Security Directory

G

GAZ-SYSTEM S.A.

gaz-system.pl

56

GAZ-SYSTEM S.A. is a strategic Polish company operating in the energy sector, specifically as a gas transmission system operator. The company manages the transmission of natural gas, maintenance and development of gas pipeline infrastructure, and operates LNG and FSRU terminals. It serves a broad audience including business clients, suppliers, media, and stakeholders in the energy market. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. Technically, the site uses modern JavaScript libraries, Google Analytics, and Google Tag Manager for tracking, and is built on a custom CMS platform. Mobile optimization and accessibility features are well implemented. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit incident response information are missing. WHOIS data is not publicly available, indicating privacy protection which is justified given the company's strategic role. Overall, the site is trustworthy, professional, and compliant with GDPR and cookie regulations.

Dell Technologies is a global leader in technology solutions, offering a wide range of products and services including technical support, partner programs, and enterprise solutions. The Finnish localized site targets corporate customers with comprehensive resources and account management features. The technical infrastructure is robust, leveraging modern JavaScript frameworks, advanced analytics, and marketing tools, ensuring a fast, accessible, and mobile-optimized user experience. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though explicit security policies and incident response details are not publicly disclosed. Overall, the site reflects a mature digital presence consistent with a large enterprise technology company.

K

Kirchenbote Online

kirchenbote-online.ch

64

Kirchenbote Online is a regional Swiss media platform focused on church-related news and cultural topics across several cantons including Baselland, Basel-Stadt, Luzern, Schaffhausen, Schwyz, Solothurn, Uri, and Zug. The website offers news articles, event agendas, book recommendations, and digital e-paper services targeting residents and church community members interested in religious and societal issues. The platform maintains partnerships with other cantonal church news providers, enhancing its regional presence. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Google reCAPTCHA for bot protection. It features a cookie consent mechanism compliant with GDPR standards, ensuring user privacy choices are respected. The site is mobile-optimized with good navigation and professional design, though some accessibility and SEO aspects could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent with opt-in. However, it lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's business focus, indicating legitimacy and trustworthiness. Overall, Kirchenbote Online presents a professional, trustworthy, and GDPR-compliant media platform with moderate technical sophistication and a solid security posture. Opportunities exist to enhance security headers, publish terms of service, and improve accessibility and SEO for better user experience and compliance.

A

ALDI SUISSE TOURS

aldi-suisse-tours.ch

72

ALDI SUISSE TOURS is a travel service provider operating under the ALDI SUISSE brand, offering affordable travel packages including hotels, beach holidays, round trips, and cruises primarily targeting the Swiss market. The website is professionally designed with consistent branding and provides a comprehensive cookie consent mechanism ensuring GDPR compliance. Technically, the site uses modern web technologies including Cookiebot for consent management, Google Tag Manager for analytics, and Kameleoon for marketing optimization, hosted on AWS Cloudfront CDN. Security posture is strong with HTTPS enforced and appropriate security headers, though no explicit security policy or incident response information is publicly available. Overall, the site is trustworthy and well-positioned in the retail travel sector with good privacy compliance and user experience.

A

ALDI SUISSE AG

aldi-suisse-photos.ch

71

ALDI Suisse Fotos is an online photo printing service operated by ALDI SUISSE AG, a well-established retail company in Switzerland. The website offers customers the ability to upload, edit, and order various photo products such as prints, photo books, and gifts. The service targets ALDI customers and the broader Swiss market, leveraging the strong ALDI brand presence. The business model is e-commerce focused, integrated within the retail sector, providing value-added services to customers. The website content is professionally presented, consistent with ALDI's branding, and offers clear navigation and contact options.

A

ALDI SUISSE AG

aldi-mobile.ch

70

ALDI Mobile, operated by ALDI SUISSE AG, is a telecommunications service provider in Switzerland offering affordable mobile subscriptions and prepaid plans. The website presents a professional and user-friendly interface with clear information about their services, pricing, and contact options. The business targets general consumers seeking cost-effective mobile solutions with no minimum contract duration and lifetime discounts. Technically, the website leverages modern frameworks such as Next.js and React, ensuring good performance, mobile optimization, and accessibility. Security-wise, the site enforces HTTPS, implements standard security headers, and uses cookie consent management, although it lacks a dedicated security policy or incident response page. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements, making it a reliable platform for customers.

A

ALDI SÜD

aldi-now.ch

74

ALDI-now is an online grocery delivery platform operating in Switzerland, affiliated with the well-known retail company ALDI SÜD. The website offers a wide range of grocery products with same-day delivery service, targeting Swiss consumers seeking convenience and quality at competitive prices. The platform integrates modern web technologies including Google Tag Manager and reCAPTCHA to enhance user experience and security. Cookie consent mechanisms are implemented to comply with GDPR requirements. The website is professionally designed with consistent branding and clear navigation, providing a trustworthy shopping environment. However, explicit security policies and incident response contacts are not publicly available, which could be improved to enhance transparency and user trust. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the site.

