Security Directory

M

Mary Kay

marykay.de

65

Mary Kay Germany operates a comprehensive e-commerce platform focused on beauty and skincare products, leveraging Salesforce Commerce Cloud technology. The website is well-integrated with multiple payment providers and marketing tools, targeting German-speaking consumers. The technical infrastructure is modern, with good performance and mobile optimization. Security posture is strong with HTTPS, CSP, and secure cookie usage, though explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms. Overall, the website presents a professional and trustworthy digital presence consistent with Mary Kay's global brand.

S

SurveyMonkey

getfeedback.com

69

GetFeedback is a customer experience platform operated by SurveyMonkey, a global leader in online surveys and forms. The platform offers tools to collect, analyze, and act on customer feedback across multiple channels, including email, SMS, websites, and mobile apps. It integrates with Salesforce and provides real-time alerts and analytics to help businesses improve customer satisfaction and loyalty. The website is professionally designed, mobile-optimized, and provides comprehensive privacy and cookie policies, reflecting a mature digital presence. The technical infrastructure includes modern analytics and consent management tools, ensuring compliance with privacy regulations. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit incident response contacts and vulnerability disclosures are not evident. Overall, the site demonstrates high legitimacy and trustworthiness, aligned with its parent company SurveyMonkey's reputation.

E

ElDiario.es

eldiario.es

54

ElDiario.es is a prominent Spanish digital newspaper focused on current affairs, politics, and economic analysis. It operates a subscription-based business model with a paywall to monetize its content. The website demonstrates a mature digital presence with professional branding and high-quality content targeted at a general audience interested in independent journalism. Technically, the site employs modern JavaScript frameworks, integrates multiple advertising and tracking services, and shows good mobile optimization and SEO practices. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Privacy compliance is basic, with a consent management platform present but no explicit privacy or cookie policies detected in the provided HTML. WHOIS data is restricted by the Spanish registry, limiting domain registration transparency. Overall, the site is legitimate and trustworthy but could improve transparency and security practices.

Take off is a Swiss non-profit organization operating a day structure and work integration program for youth who have dropped out of the education system. It is part of the Jugendsozialwerk Blaues Kreuz BL umbrella and has been active for approximately 25 years, serving the Pratteln region. The website presents a professional and consistent brand image, with clear contact details and certifications from recognized Swiss bodies, indicating a trustworthy and established social service provider. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript libraries like jQuery and Bootstrap, and is built on the webIQ 5.0 framework. It employs HTTPS with a good SSL configuration and integrates Google Analytics via Google Tag Manager with IP anonymization, reflecting a moderate level of digital maturity. The site is mobile optimized and has a clear navigation structure, though accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses a cookie consent banner compliant with GDPR. However, it lacks explicit security headers and does not provide a public security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is justified for a non-profit, but limits direct verification of domain ownership. Overall, the website is safe, professional, and credible with a moderate security posture. Strategic improvements in security headers, privacy disclosures, and accessibility would enhance trust and compliance.

AIP plus is a Swiss non-profit organization operating since 1996, focused on providing employment opportunities and integration support for job seekers, particularly those assigned by social insurance and employment agencies. The organization collaborates with local businesses to offer training and internships, aiming to facilitate entry into the first labor market. The website is professionally designed, content-rich, and provides clear contact information and partner links, reflecting a mature digital presence. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Tag Manager, with a cookie consent mechanism ensuring privacy compliance. Security posture is adequate with HTTPS enforced, though security headers are missing and could be improved. WHOIS data is privacy protected, typical for Swiss domains, but the website's content and certifications strongly support legitimacy. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a trustworthy and professional platform.

Wohn- und Arbeitsintegration Bernhardsberg is a Swiss non-profit organization focused on providing housing and work integration services for adults with psychological impairments. It operates under the parent organization Jugendsozialwerk Blaues Kreuz BL and offers a range of social services including residential care, supported employment, and a bio-product manufactory. The website is professionally designed, content-rich, and targets a regional audience in Switzerland. It demonstrates strong trust signals such as certifications (ZEWO, SQS, dot.swiss), clear contact information, and a cookie consent mechanism. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Tag Manager with IP anonymization, ensuring a good user experience and moderate performance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers and incident response policies could enhance protection. WHOIS data is privacy protected, which is justified for this type of non-profit entity. Overall, the website is trustworthy, compliant with privacy regulations, and well-positioned in its social service niche.

