Security Directory

D

DiG Plus GmbH

dig-berlin.de

55

DiG Plus GmbH is a Berlin-based design and communication agency specializing in political and social themes with over 20 years of experience. The company offers services including campaign design, publishing, and product development, targeting political organizations, social campaigns, and non-profits. The website reflects a professional and consistent brand presence with detailed project showcases and clear contact information. Technically, the site uses standard web technologies such as HTML5, CSS3, jQuery, and Bootstrap icons, with moderate performance and good mobile optimization. Security posture is moderate with basic best practices like email obfuscation and meta referrer policy, but lacks advanced security headers and HTTPS confirmation. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is safe, professional, and trustworthy with room for security and privacy improvements.

T

The Left in the European Parliament

left.eu

70

The Left in the European Parliament is a political group representing left-wing interests within the European Union. Their website serves as an information hub for their political stance, news, events, and resources targeted at European citizens interested in progressive politics. The site is hosted by OVH SAS and built on WordPress, utilizing modern web technologies and privacy-conscious analytics tools like Matomo with explicit consent mechanisms. Security posture is solid with HTTPS and cookie consent, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and well-aligned with its governmental and non-profit nature.

O

one4vision GmbH

one4vision.saarland

49

one4vision GmbH is a specialized IT consulting firm focused on barrier-free web design using TYPO3 CMS and secure network infrastructure solutions. The company serves primarily municipal and public sector clients in Saarland and Luxembourg, offering a comprehensive range of IT services including hosting, connectivity, and network security. Their website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the site is built on TYPO3 CMS with integration of modern libraries such as jQuery and Matomo for analytics, demonstrating a moderate level of digital maturity. Privacy compliance is well addressed through a comprehensive privacy policy and a cookie consent mechanism that respects GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although the absence of explicit security policies and incident response information suggests room for improvement. Overall, the website presents a trustworthy and credible business presence with good technical implementation and privacy practices.

N

Netzwerkagentur Saarland by one4vision GmbH

netzwerkagentur-saarland.de

52

Netzwerkagentur Saarland, operating as the technical division of one4vision GmbH, is a well-established IT service provider in the Saarland region of Germany. With over two decades of experience, the company specializes in hosting, network management, security, cloud services, and IT support primarily targeting public sector clients and small to medium-sized enterprises. The website reflects a professional and comprehensive presentation of their services, emphasizing reliability and regional expertise. Technically, the website is built on TYPO3 CMS with modern frameworks such as Bootstrap 5 and jQuery, ensuring good mobile responsiveness and accessibility. The hosting environment is secure, leveraging a certified data center in Germany, and the site employs Matomo analytics configured with privacy-respecting settings. The technical implementation is solid, with no visible vulnerabilities or exposed sensitive data. From a security perspective, the site enforces HTTPS and likely includes standard security headers, though explicit policies such as incident response or vulnerability disclosure are not published. Privacy policies are comprehensive and GDPR compliant, but the absence of a cookie consent mechanism is a minor compliance gap. Contact information is available, including a phone number and remote support via TeamViewer, enhancing user trust. Overall, the website and domain exhibit high legitimacy and trustworthiness, with consistent WHOIS data and alignment between business claims and technical infrastructure. The site scores well across content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a reliable and professional digital presence for the company.

1

1&1 Internet Inc

moneyyy.me

56

moneyyy.me is an online platform launched in 2018 that facilitates users in requesting money via multiple popular payment platforms such as Venmo, PayPal, Cash App, Patreon, and OnlyFans through a single aggregated link. The service targets individuals and content creators who receive payments across these platforms, offering convenience and streamlined payment requests. The website is professionally designed with good user experience and mobile optimization, leveraging common web technologies including jQuery, Bootstrap, and FontAwesome, and integrates Google Analytics for user tracking. From a technical perspective, the site is hosted under the registrar IONOS SE (1&1 Internet Inc), with a domain age consistent with the business timeline. The technical stack is modern but lacks advanced security configurations such as DNSSEC and security headers. The site uses HTTPS, but no explicit security headers were detected in the HTML content. Privacy and cookie policies are absent, which impacts compliance and user trust. The registration form collects sensitive user data including email, username, password, and payment platform links, but no visible security or privacy disclosures are provided. Security posture is moderate with room for improvement. The absence of DNSSEC, security headers, and privacy policies are notable gaps. No incident response or vulnerability disclosure information is available. The domain registration is transparent and consistent with the website content, indicating legitimacy. No adult or explicit content is present, making the site safe for general audiences. Overall, moneyyy.me presents a niche financial service with a good user interface and functional design but requires enhancements in privacy compliance, security best practices, and transparency to improve trust and regulatory adherence.

D

dotart.blog

dotart.blog

57

dotart.blog is a small, community-focused blogging platform that serves as a sister site to mastodon.art, targeting users interested in longer form creative writing such as poetry, stories, and blogs. It leverages the WriteFreely platform to provide decentralized, markdown-based blogging capabilities with features like drafts, scheduled posts, and RSS feeds. The website is well-structured and provides clear information about its purpose and how to join the community, although it lacks explicit contact information and formal policies beyond a basic privacy page. Technically, the site uses modern web technologies and is hosted with Namecheap, but lacks advanced security features such as DNSSEC and security headers. The domain registration is recent but consistent with the business age, and privacy protection on WHOIS is justified for this type of small community platform. Overall, the site is functional, trustworthy, and safe for general audiences.

