Security Directory

I

INFINITI Abu Dhabi

infiniti-abudhabi.com

63

INFINITI Abu Dhabi operates as an official luxury automotive dealership specializing in new and pre-owned SUVs and crossovers under the INFINITI brand. The website targets luxury vehicle buyers in Abu Dhabi and the UAE, offering premium design, performance, and innovation in their vehicle lineup. The business appears to be a medium-sized entity aligned with Nissan Motor Company, leveraging strong brand recognition in the automotive sector. Technically, the website employs modern tracking and analytics tools such as Google Tag Manager and Adobe Experience Platform, with a professional design optimized for mobile devices and good SEO practices. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate gaps in transparency and compliance. Security posture is moderate but could be improved by implementing standard security headers and explicit security policies. Overall, the website is functional and professional but requires enhancements in privacy, security, and domain registration transparency to strengthen trust and compliance.

M

MJB International Limited LLC

mjbi.com

60

MJB International Limited LLC operates a professional website focused on providing comprehensive services for industrial gas turbines, primarily those designed by GE. The company positions itself as a leading independent service provider with decades of OEM experience, offering a wide range of services including parts supply, component repair, field support, training, and contractual services. The website reflects a mature business with consistent branding and a clear target audience in the energy sector. Technically, the site is built on WordPress using modern plugins such as WPBakery Page Builder and Slider Revolution, supported by Cloudflare for DNS and CDN services. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. Analytics are implemented via Google Analytics and Tag Manager, indicating moderate user tracking. From a security perspective, the site uses HTTPS and Cloudflare DNS but lacks DNSSEC and some advanced security headers. There is no visible security policy or incident response information, and no cookie consent mechanism is present, which may impact GDPR compliance. The WHOIS data is consistent with the business claims, showing a domain age of over 20 years, supporting legitimacy. Overall, the website is professional and trustworthy but could benefit from enhanced privacy compliance and security transparency to improve user trust and regulatory adherence.

Z

Zentrum HOLZ

zentrum-holz.de

47

Zentrum HOLZ is a regional platform and economic development center based in Olsberg, Germany, focused on supporting companies in the forestry and wood sectors. It offers knowledge transfer, expert consulting on wood construction and heating, and job listings within the wood industry. The website positions itself as a key regional player in NRW, providing services and networking opportunities for industry stakeholders. The business model revolves around fostering economic growth and innovation in the wood sector through collaboration and information dissemination. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. Performance optimizations such as WP Rocket and lazy loading are implemented, contributing to fast load times and good mobile responsiveness. The site uses Borlabs Cookie for GDPR-compliant cookie consent management and integrates Google Tag Manager for analytics. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security policy pages and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and cookie management. However, improvements could be made by adding security headers and publishing vulnerability disclosure information. Overall, Zentrum HOLZ presents a professional and trustworthy online presence with a clear focus on its niche market. The site is well-structured, content-rich, and compliant with privacy regulations, making it a reliable resource for its target audience.

F

Fachagentur Nachwachsende Rohstoffe e. V. (FNR)

kiwuh.de

43

The website www.kiwuh.de serves as the Kompetenz- und Informationszentrum Wald und Holz, operated by the Fachagentur Nachwachsende Rohstoffe e. V. (FNR), a German non-profit agency. It provides comprehensive information, research support, and project funding related to sustainable forestry, wood utilization, and climate protection. The site targets forestry professionals, researchers, policymakers, and the general public interested in forest and wood topics. It holds an important position as a governmental/non-profit information hub in Germany's forestry sector. Technically, the website is built on TYPO3 CMS with modern frontend technologies including jQuery, Slick Carousel, and Lightbox2. It uses Matomo for privacy-respecting analytics. The site is mobile-optimized, accessible, and SEO-friendly, hosted likely by agenturserver. Performance is moderate with good user experience and professional design. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and does not publish explicit security or incident response policies. GDPR compliance is partially met with a privacy policy present but no cookie consent mechanism detected. The WHOIS data is minimal but consistent with professional hosting, and no suspicious patterns are found. Overall, the website is trustworthy, professional, and well-maintained, with minor recommendations to enhance security posture and privacy compliance for improved user trust and regulatory adherence.