Wohngemeinschaft Falkennest is a Swiss non-profit organization providing protected living spaces and social rehabilitation services for young adults aged 18 to 30 facing social difficulties. It operates under the oversight of the Basel-Landschaft canton government and is part of the Stiftung Jugendsozialwerk Blaues Kreuz BL. The website is professionally designed, content-rich, and targets clients, volunteers, and stakeholders in social services. Technically, the site uses a modern JavaScript stack with frameworks such as webIQ and Bootstrap, ensuring good mobile optimization and user experience. Security posture is moderate with room for improvement in HTTP security headers and explicit security policies. Privacy compliance is well addressed with cookie consent and a privacy policy. Overall, the domain and website present a trustworthy and legitimate entity with strong Swiss social service credentials.

Jugendwohngruppen Im Park is a Swiss non-profit organization focused on providing supported living and social integration services for youth in Basel. It operates under the umbrella of Jugendsozialwerk Blaues Kreuz BL and offers residential groups, assisted living, and placement services for young people, including those with psychological stability. The organization maintains a professional online presence with clear contact information, certifications, and social media engagement. Technically, the website uses modern web technologies and frameworks, including webIQ, Bootstrap, and jQuery, and is mobile optimized with a cookie consent mechanism in place. Security posture is good with HTTPS enabled and no visible vulnerabilities, though security headers are missing and could be improved. WHOIS data is privacy protected, which is justified for this type of non-profit entity. Overall, the website is trustworthy, well-structured, and compliant with privacy regulations.

P

Pro Natura Zentrum Champ-Pittet

pronatura-champ-pittet.ch

64

Pro Natura Zentrum Champ-Pittet is a Swiss non-profit environmental organization focused on nature conservation, environmental education, and visitor engagement through exhibitions, protected natural areas, and a restaurant. The website reflects a well-established regional center with clear business objectives centered on public education and nature preservation. Technically, the site is built on Drupal 10, uses modern web technologies, and integrates privacy compliance tools such as Usercentrics for cookie consent. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response policies are absent. Overall, the website is trustworthy, professional, and compliant with GDPR requirements.

P

Pro Natura Zentrum Aletsch

pronatura-aletsch.ch

63

Pro Natura Zentrum Aletsch is a Swiss non-profit nature conservation and education center located in the Alps near the Aletsch Glacier. The organization offers visitor experiences including nature center visits, accommodation, dining, guided excursions, and educational programs targeting families, schools, and nature enthusiasts. The website is professionally designed with clear navigation, multilingual support, and strong branding consistency. Technically, it is built on Drupal 10, uses modern web technologies, and integrates consent management and analytics tools responsibly. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website reflects a trustworthy and credible organization with a strong focus on environmental education and conservation.

P

PCI Proxy

pci-proxy.com

68

PCI Proxy is a technology company specializing in secure payment data management solutions. Their platform enables organizations to build and control payment flows securely by leveraging tokenization and compliance offloading, thereby minimizing PCI scope and preventing vendor lock-ins. The company targets businesses that require robust payment data security and compliance solutions, offering key services such as a Universal Token Vault and 3-D Secure authentication. The website demonstrates a professional digital presence with good mobile optimization and clear navigation, supported by modern web technologies including Webflow CMS, Google Analytics, and Cookiebot for privacy compliance. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy, but the overall professional presentation and use of trusted third-party services support a positive risk assessment. Strategic recommendations include enhancing security header implementation, publishing a security.txt file, and providing clearer contact and legal information to strengthen trust and compliance.

B

BAYO Solutions AG

bayo.ch

57

BAYO Solutions AG operates a specialized cloud-based CRM platform tailored for insurance brokers, fiduciary companies, and law firms primarily in Switzerland. Their solution focuses on enhancing customer relationship management and secure data exchange, positioning them as a niche player in the Swiss financial and legal technology sectors. The website reflects a professional and consistent brand image with clear contact channels and partner affiliations. Technically, the site uses modern web standards, including HTML5, CSS3, and JavaScript, with Google Tag Manager for analytics. The CMS identified is MoveCMS, indicating a custom or specialized content management approach. Security-wise, the site enforces HTTPS and displays a CyberSeal certification, signaling adherence to cybersecurity best practices. However, there is room for improvement in publishing explicit security policies and headers. Overall, the website is well-structured, mobile-optimized, and compliant with GDPR through visible privacy and cookie policies.

