Security Directory

B

Bildungszentrum Limmattal

bzlt.ch

47

Bildungszentrum Limmattal is a vocational education center based in Zürich, Switzerland, specializing in logistics, recycling, and technology training. The institution offers foundational and continuing education programs targeting learners, students, and professionals in related sectors. The website reflects a well-structured educational service provider with clear contact information and a consistent brand presence. Technically, the site uses modern web technologies including Craft CMS, jQuery, and integrates Google Analytics and Tag Manager for user insights. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and incident response information suggests room for improvement. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the domain registration aligns with the business identity, supporting legitimacy and trustworthiness.

G

Gemeinde Schwyz

gemeindeschwyz.ch

65

Gemeinde Schwyz operates as the official municipal government website for the community of Schwyz, Switzerland. It provides residents and visitors with comprehensive information about local governance, services, events, and community resources. The site serves as a central hub for accessing online services such as the online counter, event listings, and administrative contacts, positioning itself as a trusted and authoritative source for municipal information. Technically, the website employs modern web technologies including responsive design, ES modules, and Matomo analytics for privacy-conscious user tracking. The use of the i-web CMS platform indicates a specialized content management system tailored for municipal websites. The site is well-optimized for mobile devices and accessibility, with clear navigation and structured content. From a security perspective, the website enforces HTTPS and uses secure form submissions for login. While no explicit security policy or incident response contacts are published, the site demonstrates good privacy compliance with visible privacy and cookie policies and consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected, and the domain registration aligns with the official municipal identity, supporting high trustworthiness. Overall, Gemeinde Schwyz presents a professional, secure, and user-friendly digital presence for the municipality. Strategic improvements could include publishing formal security policies and incident response information to enhance transparency and preparedness.

S

Stadt Kloten

kloten.ch

58

The Stadt Kloten website serves as the official digital portal for the municipality of Kloten, Switzerland. It provides comprehensive information and services to residents, businesses, and visitors, including online administrative services, event listings, political information, and community resources. The site targets a broad audience within the local community and supports multiple languages to accommodate diverse users. The business model is that of a government entity focused on public service delivery and community engagement. Technically, the website employs modern web technologies such as Bootstrap for responsive design, Matomo for privacy-conscious analytics, and a modular JavaScript approach. The site is mobile-optimized and accessible, with clear navigation and structured content. Hosting appears to be local or regional, supporting good performance and reliability. From a security perspective, the site enforces HTTPS, includes several security headers, and encourages multi-factor authentication for user accounts. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent mechanism and a dedicated security or incident response policy page are areas for improvement to enhance compliance and transparency. Overall, the website presents a trustworthy and professional face for the city of Kloten, with strong business credibility and a solid technical foundation. Strategic enhancements in privacy compliance and security policy transparency would further strengthen its posture and user trust.

I

Indo-German Center For Higher Education

igche.de

48

The Indo-German Center For Higher Education (IGCHE) operates as a consortium of German universities offering bilingual engineering degree programmes that facilitate student exchange and cultural integration between India and Germany. The website clearly communicates its educational mission, target audience of prospective engineering students, and key services including German language training and internships. Technically, the site is built on RapidWeaver CMS with Stacks, uses Matomo for privacy-conscious analytics, and demonstrates good mobile responsiveness and navigation clarity. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and incident response policies are absent. Overall, the site is professional, trustworthy, and well-aligned with its educational objectives.

A

Am Hof 8 Betriebs GmbH

amhof8.com

60

Am Hof 8 Betriebs GmbH operates Vienna's first private members club, offering exclusive access to a private house, curated events, and partner benefits. The business targets affluent individuals seeking a discreet and refined social environment in a central Vienna location. The website reflects a professional and consistent brand image, emphasizing exclusivity and community. Technically, the site uses modern web technologies including Livewire and Alpine.js, with a CMS likely based on Strapi. The site is mobile-optimized and performs moderately well, though some security enhancements are recommended. Security posture is solid with HTTPS and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is transparent and includes phone, email, and physical address. Overall, the domain registration is consistent with the business claims, supporting legitimacy. Strategic improvements in security headers and privacy mechanisms would enhance trust and compliance.

I

In-Dish Wien

in-dish.at

59

In-Dish Wien is a small hospitality business operating an Indian fusion restaurant located in Vienna, Austria. The website presents a professional and visually appealing design built on the Framer platform, targeting general audiences interested in creative Indian cuisine. The business appears to be locally focused with a niche market position. Technically, the website uses modern web technologies but lacks advanced security configurations and privacy compliance features. No privacy or cookie policies are present, and no contact information is explicitly provided in the analyzed content. Security posture is minimal with no detected security headers or incident response contacts. Overall, the site is safe and appropriate for general users but would benefit from enhanced security and compliance measures.

S

Restaurant und Bar | Spelunke

spelunke.at

60

The website www.spelunke.at appears to be a small hospitality or restaurant business based in Austria, utilizing the Wix platform for its online presence. The site integrates a Molzait reservation system, indicating a focus on customer bookings. The technical infrastructure is standard for Wix-hosted sites, leveraging Wix Thunderbolt framework and common web technologies such as JavaScript, HTML5, and CSS3. Mobile optimization is good, but content quality and SEO are basic, with limited business information visible in the provided HTML content. Security posture is moderate with HTTPS enabled but lacking security headers and privacy compliance documentation. Overall, the site is functional but lacks comprehensive privacy, security, and contact information, which could impact user trust and regulatory compliance.