B

Bitly, Inc.

aldi.in

71

Bitly, Inc. is a well-established technology company founded in 2003, specializing in branded link management services including URL shortening, QR codes, and analytics. The company operates a mature SaaS business model targeting marketers and enterprises, with a strong market position supported by major brand clients. The website demonstrates a high level of digital maturity, leveraging WordPress CMS, modern JavaScript libraries, and multiple marketing and analytics integrations. Security posture is robust, with HTTPS enforced, SOC 2 Type 2 certification, and compliance with GDPR and CCPA. Minor improvements such as enabling DNSSEC and publishing a security.txt file could further enhance security. Overall, the website is professional, trustworthy, and compliant, with no signs of blocking or WAF interference.

O

On-Apply GmbH

onapply.de

74

OnApply is a German-based SaaS company specializing in recruiting and applicant management software designed to streamline the hiring process for businesses. Founded in 2012, it offers a comprehensive platform that includes job posting management, applicant tracking, interview scheduling, analytics, and team collaboration tools. The company positions itself as an easy-to-use solution for HR professionals and recruiters, with a strong emphasis on GDPR compliance and data security. The website reflects a mature digital presence with positive user ratings and clear business information. Technically, OnApply leverages modern web technologies including Webflow CMS, Amazon AWS hosting, Google Tag Manager, and Cloudflare Turnstile captcha for security. The site is well-optimized for performance, mobile responsiveness, and accessibility, indicating a high level of digital maturity. The use of structured data and comprehensive metadata supports SEO and user experience. From a security perspective, the website enforces HTTPS, employs bot protection, and provides cookie consent mechanisms aligned with GDPR. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a public vulnerability disclosure or incident response contact is noted. Overall, OnApply presents a low-risk profile with a professional and trustworthy online presence. Strategic recommendations include enhancing security header implementation, publishing vulnerability disclosure policies, and improving transparency on data retention and incident response to further strengthen trust and compliance.

G

Grape Festival

grapefestival.sk

53

Grape Festival is a well-established music and cultural event organizer based in Slovakia, hosting annual festivals with a strong focus on entertainment, ticket sales, and partner engagement. The website reflects a professional and consistent brand image targeting music festival attendees and cultural event audiences primarily in Slovakia. Technically, the site uses a modern technology stack including jQuery, Bootstrap, and various analytics and marketing tools such as Google Tag Manager and TikTok Pixel, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, although formal security policies and vulnerability disclosure mechanisms are absent. Overall, the website is trustworthy, compliant with GDPR, and provides a positive user experience with clear navigation and relevant content.

F

FAST ČR, a.s.

fastcr.cz

54

FAST ČR, a.s. is a Czech Republic-based wholesale distributor and service provider specializing in consumer electronics, household appliances, and related products since 1992. The company serves retailers and end customers primarily within the Czech market, offering a broad portfolio of well-known global and local brands. Their business model focuses on wholesale sales and after-sales service, positioning them as a trusted regional partner in their sector. Technically, the website employs standard web technologies including JavaScript, CSS, and Google Analytics for tracking. The site is accessible with moderate performance and basic mobile optimization. However, there is a lack of advanced security headers and no visible CMS or hosting provider information. Privacy and cookie policies are absent, indicating room for improvement in compliance and user transparency. From a security perspective, the site uses HTTPS but lacks explicit security headers and incident response contact information. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and branding appear professional and consistent with a legitimate business. No critical vulnerabilities or adult content were detected. Overall, the website presents a professional business front with moderate technical maturity and some security and compliance gaps. Strategic improvements in privacy policies, security headers, and domain registration transparency are recommended to enhance trust and compliance.

P

PLAYGROUNDS

playgrounds.ch

60

PLAYGROUNDS is a Swiss-based platform dedicated to providing information about playgrounds, targeting families and children. The website is professionally designed with consistent branding and good content quality, serving a niche local market. Technically, it employs modern web technologies including Google Tag Manager, reCAPTCHA, and Cookiebot for consent management, running on the Umbraco CMS. The site is well-optimized for mobile and SEO, with moderate performance. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities. Privacy compliance is robust, featuring a comprehensive privacy and cookie policy with GDPR adherence. However, the site lacks explicit terms of service, incident response, and vulnerability disclosure information, which are recommended for enhanced trust and compliance. Overall, the website is trustworthy, secure, and suitable for its target audience.

O

OPTEN AG

pgfwirkt.ch

69

PGF wirkt! is a Swiss-based website realized by OPTEN AG, likely serving a community or social impact purpose targeted at German-speaking Swiss users. The website employs modern web technologies including Umbraco CMS, Google reCAPTCHA, Google Tag Manager, and Cookiebot for cookie consent management, reflecting a moderate level of digital maturity. The site is well-structured with good design and navigation, optimized for mobile devices, and uses multiple third-party analytics and marketing tools to track user interactions extensively. Security posture is solid with HTTPS enforced and bot protection in place, but lacks published security policies or incident response information. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy or terms of service pages found. Overall, the site is professional and trustworthy but could improve transparency and compliance documentation.

L

liebesexundsoweiter

liebesexundsoweiter.ch

69

liebesexundsoweiter.ch is a Swiss non-profit organization website dedicated to sexual education and related social topics. The site provides educational content, workshops, and resources aimed at a general audience in Switzerland. The organization positions itself as a niche educational provider with a focus on youth and adult education in sexual health and social awareness. The website is built on the Umbraco CMS platform and integrates modern web technologies including Google Tag Manager, reCAPTCHA, and Cookiebot for privacy compliance. Hosting and development appear to be managed by Swiss-based OPTEN AG, ensuring regional compliance and performance. Security posture is strong with HTTPS enforced, appropriate security headers, and a comprehensive cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with detailed policies and user consent management. However, the site lacks explicit terms of service and a dedicated security or incident response policy. Overall, the website is professional, trustworthy, and suitable for its educational mission, with moderate technical maturity and good security hygiene.