F

Fachagentur Nachwachsende Rohstoffe e. V. (FNR)

fnr.de

11

Fachagentur Nachwachsende Rohstoffe e. V. (FNR) is a German government-affiliated project management agency under the Federal Ministry of Agriculture, Food and Homeland (BMLEH). It focuses on promoting renewable raw materials, bioenergy, and sustainability through project funding, research support, and public information. The agency holds a strong market position as a key national entity in renewable resource management and sustainability initiatives. The website targets researchers, policymakers, industry stakeholders, and the general public interested in sustainable development and renewable resources. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery and Slick Carousel for UI components. It uses Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. The site is mobile-optimized, accessible, and SEO-friendly with clear navigation and professional design. Hosting appears to be under German research network infrastructure, consistent with its government affiliation. Security posture is good with HTTPS enforced and no exposed sensitive data. However, the site lacks visible security headers and a cookie consent mechanism, which are areas for improvement. No public vulnerability disclosure or incident response information is available, which could be enhanced to improve trust and security readiness. Overall, the website is professional, trustworthy, and well-aligned with its mission. Strategic recommendations include implementing security headers, adding cookie consent, publishing a vulnerability disclosure policy, and providing incident response contacts to strengthen security and compliance further.

F

FLO

weareflo.com

9

FLO is a digital consultancy specializing in driving business growth through innovative customer experiences, leveraging data and technology. The company offers services including consulting, brand experience, customer experience, data solutions, and commerce, targeting businesses seeking digital transformation. The website is professionally designed, mobile-optimized, and uses modern technologies such as Next.js and HubSpot integrations. Security posture is generally good with HTTPS and cookie consent mechanisms, but lacks explicit security policies and incident response information. The absence of WHOIS data raises concerns about domain registration legitimacy, though the website content and branding are consistent and trustworthy. Strategic recommendations include improving transparency on security policies, providing direct contact information, and verifying domain registration details.

F

Faber Company Inc.

mieru-ca.com

11

Mieru-ca.com is a Japanese SEO and content marketing SaaS platform operated by Faber Company Inc., offering AI-powered SEO tools and consulting services. The platform integrates advanced AI features such as AI article generation, custom AI chat for content rewriting, and comprehensive SEO analytics, targeting corporate marketers and SEO professionals. The website demonstrates a mature digital infrastructure with extensive use of modern analytics and marketing technologies, hosted on AWS infrastructure with a reputable registrar. Security posture is solid with HTTPS and reCAPTCHA protections, though DNSSEC and security headers could be improved. Privacy policies and terms of service are clearly presented, supporting GDPR compliance. Overall, the site is professional, trustworthy, and well-positioned in the Japanese SEO tool market with a strong client base including major corporations.

L

Land Sterling

landsterling.com

10

Land Sterling is a well-established real estate consultancy firm operating primarily in Dubai, UAE, with a strong presence across the Middle East, North Africa, and Europe. The company offers a comprehensive suite of property-related services including valuations, project management, investment advisory, and brokerage. With over 15 years of experience and more than 10,000 projects completed, Land Sterling positions itself as a top-tier consultancy regulated by RICS and RERA and holds ISO certification, enhancing its market credibility. The website reflects a professional and consistent brand image targeting property investors, developers, and buyers in the region. Technically, the website is built on WordPress using the Kadence theme and blocks, integrating modern SEO and analytics tools such as Rank Math and Google Tag Manager. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security measures include HTTPS and Google reCAPTCHA, but the absence of DNSSEC and security headers indicates room for improvement. Privacy compliance is weak due to missing privacy and cookie policies. From a security perspective, the site demonstrates a good baseline with encrypted connections and no exposed sensitive data. However, the lack of incident response contacts, vulnerability disclosure policies, and security headers suggests limited maturity in security governance. The domain registration data is consistent with the business claims, showing a long-standing domain without privacy protection, which supports legitimacy. Overall, Land Sterling's digital presence is professional and trustworthy, but it should enhance privacy compliance and security best practices to reduce risk and improve user trust.