D

Das Bootshaus Alte Donau

dasbootshaus.at

76

Das Bootshaus Alte Donau is a small hospitality business located in Vienna, Austria, combining rowing culture with gastronomy. The website presents a professional and well-structured digital presence featuring online reservations, event promotions, and a strong social media footprint. Technically, the site uses modern web technologies including JavaScript libraries, lazy loading, and integrates third-party reservation widgets. Security posture is adequate with HTTPS enforced but lacks explicit security headers and published security policies. Privacy compliance is partial with cookie consent but missing explicit privacy and terms of service pages. Overall, the website is trustworthy and well-positioned in its local market niche.

P

Plachutta

plachutta.at

60

Plachutta is a well-established family-owned hospitality business operating multiple restaurant locations in Vienna, Austria, specializing in traditional Viennese cuisine such as Tafelspitz and Wiener Schnitzel. The website reflects a professional and consistent brand presence targeting tourists and locals interested in authentic Austrian culinary experiences. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript libraries like Slick Slider, and integrates Google services such as Tag Manager, Maps, and reCAPTCHA. The site is mobile-optimized and performs moderately well with good SEO practices. Security posture is strong with HTTPS enforced and multiple security headers present, alongside a cookie consent mechanism indicating GDPR awareness. However, the absence of explicit privacy policy and terms of service pages represents a compliance gap. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

B

Bureau of Middle East Recycling

bmr.ae

31

The Bureau of Middle East Recycling (BMR) is a small, non-profit organization serving as the regional forum and voice for the recycling industry in the Middle East, particularly focusing on metal recycling. The organization promotes recycling awareness, supports free trade of secondary raw materials, and provides networking and policy updates to its members. The website reflects this mission with professional design, multimedia content, and clear contact information, targeting industry stakeholders in the region. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries, with integration of Google Analytics and Tag Manager for tracking. The site is moderately optimized for performance and mobile devices, though some accessibility and SEO features could be improved. The hosting and domain registration align with the UAE location, supporting the business's regional focus. From a security perspective, the site uses HTTPS (implied by canonical URL), but lacks visible security headers and formal security policies. No privacy or cookie policies are present, indicating compliance gaps especially regarding GDPR. The contact form collects user data but lacks visible consent mechanisms. No WAF or blocking mechanisms are detected, and no suspicious or vulnerable elements are found in the HTML content. Overall, the website is professional and trustworthy but would benefit from enhanced security practices, privacy compliance, and clearer policy disclosures to improve user trust and regulatory adherence.

S

SIGNAL IDUNA

signal-iduna.de

68

SIGNAL IDUNA is a well-established German insurance and financial services group with over 100 years of history. The company offers a broad portfolio of insurance products including health, life, property, liability, motor, accident, and travel insurance, supported by digital customer portals and mobile applications. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and consent management tools to ensure GDPR compliance. Security posture is solid with HTTPS and consent mechanisms in place, though explicit security headers should be verified. Overall, the site demonstrates high professionalism and trustworthiness, with no signs of blocking or malicious content.

Zahlenzorro is an educational online platform operated by the Westermann Gruppe, offering interactive math exercises targeted at primary school students (grades 1-4) in Germany. The platform provides engaging math stories, training apps, and classroom management tools with a subscription-based licensing model for individuals, classes, schools, and school districts. The website is professionally designed with consistent branding and clear navigation, supporting both desktop and mobile devices. It integrates Piwik analytics with privacy-conscious settings and links to reputable educational partners. Security posture is moderate with HTTPS usage and some privacy considerations, but lacks explicit security headers and published security policies. Contact information and trust signals such as awards and partner logos enhance credibility. Overall, the site is safe, compliant with GDPR, and well-positioned in the German educational market.

W

Westermann

alfons.de

59

ALFONS Online-Lernwelt is an educational platform operated by Westermann, targeting primary school students, teachers, and parents in Germany. It offers interactive learning games for German, Mathematics, and English, supported by detailed evaluation tools and a centralized student management system. The platform is positioned as a reputable and certified educational service with a medium-sized market presence in the German education sector. Technically, the website is built on Angular 9 with modern web standards, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and explicit incident response information. Privacy compliance is mostly met with a clear privacy policy, though cookie consent mechanisms are missing. Overall, the site is professional, trustworthy, and safe for its intended audience.

P

Präsenzstelle O-H-V | Velten

praesenzstelle-velten.de

59

The Präsenzstelle O-H-V | Velten website serves as a regional hub connecting higher education institutions in Brandenburg with local communities, students, and businesses. It provides access to teaching and research, facilitates networking, and offers consultation services. The site is positioned as a non-profit educational and research facilitation center with strong partnerships including Technische Hochschule Brandenburg, Universität Potsdam, and regional economic development entities. The content is well-structured, professionally presented, and targets a broad audience including students, citizens, and companies in the region. Technically, the website is built on TYPO3 CMS, employs modern web standards, and is mobile-optimized with good accessibility and SEO practices. The site uses HTTPS exclusively and implements a GDPR-compliant cookie consent mechanism. However, it lacks visible security headers and explicit security or incident response policies. Analytics usage is minimal and privacy-conscious, relying on Matomo. From a security perspective, the site demonstrates a solid baseline with HTTPS and cookie consent but could improve by adding security headers and publishing security policies or vulnerability disclosure information. No critical vulnerabilities or suspicious patterns were detected. The domain registration data aligns well with the website's claims, supporting legitimacy and trustworthiness. Overall, the website is a credible, well-maintained regional educational platform with good content quality and technical implementation. Strategic improvements in security policy transparency and header implementation would enhance its security posture and trust further.

