Security Directory

E

ELCA Security

elcasecurity.ch

85

ELCA Security is a Swiss-based cybersecurity company specializing in securing IT infrastructure, identities, and business operations for both businesses and government entities. The company positions itself as a robust security solutions provider with a focus on anticipating, protecting, detecting, and defending against cyber threats. Their website reflects a professional and modern digital presence, leveraging advanced web technologies such as Next.js and React, and integrating reputable third-party services like Stripe for payments and Matomo for privacy-focused analytics. The site is well-optimized for mobile devices and includes comprehensive cookie consent management via Cookiebot, demonstrating a commitment to privacy compliance.

F

FIBA

fiba.basketball

71

FIBA is the global governing body for basketball, providing official news, event schedules, rankings, and media content through its website. The site serves basketball fans, athletes, and media professionals worldwide, positioning itself as the authoritative source for basketball-related information. Technically, the website employs modern frameworks such as Next.js and React, integrates Google Tag Manager and reCAPTCHA for analytics and security, and uses Cloudinary for media delivery. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is strong with HTTPS enforcement, security headers, and consent management, though explicit security policies and incident response contacts are not publicly visible. Overall, the website is professional, trustworthy, and safe for general audiences.

A

ALEKS & SHANTU GmbH

aleksundshantu.com

53

ALEKS & SHANTU GmbH is a Berlin-based full-stack digital agency specializing in web development, design, animation, film production, and digital marketing services. With over 30 employees and a portfolio of more than 1000 projects, the company serves clients across diverse sectors including art, culture, industry, medicine, TV, and technology. The agency emphasizes high aesthetic standards, scalability, and technical precision, positioning itself as a trusted partner for digital-first movers and brands seeking impactful online presence. Technically, the website leverages modern frameworks such as Next.js and React, incorporates advanced multimedia elements like Lottie animations and video content, and demonstrates strong SEO and accessibility practices. The site is mobile-optimized and performs well, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, includes key security headers, and maintains secure contact forms with clear privacy policies. However, the absence of a published security policy and incident response contacts suggests room for improvement in formal security governance. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional, trustworthy, and well-structured digital presence. The main risk factor is the lack of WHOIS domain registration data, which raises questions about domain legitimacy and registration transparency. This should be investigated further to ensure full trustworthiness.

Hexagon AB is a global leader in measurement technologies, providing advanced solutions that enhance productivity, quality, safety, and sustainability across vital industries such as construction, manufacturing, mining, and transportation. The company leverages cutting-edge technologies including robotics, AI, digital twins, and spatial intelligence to deliver innovative products and services tailored for enterprise clients. Hexagon's market position is strong, supported by numerous customer success stories and a consistent brand presence. Technically, the website is built on modern frameworks like Next.js and React, with content managed via Sitecore Content Hub. The site demonstrates excellent performance, mobile optimization, and SEO practices. Security is robust with HTTPS enforced and multiple security headers implemented, alongside a cookie consent mechanism indicating privacy awareness. However, explicit privacy policies, terms of service, and security incident response information are not visibly published. The security posture is solid with no detected vulnerabilities or exposed sensitive data. WHOIS data confirms the legitimacy of the domain and company information, aligning with the website's claims. The absence of direct contact emails or phone numbers and lack of published security policies represent areas for improvement. Overall, Hexagon's website reflects a mature, enterprise-grade digital presence with strong business credibility and technical implementation. Strategic enhancements in privacy and security transparency would further strengthen trust and compliance.

E

ELCA Informatique SA

elca.ch

80

ELCA Informatique SA is a leading independent Swiss IT company specializing in business and technology solutions, including IT consulting, software development, and systems integration. With over 2300 employees and a turnover of CHF 339 million in 2024, ELCA holds a strong market position in Switzerland and Europe, serving diverse sectors such as energy, transportation, finance, and public administration. The company emphasizes tailored digital transformation solutions and maintains a broad portfolio of subsidiaries and partner companies. Technically, ELCA employs modern web technologies including Next.js and React, integrates advanced analytics tools like Matomo and Hotjar, and uses robust consent management via Cookiebot. The website is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and secure form handling, although a dedicated security policy and incident response contact channels are not explicitly published. Overall, ELCA demonstrates a professional, trustworthy online presence aligned with its business stature.

A

Adcubum AG

adcubum.com

68

Adcubum AG is a leading Swiss software company specializing in core insurance systems for the health and accident insurance sectors. Recently acquired by the Helsana Group, Adcubum continues to operate independently, providing modular, cloud-capable software solutions such as Syrius ad.Cloud. The company targets insurance providers in Switzerland, emphasizing digital transformation and operational efficiency. The website reflects a mature digital presence with modern technologies including React and Next.js, hosted on Vercel, and integrates comprehensive cookie consent and privacy compliance mechanisms. Security posture is strong with HTTPS, security headers, and CSRF protections in place. However, WHOIS data is unavailable, which slightly impacts transparency but does not detract from the overall legitimacy given the business context and parent company ownership. The site is well optimized for performance, mobile use, and SEO, with clear branding and professional content. No critical security vulnerabilities or compliance gaps were detected in the analyzed content.