P

PLAYGROUNDS

lasalleouverte.ch

62

PLAYGROUNDS is a Swiss-based platform dedicated to providing information and community engagement around playgrounds, targeting families and children. The website is professionally designed with a consistent brand presence and offers detailed content relevant to its niche audience. Technically, the site leverages modern web technologies including Umbraco CMS, Google Maps API, and various JavaScript libraries to deliver an interactive user experience. Security-wise, the site enforces HTTPS, employs security headers, and integrates cookie consent mechanisms compliant with GDPR, although it lacks explicit security policy and incident response disclosures. Overall, the website demonstrates a solid security posture and good privacy compliance, with moderate technical performance and user experience.

P

PLAYGROUNDS

chindaktiv.ch

52

PLAYGROUNDS is a Swiss-based platform dedicated to providing information and community engagement around playgrounds, targeting families and children. The website is professionally designed with a consistent brand presence and offers key services such as playground information and event listings. The platform uses Umbraco CMS and integrates modern web technologies including Google Tag Manager, reCAPTCHA, and Google Maps API to enhance user experience and security. Cookie consent is implemented comprehensively, reflecting good privacy compliance practices. Security posture is strong with HTTPS and security headers in place, although no explicit security policy or incident response information is published. Overall, the website is trustworthy, well-maintained, and suitable for its target audience.

A

Active City

activecity.ch

66

Active City is a Swiss-based community initiative offering free sports and movement courses for all age groups, promoting outdoor and collective physical activities without registration requirements. The website is professionally designed using Umbraco CMS and integrates modern technologies such as Google Tag Manager, reCAPTCHA, and Cookiebot for privacy compliance and user experience enhancement. The technical infrastructure supports good performance and mobile optimization, with a moderate level of accessibility and SEO optimization. Security posture is solid with HTTPS enforcement and cookie consent management, though some security headers could be improved and explicit security policies are absent. Overall, the website is trustworthy, transparent, and well-aligned with its community service mission.

R

RADIX Schweizerische Gesundheitsstiftung

primokiz.ch

69

RADIX Schweizerische Gesundheitsstiftung is a Swiss non-profit health foundation focused on promoting health in communities, exemplified by their Primokiz program targeting healthy municipalities. The website reflects a professional and consistent brand presence with clear health-related content aimed at municipalities, health professionals, and families. The technical infrastructure is modern, leveraging Umbraco CMS, Google Tag Manager, Cookiebot for consent management, and Google Maps API, indicating a mature digital presence. Security posture is strong with HTTPS, security headers, CSRF protections, and bot mitigation via reCAPTCHA. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, explicit security policies and incident response information are not found, representing an area for improvement. Overall, the website is trustworthy, secure, and compliant with GDPR, serving its target audience effectively.

N

NKT A/S

nkt.cz

51

NKT A/S is a well-established company specializing in the manufacturing and supply of cables and cable accessories primarily for the energy sector. With a history dating back to 1891, NKT positions itself as a leading European supplier offering a comprehensive range of products including low, medium, and high voltage cables, as well as related services such as 24-hour cable service and cable laying via specialized vessels. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support targeting energy sector professionals and partners. Technically, the website is built on modern frameworks such as Next.js and React, incorporating advanced features like consent management via Usercentrics and analytics through Google Tag Manager. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some security headers could be enhanced. The absence of WHOIS data due to privacy protection is noted but does not detract significantly from the site's legitimacy given the professional content and certifications displayed. From a security perspective, the site enforces HTTPS and employs consent mechanisms for privacy compliance, aligning with GDPR requirements. However, explicit incident response contacts and vulnerability disclosure mechanisms are not present, representing areas for improvement. Overall, the site maintains a strong security posture with no evident vulnerabilities or malicious content. The risk assessment indicates a low risk profile with recommendations to enhance security headers and publish incident response information to further bolster trust and compliance. The company’s digital maturity and business credibility are high, supporting its market position as a trusted energy sector partner.

A

ABADIA a.s.

balkony-a-lodzie.cz

43

ABADIA a.s. is a Czech-based company specializing in the manufacturing and installation of suspended balconies and lodžies, primarily targeting panel houses. Established in 2012, the company has built a strong market presence in the Czech Republic and Slovakia, with some projects in Germany. Their services include design proposals, static assessments, 3D visualizations, manufacturing, and installation, positioning them as a leading supplier in their niche. The website reflects a professional business with clear contact information and a portfolio of completed projects, supporting their credibility. Technically, the website employs common marketing and analytics tools such as Google Tag Manager, Google Analytics, Facebook SDK, and CookieYes for cookie consent management. The site appears to be custom-built without a known CMS and is hosted via Active24. While the site has moderate performance and basic mobile optimization, some technical improvements are needed, particularly regarding HTTPS enforcement and security headers to enhance security posture. From a security perspective, the site implements a detailed cookie consent mechanism aligned with GDPR principles but lacks visible privacy policies, terms of service, or incident response information. The absence of HTTPS on some resources introduces mixed content risks. No critical vulnerabilities or blocking mechanisms were detected, but security best practices could be improved to protect user data and enhance trust. Overall, the website is functional and professional but would benefit from enhanced security measures, explicit privacy documentation, and technical modernization to improve user trust and compliance.