W

wedooper

karriere-hennigsdorf.de

37

The Karriereportal Hennigsdorf is a regional career portal focused on connecting companies in Hennigsdorf with young talents seeking internships, apprenticeships, study opportunities, and jobs. The platform is operated by wedooper in collaboration with the city's economic development office, positioning itself as a niche regional service provider in the education sector. The website is well-structured, with clear navigation and relevant content tailored to its target audience of local companies and job seekers. Technically, the site uses modern web technologies including jQuery, Swiper.js, and Modernizr, and is served over HTTPS with a cookie consent mechanism in place, though it lacks advanced security headers and analytics integration. Security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in security headers and incident response transparency. Overall, the site is safe, professional, and trustworthy with a good balance of privacy compliance and user experience.

G

Graduate Campus Hochschule Aalen

graduatecampus.de

43

Graduate Campus Hochschule Aalen is a reputable educational institution specializing in professional continuing education and part-time study programs including Bachelor and Master degrees, certificates, and courses primarily in technology, business, and IT sectors. The website reflects a strong market position in Germany with a focus on flexible learning formats such as blended learning, online, and on-campus options. The institution leverages modern digital tools including TYPO3 CMS, Google Tag Manager, and Usercentrics for consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

W

WInTO GmbH – Wirtschafts-, Innovations- und Tourismusförderung Oberhavel GmbH

youlab.de

51

youlab.de is the official website for the youlab career and educational fair organized by WInTO GmbH, serving the Oberhavel region in Germany. The site provides comprehensive information about the event, including exhibitor registration, apprenticeship opportunities, and media impressions. It targets students, young job seekers, and local companies, positioning itself as the largest career orientation fair in the region. The business model focuses on event organization and promotion, supported by local government and industry partners. Technically, the website is built on a modern stack including HTML5, CSS3, JavaScript, and uses Cookiebot for consent management and Matomo for analytics. The CMS appears to be Redaxo, inferred from media URL patterns. The site is hosted on servers indicated by the nameservers your-server.de and second-ns.de. Performance and mobile optimization are good, with basic accessibility and SEO features implemented. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism with blocking mode. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly observed in the provided data, and no published security or incident response policies were found. Privacy compliance is strong, with a clear privacy policy and cookie management aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-suited for its educational purpose. Recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuing to monitor third-party scripts for security risks.

W

WInTO GmbH

gruenderservice-oberhavel.de

47

WInTO GmbH operates the Gründerservice Oberhavel website, providing comprehensive support and consulting services for business founders in the Oberhavel region of Germany. The company focuses on guiding entrepreneurs through orientation, planning, implementation, and consolidation phases of business establishment. The website serves as a regional government-related platform to foster a startup-friendly environment with clear contact points and event information. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Font Awesome icons, and Swiper.js for UI components. Cookie consent is managed via Cookiebot, ensuring GDPR compliance, and user analytics are handled through Matomo with cookies disabled to enhance privacy. The site is mobile-optimized and presents a professional design with good navigation clarity. From a security perspective, the site uses HTTPS and integrates cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or suspicious elements were detected in the content or WHOIS data. The domain registration information is minimal but consistent with the business claims. Overall, the website is a trustworthy, professional resource for its target audience, with moderate technical sophistication and good privacy compliance. Strategic improvements in security headers, incident response transparency, and SEO could further enhance its posture and user trust.

T

TARGOBANK

targobank.de

66

TARGOBANK is a well-established German financial institution offering a broad range of banking products including loans, accounts, cards, savings, investments, and insurance. The website targets private, business, and corporate customers with a strong emphasis on flexible, customer-centric financial solutions. The bank maintains a significant physical presence with approximately 340 branches and complements this with a robust digital platform featuring online banking and mobile apps. The site content is professional, comprehensive, and well-structured, reflecting a mature business model in the banking sector. Technically, the website employs modern web technologies including asynchronous JavaScript, CSS, and uses third-party services such as Google Tag Manager and TagCommander for analytics and consent management. The site is hosted on a CDN, ensuring moderate to good performance and excellent mobile optimization. Accessibility features and SEO best practices are well implemented. From a security perspective, the site enforces HTTPS, includes multiple security headers, and integrates a consent management platform to comply with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit incident response contacts and vulnerability disclosure mechanisms like security.txt are not found, representing an area for improvement. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for a large financial institution. Strategic recommendations include enhancing transparency around security incident response and vulnerability disclosure to further strengthen trust and security posture.