M

Mimacom AG

mimacom.com

77

Mimacom AG is a Swiss-based software engineering and consulting company specializing in digital transformation services including cloud, data, automation, and AI. The company targets enterprise clients across multiple industries such as banking, insurance, manufacturing, retail, and life sciences. Mimacom positions itself as a trusted partner with a comprehensive portfolio of services and a strong customer base. Technically, the website is built on modern frameworks like Next.js and React, with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not prominently published. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for companies of this nature. Overall, Mimacom demonstrates a mature digital presence with professional branding and compliance practices.

I

iJUG Interessenverbund der Java User Groups e.V.

ijug.social

64

The website ijug.social serves as a decentralized social network platform powered by Mastodon, specifically targeting the Java User Groups community under the non-profit organization iJUG Interessenverbund der Java User Groups e.V. It provides a niche social networking service within the fediverse, fostering community engagement and collaboration among Java enthusiasts. The platform is administered by the iJUG e.V. infrastructure team, with clear contact information and a professional presentation. Technically, the site leverages Mastodon version 4.4.5 with modern web technologies including React and ES modules, offering a responsive and user-friendly experience. Security posture is moderate, with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. Privacy compliance is supported by a clear privacy policy, though terms of service and cookie policies are absent. Overall, the domain registration is privacy protected but consistent with the organization's identity, indicating legitimacy. The site is free from adult or questionable content, targeting a general audience of technology professionals and enthusiasts.

T

TheFork

thefork.at

68

TheFork is a prominent online restaurant reservation platform operating primarily in Austria and across Europe, offering consumers the ability to book tables at top restaurants with discounts and a loyalty points program. As a subsidiary of TripAdvisor, it holds a strong market position in the hospitality sector. The website demonstrates a modern technical infrastructure leveraging React and Next.js frameworks, with integrations for bot protection (DataDome), payment processing (Stripe), and cookie consent management (Evidon). Security posture is robust with HTTPS enforcement and appropriate security headers, although explicit privacy and terms of service pages are not publicly linked, which is a compliance gap. Overall, the site is professionally designed, mobile-optimized, and trustworthy, with active social media presence and clear branding.

L

Lucerne Tourism

luzern.com

59

The website www.luzern.com serves as the official tourism guide for the city of Lucerne and the Lake Lucerne region in Switzerland. It provides comprehensive information on sightseeing, events, accommodations, excursions, and travel planning, targeting tourists and visitors. The site is well-branded and professionally designed, reflecting its role as a regional tourism authority. Technically, it is built on TYPO3 CMS with modern frontend frameworks such as Vue.js and React, ensuring a fast, mobile-optimized, and accessible user experience. Security best practices are observed with HTTPS and security headers, though explicit security policies and incident response contacts are not published. The absence of WHOIS registration data raises concerns about domain legitimacy, but the website content and structure appear trustworthy and official. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is a reliable resource for tourism information but would benefit from clarifying domain registration and enhancing security transparency.

P

Pinterest, Inc.

pinterest.ch

74

Pinterest, Inc. operates a leading visual discovery platform that enables users to find and curate ideas such as recipes, home decor, and style inspiration. The company holds a strong market position as a major social media and e-commerce platform, leveraging advertising and content curation as its primary business model. The website demonstrates a high level of digital maturity, employing modern web technologies including React, advanced bot mitigation via ReCAPTCHA Enterprise, Arkose Labs, and fraud detection through Sardine.ai. Hosting is managed through Amazon AWS infrastructure, ensuring scalability and performance. Security posture is robust with HTTPS enforcement, comprehensive Content Security Policy, and multiple security integrations, reflecting a mature security culture. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations and user consent mechanisms. Overall, the website is professional, trustworthy, and optimized for performance and accessibility.

Redi-Rock is a company specializing in precast concrete retaining wall solutions, targeting engineers and construction professionals worldwide. Their website presents a professional image with a focus on engineering and land management solutions. The business model is B2B manufacturing and supply, positioning Redi-Rock as an international player in the construction materials sector. The website content is relevant and well-structured, supporting their market positioning effectively. Technically, the site is built on a modern React and Gatsby framework, hosted on Netlify, ensuring good performance and mobile optimization. However, the absence of privacy and cookie policies, as well as lack of visible contact information, limits the site's privacy compliance and business credibility. Security posture is solid with HTTPS and security headers implemented, but no vulnerability disclosure or incident response information is provided. Overall, the site is professional and functional but would benefit from enhanced transparency and compliance documentation.

W

Wackenhut

wackenhut.de

57

Wackenhut is a German company established in 1948, specializing in innovative mobility and transportation services. The website titled 'World of WACKENHUT' presents a professional and consistent brand image, targeting a general audience interested in mobility solutions. The site features client logos such as Mercedes and AMG, indicating a reputable market position within the transportation sector. Technically, the website is built using modern technologies including React and Next.js, with good mobile optimization and moderate performance. However, some technical aspects such as security headers are missing, and no CMS or hosting provider details are evident from the content. Security-wise, the site uses HTTPS but lacks important security headers and published security policies, which could be improved to enhance trust and compliance. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, which is a significant gap given GDPR requirements. Overall, the website is safe, professional, and functional but would benefit from enhanced privacy and security practices to improve its risk profile and user trust.

