Security Directory

AVA Verlagsauslieferung AG is a Swiss-based logistics and distribution company specializing in media products, including books and music. Established in 1980, it serves over 300 publishers and approximately 3000 dealers, positioning itself as the largest barsortiment in Switzerland and a leading music retailer under the Musica Viva brand. The website reflects a business-focused approach with clear contact information and service descriptions targeting publishers, retailers, and private customers. Technically, the site uses a custom CGI backend with Bootstrap and jQuery on the frontend, offering moderate performance and basic mobile optimization. Security measures are minimal, with no visible security headers or cookie consent mechanisms, and no published security or incident response policies. Overall, the site is functional and professional but could benefit from enhanced security and privacy compliance.

K

Karl der Grosse

karldergrosse.ch

60

Karl der Grosse is a well-established cultural and hospitality venue located in Zurich, Switzerland, offering a diverse range of services including a bistro, event space rentals, and a rich program of cultural events. The venue is municipally affiliated, enhancing its credibility and market position as a key cultural hub. The website reflects a professional and consistent brand image targeting a general audience interested in culture, dining, and event participation. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, ensuring good performance and mobile optimization. Security posture is strong with HTTPS and security headers implemented, though some compliance aspects like cookie consent and security policies could be improved. Overall, the site is trustworthy and professionally maintained, with moderate tracking and marketing tools in use.

B

Balmer Bücherdienst AG

balmer-bd.ch

55

Balmer Bücherdienst AG is a Swiss-based classical publishing distribution company serving the book trade and resellers with products from domestic and international partner publishers. The company operates a B2B webshop and reporting portals to facilitate order placement and business analytics. Their market position is that of an established regional distributor with a focus on the Swiss book market. Technically, the website is built on Shopware CMS, uses modern web technologies, and integrates third-party search services. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security policies and incident response information are not published. Privacy and cookie policies exist and indicate GDPR compliance. Overall, the website and domain registration data align well, indicating a legitimate and trustworthy business presence online.

K

Katholisch Stadt Zürich

katholisch-zuerich.ch

9

Katholisch Stadt Zürich is a non-profit religious organization representing the Catholic community in Zurich, Switzerland. The website serves as a hub for 23 parishes, providing information and services related to Catholic life in the city. It targets local residents and members of the Catholic community, offering religious services and community engagement. The organization holds a strong market position as the largest Catholic entity in Zurich. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Smart Slider 3, indicating a moderate level of digital maturity. The site is mobile-optimized and uses common web technologies including jQuery and FontAwesome. SEO practices are well implemented, but accessibility features are basic. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks important security headers and formal privacy or cookie policies. Tracking pixels from Facebook and LinkedIn are present without visible consent mechanisms, indicating privacy compliance gaps. No incident response or security contact information is provided. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to reduce risk and improve user trust.

L

Landis & Gyr Foundation

lg-stiftung.ch

55

The Landis & Gyr Foundation is a Swiss non-profit organization dedicated to supporting artistic and cultural projects, primarily focusing on professional and contemporary creative work by artists and writers within Switzerland. The foundation emphasizes collaboration with recognized organizations and has a regional interest in Zug and central Switzerland, while also supporting projects from non-urban areas across the country. The website reflects a niche cultural foundation with a clear mission and professional presentation, targeting artists and cultural entities. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries such as Swiper.js and Leaflet.js, and uses Matomo for analytics, indicating a moderate level of digital maturity. Hosting and resources are served from computedby.com domains, suggesting a specialized hosting or development provider. The site is mobile-optimized and has good design quality, though accessibility and SEO optimizations are basic. From a security perspective, the site uses HTTPS and defers scripts for performance, but lacks visible security headers and does not provide privacy or cookie policies, which are compliance gaps. No contact information or incident response channels are explicitly provided, limiting transparency. The use of Matomo analytics suggests some privacy awareness, but absence of consent mechanisms reduces privacy compliance. Overall, the website is professional and trustworthy for its purpose but would benefit from enhanced privacy compliance, security headers, and clearer contact information to improve user trust and regulatory adherence.

MBPI AG is a Liechtenstein-based financial services and family office provider focused on delivering long-term prosperity and well-being to its clients. The company emphasizes tradition, societal responsibility, progress, and humanity as core values. The website is professionally designed using WordPress with the Avada theme and includes multilingual support in English and German. Key services include family office management and client wealth services, targeting private clients and institutions primarily in Liechtenstein. The digital infrastructure is modern but lacks some advanced security headers and cookie consent mechanisms. The site uses HTTPS and common web technologies such as jQuery and Revolution Slider, providing a moderate performance and good mobile optimization. Security posture is adequate but could be improved by implementing security headers and publishing incident response policies. Overall, the website is trustworthy and consistent with the company's business claims.

M

mfsystem

mfsystem.ch

46

mfsystem is a Swiss-based manufacturer specializing in modular furniture systems including shelves, sideboards, wardrobes, and office furniture. The company emphasizes sustainability and customization, offering an online configurator for customers to design their own furniture. Their market position is that of a niche player focusing on quality and flexibility for both residential and commercial clients. Technically, the website is well-structured with modern web standards, mobile optimization, and HTTPS security. However, it lacks some advanced security headers and explicit privacy consent mechanisms. The security posture is solid but could be improved with better transparency on incident response and vulnerability disclosures. Overall, the website presents a professional and trustworthy image with good user experience and clear business focus.