J

Jirsa a Záruba

jzshop.cz

58

JZShop.cz is a Czech-based e-commerce service provider specializing in the rental of customizable online shops with integrated solutions for suppliers, accounting, and inventory management. The company targets small to medium-sized businesses seeking tailored e-shop solutions with additional features such as integrated cash registers and multi-currency support. The website demonstrates a professional and modern design with clear navigation and mobile responsiveness, supported by a moderate technology stack including Google Analytics and Facebook Pixel for marketing and analytics purposes. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, although the absence of WHOIS data and explicit security headers slightly reduce trust. Overall, the site is well-structured, content-rich, and business-focused, but would benefit from enhanced transparency in domain registration and security policies.

D

DRUMEXTRA s.r.o.

mapex.cz

45

Mapex, operated by DRUMEXTRA s.r.o., is a Czech-based company specializing in the manufacturing and retail of drums, drum hardware, and accessories. Established in 2007, the company offers a range of percussion instruments targeting musicians and music stores. The website presents a professional and consistent brand image with clear navigation and relevant content for its niche market. The technical infrastructure includes common web technologies such as jQuery and Google Tag Manager, indicating moderate digital maturity with room for improvement in performance and SEO. Security posture is adequate with HTTPS usage but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic, with a privacy policy implied under terms of use but no cookie consent mechanism detected. Overall, the website is functional and trustworthy but could benefit from enhanced security and privacy features.

D

Drumextra, s.r.o.

anatolian.cz

43

Anatolian is a Czech-based company specializing in the manufacturing and wholesale distribution of high-end cymbals, targeting drummers and music professionals. The website presents a professional and consistent brand image with clear contact information and a focus on quality musical instruments. The company appears to have a history dating back to 2000, although domain registration details could not be verified due to missing WHOIS data. Technically, the website uses modern web technologies including Google Tag Manager and Typekit fonts, with a responsive design and moderate performance. However, there is a lack of advanced security headers and no visible privacy or cookie policies, which indicates room for improvement in compliance and security posture. From a security perspective, the site is accessible without WAF or blocking mechanisms, but the absence of WHOIS data and security policies reduces trustworthiness. No vulnerabilities or exposed sensitive data were detected, but the site would benefit from implementing security best practices such as security headers and GDPR-compliant policies. Overall, the website is functional and professional but has gaps in privacy compliance and domain transparency. Strategic improvements in security and compliance would enhance trust and reduce risk.

C

CRAFTER Co., LTD.

crafterguitars.com

47

Crafter Guitars is a well-established Korean guitar manufacturer with a history dating back to 1972. The company focuses on handcrafted guitars combining traditional craftsmanship with modern design and technology. Their website reflects a medium-sized manufacturing and retail business targeting musicians and guitar enthusiasts, with a consistent brand presence and active social media engagement. Technically, the website uses modern JavaScript libraries and frameworks such as jQuery, GSAP, and Swiper.js, hosted on Cafe24 infrastructure, with good mobile optimization and SEO practices. Security posture is adequate with enforced HTTPS and no exposed sensitive data, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and safe for general audiences.

R

RADIX Schweizerische Gesundheitsstiftung

radix.ch

69

RADIX Schweizerische Gesundheitsstiftung is a Swiss non-profit health foundation dedicated to health promotion and prevention. The organization targets Swiss residents interested in improving their health and well-being through educational programs and services. The website reflects a professional and consistent brand image, with a clear focus on healthcare and public health sectors. The foundation operates with a medium-sized organizational footprint and leverages modern web technologies to engage its audience effectively. Technically, the website is built on the Umbraco CMS platform and integrates a variety of modern JavaScript libraries and APIs, including Google Tag Manager, reCAPTCHA, Cookiebot for consent management, and Google Maps API. The site demonstrates good mobile optimization and moderate performance, with a solid SEO foundation and basic accessibility features. From a security perspective, the site enforces HTTPS, employs strong security headers, and uses cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a publicly available security policy and incident response information represents an area for improvement. Overall, RADIX.ch presents a trustworthy and professionally maintained online presence with strong privacy compliance and a clear focus on user data protection. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility, and maintaining vigilance on third-party script security to sustain and improve its security posture.

S

SwitzerlandMobility

schweizmobil.ch

68

SwitzerlandMobility operates a national platform focused on summer mobility and outdoor activities in Switzerland, providing route planning, sightseeing, and travel report services primarily targeting tourists and outdoor enthusiasts. The website demonstrates moderate digital maturity with modern JavaScript frameworks and bundling tools, and integrates Google Analytics and Tag Manager for user tracking. However, the site lacks visible privacy and cookie policies, contact information, and explicit security headers, which impacts its compliance and security posture. The domain registration data aligns well with the business focus and country, supporting legitimacy. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security measures.