B

Bloom Facilities Management

bfm.ae

38

Bloom Facilities Management is a UAE-based company specializing in providing comprehensive facilities management services to both corporate and residential clients. Their offerings include corporate services, residential services, project management, innovation initiatives, and business excellence programs. The company positions itself as a professional and customer-centric service provider within the UAE market. Technically, the website is built on Concrete CMS, uses modern JavaScript libraries such as jQuery and jQuery UI, and integrates Google Analytics and Google reCAPTCHA for analytics and security respectively. The site is hosted under Etisalat's registrar and nameservers, consistent with its UAE location. Security posture is solid with HTTPS enforced and spam protection on forms, though there is room for improvement in security headers and published security policies. Privacy and cookie policies are not found, indicating a compliance gap. Overall, the website is professional and functional with moderate tracking and good user experience.

H

Horton Interiors

hortoninteriors.com

54

Horton Interiors is a small, award-winning interior design and fit-out company based in Dubai, serving clients across the GCC region. The company specializes in delivering high-quality interior design solutions and fit-out services, positioning itself as a reputable player in the real estate and construction sector. The website reflects a professional business model focused on service delivery to businesses and individuals seeking interior design expertise. Technically, the website is built on WordPress using the Kadence theme and blocks, with integrations for SEO (Rank Math), multilingual support (WPML), and marketing analytics (Google Tag Manager, Facebook Pixel, Hotjar). The site is mobile-optimized and demonstrates good SEO practices with structured data and meta tags. Security-wise, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and published security policies. No privacy or cookie policies were found, indicating a gap in compliance with GDPR and related regulations. The domain registration is consistent with the business claims, showing no suspicious patterns and a legitimate registration history since 2021. Overall, the website is professional and credible but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

E

Etihad International Hospitality LLC

etihadhospitality.ae

43

Etihad International Hospitality LLC is a UAE-based company specializing in hospitality and facility management services, including soft and hard services, catering, fresh produce supply, and operating a cafe & restaurant. Established in 2015, it serves a broad client base across various sectors in the UAE, emphasizing quality and customized solutions. The website reflects a professional business presence with clear service offerings and contact information. Technically, the site uses modern front-end technologies such as jQuery, Bootstrap, GSAP, and Owl Carousel, hosted likely by Etisalat, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and CSRF tokens but lacks explicit security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and functional but could improve in privacy and security transparency.

S

ServeU

serveu.ae

47

ServeU is a prominent facilities management company based in the UAE, offering a comprehensive range of integrated FM services including hard and soft services, security, energy management, and specialized maintenance solutions. With a large workforce and extensive client base, ServeU positions itself as a leading FM provider in the region. The website is built on WordPress with modern plugins and technologies, providing a professional and responsive user experience. Security posture is adequate with HTTPS and some security best practices, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is credible and trustworthy but would benefit from enhanced compliance and security transparency.

E

Ejadah

ejadah.com

69

Ejadah is a prominent asset management company based in the United Arab Emirates, specializing in real estate asset management and community solutions. The company serves a broad range of sectors including residential, retail, commercial, hospitality, and mixed-use developments. Their market position is strong within the UAE, supported by a large workforce and extensive managed property portfolio. The website reflects a professional business with clear service offerings such as facilities management, security management, and consultancy solutions. Technically, the website is built on the Webflow platform and leverages modern web technologies including Google Analytics, Google Tag Manager, and Google reCAPTCHA for security and analytics. The site is mobile-optimized with good SEO and accessibility features, although some improvements in security headers and incident response information could enhance its posture. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and a public vulnerability disclosure policy. No WHOIS data was found for the domain, which raises questions about domain registration status, though the website content and client portfolio suggest a legitimate business. Overall, the security posture is solid but could benefit from enhanced transparency and technical controls. The overall risk assessment indicates a trustworthy and professional business website with minor gaps in domain registration transparency and security best practices. Strategic recommendations include adding security headers, publishing a security.txt file, and providing clear contact information for incident response to strengthen trust and compliance.