S

Sempachersee Tourismus

sempachersee-tourismus.ch

57

Sempachersee Tourismus operates a regional tourism website focused on promoting the Sempachersee area in Switzerland. The site provides comprehensive information on local events, leisure activities, accommodation options, and regional highlights, targeting tourists and visitors interested in the region. The business model centers on regional tourism promotion and information dissemination, positioning itself as a key regional tourism authority. Technically, the website is built on TYPO3 CMS with modern JavaScript frameworks such as Vue.js and React, integrating analytics tools like Google Analytics, Google Tag Manager, and Piwik PRO. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is adequate with HTTPS enforced but lacks security headers and explicit incident response policies. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. WHOIS data confirms the domain's legitimacy and consistency with the business focus. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security practices.

C

Camping Tamaro Resort

campingtamaro.ch

66

Camping Tamaro Resort is a well-established hospitality business located in Tenero, Switzerland, offering camping pitches, bungalows, and various services including a restaurant and wellness activities. The website is professionally designed using modern technologies such as Next.js and DatoCMS, providing a good user experience with mobile optimization and clear navigation. Security posture is strong with HTTPS and security headers properly configured, though privacy compliance could be improved by adding explicit privacy and terms of service pages. The business maintains an active social media presence and integrates booking services via a partner domain. Overall, the site is trustworthy and suitable for its target audience.

V

Victorinox

victorinox.com

72

Victorinox is a well-established Swiss brand known globally for its Original Swiss Army Knife and a broad range of quality products including cutlery, watches, travel gear, and fragrances. The website reflects a mature e-commerce platform with a strong brand presence and comprehensive product offerings targeting general consumers seeking premium Swiss quality. Technically, the site leverages modern web technologies such as React and Next.js, hosted on SAP cloud infrastructure, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS, security headers, and monitoring scripts in place, although the absence of public WHOIS data slightly impacts trust assessment. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and user-friendly, supporting Victorinox's market position as a premium retail brand.

B

blue Cinema

bluecinema.ch

64

blue Cinema is a regional cinema chain operating in Switzerland, offering movie screenings, events, and ticket booking services. The website targets general moviegoers and provides up-to-date movie listings and showtimes. The business model focuses on entertainment and leisure through cinema experiences, with additional offerings such as games and special events. The company maintains a consistent brand presence and a professional online interface.

A

Administration cantonale valaisanne

vs.ch

50

The website www.vs.ch serves as the official digital portal for the Administration cantonale valaisanne, representing the government of the Canton of Valais in Switzerland. It provides comprehensive information about governmental organization, public services, news, and thematic portals targeting residents and stakeholders within the canton. The site is well-branded with consistent governmental logos and offers multilingual support primarily in French and German. The business model is purely governmental, focusing on public service and information dissemination without commercial intent. Technically, the site is built on the Liferay CMS platform, leveraging modern web technologies including React, Alloy UI, AngularJS legacy components, and Matomo for analytics. The infrastructure appears robust with good mobile optimization, accessibility, and SEO practices. The site uses HTTPS with strong security headers and nonce-based Content Security Policy, indicating a mature security posture. Cookie consent mechanisms are implemented, reflecting GDPR compliance. Security-wise, the site demonstrates good practices such as secure authentication endpoints (OAuth2), no visible vulnerabilities, and no exposed sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, the site is trustworthy, professional, and safe for general audiences. Strategically, the site should consider publishing detailed security and incident response policies, adding vulnerability disclosure information, and enhancing contact transparency to further strengthen trust and compliance.

S

SVGator

svgator.com

67

SVGator is a technology-focused company providing an online SVG animation creation platform. Their service targets web designers, developers, and businesses seeking to create and integrate SVG animations easily into websites and applications. The website is professionally designed, mobile-optimized, and uses modern web technologies such as React and Gatsby, indicating a mature digital infrastructure. Security posture is strong with HTTPS and security headers properly implemented, although explicit security policies and incident response information are not published. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or data unavailability, which slightly reduces trust from a domain registration perspective. Overall, the website is safe, professional, and well-structured, serving its niche effectively.

S

Swiper

swiperjs.com

59

Swiper is a leading technology company specializing in a modern mobile touch slider library widely adopted by millions of developers and top global brands. The company offers a modular, high-performance slider solution compatible with popular frameworks such as React, Vue, and Svelte. Their business model includes an open-source core product complemented by premium offerings like Swiper Studio and UI Initiative, targeting developers and businesses seeking efficient UI components. Technically, the website demonstrates a mature infrastructure with modern JavaScript frameworks, fast performance, and mobile optimization. Hosting is managed via Cloudflare, ensuring reliable delivery. Security posture is solid with HTTPS and domain transfer protections, though lacks advanced security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional, trustworthy, and well-positioned in the technology market.

I

Infomaniak Network SA

infomaniak.ch

77

Infomaniak Network SA is a Swiss-based sovereign cloud service provider specializing in hosting, domain registration, and collaborative tools. Positioned as a leading independent cloud provider in Europe, Infomaniak emphasizes data sovereignty, privacy, and security, hosting its solutions in the heart of Europe. The company targets businesses and professionals seeking secure and compliant cloud services. The website reflects a mature digital presence with excellent design, clear navigation, and comprehensive content that aligns with its business objectives. Technically, the website is built using modern frameworks such as React and Gatsby, ensuring fast performance and mobile optimization. The infrastructure appears robust, likely self-hosted, with strong SEO and accessibility features. Security posture is strong, with HTTPS enforced, multiple security headers, and no visible vulnerabilities. The company holds ISO 27001 certification and maintains transparent security and privacy policies, including GDPR compliance and a dedicated data protection officer. Overall, Infomaniak demonstrates a high level of professionalism and trustworthiness. The absence of WHOIS data is a limitation but does not detract significantly from the site's credibility given the strong business and security indicators. Strategic recommendations include maintaining up-to-date security audits, enhancing incident response transparency, and continuing user education on security best practices.