B

bref Magazin

brefmagazin.ch

59

bref Magazin is a Swiss-based media publication focused on the Reformed Church community and cultural topics. The website offers subscription services, a shop, and a variety of articles targeting German-speaking audiences interested in religious and societal issues. The business operates as a niche media outlet with a small but dedicated audience. Technically, the site is built on WordPress with modern web technologies including WooCommerce for e-commerce, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and rich content. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and contact information for incident response are missing. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the site is trustworthy and professional but could improve transparency and compliance documentation.

B

BPR

bpr-bauprozess.at

50

BPR is an educational entity offering a professional continuing education program in construction process management, targeting future leaders in the Austrian construction industry. The program is a cooperative effort between BAUAkademie BWZ OÖ and Universität für Weiterbildung Krems, emphasizing interdisciplinary training, practical projects, and modern technologies such as BIM. The website is well-structured, professionally designed, and provides comprehensive information about the program, including downloadable materials and contact details. Technically, the site is built on WordPress with Elementor and employs modern plugins for cookie consent and form handling. Security posture is good with HTTPS and consent management, though some security headers could be improved. WHOIS data is unavailable due to quota limits, but no suspicious indicators are present. Overall, the site is trustworthy, compliant with GDPR, and suitable for its educational purpose.

B

BAUAkademie Österreich

bauakademie.at

10

BAUAkademie Österreich is a prominent educational institution specializing in construction industry training and career development across Austria. With eight regional locations and a comprehensive course catalog exceeding 2200 courses, it serves a wide audience from apprentices to top-level construction professionals. The website reflects a strong market position as the leading provider of construction personnel development in Austria, emphasizing a triale apprenticeship model that integrates school, company, and inter-company training. Technically, the site employs modern front-end technologies such as Bootstrap, Swiper.js, and SweetAlert2, delivering a responsive and user-friendly experience. However, the absence of WHOIS data limits full verification of domain legitimacy. Security posture is moderate with HTTPS usage but lacks explicit security headers and cookie consent mechanisms. Privacy compliance is good with a comprehensive privacy policy present. Overall, the site is professional, trustworthy, and well-structured, though improvements in security transparency and cookie management are recommended.

C

Cinematographe.it

cinematographe.it

49

Cinematographe.it is an established Italian media website specializing in cinema and entertainment news, including film reviews, trailers, and TV series coverage. The site targets a general audience interested in Italian and international cinema. It operates primarily as a content publishing platform monetized through advertising networks. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, and integrates multiple third-party advertising and tracking services. The site is mobile-optimized and SEO-friendly but could improve accessibility and security headers. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though explicit security policies and incident response information are absent. Privacy compliance is minimal, lacking clear privacy and cookie policies or consent mechanisms. Business credibility is supported by consistent branding and social media presence but lacks direct contact information. Overall, the website is functional and professional but should enhance privacy and security transparency to improve trust and compliance.

The website at trinity.ch presents an extremely minimal digital presence, consisting solely of a black background with a single image and a relative link to a local HTML page. There is no substantive content describing the business, its services, or its market positioning. The lack of metadata, structured data, or contact information indicates a placeholder or underdeveloped site. Technically, the site does not utilize modern web technologies, frameworks, or analytics tools, and there is no evidence of HTTPS or security headers, which raises concerns about security posture. The absence of privacy, cookie, or terms of service policies further indicates non-compliance with common data protection regulations. Overall, the site is accessible but provides no meaningful information or trust signals to visitors.

The website anneschwalbe.shop is a small-scale e-commerce platform specializing in the sale of art prints, posters, books, and clothing related to the photography and art of Anne Schwalbe. The business operates primarily in Germany and targets art collectors and enthusiasts. The site is built on the Shopify platform, leveraging its infrastructure and security features. The technical infrastructure is modern and well-optimized for mobile and desktop users, with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and domain locking enabled, though DNSSEC is not enabled and some HTTP security headers could be improved. Privacy compliance is addressed with a cookie consent banner and a privacy policy, but lacks explicit GDPR or incident response details. Overall, the site presents a professional and trustworthy e-commerce experience with room for enhanced security and compliance documentation.

A

Alcova

vocla.xyz

58

Vocla.xyz is a professionally designed website serving as a platform for design experimentation and social gatherings during Milan Design Week. The site showcases curated exhibitions and pop-up dining experiences, collaborating with notable design houses and restaurants. The technical infrastructure is modern, leveraging Nuxt.js and Cloudflare DNS, ensuring good performance and mobile optimization. However, the site lacks critical privacy and cookie policies, which impacts compliance. Security posture is adequate with HTTPS and domain transfer protection, but could be improved by enabling DNSSEC and security headers. Overall, the website is trustworthy and well-positioned within its niche event market, though it should address compliance and security best practices to enhance user trust and regulatory adherence.