O

OZ Home Hub

ozhomehub.com.au

54

OZ Home Hub is an Australian-based online furniture retailer specializing in affordable and stylish home furnishings with nationwide delivery. The company targets Australian consumers seeking quality furniture with flexible payment options and competitive pricing, positioning itself as a value-driven e-commerce business. The website demonstrates a solid digital presence with a modern tech stack including Bootstrap, jQuery, and multiple marketing and analytics integrations. The infrastructure leverages Cloudflare DNS and includes tracking pixels from major platforms such as Facebook, Pinterest, and Microsoft. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, though improvements are recommended in security headers and privacy compliance mechanisms. Overall, the site is professional, user-friendly, and trustworthy, with clear contact information and customer testimonials enhancing credibility.

U

updoc

updoc.com.au

60

Updoc is a reputable Australian telehealth platform founded in 2020, providing accessible online medical consultations including medical certificates, prescriptions, and specialist referrals. The platform leverages a network of AHPRA-registered doctors to deliver healthcare services digitally, targeting Australians seeking convenient healthcare solutions. The website demonstrates strong market positioning with over 200,000 users and multiple trust indicators such as ISO 27001 certification and LegitScript approval. Technically, the site is built on Webflow with modern analytics and marketing integrations, delivering a fast, mobile-optimized, and user-friendly experience. Security posture is solid with HTTPS and certifications, though improvements in security headers and vulnerability disclosure are recommended. Overall, Updoc presents a professional, trustworthy, and compliant telehealth service with room for enhanced privacy compliance and security transparency.

The website www.petcircle.com.au is currently inaccessible due to a Vercel Security Checkpoint blocking content access. This checkpoint indicates a browser verification failure, preventing retrieval of actual website content. Consequently, no business information, contact details, or policies are available for analysis. The domain WHOIS data is unavailable, returning only generic policy text, which limits the ability to assess domain legitimacy or registrant details. Hosting on Vercel suggests a modern infrastructure, but the security checkpoint impedes further technical and security evaluation. Overall, the site cannot be properly assessed in its current state, resulting in a low AI score and limited insights.

The website carolinemakes.art is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any substantive content. The domain is registered through a privacy protection service (Domains By Proxy, LLC) and hosted on SiteGround servers. There is no visible business information, contact details, or privacy and cookie policies on the site. The lack of accessible content and metadata severely limits the ability to assess the business or its services. Technically, the site uses basic HTML and CSS with Google Fonts but lacks modern SEO, accessibility, or security headers. The domain is relatively new, created in 2022, and uses domain status prohibitions to prevent unauthorized changes. Overall, the site exhibits minimal digital maturity and poor content quality due to the access restriction.

Bloomlight Productions GmbH is a Swiss-based creative company specializing in biography, literature, film, coaching, and moderation. The company targets cultural and educational audiences, offering a range of services including film production, performances, podcasts, exhibitions, and project coaching. Their market position is niche, focusing on storytelling and cultural projects with a small company size. The website is professionally designed using the Contao CMS and modern web technologies, providing good user experience and mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms are areas for improvement. Contact information is clearly presented, enhancing business credibility. Overall, the website reflects a trustworthy and legitimate entity with a focus on cultural media production.

S

Seedshirt

seedshirt.de

10

Seedshirt is a German-based e-commerce platform specializing in print-on-demand merchandising solutions. It enables users such as fundraisers, artists, influencers, and groups to create and sell custom apparel and products via crowdfunding campaigns or white-label shops without upfront costs or risks. The platform integrates production, sales, and shipping, positioning itself as a reliable partner with a significant user base. Technically, the website is built on Webflow and leverages modern analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel, with Cloudflare providing DNS and likely CDN services. The site demonstrates good GDPR compliance with a comprehensive cookie consent mechanism and privacy policy. Security posture is solid with HTTPS enforced and anonymized analytics, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and well-optimized for user experience and marketing.

Produktgenuss GmbH is a small technology company based in Germany specializing in the development, marketing, and operation of web platforms, with a strong focus on podcast-related services. Their key offerings include LetsCast.fm, a podcast hosting platform; podcasten.de, a podcast production support service; and Speedrank, a website performance auditing tool. The company targets podcasters ranging from hobbyists to power users, providing streamlined solutions to manage and distribute podcast content effectively. The website presents a professional and consistent brand image, emphasizing service quality and user engagement through clear calls to action and project showcases. Technically, the website is built with modern HTML5, CSS, and JavaScript technologies, hosted on variomedia.de servers. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, there is room for improvement in accessibility and SEO optimization. No CMS or advanced frameworks are detected, indicating a likely custom or lightweight implementation. Performance is moderate, with deferred scripts and optimized images enhancing load times. From a security perspective, the site uses HTTPS but lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance and overall security posture. No incident response or security policy information is published, and no vulnerability disclosure or security.txt files are found. The WHOIS data shows standard hosting provider name servers without privacy protection, consistent with a small business setup. No suspicious patterns or exposed sensitive data are detected, but security best practices could be enhanced. Overall, Produktgenuss GmbH presents a trustworthy and professional online presence with a clear business focus. Strategic improvements in security policies, privacy compliance, and contact information transparency would strengthen their credibility and reduce risk. The AI score reflects a good but improvable website, with recommendations to address cookie consent, security headers, and expanded contact details to enhance trust and compliance.