R

RULEMATCH AG

rulematch.com

66

RULEMATCH AG operates a specialized spot cryptocurrency trading venue based in Switzerland, leveraging Nasdaq technology to serve banks, securities firms, and institutional clients. The company positions itself as a market operator focused on interbank trading and settlement of digital assets, emphasizing market integrity, AML/CFT compliance, and ultra-low latency trading. The website reflects a professional and modern digital presence with comprehensive trading documentation and news insights, targeting a niche institutional audience. Technically, the site is built on WordPress with modern SEO and privacy compliance tools, including Iubenda for cookie and privacy management, and Google Tag Manager for analytics. Security posture is solid with HTTPS and obfuscated contact details, though explicit security policies and incident response contacts are not publicly disclosed. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the presence of regulatory identifiers and professional content. Overall, RULEMATCH demonstrates a mature digital infrastructure suitable for its specialized financial services market.

Q

QuickFrame

quickframe.com

61

QuickFrame operates a sophisticated video creation and insights marketplace platform that connects brands with vetted video professionals to produce high-quality video content across multiple styles and objectives. The company has established itself as a trusted partner with preferred partnerships with major digital advertising platforms such as Meta, LinkedIn, TikTok, and MNTN. Their platform supports end-to-end video production workflows including concept development, bid management, collaboration, and final delivery. Technically, the website is built on WordPress and leverages a modern tech stack with extensive analytics and marketing integrations, hosted on AWS infrastructure. The site is well-optimized for SEO, mobile, and accessibility, reflecting a mature digital presence. Security posture is solid with HTTPS and domain protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is good with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, QuickFrame presents a professional, trustworthy, and business-focused online presence with room for minor security and privacy enhancements.

B

Blaues Kreuz Schaffhausen-Thurgau

blaueskreuz-sh-tg.ch

56

Blaues Kreuz Schaffhausen-Thurgau is a well-established Swiss non-profit organization with over 125 years of experience supporting individuals and families affected by alcohol and addiction issues in the Thurgau and Schaffhausen regions. The organization offers a range of services including counseling, outpatient alcohol withdrawal, group programs, and community engagement through initiatives like the Brocki Pfyn thrift shop and KafiTreff meetings. Their market position is strong within the regional non-profit sector, supported by recognized certifications such as ZEWO and QuaTheDA. Technically, the website is built on TYPO3 CMS and integrates modern web technologies including Google Custom Search, Matomo analytics for privacy-conscious tracking, and Google Tag Manager. The site is mobile-optimized with good SEO practices and a moderate performance profile. However, some improvements could be made in accessibility and security headers. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. It uses Matomo analytics, which is privacy-friendly, but lacks explicit cookie consent mechanisms and security.txt files for vulnerability disclosure. No critical vulnerabilities or suspicious content were detected, and the WHOIS data aligns well with the organization's identity, supporting legitimacy. Overall, Blaues Kreuz Schaffhausen-Thurgau presents a trustworthy and professional online presence suitable for its mature target audience. Strategic improvements in privacy compliance and security best practices would further enhance their digital maturity and user trust.

F

FAKTOR VIER

faktorvier.ch

58

FAKTOR VIER is a small, professional web agency based in Luzern, Switzerland, specializing in WordPress and WooCommerce development for custom websites and online shops. The company positions itself as a local expert with a focus on delivering tailored digital solutions to businesses and individuals seeking e-commerce and website services. The website reflects a good level of digital maturity, leveraging modern technologies such as WordPress, WooCommerce, Yoast SEO, and Font Awesome Pro icons, alongside cookie consent mechanisms to comply with privacy regulations. The technical infrastructure is sound, with moderate performance and good mobile optimization, although hosting details are not explicitly disclosed. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of security headers and explicit security policies indicates room for improvement. Privacy compliance is partial due to the lack of a published privacy policy and terms of service, which are critical for GDPR adherence. Overall, the website is trustworthy and professional but would benefit from enhanced transparency and security documentation to strengthen compliance and user trust.