Izet Sheshivari operates a niche creative business focused on print, digital media, design, photography, and curating exhibitions, with an emphasis on book publishing and sales via the partner site Boabooks. The website presents a professional portfolio and business overview but lacks comprehensive privacy, cookie, and security policies. The technical infrastructure is based on the Indexhibit CMS platform, with basic HTML and CSS, and HTTPS enabled. However, the site lacks modern security headers and advanced technical optimizations. Security posture is moderate but could be improved with better headers and policies. Overall, the website is safe, professional, and targeted at art and book enthusiasts, but it requires enhancements in privacy compliance and security best practices to improve trust and regulatory adherence.

W

WebToffee

webtoffee.com

52

WebToffee is a UK-based e-commerce software company specializing in WordPress, WooCommerce, and Shopify plugins and apps. With a strong market presence powering over 1.8 million websites globally, the company offers a diverse portfolio of over 45 products designed to simplify B2B and B2C e-commerce operations. Their business model focuses on subscription and one-time sales of digital products, targeting SMBs and online store owners seeking robust, easy-to-use solutions. The website reflects a mature digital infrastructure leveraging WordPress CMS, modern frameworks like Bootstrap, and performance optimizations such as WP Rocket caching. Integration with analytics and marketing tools like Google Analytics, Hotjar, and Google Tag Manager is implemented with user privacy in mind, supported by a comprehensive cookie consent mechanism.

H

Horace

horace.it

49

Horace is a small Italian advertising agency specializing in strategic, creative, and media consultancy to help businesses uniquely position their brands. The website showcases a professional portfolio with detailed case studies and uses WordPress CMS with standard plugins for social sharing and cookie compliance. The technical infrastructure is modern with HTTPS and DNSSEC enabled, and the site demonstrates good privacy compliance with clear policies and consent mechanisms. Security posture is solid with no critical vulnerabilities detected, though additional HTTP security headers could enhance protection. Overall, the website is professional, trustworthy, and well-maintained, suitable for its target audience of businesses seeking advertising and communication services.

S

Spirito Artigiano

spiritoartigiano.it

10

Spirito Artigiano is a content-driven project operated by the Fondazione Manlio e Maria Letizia Germozzi onlus, focusing on artisan business culture and innovation in Italy. The website serves as a magazine and storytelling platform targeting artisan professionals and stakeholders interested in craftsmanship and socio-economic development. The project is relatively young, with domain registration and content dating from 2022 onward, aligning with the foundation's mission to promote artisan values. Technically, the website is built on WordPress using the Uncode theme and several plugins including Contact Form 7, Cookie Law Info, and Matomo Analytics. The site demonstrates good SEO practices, mobile responsiveness, and basic accessibility. The use of Matomo indicates a privacy-conscious approach to analytics, complemented by a comprehensive cookie consent mechanism compliant with GDPR. Security-wise, the site uses HTTPS with a valid SSL certificate but lacks DNSSEC and explicit security headers such as CSP or HSTS. No critical vulnerabilities or exposed sensitive data were detected. The contact mechanisms are limited to an email address and contact form, with no phone or physical address provided. Privacy and cookie policies are clearly presented and accessible. Overall, Spirito Artigiano presents a professional and trustworthy online presence for a niche non-profit cultural project. The security posture is adequate but could be improved with additional DNS and HTTP security measures. The site is fully accessible without WAF or blocking mechanisms, and content safety is rated as safe for general audiences.

T

touchHAEMATOLOGY

touchhaematologyime.org

61

touchHAEMATOLOGY is a specialized medical education platform providing accredited CME content focused on haematology. The website offers clinical updates, expert articles, and journal content designed to improve patient outcomes and support healthcare professionals in their clinical practice. The platform is part of a broader network of Touch Medical Media sites, targeting healthcare professionals with high-quality educational resources. Technically, the site is built on WordPress, leveraging modern web technologies and third-party services such as Google Tag Manager and Facebook Pixel for analytics and advertising. The site is hosted with Cloudflare DNS and registrar services, ensuring reliable domain management and HTTPS security. Security posture is generally good with HTTPS and domain transfer protection, but lacks DNSSEC and explicit security policies. Privacy compliance is basic with cookie consent implemented but no visible privacy or terms of service pages. Overall, the website is professional, trustworthy, and safe for general audiences, with room for improvement in privacy and security transparency.

T

touchOPHTHALMOLOGY

touchophthalmologyime.org

61

touchOPHTHALMOLOGY is a specialized healthcare education platform providing accredited continuing medical education (CME) content focused on ophthalmology. The platform targets healthcare professionals and ophthalmologists seeking up-to-date clinical knowledge and learning activities. The business operates primarily as a content publisher and education provider, leveraging partnerships with leading faculty and education partners to deliver high-quality, accredited learning experiences. The website is built on WordPress, hosted with Cloudflare DNS and registrar services, and integrates modern web technologies including Google Tag Manager, Facebook Pixel, and Borlabs Cookie for consent management. Performance and mobile optimization are good, with a professional design and clear navigation. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is limited due to the absence of a privacy policy and terms of service, representing a compliance gap. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy and professional, with moderate user tracking and advertising integration. Strategic improvements in privacy and security disclosures would enhance compliance and trust.