stafftastic GmbH is a German-based recruiting company specializing in sourcing suitable talents for businesses. Founded in 2020, the company operates a professional website primarily in German, targeting companies seeking recruitment services. The website demonstrates a good level of digital maturity, employing modern technologies such as Bootstrap, FontAwesome, and Cookiebot for cookie consent management, alongside Plausible Analytics for privacy-friendly analytics. Hosting is supported by Google Cloud DNS infrastructure, indicating reliable hosting services. Security posture is solid with HTTPS enabled and cookie consent implemented, although additional security headers could enhance protection. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-aligned cookie consent mechanisms. Overall, the website is professional, trustworthy, and safe for general audiences.

C

celocore Webservices GmbH

celocore.de

49

Celocore Webservices GmbH is a small, specialized internet agency based in Braunschweig, Germany, with over 17 years of experience. The company focuses on providing comprehensive digital services including TYPO3 and Magento web development, SEO optimization, hosting, cloud storage, and GDPR-compliant video conferencing solutions. Their market position is that of a trusted regional expert offering personalized and professional services to businesses seeking to enhance their digital presence. The website reflects a consistent brand image and clear communication of their service offerings. Technically, the website is built on the TYPO3 CMS platform, leveraging Bootstrap for responsive design and jQuery for interactivity. It integrates Google Analytics and Google Ads for marketing and tracking purposes, with a GDPR-compliant cookie consent mechanism implemented via Klaro. The site demonstrates good mobile optimization and moderate performance, with a clean and professional design. From a security perspective, the site enforces HTTPS and anonymizes IP addresses in analytics, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies. Overall, the site maintains a good security posture but could improve transparency and technical security controls. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include publishing formal security policies, enhancing HTTP security headers, and maintaining regular security audits to sustain trust and compliance.

H

HotelMap

hotelmap.com

76

HotelMap is a UK-based technology company specializing in hotel booking solutions tailored for events such as conferences, exhibitions, and trade shows. The company offers a suite of products including fully managed services for large event organizers and venues, free solutions for smaller events, and advanced room block blending technology. Their platform integrates with event registration systems and provides automated marketing and reporting tools, positioning them as a global leader in event hotel booking technology. The website demonstrates a mature digital presence with professional design, clear navigation, and extensive content supporting their business model. Technically, the site leverages HubSpot CMS and marketing tools, AWS hosting, and integrates analytics and behavioral tracking services like Google Analytics and Hotjar. Security posture is strong with HTTPS, domain transfer protections, and secure form handling, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR indicators. Overall, the site is trustworthy, professional, and well-optimized for its target audience.

D

Shop Ufficiale del Duomo di Milano

duomoshop.com

58

The website www.duomoshop.com appears to be an e-commerce retail site built on the Wix platform. However, the absence of WHOIS registration data raises significant concerns about the legitimacy and ownership of the domain. The site lacks essential business information such as privacy policies, contact details, and terms of service, which are critical for trust and compliance. Technically, the site uses standard Wix scripts and includes LinkedIn tracking pixels for marketing purposes, but SEO and accessibility are minimal. Security posture is weak due to missing security headers and lack of incident response information. Overall, the site presents a basic online presence with limited content and low trustworthiness.

A

Afeefa - Digitaler Zusammenhalt e.V.

bunter-kompass-thueringen.info

54

Afeefa - Digitaler Zusammenhalt e.V. operates the website 'Afeefa - Bunter Kompass für Thüringen', a non-profit digital platform providing a comprehensive and accessible overview of services and offers for immigrants in the Thuringia region of Germany. The platform supports newcomers by listing language courses, counseling services, leisure activities, and other integration-related resources. It also facilitates community engagement by allowing users to submit their own offers. The website is positioned as a regional integration support tool with a clear focus on accessibility and up-to-date information. Technically, the website employs modern frontend technologies including Vue.js and MapLibre GL for interactive maps, along with Font Awesome for icons. The site demonstrates good mobile optimization and accessibility features, though performance is moderate and SEO optimization is basic. The absence of a CMS or hosting provider details limits deeper infrastructure insights. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, indicating room for improvement in security best practices and privacy compliance. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is privacy protected, which is typical for non-profit organizations, but limits transparency. Contact information is clearly provided, enhancing trust. Overall, the website presents a professional and trustworthy platform for its target audience, with a solid business credibility score. Strategic recommendations include implementing cookie consent, enhancing security headers, and publishing security policies to improve compliance and security posture.