D

Datascroll Eventsupport GmbH

eventjet.at

10

Datascroll Eventsupport GmbH operates events.eventjet.at, a professional online ticketing platform focused on popular events in Austria including theater, concerts, family events, parties, sports, and festivals. The website offers a rich event calendar with faceted search capabilities and is optimized for SEO and user experience. The platform targets event attendees primarily in Austria and nearby regions, providing an accessible and well-structured service for event discovery and ticket purchase. The business model centers on online ticket sales and event promotion, positioning itself as a regional leader in event ticketing services.

The Schweizerische Gemeinnützige Gesellschaft (SGG SSUP) is a Swiss non-profit organization dedicated to promoting social cohesion within Switzerland. The website serves as an informational platform highlighting current topics relevant to their mission. The organization maintains a consistent brand presence across multiple social media channels and employs structured data to enhance search engine visibility. The business model focuses on community engagement and social welfare, targeting the general Swiss public. Technically, the website is built on WordPress, leveraging popular plugins such as Yoast SEO for optimization and Gravity Forms for user interactions. Cookiebot is implemented for cookie consent management, complemented by Google Consent Mode to respect user privacy preferences. The site uses modern technologies including CDN services for images and analytics tools for visitor insights. Performance and mobile optimization are adequate, though accessibility features are basic. From a security perspective, the site enforces HTTPS and employs cookie consent blocking mechanisms, which are positive indicators. However, the absence of explicit privacy policy and terms of service pages, as well as lack of published security policies or incident response contacts, represent compliance and transparency gaps. No critical vulnerabilities or malware were detected, and the domain registration details align well with the organization's profile, supporting legitimacy. Overall, the website presents a professional and trustworthy front for a small non-profit entity. Strategic improvements in privacy documentation, security headers, and contact transparency would enhance compliance and user trust. The current risk level is moderate with no immediate critical issues identified.

Z

Zum Isaak Gastronomie und Kultur

zum-isaak.ch

48

Zum Isaak is a small hospitality business operating a restaurant located at Münsterplatz 16 in Basel, Switzerland. The website presents a professional and well-structured digital presence focused on promoting their culinary and cultural offerings including lunch, dinner, and event hosting services. The business targets a general audience, primarily local and visitors to Basel, emphasizing tradition and quality dining experiences. The website is built on WordPress using modern plugins such as Elementor and Yoast SEO, ensuring good SEO and user experience. The site is mobile optimized and includes a cookie consent mechanism compliant with GDPR requirements. Security posture is solid with HTTPS enabled and no exposed sensitive data, though security headers and explicit security policies are absent. Overall, the website reflects a trustworthy and legitimate business with clear contact information and transparent privacy practices.

S

Soziales Basel

sozialesbasel.ch

65

Soziales Basel operates as a local government/non-profit platform providing comprehensive information and referral services for social institutions and support offers in Basel-Stadt, Switzerland. The website targets residents seeking assistance in areas such as education, work, finance, health, housing, migration, and emergencies. It is positioned as a trusted local resource with partnerships from recognized organizations and government entities. Technically, the site employs modern web technologies including htmx and Sprig components, with responsive design and good accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies are lacking. Overall, the site is professional, trustworthy, and well-aligned with its mission, with room for improvement in security policy transparency and technical hardening.

G

GGG Wegweiser

ggg-wegweiser.ch

46

GGG Wegweiser is a non-profit organization based in Basel, Switzerland, providing comprehensive social advice and support services to residents of all ages and backgrounds. The website serves as an information hub offering guidance on social issues, assistance with document writing, and referrals to specialized services. It is affiliated with GGG Basel and partners with the social offers database sozialesbasel.ch to extend its reach. The organization emphasizes accessibility and personal support, offering free services to the community. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, ensuring a modern and SEO-optimized platform. It employs Google reCAPTCHA v3 for bot protection and uses standard web technologies such as jQuery and Swiper.js for interactive elements. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS with good SSL configuration and includes reCAPTCHA for form protection. However, explicit security headers are not evident in the HTML content, and there is no visible security policy or incident response contact information. Privacy compliance is partially addressed with a privacy policy and terms of service, but no cookie consent mechanism was detected. Overall, the website presents a trustworthy and professional front for a local social service organization, with minor gaps in security and privacy compliance that could be improved to enhance user trust and regulatory adherence.

G

GGG Voluntas

ggg-voluntas.ch

51

GGG Voluntas is a Swiss non-profit organization specializing in healthcare consultation services, particularly focusing on patient advance directives, health planning, and accompaniment services for the sick at home. The organization targets elderly individuals, patients, and caregivers primarily in Basel, Switzerland. Their website presents a professional and consistent brand image with clear navigation and relevant content including podcasts and interviews that enhance their community engagement. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Plyr.js for media playback, with hosting of audio content on Amazon S3. Analytics are handled via privacy-focused Plausible Analytics, reflecting a commitment to user privacy. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are not published. Overall, the site is well-structured, mobile-optimized, and trustworthy, though improvements in cookie consent and formal security disclosures are recommended.