I

Issuu Inc.

issuu.com

76

Issuu Inc. operates a mature and well-established digital publishing platform that transforms PDFs and other document types into interactive flipbooks and various shareable content formats. The company targets individual creators, marketers, publishers, and enterprises, offering a comprehensive suite of tools for content creation, publishing, sharing, and analytics. Their market position is strong, supported by integrations with major platforms like Canva, HubSpot, and Adobe, and a clear business model that includes freemium and paid subscription plans with commission-free digital sales. Technically, Issuu leverages modern web technologies including React and Next.js, hosted on AWS infrastructure, with performance and mobile optimization rated as excellent. The website employs robust tracking and consent management tools such as Google Tag Manager and Cookiebot, ensuring compliance with privacy regulations. Security posture is solid with HTTPS enforcement, domain locking, and bot protection via reCAPTCHA, though DNSSEC is not enabled, representing a minor area for improvement. From a security perspective, the platform demonstrates good practices but lacks publicly available dedicated security policies or incident response contacts. No vulnerabilities or suspicious activities were detected. The domain registration data aligns well with the business claims, reinforcing legitimacy and trustworthiness. Overall, Issuu presents a professional, secure, and privacy-conscious digital publishing service with a high level of technical maturity and business credibility. Strategic recommendations include enabling DNSSEC, publishing explicit security and vulnerability disclosure policies, and enhancing incident response transparency to further strengthen trust and compliance.

C

Copybara

copybara.com

59

Copybara is a technology company specializing in AI-powered continuous copy testing and optimization for marketers and growth teams. Their SaaS platform automates the process of A/B testing for ads and landing pages, enabling rapid experimentation and learning without requiring engineering resources. The company positions itself as a niche player focused on accelerating copy testing at scale to improve marketing performance. Technically, the website is built using modern frameworks such as Next.js and React, hosted on AWS infrastructure. The site demonstrates good performance, mobile optimization, and SEO practices. However, some security enhancements such as enabling DNSSEC and implementing security headers could improve the overall posture. The site uses third-party marketing and tracking scripts including Google Tag Manager and Leadsy.ai. From a security perspective, the site enforces HTTPS and has domain transfer protections in place, but lacks explicit security policies, incident response contacts, and cookie consent mechanisms. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is basic, with a privacy policy present but no clear GDPR compliance statements or cookie consent. Overall, the website is professional and trustworthy with moderate risk. Strategic improvements in privacy compliance, DNS security, and security policy transparency are recommended to enhance trust and security maturity.

J

Jimdo

jimdo.com

73

Jimdo is a technology company specializing in providing an all-in-one platform for small businesses to create websites, online stores, and manage bookings, logos, SEO, analytics, domains, and hosting. The company positions itself as a comprehensive solution for entrepreneurs and small business owners seeking easy-to-use digital tools. The website reflects a mature digital presence with a modern tech stack including React and Gatsby, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS, security headers, and privacy compliance, although explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data limits domain registration insights but does not detract from the overall legitimacy and professionalism of the site. Strategic recommendations include publishing detailed security and incident response policies and enhancing transparency around vulnerability disclosures.

Z

Zürcher Arbeitsgemeinschaft Lehrpersonenweiterbildung

zal.ch

52

ZAL (Zürcher Arbeitsgemeinschaft Lehrpersonenweiterbildung) is a Swiss educational organization focused on providing continuing education and professional development courses for teachers, school assistants, school leadership, and childcare staff in the Canton of Zürich. The website offers a broad range of services including in-person and online courses, seminars, coaching, and administrative support for school-related training. The organization positions itself as a regional leader in teacher training with a strong emphasis on practical, affordable, and accessible learning opportunities. Technically, the website is built on WordPress with a modern tech stack including React, Backbone.js, and jQuery. It integrates several plugins for SEO (Yoast), consent management (Ownbit Consent Manager), social media feeds (Instagram via Spotlight), and email marketing (Mailchimp). The site is mobile-optimized, SEO-friendly, and employs HTTPS with strong security headers, reflecting a mature digital infrastructure. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, cookie consent management, and spam protection via Google reCAPTCHA. However, explicit security policies and incident response information are not published, representing an area for improvement. No vulnerabilities or suspicious activities were detected. Overall, ZAL's website is professional, trustworthy, and compliant with GDPR requirements. It effectively serves its target audience with clear contact information, comprehensive content, and transparent privacy practices. The domain registration data aligns well with the business claims, supporting its legitimacy and credibility.

Berufsbildung.ch is the official Swiss portal dedicated to vocational education, providing comprehensive information and practical tools for various stakeholders including vocational trainers, apprentices, and educational institutions. Supported by the Swiss cantons and federal authorities, it holds a strong market position as a trusted resource in the education sector. The website offers key services such as downloadable documents, quality assessment tools, and guidance for vocational trainers, enhancing the vocational training ecosystem in Switzerland. Technically, the site leverages modern web technologies including React and Next.js, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement and no visible vulnerabilities, though some security headers could be explicitly documented. Privacy compliance is good with a clear privacy policy, though cookie consent mechanisms could be improved. Overall, the site demonstrates high professionalism, trustworthiness, and alignment with its official educational mission.