I

Instructure

learnplatform.com

72

Instructure operates a professional and enterprise-grade educational technology platform focused on evidence-based management of K–12 edtech investments. The website demonstrates a mature digital infrastructure leveraging Drupal 10 CMS, modern JavaScript libraries, and extensive marketing and analytics tools such as Google Tag Manager, Marketo, and Microsoft Clarity. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are not visible in the provided content. The absence of WHOIS data is a notable anomaly but does not detract from the professional presentation and comprehensive service offerings. Overall, Instructure presents as a credible and established player in the education technology sector with a focus on compliance, safety, and data-driven decision-making.

I

Instructure

portfolium.com

73

Instructure is a leading educational technology company specializing in learning management systems (LMS) and edtech solutions for K–12, higher education, and business sectors. Their flagship product, Canvas LMS, is widely adopted and supported by a robust ecosystem of partners and community engagement. The company positions itself as a comprehensive provider of digital learning tools that empower educators and learners alike. Technically, the website is built on Drupal 10 CMS and leverages a modern technology stack including Google Tag Manager, Marketo, Microsoft Clarity, and various front-end libraries for performance and user experience. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs multiple security headers, and integrates cookie consent mechanisms indicating GDPR compliance. Certifications such as SOC 2 and ISO 27001 further demonstrate a commitment to security standards. However, the absence of a publicly accessible security policy and incident response contact details suggests room for improvement in transparency and readiness. Overall, Instructure's website reflects a professional, trustworthy, and well-maintained digital presence aligned with its enterprise market position. The missing WHOIS data is a notable anomaly but does not significantly detract from the overall credibility given the strong branding and operational indicators.

I

Instructure

masteryconnect.com

72

Instructure operates a professional and comprehensive K–12 assessment and data solution platform branded as Mastery. The website demonstrates a mature digital infrastructure leveraging Drupal 10 CMS, modern JavaScript libraries, and multiple marketing and analytics tools such as Google Tag Manager, Marketo, Microsoft Clarity, and Intellimize. The site is well-optimized for mobile and accessibility, with clear navigation and rich content focused on educational outcomes. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and vulnerability disclosures are absent. WHOIS data is unavailable, which limits domain trust verification, but the website's professionalism and integrations suggest a legitimate enterprise presence. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in privacy compliance and security transparency.

instant.page is a technology-focused website offering a lightweight, open source JavaScript library that enables just-in-time preloading of web pages to improve page load speed and user engagement. The service targets website owners and developers aiming to reduce latency and increase conversion rates by approximately 1%. The website is well designed, mobile optimized, and provides clear technical explanations and usage instructions. It is trusted by notable brands and has a strong GitHub presence, indicating a reputable and active community. Technically, the site uses modern web standards including CSS Grid and asynchronous JavaScript loading. It integrates Google Analytics and Google Tag Manager for user tracking and performance measurement. The site is fast and accessible, with good SEO and mobile optimization. However, it lacks visible security headers and formal privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site demonstrates good practices such as script integrity checks and respectful resource loading, but it does not publish a security policy or incident response contacts. No vulnerabilities or suspicious content were detected. The absence of privacy and cookie policies and contact information reduces the overall privacy compliance score. Overall, instant.page presents a professional, trustworthy, and technically sound offering with room for improvement in privacy compliance and security transparency. Strategic recommendations include publishing privacy and cookie policies, adding security headers, and providing clear contact channels for security incidents.