The website www.muenchenstein.ch serves as the official online presence of the Einwohnergemeinde Münchenstein, the municipal government of Münchenstein, Switzerland. It provides comprehensive information and services for residents, families, seniors, foreign residents, and local businesses. The site offers access to administrative services, community news, event announcements, waste disposal information, and local project updates, positioning itself as a key resource for the local population. The business model is that of a governmental service provider focused on community engagement and service delivery. Technically, the website employs modern web technologies including Bootstrap for responsive design, Matomo for analytics, and ES modules for JavaScript. The site is mobile optimized and accessible, with good SEO practices and a clear navigation structure. The CMS used appears to be i-web, a specialized platform for municipal websites. Performance is moderate, with asynchronous loading of analytics scripts and modular JavaScript enhancing user experience. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policy documentation, incident response contacts, and vulnerability disclosure mechanisms such as security.txt. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the municipal identity. Overall, the website is a trustworthy, well-maintained municipal portal with good content quality and technical implementation. Strategic improvements include publishing a security policy, adding incident response contacts, and enhancing security headers to further strengthen the security posture.

B

Boch & Fernsh

bochfernsh.com

46

Boch & Fernsh is a well-established creative advertising agency based in Mumbai, India, with over two decades of experience. The company offers a comprehensive suite of services including branding, advertising campaigns, video production, digital marketing, social media management, and web design. Their market position is strong, supported by multiple industry awards and a reputable client portfolio. Technically, the website employs modern web technologies and integrates various analytics and marketing tools, hosted on DreamHost. The site is mobile-optimized and professionally designed, providing an excellent user experience. Security posture is good with HTTPS enforced, but lacks some advanced security headers and explicit privacy compliance mechanisms. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

P

Prosegur Deutschland

prosegur.de

72

Prosegur Deutschland is a leading security and cash management service provider in Germany, specializing in secure transportation and handling of physical and digital assets. The company positions itself as the market leader in Germany, serving B2B clients including banks, public institutions, and enterprises. Their comprehensive service portfolio includes cash management outsourcing, cash deposit solutions, technical services, and high-security storage. Technically, the website employs modern tracking and consent management tools, hosted on a reputable CDN provider (Akamai), and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting Prosegur's strong market presence.

E

Eidgenössisches Institut für Geistiges Eigentum

swissreg.ch

64

The website swissreg.ch is the official portal of the Swiss Federal Institute for Intellectual Property (Eidgenössisches Institut für Geistiges Eigentum). It serves as the authoritative source for intellectual property rights in Switzerland, including trademarks, patents, and design protections. The site targets businesses, legal professionals, inventors, and the general public seeking information and services related to intellectual property. As a government entity, it holds a strong market position as the official Swiss authority in this domain. Technically, the website employs modern web technologies such as Angular and Material Design components, ensuring a responsive and accessible user experience. The presence of Font Awesome icons and Dynatrace monitoring scripts indicates a mature digital infrastructure focused on usability and performance. The site is well-structured with good design quality and navigation clarity, optimized for mobile devices. From a security perspective, the site uses HTTPS and modern JavaScript frameworks, but lacks explicit security headers and detailed privacy or cookie policies. No forms or direct contact information were detected in the provided content, which limits user interaction and transparency in privacy compliance. The WHOIS data confirms the domain's legitimacy as a Swiss federal government asset, reinforcing trustworthiness. Overall, the website demonstrates a solid security posture and technical maturity appropriate for a government service portal. However, improvements in privacy compliance documentation and security header implementation are recommended to enhance user trust and regulatory adherence.

The Liturgy Office website serves as the official online presence for the Department for Christian Life and Worship under the Catholic Bishops' Conference of England and Wales. It provides liturgical resources, calendars, prayers, and news relevant to the Catholic community in England and Wales. The site targets clergy, church members, and those interested in Catholic liturgy, positioning itself as a trusted non-profit religious resource provider with a long-standing domain since 2001. Technically, the website employs basic web technologies including HTML5, CSS, Google Fonts, and Google Analytics for tracking. The site lacks a modern CMS and advanced frameworks, indicating a simple but functional technical infrastructure. Performance and mobile optimization are basic, with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS (implied but not explicitly confirmed), but lacks visible security headers and published privacy or cookie policies, which are compliance gaps especially under GDPR. No forms collecting sensitive data are present, reducing attack surface. The WHOIS data confirms domain legitimacy and consistency with the organization's history, supporting trustworthiness. Overall, the website is a credible, safe, and content-relevant resource for its audience but would benefit from enhanced privacy compliance, security hardening, and technical modernization to improve user trust and regulatory adherence.

R

rockit GmbH

rockit.at

44

rockit GmbH is a specialized TYPO3 CMS agency based in Vienna, Austria, offering comprehensive web development services including responsive design, accessibility, SEO, and GDPR-compliant solutions. The company holds certifications as TYPO3 integrators and serves a diverse client base including government and large organizations, positioning itself as a trusted technology service provider in the Austrian market. Their business model focuses on delivering tailored TYPO3 websites with ongoing maintenance and quality assurance. Technically, the website is built on a modern TYPO3 CMS platform with a rich technology stack including PHP, TailwindCSS, JavaScript frameworks like Vue.js and Alpine.js, and uses Matomo for privacy-conscious analytics. The site is well-optimized for mobile devices, accessibility, and SEO, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, there is room for improvement in publishing explicit security policies, incident response contacts, and implementing additional HTTP security headers. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy digital presence with strong compliance and technical maturity. The lack of WHOIS data limits domain trust verification but does not detract from the evident business legitimacy. Strategic recommendations include enhancing security header implementation and publishing formal security policies to further strengthen trust and compliance.