T

Touch Medical Media

touchrespiratoryime.org

61

Touch Medical Media operates the touchRESPIRATORY platform, providing accredited continuing medical education (CME) and respiratory medicine content targeted at healthcare professionals. The website offers a range of educational activities, journal articles, and clinical updates developed in collaboration with expert faculty. The platform is positioned as a niche leader in respiratory medical education with a medium-sized operational scale and a founding date consistent with its domain registration in 2020. Technically, the website is built on WordPress, leveraging modern JavaScript libraries and Google advertising and analytics tools, hosted with Cloudflare for DNS and registrar services. The site demonstrates good mobile optimization and SEO practices, though accessibility could be improved. Security posture is solid with HTTPS and domain transfer protections, but lacks DNSSEC and some recommended security headers. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the site is professional, trustworthy, and safe for general audiences, with room for improvement in privacy and security transparency.

B

Brunico Communications Ltd.

strategyonline.ca

10

Strategy is a well-established Canadian marketing media brand operated by Brunico Communications Ltd., focusing on delivering marketing news, events, awards, and industry insights to Canada's national marketing community. The website leverages a WordPress CMS with a modern tech stack including Google Analytics, Tag Manager, and Marketo for marketing automation. Hosting is supported by AWS DNS infrastructure. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is basic with a privacy policy and terms of service present but lacking cookie consent mechanisms. The site demonstrates good content quality, professional design, and strong business credibility with consistent branding and social media presence.

Stimulant is a Canadian media publication operated by Brunico Communications Ltd., focusing on inspiring advertising industry creatives and marketing professionals. The website offers curated advertising news, creative inspiration, and industry insights, monetized through subscriptions and advertising. The site has a consistent brand presence and a clear target audience within the marketing and advertising sector. Technically, the site is built on WordPress 6.7.1 with a moderate performance profile and basic mobile optimization. It uses common web technologies including jQuery, Google Tag Manager, and Google Publisher Tags for advertising. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and uses outdated JavaScript libraries that may pose vulnerabilities. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional and trustworthy but could improve in security and privacy compliance.

B

Brunico Communications Ltd.

realscreen.com

61

Realscreen is a well-established media publication specializing in the global business of factual entertainment, including reality television and non-fiction content. Owned by Brunico Communications Ltd., the site serves industry professionals with news, events, awards, and subscription services. The domain has been active since 1997, reflecting a mature and stable presence in its niche market. Technically, the website is built on WordPress with modern JavaScript libraries and integrates Google Analytics, Tag Manager, and advertising services. The site is hosted on AWS infrastructure, ensuring reliable performance and scalability. Security posture is generally good with HTTPS enforced and domain transfer protections in place, though improvements are recommended in DNSSEC deployment and security headers. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site demonstrates strong business credibility and professional content quality, making it a trusted resource in its industry.

B

Brunico Communications Ltd.

mediaincanada.com

61

Media in Canada is a well-established Canadian media industry news platform operated by Brunico Communications Ltd., founded in 2004. The website provides timely news, insights, and advertising opportunities targeted at media and marketing executives in Canada. It maintains a consistent brand presence with active content updates and social media engagement. Technically, the site is built on WordPress 6.7.1 with a moderate performance profile and good mobile optimization. The hosting infrastructure leverages AWS DNS services. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and modern security headers such as Content Security Policy. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism or GDPR-specific indicators. Advertising is managed primarily through Google Ad Manager and DoubleClick, with moderate user tracking via Jetpack and Google Tag Manager. Overall, the site is professional, trustworthy, and relevant to its target audience.

K

Kidscreen

kidscreen.com

49

Kidscreen is a well-established media publication specializing in news, business insights, and trend analysis for the kids entertainment industry. Founded in 1997, it holds a strong market position as a leading resource for professionals in this niche. The website leverages a WordPress CMS platform with modern technologies including jQuery, Google Tag Manager, Facebook Pixel, and Marketo for marketing and analytics, indicating a mature digital infrastructure. The site is hosted on AWS infrastructure, ensuring scalability and reliability. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to absence of visible privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the site is professional and trustworthy, with good content quality and user experience, but could improve in privacy and security transparency.

C

CIX Summit

cixsummit.com

60

CIX Summit, powered by Elevate, is a well-established Canadian technology event and startup awards program that connects promising tech founders, investors, and industry advisors. The website reflects a mature business with a clear market position as Canada's largest startup awards program and a key networking event in the tech ecosystem. The business model centers on event hosting, curated startup presentations, and facilitating investment deals. Technically, the site is built on WordPress with modern SEO and analytics tools, hosted behind Cloudflare DNS, and optimized for mobile and accessibility. Security posture is solid with HTTPS and domain locking, though DNSSEC is not enabled and no explicit cookie consent mechanism is present, which are areas for improvement. Privacy compliance is basic, with a privacy policy and terms of service present but lacking cookie consent and GDPR explicit indicators. Overall, the site is professional, trustworthy, and well-positioned in its niche, with recommendations to enhance security and privacy compliance to further strengthen trust and regulatory adherence.