S

Swiss Red Cross

redcross.ch

67

The Swiss Red Cross is a well-established non-profit humanitarian organization dedicated to improving the lives of disadvantaged and vulnerable people in Switzerland and globally. The website reflects its mission with clear messaging, multilingual support, and strong calls to action for donations and volunteering. The organization holds recognized certifications such as ZEWO, reinforcing its credibility and trustworthiness. Technically, the website is built on modern frameworks like Next.js and React, with integration of analytics and consent management tools such as Google Tag Manager and Usercentrics. The site demonstrates excellent performance, mobile optimization, and accessibility features, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs standard security headers, and manages cookie consent effectively. However, it lacks a dedicated security policy or incident response page and does not provide a vulnerability disclosure program, which are areas for improvement. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic enhancements in security transparency and incident response readiness would further strengthen its security posture.

I

Infomaniak Network SA

infomaniak.com

78

Infomaniak Network SA is a well-established Swiss cloud service provider specializing in sovereign cloud hosting, domain registration, and collaborative tools. Founded in 1994, the company positions itself as a leader in European independent cloud services, emphasizing data sovereignty and confidentiality. Their target audience primarily includes businesses and professionals seeking secure and compliant cloud solutions. The website reflects a mature business model with a strong market presence in the technology sector, particularly within Switzerland and Europe. Technically, the website is built using modern frameworks such as Gatsby and React, ensuring fast performance, mobile optimization, and good accessibility. Security is robust, with HTTPS enforced, comprehensive security headers, and ISO 27001 certification, indicating a strong commitment to information security and privacy. Privacy policies and GDPR compliance are clearly articulated, with mechanisms for cookie consent and data protection officer contact information readily available. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity, making it a reliable platform for its users.

A

Adform

adform.com

71

Adform is a leading advertising technology company providing a powerful and safe media buying platform known as Adform FLOW. With over 20 years of innovation and Big 5 validation, Adform serves global clients including advertisers and publishers, enabling them to manage omnichannel advertising campaigns with precision and control. The platform emphasizes data ownership, identity solutions, and omnichannel activation, positioning itself as a trusted partner in the adtech ecosystem. Technically, the website leverages modern web technologies including React, Typekit fonts, and integrates advanced consent management via OneTrust CookiePro. It employs multiple tracking and marketing tools such as Facebook Pixel, LinkedIn Insight Tag, Salesloft, and Piwik Pro analytics, all managed with user consent mechanisms. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. From a security perspective, the site enforces HTTPS and uses cookie consent banners to comply with privacy regulations. However, explicit security headers are not evident, and no security.txt or incident response contacts are published, which could be improved. The WHOIS data for the subdomain is unavailable, which is typical and not a concern given the strong brand presence and consistent content. Overall, Adform's website demonstrates a mature digital presence with strong business credibility, good privacy compliance, and a solid security posture. Strategic improvements in security header implementation and incident response transparency would further enhance trust and resilience.

B

Brevo

newsletter2go.com

68

Brevo operates as a technology company specializing in email marketing and newsletter management services, including providing login portals for Newsletter2go users. The website is professionally designed, targeting business customers and marketers seeking email marketing solutions. It leverages modern web technologies such as WordPress, React, and Yoast SEO to deliver a functional and SEO-optimized user experience. The site integrates with partner domains like newsletter2go.de and sendinblue.com, indicating a collaborative ecosystem. However, the absence of WHOIS data for the domain www.brevo.com raises concerns about domain registration transparency, although the website content and contact information appear legitimate and professional. From a technical perspective, the website uses a modern tech stack with React and WordPress CMS, ensuring good mobile optimization and SEO practices. Performance is moderate, with no detected blocking or WAF challenges. Security posture is decent with HTTPS enforced and secure login forms, but lacks visible security headers and cookie consent mechanisms, which are recommended for enhanced compliance and protection. Security evaluation shows no immediate vulnerabilities or exposed sensitive data, but the lack of explicit security policies and incident response contacts suggests room for improvement in security governance. Privacy compliance is partially met with a clear privacy policy and terms of service linked, but cookie consent and GDPR explicit indicators are missing. Overall, the website is trustworthy and professional but would benefit from improved transparency and security best practices. Strategically, Brevo should focus on enhancing domain registration transparency, implementing comprehensive security headers, and deploying cookie consent mechanisms to improve privacy compliance. These steps will strengthen user trust and align with regulatory requirements, supporting Brevo's position as a reliable email marketing service provider.

Z

Zentrum Paul Klee

zpk.org

62

Zentrum Paul Klee is a prominent cultural institution located in Bern, Switzerland, dedicated to the works of Paul Klee and contemporary art. It offers a wide range of services including exhibitions, concerts, readings, guided tours, and educational programs, positioning itself as a leading art and cultural center. The website reflects a mature digital presence with a modern tech stack based on React and Next.js, integrated with Drupal as a headless CMS, and includes e-commerce capabilities for ticket sales. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for performance and accessibility.