G

GGG Migration

ggg-migration.ch

50

GGG Migration is a Swiss non-profit organization based in Basel that provides comprehensive migration-related consulting and support services. Their multilingual offerings, including online consultations, tax declaration assistance, and intercultural mediation, position them as a trusted community resource. The website reflects a professional and consistent brand image with clear contact information and testimonials, enhancing trustworthiness. Technically, the site is built on WordPress with modern plugins and a responsive design, though some improvements in security headers and privacy compliance could be made. Security posture is good with HTTPS enabled and no visible vulnerabilities, but explicit security policies and incident response contacts are absent. Overall, the domain registration data aligns well with the website's claims, supporting legitimacy.

G

GGG Benevol

ggg-benevol.ch

54

GGG Benevol is a well-established non-profit competence center for volunteer work based in Basel, Switzerland, operating since 1992. The organization facilitates volunteer engagement by connecting volunteers with social projects and organizations in need. Their website clearly targets volunteers and organizations in Basel, offering services such as volunteer job listings, project information, and consultation. The site is professionally designed with consistent branding and provides multiple contact channels including email, phone, and social media. Technically, the website is built on Drupal CMS with modern JavaScript libraries and includes a newsletter subscription powered by Mailfino. The site is mobile-optimized and SEO-friendly, with good performance and accessibility features. Security-wise, HTTPS is enforced and no sensitive data is exposed. However, there is no published security policy or incident response information, and no cookie consent mechanism despite the absence of cookies, reflecting a privacy-conscious approach. Overall, the domain registration details align well with the website content and business claims, indicating high legitimacy and trustworthiness.

M

Merkur Druck AG

merkurdruck.ch

52

Merkur Druck AG operates as a medium-sized Swiss company specializing in sustainable printing products, creative media project design, and innovative digital solutions. The company targets businesses and organizations seeking environmentally conscious and creative media services. Their market position appears established within the regional manufacturing and media sectors, supported by a professional and consistent online presence. Technically, the website is built on WordPress using the Divi theme, enhanced with modern analytics tools such as Matomo and Microsoft Clarity, and SEO optimizations via Rank Math. The site demonstrates good mobile optimization and user experience, though performance is moderate. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies, which should be addressed to meet GDPR standards. Overall, the website is professional and trustworthy, with room for improvement in privacy and security transparency.

L

liberladen

liberladen.org

48

liberladen.org is an e-commerce platform specializing in literature and cultural magazines, primarily serving a German-speaking audience interested in literary and cultural content. The website offers a variety of literary magazines and cultural publications, positioning itself as a niche player in the media sector focused on literature. The platform is built on WordPress with WooCommerce, leveraging modern web technologies and a professional design that supports good user experience and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although security headers and incident response policies are not explicitly published. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but lacks a cookie consent mechanism and explicit contact information. The absence of WHOIS data limits trust assessment, but the website content and structure suggest a legitimate and professional operation. Strategic improvements include enhancing privacy compliance, publishing security policies, and improving contact transparency.

InfoSpace is a small cultural collective and exhibition platform based in Basel, Switzerland, collaboratively run by multiple art collectives and organizations. It offers a public program of exhibitions, talks, and events focused on contemporary art and collective practices. The website serves as an information hub and event calendar for the local cultural community. Technically, the site is built with standard HTML and CSS, includes a Mailchimp newsletter subscription form, and is mobile responsive with good accessibility features. However, it lacks advanced technical frameworks or CMS integration. Security posture is moderate with HTTPS usage implied but no visible security headers or published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professionally presented but would benefit from improved compliance and security practices.

Daniel Kurth's website serves as a personal portfolio for an artist specializing in various media including sculpture, video, installation, sound, text, and drawing. The site is modest in scope, focusing on showcasing artwork with minimal additional business or contact information. The market position is that of an individual artist presenting their work to a broad audience without commercial e-commerce or transactional features. Technically, the website is built with basic HTML and CSS, hosted by Hoststar, and lacks modern CMS or frameworks. The site is accessible and moderately optimized for mobile, but lacks advanced SEO and accessibility features. Security posture is basic; while the domain uses HTTPS, it lacks DNSSEC and security headers, and no privacy or cookie policies are present. No forms or contact details are embedded in the HTML, limiting direct engagement. Overall, the site is safe and suitable for general audiences but would benefit from enhanced security and compliance features.

The website karinborer.ch serves as the professional portfolio for artist Karin Borer, based in Basel, Switzerland. It primarily showcases her exhibitions, collaborations, and artist editions, targeting art enthusiasts, galleries, and cultural institutions. The site positions Karin Borer as an active artist with a regional and international presence, supported by partnerships with galleries and museums. Technically, the website is built with standard HTML and CSS, including custom fonts, and is mobile responsive with a moderate performance profile. However, it lacks advanced frameworks, CMS, or analytics integrations. Security posture is minimal with no detected security headers or privacy policies, and no explicit HTTPS confirmation from the provided data. The site does not implement cookie consent or terms of service, which are important for compliance. Overall, the domain registration aligns well with the website content, indicating legitimacy and trustworthiness. Strategic improvements in security and privacy compliance would enhance the site's professional standing and user trust.