R

rapidmail

emailsys1a.net

55

Rapidmail operates as a German-based email marketing and servicedomain provider targeting businesses and marketers primarily in German-speaking regions. The website presents a professional but basic digital presence with a focus on servicedomain offerings. The technical infrastructure is standard, utilizing modern web fonts and CSS, hosted with DNS Made Easy, indicating a reliable DNS setup. However, the site lacks visible advanced frameworks or CMS indications. Security posture is minimal with no detected security headers or incident response information, and privacy compliance is not evident due to missing privacy and cookie policies. Overall, the site is accessible and safe but would benefit from enhanced security and compliance features to strengthen trust and regulatory adherence.

M

MissioNET

missionet.org

45

MissioNET is a small non-profit multimedia platform owned by the Xaverian Missionaries, focused on missionary animation and vocational promotion through a video library. The website is built on Joomla CMS with Yootheme and UIkit frameworks, providing a good user experience with mobile optimization and clear navigation. The technical infrastructure is modern and includes Google Analytics for tracking, though lacks some advanced security headers and DNSSEC. Security posture is moderate with HTTPS enabled and domain transfer protections in place. However, the absence of privacy and cookie policies, as well as no visible incident response or security policies, indicates gaps in compliance and transparency. Overall, the website is legitimate, professionally presented, and serves a niche religious community audience effectively.

H

Hogrefe TEA Ediciones

hogrefe-tea.com

50

Hogrefe TEA Ediciones operates as a specialized publisher and distributor of psychological tests, personality assessments, intelligence and aptitude tests, HR evaluations, and online psychology courses primarily targeting professionals and students in Spain. The website is well-branded and professionally designed, reflecting a medium-sized educational business with a clear market position in the psychology sector. Technically, the site is built as a modern Angular single-page application leveraging FontAwesome icons, Swiper.js for carousels, and Google Fonts, ensuring a responsive and user-friendly experience. Security-wise, the site employs HTTPS with a good SSL configuration and domain transfer protections, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is strong, with comprehensive privacy and cookie policies and an active consent mechanism. Overall, the website demonstrates a solid digital maturity with room for improvement in security transparency and accessibility.

3

3Q GmbH

3q.video

73

3Q GmbH is a German-based technology company specializing in professional video streaming and hosting solutions. Their platform offers a comprehensive suite of services including live streaming, video hosting, webcasting, video analytics, and AI-powered video optimization. Positioned as a GDPR-compliant and ISO 27001 certified provider, 3Q targets businesses and organizations requiring secure, scalable, and flexible video infrastructure primarily in Europe but also worldwide. The company operates its own infrastructure, ensuring data sovereignty and reliability. Technically, the website demonstrates a mature digital presence with modern web technologies such as HTML5, JavaScript, HubSpot integration, and Cookiebot for consent management. The proprietary 3Q video player and content delivery network underline their technical capabilities. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a high level of digital maturity. From a security perspective, 3Q maintains strong practices including HTTPS enforcement, security headers, GDPR compliance, and ISO 27001 certification. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public vulnerability disclosure or incident response contact is noted as an area for improvement. Overall, 3Q GmbH presents a trustworthy, professional, and secure platform with strong compliance and business credibility. The website effectively communicates their offerings and supports user engagement through clear contact channels and marketing tools.

T

TAV Academy - Trans Audio Video Group

tav-academy.com

65

TAV Academy is a division of the established TAV Group, focused on providing professional training and education in audiovisual technologies including photo, video, audio, and security. The website positions itself as a key player in the Italian audiovisual market, offering courses, workshops, masterclasses, and events to professionals, students, and enthusiasts. The business model centers on education and community engagement with a strong emphasis on technology and innovation. Technically, the website is built using Canva's platform with modern web standards, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and DNSSEC. Privacy compliance is supported by a comprehensive privacy policy via Iubenda, though cookie consent mechanisms are absent. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

C

Connectyca s.r.l.s.

connectyca.it

60

Connectyca s.r.l.s. operates the ThingsIoT website, providing IoT and M2M SIM card solutions with extensive global coverage. The company positions itself as an authorized reseller of Tele2, targeting businesses requiring reliable IoT connectivity and fleet management services. Their offerings include multi-operator SIM cards, data pooling, and a management portal with security features such as SIM blocking. The website is professionally designed, mobile-optimized, and provides comprehensive contact and legal information, supporting a trustworthy business presence. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Slider Revolution, with Google Analytics and reCAPTCHA integrated for analytics and spam prevention. The site is served over HTTPS with no visible security vulnerabilities, though security headers and explicit security policies are absent. Privacy and cookie policies are present and GDPR compliance is indicated, though could be enhanced with more detailed disclosures. Security posture is moderate with good SSL usage and form protections but lacks advanced security headers and incident response information. No vulnerabilities or suspicious content were detected. WHOIS data aligns well with the business claims, showing consistent registrant information and domain age appropriate for the company's market presence. Overall, the website demonstrates a solid business and technical foundation with room for improvement in security policies and compliance transparency. It is suitable for its target audience of IoT connectivity customers and partners.