K

Kunstmuseum Bern

kunstmuseumbern.ch

63

Kunstmuseum Bern is a prominent Swiss art museum with a strong international reputation, offering a diverse collection of classical modernism and contemporary art. The institution provides a variety of services including exhibitions, guided tours, workshops, and provenance research, targeting art lovers, families, and researchers. The website reflects a mature digital infrastructure built on modern technologies such as React, Next.js, and Drupal as a headless CMS, ensuring fast performance and excellent mobile optimization. Security posture is robust with HTTPS, security headers, and secure forms, although explicit security policy and incident response information are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and user-friendly, supporting the museum's mission and community engagement.

F

FOCUS

focusplus.de

60

FOCUS+ is a well-established German digital media platform offering subscription-based access to premium news and magazine content covering politics, finance, society, and science. The website demonstrates a mature digital infrastructure leveraging modern technologies such as React, Next.js, GraphQL, and Cloudflare services, ensuring fast performance and excellent mobile optimization. Privacy and cookie policies are comprehensive and GDPR compliant, supported by consent management mechanisms. Security posture is strong with HTTPS enforcement and security best practices, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and safe for general audiences.

T

Takeda Pharmaceutical Company Limited

takeda.com

69

Takeda Pharmaceutical Company Limited is a globally recognized biopharmaceutical enterprise focused on patient-centric research and development. The company operates at a large scale within the healthcare industry, providing pharmaceutical products, conducting clinical trials, and emphasizing corporate responsibility and sustainability. Their website reflects a professional and comprehensive digital presence, targeting healthcare professionals, patients, investors, and partners worldwide. The business model centers on innovation and global pharmaceutical manufacturing and supply. Technically, the website leverages modern frameworks such as Next.js and React, hosted on Vercel, ensuring fast performance and excellent mobile optimization. The use of analytics tools like Matomo and Google Tag Manager indicates a mature approach to user data collection and marketing insights. The site is well-structured with good SEO and accessibility features, supporting a positive user experience. From a security perspective, the site enforces HTTPS, employs multiple security headers, and integrates a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy or vulnerability disclosure page suggests room for improvement in transparency and incident response readiness. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The main limitation is the lack of WHOIS data, which is unusual but does not detract significantly from the trustworthiness given the company's global reputation and professional web presence. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to enhance trust and compliance.

P

Poinz AG

poinz.ch

71

Poinz AG operates a leading cashback platform in Switzerland, providing consumers with effortless cashback rewards for online and in-store purchases. The company partners with over 400 trusted brands and boasts a large user base exceeding 200,000 active users. Their services include online cashback, digital vouchers, deals, digital stamp cards, and branded credit cards, positioning them as a market leader in the Swiss cashback ecosystem. Technically, the website is built on modern frameworks such as Next.js and React, with extensive use of analytics and marketing pixels to optimize user engagement and conversion. Security posture is strong with HTTPS, security headers, and anti-bot measures like Google reCAPTCHA Enterprise, although explicit security policies and incident response contacts are not published. Overall, the website is professional, well-optimized for mobile, and compliant with GDPR, reflecting a mature digital presence.

K

KV Basel AG

kvbasel.schule

58

KV Basel AG is an established vocational education institution based in Basel, Switzerland, with a history spanning over 150 years. The organization focuses on commercial professions, vocational baccalaureate programs, and additional courses aimed at strengthening the skills of kaufmännische Berufe (commercial professionals). The website reflects a professional educational service provider targeting students and professionals seeking vocational training in the Basel region. The business model centers on providing structured vocational education and related services, positioning KV Basel as a key player in the local education sector. Technically, the website is built using modern web technologies including React and Next.js, with integration of Google Tag Manager for analytics. The site demonstrates good mobile optimization, clear navigation, and a professional design. However, some accessibility features could be improved, and no CMS or hosting provider details are explicitly identified. Performance is moderate, with proper meta tags and SEO considerations in place. From a security perspective, the site uses HTTPS, ensuring encrypted communication. However, no explicit security headers were detected in the provided HTML content, and there is no visible privacy or cookie policy, which are important for compliance with data protection regulations such as GDPR. No forms or input fields were found on the homepage, reducing immediate risk of input-based vulnerabilities. The absence of a security.txt file or vulnerability disclosure policy suggests room for improvement in incident response readiness. Overall, KV Basel AG's website is trustworthy and professional, with a strong business credibility score. The lack of WHOIS data limits domain registration insights, but the website content and contact information support legitimacy. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, and enhancing accessibility and compliance features to strengthen the security posture and user trust.

C

Cryptomus

cryptomus.com

68

Cryptomus is a cryptocurrency exchange and payment platform offering a variety of services including a payment gateway, wallet, staking for rewards, P2P exchange, and a cryptocurrency converter supporting multiple currencies. The platform targets cryptocurrency traders and users seeking low fees and a comprehensive crypto service ecosystem. Their market position is supported by trust signals such as Certik certification and positive Trustpilot reviews, indicating a reputable presence in the crypto finance sector. Technically, the website is built on modern frameworks such as Next.js and React, with mobile optimization and integration of Google Tag Manager and reCAPTCHA for analytics and security. However, some areas such as explicit privacy and cookie policies are missing, which impacts privacy compliance scores. Security posture is generally good with HTTPS and some best practices but lacks explicit security headers and incident response disclosures. Overall, the website is professional and trustworthy but could improve transparency and compliance documentation.