B

Brunico Communications Ltd.

brunico.com

58

Brunico Communications Ltd. is a well-established Canadian media company specializing in trade publications and industry events for the media and entertainment sectors. Their portfolio includes several recognized brands such as Kidscreen, Realscreen, Playback, Strategy, NATPE, Media in Canada, and Stimulant. The company operates multiple international events and awards, positioning itself as a key connector and influencer in the media industry. The website reflects a professional and consistent brand presence targeting media professionals, marketers, and content creators. Technically, the website uses a moderate technology stack including jQuery, Google Analytics, and various UI libraries. Hosting appears to be on Amazon AWS infrastructure. The site is mobile optimized with basic accessibility features and SEO metadata. However, some technologies like jQuery 1.11.1 are outdated, and DNSSEC is not enabled, indicating room for technical modernization. From a security perspective, the site uses HTTPS and Google Analytics for tracking but lacks visible security headers, explicit security policies, and incident response contacts. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism or GDPR indicators. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is trustworthy and professional with a strong business credibility score. Improvements in privacy compliance, security headers, and technology updates would enhance the security posture and user trust.

V

Volksschule Langenthal

volksschule-langenthal.ch

59

Volksschule Langenthal is a public educational institution serving the Langenthal region in Switzerland. It operates multiple school centers and kindergartens, providing comprehensive primary and secondary education services. The website reflects a well-structured and professionally maintained digital presence, targeting parents, students, and community members. The institution emphasizes accessibility and user-friendly navigation, with clear contact channels and online service options. Technically, the website is built on the Swiss i-web.ch CMS platform, utilizing modern JavaScript modules and CSS with responsive design. The site includes interactive elements such as sliders and modals for contact, login, and search functionalities. Performance is moderate with good mobile optimization and accessibility features. Privacy compliance is addressed through visible privacy and cookie policies with consent mechanisms. From a security perspective, the site enforces HTTPS and includes secure login forms with password reset options. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the website's claims, indicating a legitimate and trustworthy domain. Overall, Volksschule Langenthal's website demonstrates a solid digital maturity level appropriate for a public education institution, with good content quality, technical implementation, and business credibility. Strategic improvements in security policy transparency and security headers could further enhance its security posture.

eMovingCH is an official Swiss government digital service designed to facilitate the mandatory registration of address changes for residents moving within Switzerland. The platform provides a user-friendly online interface to fulfill legal obligations efficiently and at no additional cost compared to in-person registration. The service is supported by the Swiss Confederation, cantons, and municipalities, positioning it as a trusted and authoritative resource for residents. Technically, the website is built using modern web technologies including Angular 19.2.9 and Font Awesome 6 for UI elements. It employs Matomo analytics for user tracking, indicating a preference for privacy-conscious analytics solutions. The site demonstrates good mobile optimization and accessibility, with a clear language selection feature supporting multiple Swiss national languages plus English. From a security perspective, the site uses HTTPS and shows no signs of exposed sensitive data or vulnerabilities in the provided HTML content. However, security headers are not explicitly detected, and there is no visible security policy or incident response contact information published. The WHOIS data is privacy protected or restricted, which is typical for government domains in Switzerland, and does not raise immediate concerns. Overall, the website presents a professional, trustworthy, and functional government service with moderate technical maturity and good privacy compliance. Strategic improvements could focus on enhancing security headers, publishing security policies, and improving SEO metadata to further strengthen trust and operational resilience.

R

Refline AG

refline.ch

61

Refline AG is a Swiss-based company specializing in applicant tracking system software designed to streamline and optimize recruiting processes for a diverse clientele including start-ups, SMEs, public sector entities, and large companies. The company emphasizes Swiss development, data protection compliance (GDPR and Swiss laws), and user-friendly, modular software solutions. Their market position is strong with over 30,000 users and more than 20 years of experience. Technically, the website employs modern web technologies such as jQuery and Font Awesome, is mobile optimized, and hosted on Swiss cloud infrastructure. Security posture is good with HTTPS enforced and secure form handling, though lacking some advanced security headers and explicit incident response policies. The absence of WHOIS data reduces transparency but the professional presentation and comprehensive contact information support legitimacy. Overall, the website is well-designed, content-rich, and trustworthy, with minor improvements recommended in privacy compliance and security best practices.

C

Crossiety

crossiety.app

65

Crossiety is a Swiss-based technology company operating a community platform, as evidenced by the login page analyzed. The website uses modern web technologies such as Ruby on Rails, Turbolinks, and Pusher for real-time features, alongside Matomo for analytics. The platform appears to target a general audience with a focus on community engagement. The website is mobile optimized and presents a professional design with consistent branding, although content on the login page is minimal and lacks descriptive business information or policies. From a security perspective, the site enforces HTTPS and includes CSRF protection tokens, indicating a baseline security posture. However, the absence of security headers and explicit privacy or cookie policies suggests room for improvement in compliance and security best practices. No vulnerabilities or suspicious elements were detected in the provided content. The WHOIS data aligns well with the website's Swiss origin and business nature, supporting legitimacy. Overall, the website scores moderately well in technical implementation and security but scores low on privacy compliance and business transparency due to missing policies and contact information. Strategic improvements in these areas would enhance trust and compliance.

