOSB New Media GmbH

sportdeutschland.tv

60

Sport Europe, operated by DOSB New Media GmbH, is a German-based media platform specializing in streaming and broadcasting European sports content. The website targets sports fans primarily in Europe, offering live and on-demand sports media services. The business is relatively young, founded in 2018, and operates with a medium-sized organizational footprint. The domain registration details align well with the company's German origin and media focus, indicating legitimacy and consistency in business operations. Technically, the website employs modern web technologies including HTML5, CSS3, Bootstrap framework, and Font Awesome icons, ensuring a responsive and visually appealing user experience. Hosting is provided by IONOS SE, a reputable provider. Performance is moderate with good mobile optimization, though accessibility features are basic. SEO optimization is present but could be improved with more comprehensive metadata and structured data. From a security perspective, the site uses HTTPS but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. No privacy or cookie policies were detected, which is a compliance gap especially under GDPR regulations. No contact information or incident response details were found, limiting transparency and user trust. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website presents a professional and functional sports media platform with room for improvement in privacy compliance and security hardening. Strategic enhancements in these areas would improve trustworthiness and regulatory adherence.

The website lsb-nds.net serves as the official portal for the LandesSportBund Niedersachsen, a regional sports association in Germany. It primarily facilitates members in applying for funding and accessing educational and administrative services related to sports. The site targets members of the LandesSportBund Niedersachsen and operates as a non-profit government-related entity. The business model focuses on providing digital access to sports-related funding and educational resources within the Niedersachsen region. Technically, the website employs basic web technologies including HTML5, CSS, and JavaScript, with a custom MD5-based challenge-response login mechanism. The infrastructure is moderate in performance and mobile optimization, with hosting linked to InterNetX GmbH and DNS servers under htp-tel.de. However, the site lacks modern security enhancements such as DNSSEC and security headers, and uses outdated cryptographic methods for authentication. From a security perspective, while the domain registration is consistent and legitimate, the use of MD5 hashing and absence of DNSSEC and security headers present vulnerabilities. No explicit privacy or cookie consent mechanisms are implemented, though a privacy policy is linked externally. The site is accessible without WAF or blocking mechanisms, but improvements in security posture and privacy compliance are recommended. Overall, the website is functional and serves its intended audience but would benefit from modernization of security practices, enhanced privacy compliance, and improved technical implementation to strengthen trust and resilience against threats.

A

active elements GmbH

active-elements.de

57

active elements GmbH is a well-established German agency specializing in web design, print design, SEO, and digital marketing services. With nearly two decades of experience, the company serves businesses and organizations seeking comprehensive digital and print marketing solutions. Their offerings include modern web development using TYPO3 and WordPress, creative print projects, SEO optimization, Google AdWords campaign management, and client training through e-learning and on-site sessions. The company emphasizes personalized service and full support, positioning itself as a trusted partner in the regional market around Hannover and Garbsen. Technically, the website is built on a modern stack including HTML5, CSS3, JavaScript, Bootstrap, and CMS platforms TYPO3 and WordPress. Hosting is provided by Hetzner, a reputable German hosting provider, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with privacy-conscious analytics via Matomo. Cookie consent and GDPR-compliant privacy policies are implemented, reflecting a mature digital presence. From a security perspective, the site uses HTTPS with strong SSL configuration and secure form handling. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which are recommended for enhanced protection. No vulnerabilities or suspicious elements were detected in the content or scripts. Overall, active elements GmbH presents a professional, trustworthy, and technically sound online presence. The company demonstrates good compliance with privacy regulations and offers a comprehensive suite of services for digital and print marketing. Strategic improvements in security transparency and incident response readiness would further strengthen their security posture.

S

Sportschule Dürnten

sportschulebubikon.ch

58

Sportschule Dürnten is a specialized private educational institution in Switzerland focused on integrating academic education with professional sports training for youth and young athletes. The school offers tailored programs in tennis, polysport, golf, and equestrian disciplines, emphasizing a family-friendly, stress-free environment that supports both school success and athletic development. It also provides mental training, career orientation, and preparation for sports gymnasium admission and US sports scholarships. The institution maintains partnerships with local sports clubs, therapy providers, and fitness centers to enhance its offerings. Technically, the website is built with standard HTML and CSS, presenting well-structured, content-rich pages with good design quality and navigation clarity. However, it lacks advanced technical features such as CMS usage, modern frameworks, or analytics tools. Mobile optimization and accessibility are basic but functional. Security measures are minimal, with no visible security headers or privacy and cookie policies, indicating areas for improvement in compliance and protection. From a security perspective, the site uses HTTPS (assumed but not explicitly confirmed), but lacks essential security headers and incident response contacts. No forms or user data collection mechanisms are present, reducing immediate risk exposure. The absence of privacy and cookie policies suggests non-compliance with GDPR and related regulations, which should be addressed promptly. Overall, the website is professional and trustworthy, serving a niche educational market with clear business credibility. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, and adding incident response information to improve compliance and security posture.