E

Exwm - Home

exwm.cc

43

Exwm.cc appears to be a small business or startup website launched in 2020, hosted behind Cloudflare and built using modern web technologies such as Next.js and Material-UI. The website content is minimal, primarily serving as a home page with limited descriptive text. The integration of the Binotel chat widget indicates a focus on customer interaction via live chat. However, the site lacks critical compliance and trust elements such as privacy policies, cookie consent mechanisms, and clear contact information. The domain registration is privacy protected, which is common for small businesses but reduces transparency. Security posture is basic with HTTPS enabled but missing important security headers and DNSSEC. Overall, the site demonstrates moderate technical maturity but requires improvements in compliance, transparency, and security best practices.

V

Volusion, LLC

volusion.com

62

Volusion, LLC is an established ecommerce platform founded in 2003, offering a comprehensive online store builder and selling platform targeting small to medium businesses. The company provides a range of services including site building, payment processing, marketing support, and integrations with major payment and shipping providers. Their market position is solid with a focus on customizable ecommerce solutions and business growth facilitation. Technically, the website leverages modern frameworks such as React and Next.js, hosted and protected via Cloudflare, ensuring fast performance and mobile optimization. The site includes extensive integrations and tracking tools to support marketing and analytics needs. Security posture is strong with HTTPS enforcement, domain transfer protections, and cookie consent mechanisms, though DNSSEC is not enabled and explicit security policies are not published. Overall, the website is professional, trustworthy, and compliant with privacy regulations including GDPR. Strategic recommendations include enabling DNSSEC, publishing security policies, and adding vulnerability disclosure mechanisms to enhance trust and security transparency.

SolarWinds is a leading enterprise software company specializing in hybrid IT observability, database performance monitoring, incident response, and IT service management solutions. Their platform is designed to provide simple, powerful, and secure IT management software that accelerates digital transformation for hybrid IT environments. The company targets IT professionals and enterprise IT teams, positioning itself as a trusted provider with a comprehensive portfolio of products and services. The website reflects a mature digital presence with excellent content quality, clear navigation, and multi-language support. Technically, SolarWinds employs modern web technologies including React and Next.js, supported by robust CDN services like Akamai, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and adherence to recognized frameworks such as NIST and ISO 27001. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Despite the absence of WHOIS data, the website's professionalism and trust indicators support its legitimacy. Overall, SolarWinds demonstrates a high level of digital maturity and security readiness, suitable for its enterprise clientele.

P

Pinterest

pinterest.nz

74

Pinterest is a globally recognized visual discovery and social media platform that enables users to find and share ideas such as recipes, home decor, and style inspiration. It operates primarily as an advertising-driven business model, offering targeted advertising services to businesses while providing a free content discovery platform to users. The website is well-branded, professionally designed, and optimized for a broad general audience. Technically, Pinterest employs modern web technologies including React, WebAssembly, and integrates advanced security and fraud prevention tools such as Google reCAPTCHA, Arkose Labs, and Sardine AI. The site is fast, mobile-optimized, and implements strong security headers and HTTPS encryption, reflecting a mature digital infrastructure. Privacy and cookie policies are comprehensive and GDPR compliant, supporting strong privacy practices. No direct contact information is publicly displayed on the landing page, which is typical for large platforms that centralize support through other channels. Overall, Pinterest demonstrates a high level of business credibility and security maturity, with no significant vulnerabilities or suspicious indicators detected.

S

Sizera - Increase conversions and reduce returns

sizera.com

55

Sizera is a technology-driven company offering AI-powered clothing size and fit solutions targeted at fashion retailers. Their platform aims to increase online conversions, reduce product returns, and optimize production processes by leveraging data and artificial intelligence. The website presents a professional and modern interface built with Next.js and React, indicating a contemporary technical infrastructure. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and registration status. Security posture is weak due to missing HTTPS verification, lack of security headers, and absence of privacy and cookie policies. Overall, while the business concept is clear and relevant to the retail sector, the technical and security maturity requires significant improvement to build trust and ensure compliance.

G

Grasshopper

grasshopper.com

71

Grasshopper is a well-established virtual phone system provider targeting entrepreneurs and small businesses, offering services such as toll-free, vanity, and local business numbers with features like call forwarding, mobile and desktop apps, and 24/7 support. The company is positioned as a trusted solution with over 150,000 small business customers and operates under the parent company GoTo. Technically, the website is built on modern frameworks including Next.js and React, hosted on AWS infrastructure, and managed via Sitecore CMS, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement, security headers, and domain registration locks, though DNSSEC is not enabled and no explicit security policy or incident response page is found. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity.

P

Pinterest

pinterest.com.au

70

Pinterest is a globally recognized technology company operating a leading visual discovery and social media platform. The website au.pinterest.com serves the Australian market segment, offering users access to a wide range of ideas including recipes, home decor, and style inspiration. The platform's business model centers on user-generated content and advertising revenue, positioning it as a major player in the technology and e-commerce sectors. The website demonstrates a high level of digital maturity with modern technologies such as React, advanced anti-bot and fraud prevention scripts, and robust hosting infrastructure on Amazon AWS. Security posture is strong, with HTTPS enforced and a comprehensive Content Security Policy in place, alongside third-party security services. However, the absence of explicit privacy and cookie policies, as well as lack of visible contact information for security incidents, indicates areas for compliance improvement. Overall, the site is professional, trustworthy, and safe for general audiences, reflecting Pinterest's enterprise status and market leadership.