D

Die Siedlung Saarbrücken

siedlung-saarbruecken.de

41

Die Siedlung Saarbrücken operates as a municipal housing provider for the city of Saarbrücken, Germany, offering rental apartments through a transparent and fair process. The website serves as a portal for current housing offers and provides a registration option for notifications about new listings. The target audience is local residents seeking affordable housing solutions. The business model is focused on public sector housing management with a medium-sized operational scale. Technically, the website uses basic HTML and CSS with custom fonts but lacks advanced frameworks or CMS indications. The site is moderately optimized for performance and mobile use but lacks accessibility and SEO enhancements. No analytics or tracking technologies were detected, indicating a privacy-conscious or minimalistic approach. From a security perspective, the site lacks visible security headers and published policies such as privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response channels are provided, limiting transparency and user trust. The domain registration data is consistent with the business's geographic and operational profile, supporting legitimacy. Overall, the website is functional and provides relevant content but requires improvements in privacy compliance, security posture, and user contact transparency to enhance trust and regulatory adherence.

V

VisionConnect GmbH

visionconnect.de

68

VisionConnect GmbH is a well-established digital media agency based in Hannover, Germany, founded in 1995. The company specializes in providing comprehensive digital solutions including TYPO3 CMS, Wordpress, e-commerce shops, SEO, and web marketing services. Their market position is strong with over 25 years of experience and a portfolio of reputable clients across various sectors. The website reflects a professional and consistent brand image, targeting businesses and institutions seeking digital transformation and web development services. Technically, the site is built on TYPO3 CMS with integrations of Wordpress and uses Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and SEO-friendly, demonstrating a mature digital infrastructure. Security posture is good with HTTPS enforced and privacy-respecting analytics, though some security headers could be improved and a formal security policy is absent. Overall, the website is trustworthy, professional, and compliant with GDPR, with clear contact information and transparent cookie consent mechanisms.

The website bildungsportal-niedersachsen.de is currently inaccessible due to a Cloudflare Turnstile security challenge page, which blocks access to the actual content. This prevents extraction of meaningful business, security, or compliance information. The domain appears to be protected by Cloudflare, indicating an intent to secure the site from automated abuse or attacks. Without access to the real content, no privacy policies, contact information, or business details can be confirmed. The technical infrastructure includes Cloudflare's security mechanisms but lacks visible analytics or advertising technologies in the provided content. The security posture cannot be fully evaluated due to the content block, but the presence of Cloudflare indicates a baseline security measure. Overall, the site is likely a public educational portal, but the analysis is limited by the WAF challenge.

D

DiG Plus GmbH

dig-berlin.de

55

DiG Plus GmbH is a Berlin-based design and communication agency specializing in political and social themes with over 20 years of experience. The company offers services including campaign design, publishing, and product development, targeting political organizations, social campaigns, and non-profits. The website reflects a professional and consistent brand presence with detailed project showcases and clear contact information. Technically, the site uses standard web technologies such as HTML5, CSS3, jQuery, and Bootstrap icons, with moderate performance and good mobile optimization. Security posture is moderate with basic best practices like email obfuscation and meta referrer policy, but lacks advanced security headers and HTTPS confirmation. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is safe, professional, and trustworthy with room for security and privacy improvements.

The website carolinemakes.art is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any substantive content. The domain is registered through a privacy protection service (Domains By Proxy, LLC) and hosted on SiteGround servers. There is no visible business information, contact details, or privacy and cookie policies on the site. The lack of accessible content and metadata severely limits the ability to assess the business or its services. Technically, the site uses basic HTML and CSS with Google Fonts but lacks modern SEO, accessibility, or security headers. The domain is relatively new, created in 2022, and uses domain status prohibitions to prevent unauthorized changes. Overall, the site exhibits minimal digital maturity and poor content quality due to the access restriction.

Produktgenuss GmbH is a small technology company based in Germany specializing in the development, marketing, and operation of web platforms, with a strong focus on podcast-related services. Their key offerings include LetsCast.fm, a podcast hosting platform; podcasten.de, a podcast production support service; and Speedrank, a website performance auditing tool. The company targets podcasters ranging from hobbyists to power users, providing streamlined solutions to manage and distribute podcast content effectively. The website presents a professional and consistent brand image, emphasizing service quality and user engagement through clear calls to action and project showcases. Technically, the website is built with modern HTML5, CSS, and JavaScript technologies, hosted on variomedia.de servers. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, there is room for improvement in accessibility and SEO optimization. No CMS or advanced frameworks are detected, indicating a likely custom or lightweight implementation. Performance is moderate, with deferred scripts and optimized images enhancing load times. From a security perspective, the site uses HTTPS but lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance and overall security posture. No incident response or security policy information is published, and no vulnerability disclosure or security.txt files are found. The WHOIS data shows standard hosting provider name servers without privacy protection, consistent with a small business setup. No suspicious patterns or exposed sensitive data are detected, but security best practices could be enhanced. Overall, Produktgenuss GmbH presents a trustworthy and professional online presence with a clear business focus. Strategic improvements in security policies, privacy compliance, and contact information transparency would strengthen their credibility and reduce risk. The AI score reflects a good but improvable website, with recommendations to address cookie consent, security headers, and expanded contact details to enhance trust and compliance.