J

Jensen + Heitz

jensenheitz.com

57

Jensen + Heitz is a creative media production company based in Switzerland, specializing in motion graphics and video content. Their website showcases various projects and collaborations with notable brands, indicating a niche presence in the creative media industry. The site is professionally designed using the Squarespace platform, offering good mobile responsiveness and a visually appealing user experience. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the active and professional website presence. Security measures such as HTTPS and HSTS are properly implemented, but additional security headers and privacy compliance measures are lacking. Contact information is minimal, limited to an email address and Instagram profile, with no phone or physical address provided. Overall, the website demonstrates a moderate level of digital maturity and security posture but requires improvements in privacy compliance and domain registration transparency.

L

Laurids Jensen Photographer

lauridsjensen.com

48

Laurids Jensen operates a professional photography portfolio website showcasing editorial, commissioned, and moving image works. The business is positioned as a niche creative service provider in the media industry, targeting clients and collaborators in the art and editorial sectors. The website content is well-structured and visually oriented to highlight the photographer's work, with a consistent branding approach and good user experience. Technically, the website is built using standard web technologies including HTML5, CSS, JavaScript, and jQuery, hosted by cyon.ch. It employs Google Analytics and Google Tag Manager for visitor tracking but lacks advanced CMS or frameworks. The site is mobile optimized with moderate performance and basic accessibility features. However, there is room for improvement in SEO and technical modernization. From a security perspective, the site uses HTTPS and has domain transfer protections enabled but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, and no incident response contacts are provided, indicating gaps in compliance and security readiness. The use of tracking scripts without visible consent mechanisms also raises privacy concerns. Overall, the website is a legitimate, small-scale professional portfolio with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and incident response readiness would enhance trust and reduce risk.

R

Rocket Ruby

rocketruby.ch

51

Rocket Ruby is a small, established visual communication studio based in Basel and Luzern, Switzerland, operating since 2011. The company specializes in comprehensive design solutions including corporate design, web development, infographics, and book design, targeting businesses and organizations seeking professional visual communication services. The website reflects a consistent and professional brand image with a portfolio of diverse projects demonstrating their expertise. Technically, the site is built on WordPress, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is provided via email and physical address, but no phone or social media links are available. Overall, the website is trustworthy and professional, with room for improvement in security and privacy transparency.

S

Swiss Golf Bubikon

swissgolfbubikon.ch

10

Swiss Golf Bubikon is a well-established golf club and training facility located in Bubikon, Switzerland, serving golf enthusiasts ranging from beginners to active players and corporate clients. The website highlights their key offerings including a golf school, a 9-hole golf course, a driving range equipped with modern Toptracer technology, event hosting services, and club memberships. The business has a strong regional presence and a history dating back to 1989, positioning itself as a quality provider in the hospitality and sports sector within the Zürcher Oberland region. Technically, the website is built on WordPress with Yoast SEO plugin integration, featuring modern web technologies such as HTML5, CSS, JavaScript, and embedded multimedia content including YouTube videos. The site is mobile-optimized and demonstrates good SEO practices, although some improvements in accessibility and security headers could be made. Analytics are implemented via a custom independent analytics plugin, tracking user interactions moderately. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks advanced security headers and a dedicated security policy or incident response information. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Contact information is comprehensive and clearly presented, enhancing business credibility. Overall, the website is professional, trustworthy, and well-suited for its target audience. Strategic recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, publishing a vulnerability disclosure policy, and improving accessibility features to further strengthen the site's security posture and user trust.

H

Hannoversche Sportjugend

hannoversche-sportjugend.de

56

Hannoversche Sportjugend is a local youth sports organization affiliated with SSB Hannover, providing news updates and equipment rental services for sports and community events in the Hannover region. The website is built on WordPress using the Avada theme and WooCommerce plugin, indicating a moderate level of digital maturity. The site content is primarily in German and targets local sports clubs and youth. Technically, the site uses modern web technologies but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and privacy compliance mechanisms. No contact or incident response information is provided, which limits trust and compliance. Overall, the site is functional but would benefit from enhanced security, privacy policies, and clearer contact information to improve credibility and compliance.