The website zapalote.com serves as a photography and design portfolio primarily showcasing travel photography, wallpapers, and website design projects. The business appears to be a small-scale creative portfolio operated by an individual or small team, with a focus on visual content and design. The domain has been registered since 2006, indicating a stable presence, but the website content is minimal and lacks comprehensive business or contact information. Technically, the site uses basic HTML, CSS, and JavaScript without any detected CMS or advanced frameworks. The performance and mobile optimization are basic, with no detected accessibility or SEO enhancements beyond standard meta tags. There is no evidence of analytics or tracking technologies, which suggests minimal data collection and user tracking. From a security perspective, the site lacks critical security headers and does not have DNSSEC enabled. There is no visible privacy or cookie policy, nor any incident response or security contact information. The domain registration is consistent and legitimate, but the absence of security best practices and compliance documentation reduces the overall security posture. Overall, the site is low risk due to its limited functionality and content but would benefit from improved security measures, privacy compliance, and enhanced business transparency to increase trust and professionalism.

E

Enfea

enfea.it

58

Enfea is a national bilateral entity in Italy formed by the associations CONFAPI, CGIL, CISL, and UIL, dedicated to supporting small and medium enterprises and their employees. The organization focuses on labor relations and welfare services, applying various collective labor agreements. The website serves as an informational and service portal, offering detailed sections for enterprises and workers, including apprenticeship, safety, innovation, rights, education, family, and income support. The site also links to EnfeaNews, an informational portal for SMEs. Technically, the website is built on WordPress using the Divi theme and includes modern plugins such as Smart Slider 3 and Contact Form 7. It employs Matomo analytics for privacy-conscious tracking and Facebook Pixel for marketing purposes. The site is GDPR compliant with a comprehensive cookie consent mechanism and clear privacy policies. Security-wise, HTTPS is enforced, and no critical vulnerabilities or exposed sensitive data were detected. However, some security headers are missing, and no explicit security or incident response policies are publicly available. Overall, the website is professional, trustworthy, and well-structured, serving its target audience effectively.

A

Aruba Business Srl

goodwoodproject.eu

47

The Good Wood Project website represents an EU-funded initiative aimed at fostering green social dialogue within the wood sector, promoting sustainable labor market practices. The project targets stakeholders across the European Union, including businesses and employees in the wood industry, focusing on balancing business flexibility with employee security. The website is built on Joomla CMS and leverages common web technologies such as jQuery, Bootstrap, and Revolution Slider, hosted by Aruba Business Srl. It offers multilingual support and integrates social media channels on Facebook and LinkedIn. Security-wise, the site enforces HTTPS and includes CSRF tokens in forms but lacks explicit security headers and an active cookie consent mechanism. No contact emails or phone numbers are directly provided, which limits direct communication channels. Overall, the site is professional and content-rich but could improve in security and privacy compliance aspects.

D

DataSkills4SMEs

dataskills4smes.eu

56

DataSkills4SMEs is an EU-financed project website aimed at supporting small and medium-sized enterprises (SMEs) across Europe by enhancing their data skills and promoting the use of modern technologies for efficient business operations. The site focuses on developing innovative learning tools for SME employees to facilitate paperless offices and maintain high-quality standards. The website is built on WordPress using the Avada theme and integrates Google Analytics for visitor tracking. While the site is accessible and presents relevant content for its target audience, it lacks visible privacy and cookie policies, as well as explicit contact information, which are important for compliance and user trust. The domain's WHOIS information is not publicly available due to EURid's privacy policies for .eu domains, which is typical and does not raise immediate concerns about legitimacy.

C

Confapi Confederazione italiana della piccola e media industria privata

confapi.org

48

Confapi is a well-established Italian confederation representing small and medium private industries, primarily in manufacturing, transport, and services sectors. Founded in 1999, it provides collective labor contracts, advocacy, and various business support services to SMEs across Italy. The website reflects a professional and consistent brand presence targeting Italian SMEs with a comprehensive menu of services and European project partnerships. Technically, the site is built on Joomla CMS with Gantry 5 framework and uses modern JavaScript libraries and Google Analytics for tracking. The site is mobile optimized and offers a good user experience with clear navigation. Security posture is adequate with HTTPS enabled and IP anonymization in analytics, but lacks DNSSEC and security headers, and does not publish explicit privacy or security policies. Overall, the domain registration data supports the legitimacy and long-term operation of the business. Strategic improvements in privacy disclosures and security hardening would enhance trust and compliance.

C

Confederazione delle Libere Associazioni Artigiane Italiane

claai.info

50

The website claai.info represents the Confederazione delle Libere Associazioni Artigiane Italiane, a non-profit confederation serving artisan associations across Italy. The site provides news, organizational information, and resources targeted at artisan groups and stakeholders. The digital infrastructure is based on WordPress with the Divi theme, incorporating common plugins such as Yoast SEO and Cookie Law Info, indicating a moderate level of digital maturity. The site is well structured, mobile responsive, and uses HTTPS, but lacks explicit privacy and terms of service pages, which are important for compliance and trust. Security posture is moderate with HTTPS enforced and cookie consent implemented, but missing key security headers and vulnerability disclosures. Overall, the site is legitimate and functional but could improve in privacy compliance and security best practices.