S

Soziales Basel

sozialesbasel.ch

65

Soziales Basel operates as a local government/non-profit platform providing comprehensive information and referral services for social institutions and support offers in Basel-Stadt, Switzerland. The website targets residents seeking assistance in areas such as education, work, finance, health, housing, migration, and emergencies. It is positioned as a trusted local resource with partnerships from recognized organizations and government entities. Technically, the site employs modern web technologies including htmx and Sprig components, with responsive design and good accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies are lacking. Overall, the site is professional, trustworthy, and well-aligned with its mission, with room for improvement in security policy transparency and technical hardening.

G

GGG Voluntas

ggg-voluntas.ch

51

GGG Voluntas is a Swiss non-profit organization specializing in healthcare consultation services, particularly focusing on patient advance directives, health planning, and accompaniment services for the sick at home. The organization targets elderly individuals, patients, and caregivers primarily in Basel, Switzerland. Their website presents a professional and consistent brand image with clear navigation and relevant content including podcasts and interviews that enhance their community engagement. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Plyr.js for media playback, with hosting of audio content on Amazon S3. Analytics are handled via privacy-focused Plausible Analytics, reflecting a commitment to user privacy. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are not published. Overall, the site is well-structured, mobile-optimized, and trustworthy, though improvements in cookie consent and formal security disclosures are recommended.

InfoSpace is a small cultural collective and exhibition platform based in Basel, Switzerland, collaboratively run by multiple art collectives and organizations. It offers a public program of exhibitions, talks, and events focused on contemporary art and collective practices. The website serves as an information hub and event calendar for the local cultural community. Technically, the site is built with standard HTML and CSS, includes a Mailchimp newsletter subscription form, and is mobile responsive with good accessibility features. However, it lacks advanced technical frameworks or CMS integration. Security posture is moderate with HTTPS usage implied but no visible security headers or published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professionally presented but would benefit from improved compliance and security practices.

Daniel Kurth's website serves as a personal portfolio for an artist specializing in various media including sculpture, video, installation, sound, text, and drawing. The site is modest in scope, focusing on showcasing artwork with minimal additional business or contact information. The market position is that of an individual artist presenting their work to a broad audience without commercial e-commerce or transactional features. Technically, the website is built with basic HTML and CSS, hosted by Hoststar, and lacks modern CMS or frameworks. The site is accessible and moderately optimized for mobile, but lacks advanced SEO and accessibility features. Security posture is basic; while the domain uses HTTPS, it lacks DNSSEC and security headers, and no privacy or cookie policies are present. No forms or contact details are embedded in the HTML, limiting direct engagement. Overall, the site is safe and suitable for general audiences but would benefit from enhanced security and compliance features.

The website karinborer.ch serves as the professional portfolio for artist Karin Borer, based in Basel, Switzerland. It primarily showcases her exhibitions, collaborations, and artist editions, targeting art enthusiasts, galleries, and cultural institutions. The site positions Karin Borer as an active artist with a regional and international presence, supported by partnerships with galleries and museums. Technically, the website is built with standard HTML and CSS, including custom fonts, and is mobile responsive with a moderate performance profile. However, it lacks advanced frameworks, CMS, or analytics integrations. Security posture is minimal with no detected security headers or privacy policies, and no explicit HTTPS confirmation from the provided data. The site does not implement cookie consent or terms of service, which are important for compliance. Overall, the domain registration aligns well with the website content, indicating legitimacy and trustworthiness. Strategic improvements in security and privacy compliance would enhance the site's professional standing and user trust.

The website zapalote.com serves as a photography and design portfolio primarily showcasing travel photography, wallpapers, and website design projects. The business appears to be a small-scale creative portfolio operated by an individual or small team, with a focus on visual content and design. The domain has been registered since 2006, indicating a stable presence, but the website content is minimal and lacks comprehensive business or contact information. Technically, the site uses basic HTML, CSS, and JavaScript without any detected CMS or advanced frameworks. The performance and mobile optimization are basic, with no detected accessibility or SEO enhancements beyond standard meta tags. There is no evidence of analytics or tracking technologies, which suggests minimal data collection and user tracking. From a security perspective, the site lacks critical security headers and does not have DNSSEC enabled. There is no visible privacy or cookie policy, nor any incident response or security contact information. The domain registration is consistent and legitimate, but the absence of security best practices and compliance documentation reduces the overall security posture. Overall, the site is low risk due to its limited functionality and content but would benefit from improved security measures, privacy compliance, and enhanced business transparency to increase trust and professionalism.

C

cpress

cpress.ch

43

cpress is a small independent media publisher based in Switzerland, founded in 2014 by Christof Nüssli and Christoph Oeschger. The company focuses on publishing books and films, targeting a general audience interested in niche media content. The website reflects this business model with clear navigation to books and films sections and news updates about upcoming releases and events. The market position appears to be that of a specialized publisher serving a focused community rather than a mass-market player. Technically, the website is built using standard HTML5, CSS3, and JavaScript without reliance on major CMS or frameworks. The site is moderately optimized for performance and mobile use, though accessibility and SEO features are basic. No advanced analytics or advertising technologies are detected, indicating a minimalistic digital footprint. From a security perspective, the site lacks published privacy, cookie, or terms of service policies, and no security headers are detected. There is no visible contact information for security incidents or data protection officers. The domain registration data is consistent with the business claims, showing no privacy protection and a domain age matching the founding year, which supports legitimacy. Overall security posture is moderate but could be improved by implementing standard compliance and security best practices. The overall risk is low given the nature of the business and content, but the lack of privacy and security policies and contact information could impact trust and compliance with regulations such as GDPR. Strategic improvements in these areas would enhance the company's security posture and user trust.