T

Topic Intelligence™️

topicintelligence.ai

62

Topic Intelligence™️ is a small technology company founded in 2020, offering an AI-driven platform that provides topic-based marketing insights to improve targeting, content strategy, and lead generation. The platform integrates website and cross-channel marketing data to identify high-converting topics, trending industry topics, and user journeys, enabling smarter marketing decisions. The website is professionally designed using WordPress and Elementor, with a focus on clear messaging and user engagement. Technically, the site employs modern tools including Google Analytics, Matomo, Google reCAPTCHA Enterprise, and Stripe for payment processing, indicating a mature digital infrastructure. Security posture is good with HTTPS and form protections, though some security headers and explicit policies are missing. Privacy compliance is basic, lacking cookie consent mechanisms and detailed GDPR indicators. Overall, the site presents a credible and professional business presence with room for improvement in privacy and security transparency.

S

Single: the music & video app for Shopify

singlemusic.com

67

Single.xyz operates as a specialized e-commerce platform integrated with Shopify, enabling musicians and content creators to sell music, videos, and memberships directly to consumers. The platform supports livestream shows and reporting music sales to charts, positioning itself as a niche player in the digital media sales market. The website is professionally designed with good content relevance and user experience, targeting Shopify store owners and digital media creators. Technically, the site leverages Shopify's infrastructure and integrates multiple marketing and analytics tools such as HubSpot, Facebook Pixel, and Google Tag Manager, indicating a mature digital marketing approach. Security-wise, the site benefits from HTTPS and domain transfer protections but lacks DNSSEC and security headers, and does not publish privacy or cookie policies, which are critical for compliance and user trust. Overall, the site is legitimate and functional but would benefit from enhanced privacy compliance and security best practices.

The website rhmerchandise.com is currently inaccessible due to a security challenge page implementing a proof-of-work captcha mechanism. This prevents access to any business-related content, contact information, or policies. The domain is registered since 2017 with GoDaddy and uses Amazon Cloudfront CDN for content delivery. The security challenge page indicates an intent to protect the site from automated access or abuse but severely limits external analysis. No privacy, cookie, or terms of service policies are visible, and no contact details or business information can be extracted. The technical infrastructure includes modern JavaScript with Web Workers and cryptographic functions for the captcha. However, no security headers or DNSSEC are enabled, representing minor security gaps. Overall, the site’s security posture is difficult to assess fully due to the blocking mechanism, but the domain registration appears legitimate.

A

AAA Studio

aaastudio.ch

62

AAA Studio was a Swiss-based small design agency operating from 2019 to 2023, specializing in visual communication, graphic design, and digital spaces. The agency served clients primarily in the cultural and industrial sectors, collaborating with interdisciplinary partners to deliver complex and sustainable projects. Their business model focused on agile, project-based work with a strong emphasis on creative experimentation and client collaboration. Technically, the website is built on Drupal CMS with a moderate performance profile and good mobile optimization. However, the site lacks advanced security headers and privacy compliance documentation, which are areas for improvement. The security posture is moderate with no critical vulnerabilities detected but missing best practices. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, and improving accessibility and compliance measures.

A

AAA Studio

alexkern.com

59

AAA Studio was a Swiss-based visual communication agency operating from 2019 to 2023, specializing in graphic design, digital spaces, and communication projects for cultural and industrial clients. The studio emphasized a collaborative and experimental approach to design, working closely with interdisciplinary partners. Their portfolio includes projects for notable clients such as Fondation Beyeler, Museum Tinguely, and Performance Art Awards Switzerland. The website is bilingual (German and English), professionally designed, and showcases a rich portfolio of projects with multimedia content including images and videos. Technically, the site is built on Drupal CMS with modern HTML5 and CSS3 standards, optimized for mobile devices with good SEO practices. However, there are gaps in privacy and security compliance, with no visible privacy or cookie policies, no security headers, and no incident response information. Contact information is clearly provided, enhancing business credibility. Overall, the site reflects a small but professional agency with a strong creative portfolio but could improve in security and privacy compliance.