T

tegut... gute Lebensmittel GmbH & Co. KG

tegut.com

62

tegut... gute Lebensmittel GmbH & Co. KG is a well-established German supermarket chain operating approximately 350 stores across six federal states. The company specializes in offering a wide range of quality food products, including regional, organic, vegan, and vegetarian options, emphasizing sustainability and transparency since its founding in 1947. The website reflects a mature digital presence with comprehensive content, customer engagement features such as a loyalty program (tebonus), recipe collections, and nutritional plans. Technically, the site is built on TYPO3 CMS, employs modern JavaScript libraries, and integrates multiple marketing and analytics tools while maintaining GDPR compliance through a consent management platform. Security posture is strong with HTTPS enforcement and privacy controls, although explicit security headers could be improved. Despite the absence of WHOIS registration data, the website's professionalism, certifications, and trust signals indicate a legitimate and credible business. Overall, tegut demonstrates a robust online presence aligned with its brand values and customer expectations.

V

Vajra & Delibio

delibio.be

45

Vajra & Delibio is a family-owned wholesale distributor specializing in organic (BIO) food products in Belgium, offering a catalog of over 5000 references including fresh and dry goods. The website is professionally designed, leveraging the PrestaShop e-commerce platform, and integrates modern technologies such as Google Maps API and Google Tag Manager for analytics. The site is fully accessible, mobile-optimized, and provides clear navigation through extensive product categories. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security policy or incident response contacts are published. WHOIS data is restricted due to registry policy, which is typical for .be domains, but the website content and social media presence support legitimacy. Overall, the site demonstrates a mature digital presence suitable for its B2B wholesale market.

E

Ekoplaza

ekoplaza.nl

51

Ekoplaza is a well-established Dutch organic supermarket chain offering organic and sustainable food products primarily targeting consumers in the Netherlands. The website serves as an e-commerce platform enabling customers to browse and purchase organic groceries. The business is positioned as a key player in the organic retail sector with a consistent brand presence and a focus on quality organic products. Technically, the website employs modern frameworks such as Nuxt.js and Bootstrap, and integrates Google Tag Manager for analytics and marketing purposes. The site demonstrates good mobile optimization and user experience, though accessibility features are basic. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and explicit security policies. Privacy compliance is weak due to absence of visible privacy and cookie policies. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness. Strategic improvements in security headers, privacy disclosures, and contact information visibility would enhance trust and compliance.

A

ALECO GmbH

aleco.bio

46

ALECO GmbH is a well-established organic supermarket chain operating in the northwest region of Germany, with a history spanning over 25 years since its founding in 1989. The company focuses on providing a fully ecological product range with a strong emphasis on freshness, targeting consumers interested in organic and sustainable products. Their business model centers on retail through multiple physical store locations, supported by customer loyalty programs and active recruitment efforts. Technically, the website employs modern tracking technologies such as Google Tag Manager and Google Analytics, and uses Swiper.js for interactive content. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with no critical technical issues detected. However, no CMS or hosting provider details are explicitly identified. From a security perspective, the website enforces HTTPS and implements a cookie consent banner, indicating awareness of privacy regulations. However, it lacks advanced security headers and does not publish explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to privacy protection or malformed queries, but the website's legitimacy is supported by consistent branding, multiple store locations, and active social media presence. Overall, ALECO GmbH presents a credible and professional online presence with moderate technical maturity and a good security posture. Strategic improvements could include enhancing security headers, publishing security policies, and providing clearer contact information such as phone numbers to further strengthen trust and compliance.

E

ebl-naturkost GmbH & Co. KG

ebl-naturkost.de

49

ebl-naturkost GmbH & Co. KG operates as a regional organic food retailer in Germany, emphasizing sustainable, high-quality, and natural products sourced from regional and biologically certified farms. The company maintains a strong market position within the organic retail sector, offering weekly and monthly promotional offers through both physical markets and an online presence. Their target audience includes consumers seeking organic and regional food products. Technically, the website is built on the Shopware CMS platform, hosted by Timme Hosting, and incorporates modern web technologies with responsive design and SEO best practices. The site uses Google Analytics with IP anonymization and implements a cookie consent mechanism, reflecting a good level of digital maturity and privacy awareness. Security posture is solid with HTTPS enforced, though some security headers and explicit security policies are absent. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with room for improvement in security transparency and incident response readiness.

T

tegut... gute Lebensmittel GmbH & Co. KG

basicbio.de

62

tegut... gute Lebensmittel GmbH & Co. KG is a well-established German supermarket chain operating approximately 350 stores across six federal states. The company specializes in offering a wide range of products including regional foods, organic (Bio) products, vegan and vegetarian options, and items adhering to their Reinheitsversprechen (purity promise). Founded in 1947, tegut... emphasizes sustainability, fairness, and transparency as core business values. Their business model focuses on retailing quality food products with a strong commitment to environmental and social responsibility. The website reflects a mature digital presence with comprehensive customer engagement features such as a loyalty program (tebonus), recipe collections, and an online shop.

D

Denns BioMärkte

denns-biomarkt.de

69

Denns BioMärkte operates as a large-scale organic retail chain in Germany, offering a comprehensive range of organic products including food, fresh produce, bakery items, ecological drugstore goods, and natural cosmetics. The company is part of the BioMarkt Verbund, a recognized network of organic markets, and emphasizes certified organic products from reputable associations such as Bioland, Biokreis, Naturland, and Demeter. The website reflects a professional retail business model targeting general consumers interested in organic and ecological products. Technically, the website is built using modern frameworks like React and Gatsby, hosted on Microsoft Azure DNS infrastructure, and incorporates essential marketing and tracking tools such as Google Tag Manager and Facebook Pixel. The site includes a cookie consent mechanism via Cookiebot, indicating compliance efforts with GDPR regulations. Security-wise, while HTTPS is implied and cookie consent is implemented, the site lacks visible advanced security headers and formal security policies or incident response contacts. No blocking or WAF challenges were detected, allowing full content access. Overall, the website demonstrates a good balance of business credibility, technical implementation, and privacy compliance, with room for improvement in security policies and transparency.