A

AGC Inc.

agc.com

60

AGC Inc. is a large multinational enterprise specializing in manufacturing and technology sectors including glass, electronics, chemicals, life sciences, and ceramics. The company positions itself as an innovator with a strong focus on sustainability and corporate governance. The website is professionally designed, content-rich, and targets a broad audience including investors, customers, and partners. Technically, the site uses modern JavaScript libraries and tracking tools, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and explicit security policies added. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site reflects a mature digital presence consistent with a large enterprise, though WHOIS data is missing or obscured, which slightly impacts trust assessment.

A

AGC Glass Europe

agc-yourglass.com

57

AGC Glass Europe is a leading European manufacturer and marketer of flat glass products serving the construction, automotive, and solar power sectors. The company operates under the global AGC brand with a strong presence across Europe and a workforce of approximately 13,000 employees. The website targets architects, specifiers, distributors, and other stakeholders in the glass and construction industries, offering extensive product information, technical support, and digital tools such as a glass configurator. Technically, the site is built on Drupal 10, employs modern web technologies, and integrates marketing and analytics tools like Google Tag Manager and Visual Website Optimizer. Security posture is good with HTTPS and CAPTCHA protections, though some security headers and policies could be improved. The WHOIS data is unavailable or indicates the domain may not be registered, which is a concern for domain legitimacy, but the website content and branding strongly suggest a legitimate business entity. Overall, the site is professional, well-structured, and compliant with privacy regulations.

M

Mary Kay

marykayintouch.cz

62

Mary Kay InTouch Czech Republic is a dedicated online portal for independent Mary Kay beauty consultants in the Czech Republic, providing continuous access to business tools, product ordering, and training resources. The site is part of the global Mary Kay brand ecosystem, leveraging Salesforce Community Cloud technology to deliver a secure and integrated user experience. The platform integrates multiple trusted payment gateways and analytics services, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and strict Content-Security-Policy headers, although explicit privacy and terms of service documentation are not directly linked on the login page. Overall, the site demonstrates a professional and trustworthy presence aligned with Mary Kay's global standards.

Główny Instytut Górnictwa - Państwowy Instytut Badawczy (GIG-PIB) is a well-established Polish government research institute specializing in mining engineering, environmental engineering, and related industrial services. With a century of experience, it offers a broad portfolio including laboratory testing, certification, environmental monitoring, and training. The institute serves industry, government, and research sectors, positioning itself as a key player in sustainable regional development. Technically, the website is built on Drupal 7 with modern frontend technologies such as Bootstrap and jQuery. It integrates Google Analytics and Tag Manager for tracking, though it lacks a cookie consent mechanism. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and incident response contact information, which are areas for improvement. The absence of a cookie consent banner may pose GDPR compliance risks. Overall, the website is professional, trustworthy, and content-rich, with strong business credibility. Strategic enhancements in privacy compliance and security headers would further strengthen its posture.

M

Moravskoslezské Investice a Development, a.s.

msid.cz

53

Moravskoslezské Investice a Development, a.s. (MSID) operates as a regional development agency focused on the Moravskoslezský kraj in the Czech Republic. The company aims to foster regional growth by supporting municipalities, businesses, and environmental initiatives. Their services include investment facilitation, marketing the region, environmental support, and managing land offers. The website is professionally designed, content-rich, and targets regional stakeholders including local governments, investors, and residents. The business model centers on regional development and sustainability, positioning MSID as a key player in the local government and real estate sectors. Technically, the website is built on WordPress with modern front-end technologies such as Tailwind CSS, Swiper.js, and DotLottie animations. SEO is well implemented with Yoast SEO plugin and structured data. The site is mobile optimized and uses analytics tools like Microsoft Clarity and Google Tag Manager. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS and uses secure forms with consent checkboxes for newsletter subscriptions. However, it lacks visible security headers and cookie consent mechanisms, which are recommended for enhanced compliance and protection. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust verification, but the website content and business information appear legitimate and consistent. Overall, MSID's website demonstrates a mature digital presence with strong business credibility and good technical implementation. Strategic improvements in privacy compliance and security headers would further strengthen their security posture and trustworthiness.