Z

Zephir Software Design AG

zephir.ch

59

Zephir Software Design AG is a Swiss-based web agency specializing in web development services with a focus on innovative ideas and modern web technologies. The company targets businesses and organizations seeking professional web solutions, emphasizing Swiss quality and reliability. Their website showcases client references and projects, positioning them as a reputable regional player in the technology sector. Technically, the website uses modern JavaScript libraries such as fullPage.js and integrates privacy-friendly analytics via Plausible. The site is well-designed, mobile-optimized, and provides clear contact information, enhancing user experience and trust. However, the absence of privacy and cookie policies indicates a compliance gap that should be addressed. Security-wise, the site uses HTTPS but lacks visible security headers and incident response information, suggesting room for improvement in security posture. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

K

Kanton Basel-Stadt, Fachstelle Integration und Antirassismus

hallo-baselstadt.ch

42

The website 'Hallo Baselstadt' is an official government portal managed by the Kanton Basel-Stadt, Fachstelle Integration und Antirassismus. It serves as an informational resource for newcomers to the Basel-Stadt canton, providing multilingual content on integration, social services, housing, education, and emergency contacts. The site targets immigrants and new residents, aiming to facilitate their integration and access to local services. The business model is public service-oriented, with no commercial activities, positioning it as a trusted government information source. Technically, the website is built using the Webflow CMS platform and incorporates modern JavaScript libraries such as jQuery and MediaElement.js. It employs Matomo analytics with IP anonymization, reflecting a privacy-conscious approach. The site is mobile-optimized and features a clear navigation structure with a comprehensive sitemap. However, some technical improvements are possible, including the addition of security headers and enhanced accessibility features. From a security perspective, the site uses HTTPS with a strong SSL configuration, ensuring secure data transmission. The use of Matomo with anonymized IPs is a positive privacy measure. However, the absence of explicit privacy and cookie policies, lack of security headers, and missing contact information for security incidents represent areas for improvement. No vulnerabilities or suspicious elements were detected in the provided content. Overall, the website demonstrates a solid foundation in content quality, business credibility, and technical implementation, but could enhance privacy compliance and security posture. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, implementing security headers, and providing clear contact channels for security and privacy concerns to strengthen trust and compliance.

F

FRAKO Kondensatoren- und Anlagenbau GmbH

frako.com

57

FRAKO Kondensatoren- und Anlagenbau GmbH is a specialized company focused on reactive power compensation, energy management, and power quality solutions. The company offers a comprehensive portfolio of products, services, and training aimed at improving energy efficiency and network reliability, primarily targeting industrial and commercial energy professionals. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS with Bootstrap and uses Matomo analytics for privacy-conscious user tracking. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The WHOIS data is notably absent or unregistered, which raises legitimacy concerns; however, the association with the parent company AdCapital Gruppe and consistent branding mitigate some risk. Overall, the site scores well on content quality and technical implementation but should address WHOIS transparency and security policy publication to improve trust and compliance.

The Wilhelm Exner Medaillen Stiftung is a prestigious Austrian foundation dedicated to awarding the Wilhelm Exner Medal, a respected scientific prize with a history of laureates who have also received Nobel Prizes. The foundation operates under the umbrella of the Österreichischer Gewerbeverein, reflecting a strong institutional backing. The website serves as an informational and event platform, providing news, lecture schedules, and historical retrospectives related to the award and its recipients. The target audience includes the scientific community, industry professionals, and the general public interested in scientific achievements. Technically, the website is built on WordPress 6.8.3, utilizing modern plugins such as Yoast SEO for optimization, Ninja Forms for data collection, and ShiftNav for navigation. The site is mobile-optimized with good SEO practices and moderate performance. Security measures include HTTPS enforcement and plugins to prevent user enumeration, though some security headers are missing. Privacy compliance is partially addressed through a linked privacy policy on the parent organization's site, but cookie consent mechanisms are absent. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement. The WHOIS data is unavailable due to a malformed query response, which slightly impacts trust but is mitigated by the professional presentation and institutional association. Overall, the website is a credible and professional platform for the Wilhelm Exner Medal foundation, with good content quality and technical implementation. Strategic improvements in privacy compliance and security transparency would enhance trust and compliance with regulatory standards.