M

Manor AG

manor.ch

75

Manor AG operates a leading retail and e-commerce platform in Switzerland, offering a broad assortment of products including fashion, beauty, household goods, multimedia, and more. The website manor.ch serves as a comprehensive online shop complemented by physical stores, loyalty programs, and customer services such as store locators and wishlists. The company has a strong market position as a well-established Swiss department store chain founded in 1902. Technically, the website leverages modern web technologies including React and Next.js frameworks, integrated with marketing and personalization tools like Dynamic Yield and Google Tag Manager. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. Privacy compliance is robust with clear cookie consent mechanisms and comprehensive privacy policies. From a security perspective, the site enforces HTTPS with strong SSL configurations and implements standard security headers. However, explicit security policies and incident response contacts are not publicly detailed, which could be improved. No vulnerabilities or suspicious activities were detected in the analysis. Overall, manor.ch presents a professional, trustworthy, and secure online presence aligned with its business stature. Strategic improvements in transparency around security policies and incident response would further enhance trust and compliance.

C

Coop Pronto AG

coop-pronto.ch

56

Coop Pronto AG operates a large network of over 300 convenience retail shops with or without fuel stations across Switzerland. The company focuses on providing quick and fresh products from early morning to late night, targeting general consumers seeking convenience and fuel services. The website reflects a mature digital presence with good content quality, clear navigation, and consistent branding aligned with the Coop group. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, Facebook Pixel, and other marketing tools, indicating a well-integrated marketing and analytics infrastructure. Security posture is solid with HTTPS enforced and privacy compliance evident through cookie banners and privacy policies, although formal security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, trustworthy, and safe for general audiences.

N

nuun - webs & apps GmbH

nuun.ch

58

nuun - webs & apps GmbH is a Swiss-based digital agency specializing in custom web design, app development, and online shops, primarily serving clients in the Thurgau region, specifically Weinfelden. The company positions itself as a local expert offering tailored digital solutions including corporate branding and web hosting. The website content is professionally presented in German, targeting small and medium-sized businesses seeking bespoke digital services. The agency maintains an active presence on social media platforms such as Facebook, Instagram, and LinkedIn, and offers newsletter subscriptions to engage its audience. Technically, the website is built on the Contao Open Source CMS and leverages modern web technologies including jQuery and Slick Carousel for interactive content. It integrates Google Tag Manager and Matomo for analytics, indicating a moderate level of digital maturity and user tracking. The site is mobile-optimized with good SEO practices, although accessibility features could be enhanced. Performance is moderate, with no critical technical debt observed. From a security perspective, the website enforces HTTPS and includes several important security headers such as Content-Security-Policy and Strict-Transport-Security. Forms are protected with CSRF tokens, and no exposed sensitive data or vulnerable libraries were detected. However, the absence of a cookie consent mechanism and explicit security or incident response policies represents areas for improvement. Privacy compliance is generally good, with a clear privacy policy in place and GDPR compliance indicators, but cookie consent and terms of service pages are missing. Overall, nuun.ch presents a trustworthy and professional digital presence with a solid security posture and business credibility. Strategic recommendations include implementing a cookie consent banner, publishing terms of service and security policies, and enhancing accessibility. These steps will improve compliance, user trust, and security culture, supporting the agency's growth and reputation in the competitive Swiss digital market.

M

maerz architekten ag

maerz.ag

45

maerz architekten ag is a Swiss architecture firm specializing in architecture, development, spatial planning, and project realization. Operating as a subsidiary of RaumUnion AG, the company serves clients primarily within Switzerland, offering professional architectural services with a focus on quality and regional projects. The website presents a professional portfolio and clear contact information, reinforcing its market presence. Technically, the website is built on WordPress with modern technologies such as Alpine.js and jQuery, optimized for performance and mobile responsiveness. Hosting is provided by Hostpoint AG, inferred from DNS records. Google Analytics is integrated via Google Tag Manager, enabling moderate user tracking. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, indicating potential compliance gaps with GDPR requirements. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and enhanced security measures to strengthen its posture and user trust.

P

PCI Proxy

docvault.app

62

DocVault, operated by PCI Proxy, offers a specialized PCI compliant document vault solution enabling businesses to securely collect and validate sensitive customer documents without direct handling. Positioned as a niche leader, the company targets businesses requiring stringent PCI compliance in document processing. The website reflects a professional and consistent brand image with clear messaging and a focus on security and compliance. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, and Cookiebot for consent management, hosted on Webflow's platform with good performance and mobile optimization. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through a comprehensive privacy policy and cookie consent mechanism. However, the site lacks explicit terms of service and detailed security or incident response policies, which could enhance trust and compliance. Overall, the site demonstrates a mature digital presence suitable for its business model and audience.