C

Ciao Press

ciaopress.com

54

Ciao Press is a small Swiss-based independent publisher specializing in art, contemporary photography, illustration, and design books. Founded by Nicolas Polli in late 2017, the company focuses on producing limited edition, high-quality printed books that appeal to art enthusiasts and collectors. The website presents detailed information about their publications, including edition sizes, ISBNs, and pricing, reflecting a niche market positioning. Technically, the website uses modern web technologies such as HTML5, CSS3, JavaScript, and the Flickity carousel for image galleries. It is hosted by Infomaniak Network SA, a Swiss hosting provider, and uses HTTPS for secure connections. However, DNSSEC is not enabled, and no security headers were detected, indicating room for improvement in security hardening. The site lacks privacy and cookie policies, which are important for GDPR compliance, and no incident response or vulnerability disclosure information is provided. Contact information is limited to a single email address, with no phone or physical address listed. Overall, the website is professionally designed with good content relevance and user experience but could enhance its security posture and privacy compliance to build greater trust and meet regulatory requirements.

P

Potpuri

potpuri.org

52

Potpuri.org is an independent publishing platform and collaborative initiative focused on experimental research methodologies, investigative journalism, and production, primarily serving the Albanian diaspora and social issues between Kosovo and Switzerland. The website is hosted on the Cargo.site platform and uses modern web technologies including JavaScript frameworks and responsive design. The site is multilingual and includes partner acknowledgments from the European Union and local initiatives. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is good with a cookie consent mechanism and a privacy policy present. However, contact information and terms of service are missing, which impacts business credibility and user trust. Overall, the site is functional, professionally designed, and serves a niche media and research audience.

M

MOULURE MAGAZINE

mouluremagazine.ch

49

MOULURE MAGAZINE is a small interdisciplinary art and design collective based in Switzerland, providing a platform for artists and designers to share their creative processes and works. The website serves as an online magazine and includes an online shop, targeting artists, designers, and art enthusiasts. The platform is hosted on Cargo Collective and integrates Stripe for payment processing. The technical infrastructure is modern and functional, with good mobile optimization and a clean design. Security posture is adequate with HTTPS and secure payment integration, but lacks advanced security headers and formal privacy and cookie policies. Overall, the site is professional and trustworthy but could improve compliance and security practices.

H

Heissi Schnitte – Catering

heissi-schnitte.ch

51

The website heissi-schnitte.ch appears to represent a small Swiss business, likely in the bakery or food sector, based on the domain and language context. The site is built on WordPress using the Elementor page builder, indicating a moderate level of digital maturity with a focus on visual presentation. The content is primarily in German (Switzerland) and is business-oriented but lacks detailed business information, contact details, and formal policies such as privacy or cookie policies. Technically, the site uses HTTPS, which is a positive security indicator, but lacks important security headers and formal privacy compliance mechanisms. No analytics or tracking scripts were detected, suggesting minimal user tracking. The absence of contact information and security policies reduces the overall trust and compliance posture. The domain WHOIS data is consistent with the website's Swiss origin and shows no privacy protection, supporting legitimacy. Overall, the website is functional and visually adequate but requires improvements in privacy, security, and business transparency to enhance trust and compliance.

Stretcher is a small, artist-run exhibition project based in Basel, Switzerland, founded in 2023 by artists Karin Borer and Daniel Kurth. The project focuses on contemporary art exhibitions, artist editions, readings, and collaborative art events, operating within the InfoSpace collective art community. The website provides detailed program information, contact details, and event schedules, targeting a general audience interested in contemporary art. Technically, the website is built with standard HTML and CSS, uses Google Fonts, and integrates a newsletter subscription via Mailchimp. The site is mobile-optimized with good navigation and content relevance but lacks advanced technical frameworks or CMS. Security posture is moderate with no explicit HTTPS or security headers information available, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

P

Palazzina

palazzina.ch

63

Palazzina is a small cultural venue based in Switzerland specializing in contemporary art exhibitions and cultural events. The website serves as a platform to showcase recent and upcoming exhibitions, book launches, and other artistic activities primarily located in Basel. The target audience includes art enthusiasts, local visitors, and artists. The business model appears to be non-profit or cultural organization focused on community engagement through art. Technically, the website is built with standard HTML, CSS, and JavaScript, likely using a custom CMS. It is mobile optimized with moderate performance and basic SEO and accessibility features. The site uses HTTPS and includes CSRF tokens in forms, indicating some security awareness. However, it lacks security headers and privacy/cookie policies, which are important for compliance and security. From a security perspective, the site has a good SSL configuration and no visible vulnerabilities or exposed sensitive data. The absence of privacy and cookie policies and security headers are notable gaps. No incident response or vulnerability disclosure information is provided. The site does not appear to use analytics or tracking services, minimizing privacy risks. Overall, the website is professional and trustworthy with a moderate security posture. Strategic improvements in privacy compliance, security headers, and incident response readiness would enhance its security and compliance standing.