P

Placeit

placeit.net

69

Placeit is a well-established online platform founded in 2013 that offers a suite of design tools including mockup generators, logo makers, video creators, and design templates. Positioned as a medium-sized business within the e-commerce sector, it serves designers, marketers, entrepreneurs, and content creators with subscription and pay-per-use models. The platform is integrated with the Envato ecosystem, enhancing its market presence and credibility. Technically, Placeit employs modern web technologies such as Next.js and React, hosted on AWS with Cloudflare DNS, ensuring fast performance and excellent mobile optimization. Security-wise, the site enforces HTTPS, uses security headers, and employs Cookiebot for cookie consent, though it lacks visible privacy and terms of service pages. The domain registration is consistent and legitimate, registered through MarkMonitor since 2013, aligning with the company's history. Overall, Placeit demonstrates a strong digital maturity and security posture with minor gaps in privacy compliance and contact transparency.

H

head.com

head.com

64

The website www.head.com is a commercial retail platform focused on sports equipment and accessories. The site employs modern frontend technologies such as React and integrates payment processing through Adyen Checkout, with customer review functionality powered by Yotpo. The website content is accessible without any WAF or security challenge blocking, indicating good availability. However, the site lacks visible privacy, cookie, and terms of service policies, as well as explicit contact information, which impacts compliance and trust. Security headers are not detected, and SSL configuration details are limited, suggesting room for improvement in security posture. Overall, the site appears legitimate and safe for general audiences but would benefit from enhanced transparency and security best practices.

A

aquiferdist.com

aquiferdist.com

60

The website www.aquiferdist.com presents minimal accessible content, primarily a React application shell with no visible business description, metadata, or contact information. The domain WHOIS data is missing, indicating the domain may be unregistered, expired, or otherwise not properly registered, which raises significant legitimacy concerns. The technical infrastructure includes modern frontend technologies such as React and Google Tag Manager, but lacks essential SEO metadata and security headers. The absence of privacy and cookie policies, contact details, and trust indicators further diminishes the site's credibility and compliance posture. Overall, the site appears incomplete or under development, limiting its utility and trustworthiness.

S

Schweizerische Bundesbahnen SBB

sbb.ch

77

The website www.sbb.ch serves as the official online portal for the Swiss Federal Railways (SBB), providing comprehensive travel information, ticketing services, and customer support for public transportation in Switzerland. It holds a strong market position as the national railway operator, offering services to a broad audience including daily commuters, tourists, and business travelers. The site is well-branded, multilingual, and professionally maintained, reflecting the enterprise scale and public sector nature of the organization. Technically, the site leverages modern web technologies including React and Next.js frameworks, supported by performance and monitoring tools such as New Relic and Adobe Launch. The infrastructure is optimized for fast loading, mobile responsiveness, and accessibility, ensuring a high-quality user experience. SEO and metadata are well implemented, enhancing discoverability and usability. From a security perspective, the website enforces HTTPS, employs multiple security headers, and integrates cookie consent mechanisms compliant with GDPR. While no explicit security policy or incident response information is published, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. The domain registration is consistent with the official entity, reinforcing trust and legitimacy. Overall, the website demonstrates a high level of professionalism, security, and compliance, suitable for a critical national transportation service. Strategic recommendations include publishing dedicated security and incident response policies and enhancing transparency around vulnerability disclosures to further strengthen trust and security culture.

S

Satispay

satispay.com

67

Satispay is a leading Italian digital payment platform offering a mobile app for everyday payments, peer-to-peer money transfers, business payment solutions, and digital welfare products such as meal vouchers. The company targets individuals, merchants, and companies, boasting over 5.5 million users and 400,000 merchants, positioning itself strongly in the Italian finance and technology sectors. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site uses modern frameworks like Next.js and React, integrates Google Tag Manager and Trustpilot for analytics and reviews, and is hosted on a performant infrastructure with good SEO and accessibility features. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit security policies and incident response information are not publicly detailed. WHOIS data is unavailable, which slightly impacts trust but does not outweigh the professional business presence. Overall, the site is trustworthy, compliant with GDPR, and provides multiple contact and support channels.

A

Aifory Pro

aifory.pro

67

Aifory Pro operates as a cryptocurrency exchange service primarily targeting users in Moscow and other Russian cities, offering cash-based crypto buying and selling with an emphasis on anonymity and security. The business also provides wallet creation services and international transfers, supported by mobile applications on iOS and Android platforms. The website is professionally designed, localized primarily in Russian, and includes customer testimonials and social media engagement to build trust. Technically, the site uses modern frameworks such as Next.js and React, with proper HTTPS and security headers implemented, indicating a mature digital infrastructure. However, some privacy compliance aspects like cookie consent are missing, and no explicit incident response or vulnerability disclosure information is provided. Overall, the security posture is solid with room for improvement in transparency and privacy mechanisms. The domain WHOIS data is privacy protected, which is common in the crypto sector, but no suspicious patterns were detected. Strategic recommendations include enhancing privacy compliance, adding security policy disclosures, and improving accessibility features to further strengthen trust and compliance.