W

Wissenschaftsrat

wissenschaftsrat.de

58

The Wissenschaftsrat website represents a German government advisory council focused on science, research, and higher education policy. It provides expert recommendations, evaluations, and accreditation services to universities and research institutions. The site targets academics, policymakers, and the public with comprehensive, well-structured content in German. The business model is non-profit and advisory, positioning the Wissenschaftsrat as a leading authority in its sector within Germany. Technically, the website is built on the Tremonia DXP CMS platform, using modern web technologies including HTML5, CSS3, JavaScript, and Matomo for analytics. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting appears to be via EPAG DNS services, indicating a professional infrastructure. Security posture is strong with HTTPS enforced and cookie consent implemented. However, the site lacks visible security headers and a published security policy or vulnerability disclosure mechanism. No exposed sensitive data or vulnerabilities were detected. Privacy compliance is good, with a comprehensive privacy policy and cookie banner aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-maintained, with no signs of malicious content or security risks. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure channel to further strengthen trust and compliance.

P

Promotionsverband BW

promotionsverband-bw.de

60

The Promotionsverband BW website represents an academic consortium focused on managing doctoral promotion rights for applied sciences universities in Baden-Württemberg, Germany. The site provides information about the organization’s role in supervising doctoral projects through its 24 member institutions. The business model is non-profit and education-oriented, targeting academic professionals and institutions. The website is built on the Wix platform, leveraging Wix Thunderbolt framework and standard web technologies. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in transparency and security practices.

R

Rasso Hilber

rassohilber.com

41

Rasso Hilber is a creative web developer based in Germany specializing in building original and accessible websites, primarily for artistic and cultural clients. The website serves as a professional portfolio showcasing a variety of projects developed using WordPress and Kirby CMS, often in collaboration with design partners. The business operates as a small entity with a niche focus on creative web development services. Technically, the website employs modern web technologies including HTTPS, jQuery, and video embedding, with good mobile optimization and SEO practices. However, there is room for improvement in accessibility and security headers implementation. Security posture is solid with HTTPS and domain transfer protection, but lacks DNSSEC and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional, trustworthy, and well-maintained, with a domain registration consistent with the business history.

D

dailypoint™

dailypoint.com

62

dailypoint™ is a specialized technology company offering advanced CRM and loyalty solutions tailored for the hospitality industry, particularly hotels and hotel groups. Their platform centralizes guest data from multiple sources, leveraging AI and data cleansing to provide actionable guest insights and personalized marketing capabilities. The company positions itself as a leading #abovePMS solution provider, emphasizing enhanced guest experience and operational efficiency. Technically, the website employs modern JavaScript frameworks, integrates Google Tag Manager for analytics, and uses a GDPR-compliant cookie consent mechanism. The site is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content. Security-wise, the site enforces HTTPS and uses cookie consent but lacks explicit security headers and published security policies. The absence of WHOIS domain registration data is a notable concern, though the website's professional presence and trust signals mitigate some risk. Overall, the site demonstrates a mature digital infrastructure with room for improvement in security transparency and domain legitimacy verification.

G

· Get a Newsletter

gansub.com

52

The website gansub.com is a minimal newsletter subscription landing page branded as 'gansubscribe'. It is powered by the third-party platform getanewsletter.com, indicating a lightweight business model focused on newsletter distribution. The domain is well-established since 2014 and registered with a reputable registrar, but the site itself lacks substantive content, contact information, and compliance documentation. Technically, the site uses basic HTML and CSS with no detected advanced frameworks or CMS. Security posture is weak due to absence of security headers and no visible HTTPS confirmation in the provided data. Privacy and cookie policies are missing, which may expose the business to compliance risks. Overall, the site appears to be a small-scale service with limited digital maturity and minimal security controls.

D

DESIGNGUT

designgut.ch

47

DESIGNGUT is a Swiss-based platform organizing an annual design exhibition focused on sustainable products including fashion, accessories, jewelry, ceramics, and furniture. It serves as a marketplace and showcase for approximately 80 sustainable Swiss designers, positioning itself as a niche leader in sustainable Swiss design exhibitions. The website content is rich and well-structured, targeting consumers interested in sustainable and Swiss-made design products. Technically, the website uses standard web technologies such as HTML5, CSS3, jQuery, and Fancybox, with a custom CMS inferred from URL patterns. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Social media presence is strong, with multiple Facebook and Instagram links for exhibitors and the event itself. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security measures.