W

Wiener Zeitung

wienerzeitung.at

67

Wiener Zeitung is a well-established Austrian digital media outlet providing independent and critical quality journalism. The website offers a variety of content including news articles, podcasts, videos, and newsletters targeting a general audience interested in current affairs and quality journalism. The site is professionally designed with consistent branding and excellent content quality. Technically, it uses modern web technologies including the Astro framework, Tailwind CSS, and Matomo analytics configured with privacy-conscious settings. Security posture is good with HTTPS enforced and some privacy features enabled, but lacks explicit security policies and headers. Privacy compliance is basic due to missing visible privacy and cookie policies. Overall, the site is trustworthy and professional but could improve transparency and compliance documentation.

O

Oberösterreich Tourismus GmbH

hornerakusko.sk

53

The website hornerakusko.sk serves as an official regional tourism portal for Upper Austria, operated by Oberösterreich Tourismus GmbH. It provides comprehensive information on winter sports, wellness, culture, and travel services targeting tourists interested in visiting the region. The site is multilingual and professionally designed, reflecting a strong market position as a regional tourism authority. Technically, the site is built on TYPO3 CMS and integrates modern analytics and marketing tools with appropriate user consent mechanisms. Security posture is solid with HTTPS, security headers, and CAPTCHA protections, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, compliant with GDPR, and offers a positive user experience with clear contact channels and rich content.

L

Leading Golf Courses of Switzerland

leadinggolf.ch

44

Leading Golf Courses of Switzerland is a niche hospitality business focused on promoting a label that guarantees high-quality standards in golf sports within Switzerland. The website serves as a portal linking to partner golf clubs and provides contact information but lacks extensive content such as privacy or cookie policies. The target audience is golf players and enthusiasts seeking premium golf experiences in Switzerland. The business model revolves around association and promotion of leading golf courses, positioning itself as a quality assurance label in the Swiss golf market. Technically, the website is built with basic HTML and CSS without advanced frameworks or CMS detected. It shows moderate performance and basic mobile optimization but lacks modern security headers and explicit SSL/TLS configuration details. No analytics or tracking technologies are present, indicating minimal data collection and user tracking. From a security perspective, the site lacks visible security policies, privacy compliance documentation, and security best practices such as security headers or vulnerability disclosures. The contact information is clearly presented, but the absence of privacy and cookie policies indicates compliance gaps. No WAF or blocking mechanisms are detected, and the content is safe for general audiences. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance documentation, and improved technical modernization to strengthen trust and compliance posture.

V

Vereinte Dienstleistungsgewerkschaft (ver.di)

verdi.de

48

ver.di is a major German trade union focused on advocating for workers' rights, fair wages, and work-life balance. The website reflects a large, professional organization with a clear mission to support service sector employees. The technical infrastructure uses modern web technologies and includes consent management and analytics tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent, but lacks visible security headers and explicit privacy and terms policies. Overall, the site is trustworthy and well-maintained but could improve transparency and security practices.

S

Simple Plan Merch Store

simpleplanstore.com

65

Simple Plan Merch Store is an official e-commerce platform dedicated to selling exclusive merchandise for the band Simple Plan. The website offers a variety of products including t-shirts, hoodies, accessories, and music media, targeting fans of the band globally. The store operates on the Shopify platform, leveraging its robust e-commerce infrastructure and payment integrations such as Shopify Payments, Apple Pay, and PayPal. The site is professionally designed with consistent branding and good user experience, optimized for mobile devices and featuring clear navigation. Security is well implemented with HTTPS and standard security headers, though some privacy compliance aspects like cookie consent could be improved. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, but the presence of official social media links and partnership with RH Merchandise supports the site's credibility.

R

ReferralCandy

referralcandy.com

68

ReferralCandy operates as a leading SaaS provider specializing in referral marketing software tailored for eCommerce businesses. The platform empowers online retailers to leverage customer referrals to drive exponential sales growth, boasting a user base exceeding 30,000 eCommerce stores. Their business model focuses on performance-based payments and seamless integration with popular platforms such as Shopify. The website reflects a mature digital presence with professional branding, comprehensive content, and strong social media engagement.