H

Hotzehuus-Verein

hotzehuus.ch

54

Hotzehuus-Verein is a small non-profit cultural association based in Switzerland, dedicated to preserving and promoting the local history of Illnau-Effretikon. The organization manages the historic Hotzehuus building, offering it for rental for events and cultural activities, and publishes annual yearbooks documenting local stories. The website reflects a community-focused business model with clear services and a strong local cultural emphasis. Technically, the website is built on Joomla CMS with Yootheme Pro templates, leveraging UIkit for UI components and Leaflet.js for interactive maps. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements could be made, such as adding security headers and enhancing accessibility features. From a security perspective, the site uses HTTPS with a valid SSL certificate and includes CSRF tokens in forms, indicating basic security hygiene. There are no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and lack of a security.txt file or incident response contacts suggest room for improvement in security posture and transparency. Overall, the website is trustworthy and professional, but it lacks formal privacy and cookie policies, which impacts GDPR compliance. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and establishing a vulnerability disclosure mechanism to enhance security and compliance.

F

Foxtrail

foxtrail.ch

58

Foxtrail is a Swiss-based company specializing in interactive team and leisure experiences, combining elements of sightseeing, outdoor escape rooms, and scavenger hunts. The company targets a broad audience including friends, families, corporate teams, clubs, and school classes, offering over 60 trails across Switzerland. Their market position is strong within the hospitality and leisure sector, supported by a professional website with e-commerce capabilities for ticketing and merchandise. Technically, the site is built on WordPress with WooCommerce and Elementor, integrating modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Sendinblue. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements could be made by adding security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

S

Stadt Illnau-Effretikon Abteilung Bildung

schule-ilef.ch

64

Schule Illnau-Effretikon is a public educational institution serving the Illnau-Effretikon region in Switzerland. The website provides detailed information about various school levels including kindergarten, primary, secondary, and vocational preparatory year programs. It targets parents, students, and educational stakeholders in the local community, offering services such as school information, supplementary care, online forms, news, and event agendas. The institution is positioned as a regional education provider under the city administration of Illnau-Effretikon. Technically, the website is built on the ICMS platform by i-web.ch, utilizing modern web technologies including JavaScript and Matomo analytics for user tracking with consent. The site is mobile-optimized and accessible, with a clear navigation structure and good SEO practices. Hosting appears to be Swiss-based, supporting performance and data privacy compliance. From a security perspective, the site enforces HTTPS and uses secure login forms. However, it lacks published formal security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a visible privacy policy and cookie consent mechanism, aligning with GDPR requirements. Overall, the website demonstrates a solid digital presence with good content quality, technical implementation, and business credibility. Strategic improvements could focus on enhancing security transparency and incident response readiness to further strengthen trust and compliance.

M

myblueplanet

myblueplanet.ch

51

myblueplanet is a Swiss non-profit climate movement dedicated to promoting sustainable and climate-friendly living among individuals, companies, schools, and authorities in Switzerland. The organization offers a variety of projects and initiatives such as ClimateActions 4 Companies, ClimateLab workshops, E-learning, and community engagement platforms like MyBlueTree and Give&Take. They maintain a strong partnership ecosystem including WWF Schweiz and actively engage their audience through multilingual content and social media channels. The website reflects a mature digital presence with clear navigation, professional design, and comprehensive content tailored to their target audience.

B

Bildungszentrum Limmattal

bzlt.ch

47

Bildungszentrum Limmattal is a vocational education center based in Zürich, Switzerland, specializing in logistics, recycling, and technology training. The institution offers foundational and continuing education programs targeting learners, students, and professionals in related sectors. The website reflects a well-structured educational service provider with clear contact information and a consistent brand presence. Technically, the site uses modern web technologies including Craft CMS, jQuery, and integrates Google Analytics and Tag Manager for user insights. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and incident response information suggests room for improvement. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the domain registration aligns with the business identity, supporting legitimacy and trustworthiness.

G

Gemeinde Uitikon

uitikon.ch

57

The website www.uitikon.ch serves as the official digital presence of the municipality of Uitikon in Switzerland. It provides residents and visitors with comprehensive information about local government services, politics, events, and online administrative functions. The site is well-structured, user-friendly, and targets the local community effectively. It offers key services such as an online service portal (Online-Schalter), event listings, and contact details for municipal departments. The website is positioned as a trusted source for municipal information and e-government services in the region. From a technical perspective, the site employs modern web technologies including JavaScript modules, CSS variables, and integrates analytics tools like Matomo and Google Tag Manager. It uses HTTPS to secure communications and appears to be mobile-optimized with good accessibility features. The content is well-organized with clear navigation and responsive design elements, contributing to a positive user experience. Security-wise, the website benefits from HTTPS encryption and secure form handling but lacks explicit security headers and a published incident response or vulnerability disclosure policy. Privacy compliance is limited due to the absence of a visible privacy policy and cookie consent mechanism, which are recommended for GDPR adherence. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a solid digital infrastructure suitable for a local government entity, with room for improvement in privacy and security policy transparency. Strategic enhancements in these areas would strengthen trust and compliance, ensuring better protection for users and the municipality alike.