C

Casartigiani Confederazione Autonoma Sindacati Artigiani

casartigiani.org

50

Casartigiani is an established Italian artisan confederation representing traditional, family-run, and micro-enterprise artisans. The organization is led by President Giacomo Basso and operates with principles of autonomy and independence. The website serves as a communication platform for news, events, and organizational information related to the artisan sector in Italy. Technically, the site is built on WordPress with modern libraries and plugins, including Bootstrap and FontAwesome, and employs analytics tools such as Google Analytics and Matomo. The presence of a cookie consent mechanism via Iubenda indicates attention to privacy compliance, although no explicit privacy policy or terms of service were detected in the provided content. Security posture is moderate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and explicit security headers. Overall, the website is professional, content-rich, and trustworthy, serving a medium-sized organization in the artisan sector.

C

Confartigianato Imprese

confartigianato.it

71

Confartigianato Imprese is a leading Italian non-profit organization representing artisans and micro to small enterprises. The website serves as a comprehensive portal for news, services, advocacy, and member resources, targeting Italian artisan businesses and stakeholders. The organization maintains a strong market position as the most representative association in its sector, offering a wide range of services including credit, energy, innovation, training, and welfare. The site is well-branded, consistent, and professionally maintained, reflecting the organization's stature and mission. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Matomo analytics, emphasizing privacy and GDPR compliance. The infrastructure includes Cloudflare protection and uses HTTPS with good SSL configuration. The site is mobile-optimized and features a cookie consent mechanism with granular user control. The technical stack is robust, though some security headers could be enhanced for improved security posture. Security-wise, the site demonstrates good practices including HTTPS enforcement, use of reCAPTCHA, and privacy-respecting analytics. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy or incident response contact is noted. Overall, the site is secure and compliant with relevant privacy regulations. The overall risk assessment is low, with the website presenting a trustworthy and professional digital presence. Strategic recommendations include enhancing security headers, publishing a security policy, and continuing regular security audits to maintain and improve the security posture.

L

Legacoop Produzione e Servizi

produzione-servizi.coop

56

Legacoop Produzione e Servizi is an Italian cooperative association representing worker cooperatives across multiple sectors including construction, logistics, manufacturing, and services. The organization promotes cooperative values and supports its members through sector-specific initiatives, news dissemination, and participation in European projects. The website reflects a professional and consistent brand presence with active social media engagement and partner collaborations. The domain registration aligns well with the organization's identity and location, supporting its legitimacy. Technically, the website is built on WordPress using modern plugins such as Yoast SEO, MasterSlider, and Matomo Analytics for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some security best practices like enabling DNSSEC and security headers are missing, and no explicit privacy or security policies are published. Security posture is moderate with HTTPS enabled and cookie consent implemented, but improvements are recommended to enhance DNS security and publish incident response information. Overall, the website is trustworthy and serves its target audience effectively, though privacy compliance could be improved by adding explicit policies. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing privacy and security policies, and conducting regular security audits to maintain a strong security posture.

D

Documenti-Privacy

documenti-privacy.it

52

Documenti-Privacy is a small Italian business service platform founded in 2019 that provides privacy documentation based on company VAT numbers. The website is designed to serve businesses in Italy seeking privacy information documents. The platform uses modern web technologies including JavaScript and Bootstrap, with payment integration via Stripe. The technical infrastructure is moderate in performance and basic in mobile optimization and accessibility. Security posture is good with HTTPS and DNSSEC enabled, but lacks advanced security headers and policies. Privacy compliance is minimal as no privacy or cookie policies are present. Contact information and incident response details are absent, limiting user trust and compliance. Overall, the site is functional but basic in content and security features.

C

cpress

cpress.ch

43

cpress is a small independent media publisher based in Switzerland, founded in 2014 by Christof Nüssli and Christoph Oeschger. The company focuses on publishing books and films, targeting a general audience interested in niche media content. The website reflects this business model with clear navigation to books and films sections and news updates about upcoming releases and events. The market position appears to be that of a specialized publisher serving a focused community rather than a mass-market player. Technically, the website is built using standard HTML5, CSS3, and JavaScript without reliance on major CMS or frameworks. The site is moderately optimized for performance and mobile use, though accessibility and SEO features are basic. No advanced analytics or advertising technologies are detected, indicating a minimalistic digital footprint. From a security perspective, the site lacks published privacy, cookie, or terms of service policies, and no security headers are detected. There is no visible contact information for security incidents or data protection officers. The domain registration data is consistent with the business claims, showing no privacy protection and a domain age matching the founding year, which supports legitimacy. Overall security posture is moderate but could be improved by implementing standard compliance and security best practices. The overall risk is low given the nature of the business and content, but the lack of privacy and security policies and contact information could impact trust and compliance with regulations such as GDPR. Strategic improvements in these areas would enhance the company's security posture and user trust.