W

Worldpay

globalpaymentsreport.com

75

Worldpay is a leading global payment processor providing comprehensive payment solutions for businesses of all sizes, including online, in-store, omnichannel, and embedded payments. The company targets merchants, software platforms, and enterprises, positioning itself as a market leader with a broad portfolio of services including payouts, fraud protection, and payment optimization. The website reflects a mature digital presence with modern technologies such as React and Next.js, hosted on Akamai infrastructure, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS, domain registration locks, and a vulnerability disclosure page, though explicit security policies and DPO contacts are not publicly detailed. Privacy and cookie policies are comprehensive and GDPR compliant, supported by consent management tools. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

B

BALTRO GROUP, a.s.

baltro.cz

57

BALTRO GROUP, a.s. is a Czech Republic-based medium-sized manufacturing company specializing in surface treatments, robotics automation, and mechanical parts production. Established in 2011, the company serves industrial clients with tailored solutions including fluoroplastic coatings, robotized workstations, and machining services. The website reflects a professional and consistent brand image, highlighting key partnerships and certifications such as ISO 9001. Technically, the site is built on WordPress with modern plugins for SEO and GDPR compliance, hosted by WEDOS. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the company presents a trustworthy and credible digital presence aligned with its business operations.

A

AUDIT ADVICE s.r.o.

auditadvice.cz

50

AUDIT ADVICE s.r.o. is a Czech Republic based small-sized company specializing in accounting, payroll, tax advisory, and document archiving services. With over 15 years of experience, it serves firms, entrepreneurs, and various associations primarily in the Tábor region. The company offers comprehensive outsourcing solutions and emphasizes professionalism and trust in its service delivery. The website reflects a professional and consistent brand image with clear service descriptions and client-oriented content. Technically, the site uses modern frameworks like Bootstrap and integrates popular analytics and marketing tools such as Google Analytics and Facebook Pixel. While the site is mobile-optimized and well-structured, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security-wise, HTTPS is implied, but security headers and incident response information are absent, suggesting room for improvement. The absence of WHOIS data limits domain trust assessment, but the website content and business information appear legitimate and professional overall.

K

Kulturistika.com

kulturistika.com

65

Kulturistika.com operates as a Czech-based fitness e-commerce platform combined with a magazine offering content on bodybuilding, fitness, strength sports, crossfit, and healthy lifestyle. The site targets fitness enthusiasts and athletes primarily in the Czech and Slovak regions, providing a broad range of sports nutrition products, clothing, equipment, and informative articles. The business model integrates online retail with content publishing to engage and convert its audience. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, Google reCAPTCHA Enterprise, Facebook SDK, and OneSignal for push notifications. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be improved. Performance is moderate, with multiple external scripts for analytics and advertising. From a security perspective, the site uses HTTPS and implements bot protection on login forms. However, no explicit security headers were detected, and there is no published privacy policy or terms of service in the provided content. The WHOIS data is missing, which raises concerns about domain registration legitimacy. Cookie consent is implemented with advanced user controls, indicating some GDPR compliance awareness. Overall, the website presents a professional and functional platform with moderate security and privacy posture. The lack of WHOIS transparency and absence of privacy policy are notable gaps. Strategic improvements in security headers, privacy documentation, and domain registration verification are recommended to enhance trust and compliance.

M

M6

6play.fr

68

M6 is a major French media company offering a broad range of entertainment content including TV shows, series, reality shows, cinema, and podcasts through its streaming platform M6+. The website serves as a digital hub for accessing replay and streaming content, targeting a general audience interested in French media entertainment. The platform is supported by official mobile applications for Android and iOS, enhancing accessibility and user engagement. Technically, the site leverages modern web technologies such as React and integrates advanced analytics and performance monitoring tools like New Relic and Google Tag Manager, indicating a mature digital infrastructure. Security measures include HTTPS enforcement, Content Security Policy, and cookie consent mechanisms, reflecting a strong security posture. However, no explicit security policy or incident response information is publicly available. The WHOIS data is not disclosed, likely due to privacy protection, which is common for media companies. Overall, the site demonstrates high professionalism, good privacy compliance, and a trustworthy presence in the French media market.

A

Asociace výrobců kabelů a vodičů České republiky a Slovenské republiky

vyrobcikabelu.cz

53

The website represents the official association of cable and wire manufacturers in the Czech Republic and Slovakia, serving as a central information hub for industry members and customers. It provides updates on metal prices, quality standards, and industry news, positioning itself as a trusted regional industry association. The site is professionally designed with consistent branding and clear navigation, targeting both professional and lay audiences interested in cable manufacturing and related sectors. Technically, the site is built on WordPress with a modern tech stack including jQuery, Yoast SEO, and Google Tag Manager. It employs multilingual support and cookie consent mechanisms, indicating a moderate level of digital maturity. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS and consent management but lacks some security headers and explicit policies. Security-wise, the site shows good practices in data protection and user consent but lacks visible incident response or vulnerability disclosure information. The absence of WHOIS data is a concern for domain transparency, though the site content and partner affiliations support legitimacy. Overall, the risk is moderate with recommendations to enhance security headers, privacy policies, and domain registration transparency. Strategically, the association should focus on improving compliance documentation and security posture to strengthen trust and regulatory adherence, while continuing to provide valuable industry content and maintain strong partner relationships.