S

Stadt Rapperswil-Jona

mitwirken-rapperswil-jona.ch

65

The website mitwirken-rapperswil-jona.ch serves as the official digital participation platform for the city of Rapperswil-Jona, Switzerland. It enables citizens to engage with local government projects and provide feedback in a secure and user-friendly manner. The platform emphasizes ease of use, data privacy, and efficient communication between the municipality and its residents. The site currently has no active projects but maintains a professional and consistent presentation aligned with municipal branding. Technically, the website employs modern web technologies including React and ES modules, with assets hosted on AWS S3. It uses Font Awesome for icons and enforces a strict Content-Security-Policy to enhance security. The site is mobile-optimized and performs moderately well, though there is room for improvement in SEO and accessibility features. From a security perspective, the platform demonstrates strong practices such as HTTPS enforcement, comprehensive security headers, and local data storage within Switzerland. However, it lacks a cookie consent mechanism and a dedicated security or incident response policy page. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professionally managed by the city government. Strategic recommendations include implementing cookie consent, publishing terms of service and security policies, and enhancing accessibility and SEO to improve compliance and user experience.

R

Region Rapperswil-Jona Tourismus

rapperswil-zuerichsee.ch

60

The website rapperswil-zuerichsee.ch serves as the official travel guide for the Rapperswil and Zurichsee region in Switzerland, providing comprehensive tourism information including events, accommodations, and local attractions. It targets tourists and visitors seeking regional insights and services, positioning itself as a key regional tourism portal. The business model focuses on tourism promotion and visitor engagement, supported by clear contact information and official branding. Technically, the site is built using modern web technologies including Nuxt.js and Tailwind CSS, with integrations for Google Tag Manager, Facebook Pixel, and a consent management platform ensuring GDPR compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the website enforces HTTPS, employs standard security headers, and integrates cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy or incident response page, and no vulnerability disclosure mechanism is present, which could be areas for improvement. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing a formal security policy, establishing an incident response contact, and considering a vulnerability disclosure page to enhance transparency and trust.

G

Gemeinde Schwyz

gemeindeschwyz.ch

65

Gemeinde Schwyz operates as the official municipal government website for the community of Schwyz, Switzerland. It provides residents and visitors with comprehensive information about local governance, services, events, and community resources. The site serves as a central hub for accessing online services such as the online counter, event listings, and administrative contacts, positioning itself as a trusted and authoritative source for municipal information. Technically, the website employs modern web technologies including responsive design, ES modules, and Matomo analytics for privacy-conscious user tracking. The use of the i-web CMS platform indicates a specialized content management system tailored for municipal websites. The site is well-optimized for mobile devices and accessibility, with clear navigation and structured content. From a security perspective, the website enforces HTTPS and uses secure form submissions for login. While no explicit security policy or incident response contacts are published, the site demonstrates good privacy compliance with visible privacy and cookie policies and consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected, and the domain registration aligns with the official municipal identity, supporting high trustworthiness. Overall, Gemeinde Schwyz presents a professional, secure, and user-friendly digital presence for the municipality. Strategic improvements could include publishing formal security policies and incident response information to enhance transparency and preparedness.

The website www.freibadherisau.ch is currently inaccessible due to a Cloudflare security challenge page that blocks access to any actual content. This prevents any meaningful extraction of business, contact, or policy information. The site appears to be protected by Cloudflare's Turnstile captcha mechanism, indicating a focus on security but also limiting external analysis. Without access to the real content, no assessment of the business model, services, or market position can be made. The technical infrastructure is limited to Cloudflare's security platform, with no visible CMS or additional technologies. Security posture cannot be fully evaluated due to lack of accessible data. Overall, the site is effectively blocked for analysis, resulting in a low AI score and unknown compliance or trustworthiness.

indico electronic AG is a Swiss-based technology company specializing in automation, embedded systems, and software solutions including database systems, PC software, visualization, and control systems. Established in 1989, the company holds certified partnerships with Siemens Automation & Drive and Saia®PCD, reflecting a strong market position in industrial automation. Their offerings include consulting, project management, software development, and system solutions tailored for industrial clients. The website is professionally designed using WordPress with SEO and cookie consent plugins, indicating a mature digital presence. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security and incident response policies are not published. Overall, the company demonstrates high legitimacy and trustworthiness with clear contact information and compliance with GDPR.

S

Stadt Kloten

kloten.ch

58

The Stadt Kloten website serves as the official digital portal for the municipality of Kloten, Switzerland. It provides comprehensive information and services to residents, businesses, and visitors, including online administrative services, event listings, political information, and community resources. The site targets a broad audience within the local community and supports multiple languages to accommodate diverse users. The business model is that of a government entity focused on public service delivery and community engagement. Technically, the website employs modern web technologies such as Bootstrap for responsive design, Matomo for privacy-conscious analytics, and a modular JavaScript approach. The site is mobile-optimized and accessible, with clear navigation and structured content. Hosting appears to be local or regional, supporting good performance and reliability. From a security perspective, the site enforces HTTPS, includes several security headers, and encourages multi-factor authentication for user accounts. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent mechanism and a dedicated security or incident response policy page are areas for improvement to enhance compliance and transparency. Overall, the website presents a trustworthy and professional face for the city of Kloten, with strong business credibility and a solid technical foundation. Strategic enhancements in privacy compliance and security policy transparency would further strengthen its posture and user trust.