M

Panenky Malunka

malunka.cz

43

Panenky Malunka is a small artisan retail business based in the Czech Republic specializing in handcrafted dolls made from natural materials. The website showcases various doll categories, including flower dolls, traditional dolls, and small figurines, with a focus on custom orders and personalized craftsmanship. The business targets consumers seeking unique, handcrafted gifts and collectibles. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and is hosted with Amazon Cloudfront CDN, ensuring moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced, but lacks important security headers and formal privacy or cookie policies, which impacts compliance and trust. The absence of WHOIS registration data is a significant concern for domain legitimacy and trustworthiness. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security best practices.

E

EGE, spol. s r.o.

ege.cz

52

EGE, spol. s r.o. is a Czech-based medium-sized company specializing in the development, manufacturing, installation, and servicing of energy-related equipment, including encapsulated conductors, arc suppression reactors, and steel constructions. With over 30 years of experience, the company serves industrial and energy sectors, offering full-service solutions and maintaining a strong market presence supported by certifications and EU-funded projects. The website reflects a professional business model targeting B2B clients in energy and manufacturing industries. Technically, the website employs modern web technologies such as Google Tag Manager and Google Analytics, with responsive design and basic accessibility features. The site uses HTTPS with a valid SSL certificate, ensuring secure communications. Cookie consent mechanisms and privacy policies demonstrate GDPR compliance, although some SEO and accessibility improvements are possible. From a security perspective, the site shows good practices like HTTPS enforcement and cookie consent but lacks some security headers and explicit incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is a concern for domain trustworthiness, but the website content and business information appear legitimate. Overall, the website is safe, professional, and compliant with privacy regulations, though domain registration transparency should be improved to enhance trust. Strategic recommendations include adding security headers, publishing incident response details, and enhancing SEO and accessibility.

K

KOH-I-NOOR Mlada Vozice

kohinoor.cz

56

KOH-I-NOOR Mlada Vozice is an established manufacturing company specializing in aerosol valves and plastic accessories, with a history spanning 75 years. The company offers project concept, design, and testing services, targeting industrial clients and manufacturers in the aerosol product sector. Their market position is that of a reputable and experienced manufacturer based in the Czech Republic. Technically, the website is built on WordPress using modern plugins such as Elementor and WooCommerce, supported by Google Tag Manager for analytics. The site demonstrates good design quality, mobile optimization, and SEO practices, although some accessibility features are basic. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

M

Město Tábor

taborcz.eu

48

Město Tábor operates an official municipal website serving residents and visitors with comprehensive information about city administration, public services, events, and community resources. The website is positioned as the authoritative source for city-related information in Tábor, Czech Republic, targeting local citizens and tourists. Key services include online document requests, public announcements, and contact channels for municipal support. Technically, the site uses the Vismo CMS platform, integrates Google Analytics and Tag Manager for user tracking, and employs Google reCAPTCHA for form security. The site is hosted by Webglobe, s.r.o., a reputable Czech hosting provider, and uses HTTPS with an excellent SSL configuration. Security practices include cookie consent with granular controls and no visible exposed sensitive data. However, the site lacks explicit security policies and incident response information. Overall, the website is professional, trustworthy, and well-optimized for accessibility and SEO, with moderate user tracking and good privacy compliance.

K

Kalas

kalas.cz

58

Kalas.cz is a Czech-based e-commerce website specializing in cycling apparel and sportswear for men, women, and children. The company boasts over 30 years of experience in manufacturing quality cycling clothing, positioning itself as a reputable brand within the Czech and Slovak markets. The website offers a broad range of products including jerseys, shorts, vests, and accessories, along with options for custom designs. The business model focuses on direct online sales supported by a professional and user-friendly website. Technically, the website employs modern web technologies such as JavaScript ES modules, Google Tag Manager, and SmartEmailing for marketing and analytics. The site is mobile-optimized with good SEO practices and a responsive design. However, some security best practices like explicit security headers and a published security policy are missing, which could be improved. From a security perspective, the site uses HTTPS and has cookie consent mechanisms in place, indicating a baseline compliance with privacy regulations such as GDPR. The absence of WHOIS data for the domain is a concern, as it limits the ability to verify domain legitimacy and ownership, slightly reducing trustworthiness. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, Kalas.cz presents as a professional and trustworthy e-commerce platform with room for improvement in transparency around security policies and domain registration details. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration information to bolster trust and compliance.