C

Ciao Press

ciaopress.com

54

Ciao Press is a small Swiss-based independent publisher specializing in art, contemporary photography, illustration, and design books. Founded by Nicolas Polli in late 2017, the company focuses on producing limited edition, high-quality printed books that appeal to art enthusiasts and collectors. The website presents detailed information about their publications, including edition sizes, ISBNs, and pricing, reflecting a niche market positioning. Technically, the website uses modern web technologies such as HTML5, CSS3, JavaScript, and the Flickity carousel for image galleries. It is hosted by Infomaniak Network SA, a Swiss hosting provider, and uses HTTPS for secure connections. However, DNSSEC is not enabled, and no security headers were detected, indicating room for improvement in security hardening. The site lacks privacy and cookie policies, which are important for GDPR compliance, and no incident response or vulnerability disclosure information is provided. Contact information is limited to a single email address, with no phone or physical address listed. Overall, the website is professionally designed with good content relevance and user experience but could enhance its security posture and privacy compliance to build greater trust and meet regulatory requirements.

Boabooks is a small Swiss-based art book publisher and bookstore located in Geneva. The website showcases their catalogue of artist books, exhibition announcements, and provides contact details for visitors. The business targets art enthusiasts and collectors interested in niche artist publications. Technically, the website uses basic web technologies including jQuery and custom scripts, served over HTTPS, but lacks advanced security headers and privacy policies. No forms or tracking scripts are present, indicating minimal data collection. The absence of WHOIS data raises concerns about domain registration legitimacy, though the website content and contact information suggest a legitimate small business. Security posture is moderate with room for improvement in headers and compliance documentation. Overall, the site is functional and professional but would benefit from enhanced privacy and security measures.

The website arboreditions.com is currently inaccessible beyond a robot challenge CAPTCHA page, indicating the presence of a Web Application Firewall or similar security mechanism blocking direct access. This prevents a full assessment of the site's business content and user-facing features. The domain is registered with Tucows Domains Inc. since 2021 and uses SiteGround hosting, suggesting a legitimate but relatively new online presence. The technical infrastructure includes advanced JavaScript-based CAPTCHA challenge scripts to mitigate automated access. However, no privacy, cookie, or terms of service policies are present on the accessible page, and no contact or business information is visible. This limits the ability to evaluate the company's business model, compliance posture, or customer engagement strategies. Security posture is minimal with no visible security headers or SSL details, but the presence of a WAF challenge indicates some level of protection. Overall, the site appears to be in a protected or restricted state, requiring resolution of the CAPTCHA to access full content.

A

Anne Schwalbe

anneschwalbe.de

57

Anne Schwalbe operates a professional photography portfolio website primarily targeting art enthusiasts and potential buyers in Berlin and beyond. The site features a curated gallery of photographic works, an online shop for art sales, and a newsletter subscription to engage visitors with updates on exhibitions and new works. The business is positioned as a niche artist portfolio with a small-scale operation, founded at least since 1995, reflecting a mature presence in the art community. Technically, the website is built with standard HTML, CSS, and JavaScript without reliance on major CMS platforms or advanced frameworks. The site demonstrates good content quality, clear navigation, and basic mobile optimization. However, it lacks modern security headers and cookie consent mechanisms, which are important for compliance and user trust. Hosting is managed via UI-DNS name servers, indicating a stable but modest infrastructure. From a security perspective, the site uses secure form inputs with consent checkboxes for newsletter subscriptions but does not exhibit advanced security policies or incident response information. No blocking or WAF mechanisms are detected, and the domain WHOIS data aligns well with the website's claims, indicating legitimacy and consistent registration history. The absence of exposed sensitive data and minimal tracking enhances privacy compliance, though cookie consent should be improved. Overall, the website scores well in content quality and business credibility but has room for improvement in security posture and privacy compliance. Strategic enhancements in security headers, cookie consent, and incident response transparency would strengthen trust and compliance.

About Books is a specialized retail business operating an e-commerce platform focused on art and architecture publications. The website presents a well-structured catalog of niche books and artist editions, targeting art collectors, architects, and design enthusiasts primarily in Switzerland and Europe. The business model centers on direct online sales using WooCommerce on a WordPress platform. Technically, the site employs modern web technologies and plugins, ensuring a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though some security headers are missing and privacy compliance policies are absent. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

A

Alcova

alcova.xyz

53

Alcova is a specialized platform dedicated to designers, companies, institutions, and researchers focused on exploring the future of living and making. Established in 2018, it has positioned itself as an international platform hosting recurring exhibitions primarily in Milan and Miami, complemented by collaborations and a design shop. The website reflects a professional and consistent brand image, targeting a niche audience interested in design and art. Technically, the site leverages modern frameworks such as Nuxt.js and Vue.js, integrates Shopify for e-commerce, and uses Directus as a headless CMS, indicating a mature and scalable digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and incident response disclosures are recommended. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy, content-rich, and well-structured, supporting Alcova's market position as a credible design platform.