R

Regionalwerke AG Baden

regionalwerke.ch

41

Regionalwerke AG Baden is a regional energy utility company serving private households and businesses in the Baden region of Switzerland. They provide a comprehensive range of energy and water services including electricity, gas, water, heating, cooling, and e-mobility solutions. The company emphasizes renewable energy and sustainability, supported by certifications such as ISO/IEC 27001:2022 and ISO 9001. Their website reflects a professional and customer-focused approach with clear navigation, comprehensive service descriptions, and multiple customer engagement channels. Technically, the website is built on TYPO3 CMS and integrates modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Siteimprove Analytics. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security posture is strong with HTTPS enforced, IP anonymization in analytics, and ISO 27001 certification, although some security headers could be improved. Overall, the website and business demonstrate a mature digital presence with strong compliance to privacy regulations including GDPR. Contact information is transparent and easily accessible. No critical vulnerabilities or security issues were detected in the content. The domain registration data aligns well with the business identity, supporting legitimacy and trust. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and providing explicit data protection officer contact details to further strengthen trust and compliance.

E

eichels GmbH

eichels-event.com

50

eichels GmbH is a German-based event management and marketing company specializing in emotional marketing, event planning, innovation marketing, and network strategies. The company targets corporate clients seeking impactful and sustainable event experiences. Their website is professionally designed using TYPO3 CMS and modern frontend libraries, providing a good user experience with mobile optimization and clear navigation. Contact information and privacy compliance measures such as cookie consent and privacy policy are present, supporting trustworthiness. However, the absence of WHOIS registration data raises concerns about domain legitimacy and requires further verification. Security posture is moderate with HTTPS enabled and spam-protected emails, but lacks visible security headers and explicit security policies. Overall, the website is functional and professional but would benefit from enhanced security practices and domain registration transparency.

H

Handicap Kickers Hannover e.V.

handicap-kickers.de

57

Handicap Kickers Hannover e.V. is a non-profit inclusive youth football club based in Germany, focusing on integrating children and adolescents with and without handicaps. The organization operates multiple training locations and organizes inclusive football leagues and tournaments, positioning itself as a regional leader in inclusive sports. The website is built on WordPress with a modern theme and plugins, demonstrating a moderate level of digital maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and GDPR-compliant cookie consent mechanisms, though security headers and explicit security policies are absent. Overall, the site is trustworthy, professional, and serves its community effectively.

I

Indo-German Center For Higher Education

igche.de

48

The Indo-German Center For Higher Education (IGCHE) operates as a consortium of German universities offering bilingual engineering degree programmes that facilitate student exchange and cultural integration between India and Germany. The website clearly communicates its educational mission, target audience of prospective engineering students, and key services including German language training and internships. Technically, the site is built on RapidWeaver CMS with Stacks, uses Matomo for privacy-conscious analytics, and demonstrates good mobile responsiveness and navigation clarity. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and incident response policies are absent. Overall, the site is professional, trustworthy, and well-aligned with its educational objectives.

H

Hochschulen für Angewandte Wissenschaften Baden-Württemberg e.V.

hochschulen-bw.de

57

Hochschulen für Angewandte Wissenschaften Baden-Württemberg e.V. (HAW BW e.V.) is a regional association representing 21 state and 3 church-affiliated universities of applied sciences in Baden-Württemberg, Germany. The organization fosters collaboration among member institutions and advocates their interests in public and political spheres. The website reflects a professional and comprehensive digital presence, targeting students, academic stakeholders, and policymakers. It offers information on services, research, study programs, and upcoming events, positioning itself as a key regional educational entity. The technical infrastructure is based on WordPress CMS with the Avada theme, enhanced by plugins such as Slider Revolution, Logo Carousel Pro, and Matomo for analytics. Hosting is provided by kasserver.com, with modern web technologies and good mobile optimization. The site implements GDPR-compliant privacy and cookie policies with a consent mechanism, indicating a mature approach to privacy and data protection. Security posture is solid with HTTPS enforced, cookie consent, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are absent, representing an area for improvement. The website is free from WAF or security challenge blocks, allowing full content accessibility. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance suitable for an educational association. Strategic recommendations include enhancing security transparency, publishing incident response information, and adopting advanced HTTP security headers to further strengthen the security posture.

B

BÖIA

innenarchitekten.at

54

BÖIA is an Austrian professional association focused on interior architecture, providing resources, membership information, and industry news to interior architects and related professionals. The website is built on WordPress using Elementor and several plugins, offering a modern and responsive design with good user experience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and visible security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is legitimate and consistent with its business purpose but could improve in privacy and security transparency.