G

Gastronovi GmbH & Co. KG

gastronovi.com

57

Gastronovi GmbH & Co. KG operates a professional and comprehensive cloud-based software platform tailored for the gastronomy industry, offering modules for point of sale, inventory management, marketing, guest services, and payment processing. The company targets gastronomy businesses seeking digital transformation and operational efficiency. The website is well-designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site leverages TYPO3 CMS, Bootstrap, and modern JavaScript libraries, with integration of third-party services such as Google Tag Manager and Calendly. Security posture is good with HTTPS enforced and cookie consent mechanisms implemented, though some security headers could be improved. WHOIS data is unavailable, which is unusual but the website's professionalism and trust signals mitigate concerns. Overall, the site demonstrates a strong business and technical foundation with minor areas for security enhancement.

The website alcmosnov.cz serves as the official information portal for the Armádní logistické centrum Mošnov, a government project in the Czech Republic focused on establishing a military logistics center near the Leoš Janáček Airport Ostrava. The site provides project updates, news, and contact information primarily targeting local communities, government stakeholders, and interested public. The domain is newly registered in 2023, consistent with the project's timeline, and hosted by Webglobe, a reputable provider. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integration of Google Tag Manager and a cookie consent mechanism supporting multiple languages. The site is mobile optimized and offers good navigation and content relevance. However, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. From a security perspective, the site uses HTTPS and enforces cookie consent with opt-in for analytics, but does not publish security policies or incident response contacts. No critical vulnerabilities or WAF blocking were detected. The analytics usage is minimal and privacy compliance is basic but could be improved with formal policies. Overall, alcmosnov.cz is a credible government project site with good content and technical implementation but would benefit from enhanced privacy, security, and compliance documentation to strengthen trust and regulatory adherence.

W

Wojewódzki Ośrodek Dokumentacji Geodezyjnej i Kartograficznej w Katowicach

orsip.pl

72

ORSIP 2.0 is a regional government geoportal operated by the Wojewódzki Ośrodek Dokumentacji Geodezyjnej i Kartograficznej in Katowice, Poland. It provides comprehensive spatial data services, including interactive map applications, open data access, and web map services for the Silesian Voivodeship. The platform targets public administration, local governments, researchers, and citizens interested in regional spatial information. The website is well-structured, professionally designed, and offers extensive content relevant to its audience. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, with a focus on accessibility and mobile optimization. The hosting and domain registration are stable and consistent with the official nature of the service. Security measures include HTTPS enforcement, DNSSEC, cookie consent mechanisms, and CAPTCHA on contact forms, reflecting a good security posture. While no explicit security policy or incident response contacts are published, the overall security and privacy compliance are strong, with GDPR-aligned cookie and privacy policies. The WHOIS data confirms legitimacy and long-term operation, supporting trustworthiness. No vulnerabilities or suspicious content were detected, and the site is safe for general audiences. Overall, ORSIP 2.0 represents a mature, reliable government geoportal with solid technical and security foundations, serving an important role in regional spatial data dissemination and public service.

A

AutoMapa Sp. z o.o.

targeo.pl

57

AutoMapa Sp. z o.o. operates the Targeo website, a comprehensive mapping and routing platform focused on Poland. The service offers detailed maps with over 8 million addresses, precise route planning, and real-time traffic congestion monitoring branded as Korkometr™. The platform targets both general users and businesses requiring location intelligence and delivery optimization solutions. The website integrates with AutoMapa's broader ecosystem, providing business services such as geocoding, territory planning, and proof of delivery. Technically, the site employs modern analytics tools including Google Analytics, Microsoft Clarity, and Piwik, alongside a robust cookie consent mechanism via CookieScript, ensuring GDPR compliance. Advertising is managed through reputable networks like Google Adsense and OpenX, with transparent disclosures. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and compliance indicate legitimacy.

B

Bitly, Inc.

her.is

75

Bitly, Inc. is a well-established technology company founded in 2003, specializing in branded link management and URL shortening services. The company serves businesses and marketers globally, offering a suite of products including URL shorteners, branded links, QR codes, and analytics to enhance digital marketing efforts. Bitly holds a strong market position as a trusted platform used by major brands worldwide. The website demonstrates a mature technical infrastructure leveraging WordPress CMS, Amazon AWS hosting, and modern analytics tools such as Snowplow and Google Tag Manager. It is optimized for performance, mobile responsiveness, and accessibility. Security posture is robust with HTTPS enforcement, domain locking, and comprehensive privacy and cookie policies with consent mechanisms. However, enabling DNSSEC and publishing a security.txt file could further enhance security transparency. Overall, Bitly's digital presence reflects professionalism, trustworthiness, and compliance with privacy regulations, supporting its credibility in the technology sector.

M

Mary Kay

marykayintouch.de

57

Mary Kay InTouch Germany is a regional portal for Mary Kay consultants and customers, providing access to product ordering, promotions, and support. The site is built on Salesforce Experience Cloud, leveraging Salesforce Lightning Web Components and integrates multiple payment and analytics services such as Stripe, PayPal, Adyen, and Google Analytics. The technical infrastructure is modern and hosted on AWS, ensuring reliable performance and scalability. Security measures include HTTPS, a strict Content-Security-Policy, and cookie consent mechanisms, although explicit privacy and terms of service pages were not found in the provided content. The site is mobile optimized and presents a professional, branded experience consistent with Mary Kay's global presence.