K

Kesselhaus Josephsohn

kesselhaus-josephsohn.ch

50

Kesselhaus Josephsohn is a small cultural institution based in Switzerland that operates as a museum, gallery, and exhibition space dedicated to the works of Hans Josephsohn. The website serves as a digital presence showcasing their exhibitions, artworks, and related events, targeting art enthusiasts and the general public interested in cultural activities. The business model revolves around art exhibition and gallery services, with a niche market position in the cultural sector. Technically, the website employs modern JavaScript frameworks such as Vue.js and uses lazy loading techniques for images to optimize performance. It integrates Matomo analytics for user tracking, indicating a moderate level of digital maturity with some privacy considerations. However, the site lacks comprehensive SEO and accessibility features and shows only basic mobile optimization. From a security perspective, the website is accessible without WAF or blocking mechanisms, but it lacks important security headers and does not display privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response channels are provided, limiting transparency and trust. The SSL configuration could not be verified from the provided data, which is a potential risk. Overall, the website is functional and professionally designed but requires improvements in security posture, privacy compliance, and contact transparency to enhance trustworthiness and regulatory adherence. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, and providing clear contact information for users and security incidents.

S

Stiftung Sitterwerk

sitterwerk.ch

51

Stiftung Sitterwerk is a Swiss non-profit cultural foundation dedicated to supporting the arts through its art library, material archive, atelier house, and various cultural events and publications. The foundation targets artists, researchers, and the general public interested in cultural and artistic activities. The website reflects a well-structured and professionally designed platform using modern technologies such as Vue.js and Matomo analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the site is safe, trustworthy, and provides clear contact information, but could enhance compliance and security transparency.

OBST&GEMÜSE jam GmbH is a Swiss-based small business specializing in the retail and repair of cargobikes, racing bikes, and related accessories. The company operates both a physical showroom in Basel and an online shop serving customers across Switzerland. Their business model focuses on urban mobility solutions, targeting customers interested in lightweight, high-performance freight and cycling products. The website is professionally designed with clear navigation and good mobile optimization, reflecting a solid digital presence. Technically, the website is built on the Odoo CMS platform, utilizing modern web technologies such as FontAwesome for icons and Pannellum for 360-degree panorama views. The site integrates Google Analytics and various marketing tools, including Facebook Pixel and Hotjar, to monitor user engagement and optimize marketing efforts. Performance is moderate with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, indicating attention to secure data handling. However, no explicit security headers were detected, and there is no published security policy or incident response contact information. Privacy compliance is strong, with a comprehensive privacy policy, cookie consent mechanism, and GDPR-aligned data processing disclosures. Overall, the website presents a trustworthy and professional front for the business with minor areas for security enhancement. The domain registration data aligns well with the business identity, supporting legitimacy. Strategic improvements in security headers and incident response transparency would further strengthen the security posture.

F

FLINC CYCLES

flinccycles.com

43

FLINC CYCLES is a small Swiss-based company specializing in compact cargo bicycles designed for urban customers who need versatile transport solutions. The website presents a professional and consistent brand image with clear product information, a journal, and an online shop. The business model focuses on direct sales and customer engagement through test rides and detailed product specs. Technically, the site uses modern JavaScript frameworks such as Alpine.js and Flickity for UI components and employs Plausible Analytics for privacy-conscious visitor tracking. Hosting is provided by hosttech.ch, a Swiss hosting provider, ensuring local infrastructure. Security posture is generally good with HTTPS enforced and domain transfer protection, but lacks DNSSEC and some security headers. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, though no cookie consent mechanism is present. Overall, the site is trustworthy, well-designed, and suitable for its target audience.

V

von Bartha

vonbartha.com

49

von Bartha is a well-established Swiss art gallery specializing in contemporary and modern art, operating since 1970 with locations in Basel and Copenhagen. The gallery represents a diverse roster of artists and hosts exhibitions, fairs, and publishes related materials. The website reflects a professional and polished digital presence, leveraging modern web technologies such as Nuxt.js and Vue.js, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS and no obvious vulnerabilities, though improvements in security headers and incident response transparency are recommended. Privacy compliance is good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a gap. Overall, the website is trustworthy and serves its target audience effectively.

T

THE STAEGER COLLECTION

staeger-collection.com

59

The Staeger Collection is a niche, Basel-based organization dedicated to the preservation and exhibition of vintage bicycles. The website serves primarily as a showcase for their collection, targeting cycling enthusiasts, collectors, and historians. The business model appears non-commercial, focusing on cultural heritage and education. Technically, the site is built on Squarespace, leveraging modern web fonts and standard web technologies, delivering a moderate performance and good mobile experience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and privacy compliance features. The absence of WHOIS registration data is a notable concern, potentially impacting domain trustworthiness. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures.

Z

Zürcher Hochschule der Künste

zhdk.ch

61

Zürcher Hochschule der Künste (ZHdK) is a large, accredited Swiss art university offering a wide range of Bachelor and Master programs in art education, design, film, fine arts, music, dance, theatre, and transdisciplinary studies. The institution is well positioned as one of Europe's largest art universities, targeting students interested in creative and cultural disciplines. The website reflects a mature digital presence with multilingual support and structured data for SEO. Technically, the site uses modern frameworks such as Astro and integrates Piwik analytics, indicating a commitment to performance and data insights. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is partial, with a comprehensive privacy policy but lacking cookie consent mechanisms. Overall, the site is professional, trustworthy, and well maintained.