S

Schweizerische Bodensee-Schifffahrt AG

yachthafen-romanshorn.ch

56

Schweizerische Bodensee-Schifffahrt AG operates two harbor facilities in Romanshorn, Switzerland, providing mooring and maintenance services for private sailing and motor boats. The company holds a regional position in transportation and harbor management on Lake Constance, offering additional services such as boat lifting and radar training. The website is professionally designed using WordPress and Elementor, with good content quality and clear navigation tailored to boat owners and visitors. Technically, the site employs modern web technologies and integrates marketing and analytics tools like Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enabled, though some security headers are not explicitly detected in the HTML source. Privacy compliance is basic but includes a privacy policy and cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy and well-maintained, supporting the company's business objectives effectively.

K

Kornhaus Romanshorn

kornhaus-events.ch

55

Kornhaus Romanshorn operates as a specialized event venue located on the shores of Lake Constance in Switzerland. The business offers rental spaces for private and corporate events including weddings, seminars, and Christmas parties, complemented by gastronomy and apartment services. The website reflects a niche hospitality business with a strong regional presence and partnerships with local service providers. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and analytics tools such as Matomo and Google Tag Manager. The site is well-structured, mobile-optimized, and uses HTTPS with appropriate security headers, indicating a solid technical foundation. However, the absence of a cookie consent mechanism and explicit incident response contacts suggests areas for compliance and security improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

R

Ristorante Porto - Das Beste aus Italien

ristorante-porto.ch

52

Ristorante Porto is a small hospitality business offering Italian cuisine at the Bodensee region in Switzerland. The website presents a professional and consistent brand image with a focus on local restaurant services. The technical infrastructure is based on WordPress with Elementor, integrating modern analytics and marketing tools such as Google Tag Manager and Matomo. The site is mobile optimized and SEO friendly, though some accessibility features could be improved. Security posture is good with HTTPS enabled and no obvious vulnerabilities, but lacks security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the business appears legitimate and well-positioned locally, but should enhance compliance and security documentation to improve trust and regulatory adherence.

R

Restaurant Hafen

restaurant-hafen.ch

58

Restaurant Hafen is a small hospitality business located in Romanshorn, Switzerland, offering restaurant dining, terrace seating, catering, and event hosting services. The website positions itself as an award-winning local restaurant with a focus on regional and fresh market dishes, appealing to a general audience interested in quality gastronomy. The business model centers on hospitality services with additional catering and event offerings, supported by partnerships with related local businesses.

S

Schweizerische Bodensee-Schifffahrt AG

sbsag.ch

55

Schweizerische Bodensee-Schifffahrt AG operates as a regional transportation and tourism company specializing in ferry and cruise services on Lake Constance (Bodensee). The company offers a variety of services including scheduled ferry routes, themed experience trips, event hosting such as weddings and corporate charters, and hospitality through partner restaurants. Their market position is that of a key regional player in transportation and tourism, targeting general audiences including tourists and local residents. The website reflects a professional and consistent brand image with good content quality and clear navigation.

J

JM Holding

jmholding.lv

57

JM Holding is a Latvian digital agency specializing in website development, e-commerce solutions, SEO optimization, and online advertising services including Google Ads. The company targets businesses and individuals seeking to establish or improve their online presence. The website is professionally designed using WordPress and Elementor, with integrated Google Analytics and reCAPTCHA for analytics and security. While the technical infrastructure is modern and the site is mobile optimized, there are gaps in privacy compliance such as missing privacy and cookie policies. Security posture is adequate with HTTPS and reCAPTCHA but lacks security headers and formal security policies. Contact information is clearly provided, enhancing business credibility. Overall, JM Holding presents as a legitimate and professional small-sized technology service provider in Latvia.

Stiftung Refdata is a Swiss foundation providing essential standardized reference data services for the healthcare sector, focusing on unique identification of medicines, medical products, healthcare professionals, and organizations using GS1 standards such as GTIN and GLN. The website demonstrates a solid market position with exclusive licensing rights and partnerships with Swissmedic and GS1 Schweiz. Technically, the site is built on Joomla CMS with modern frontend technologies including Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and accessible with good SEO practices. Security posture is good with HTTPS enforced and CSRF protections, though lacking explicit security policies and some security headers. Privacy compliance is well addressed with cookie consent mechanisms and a privacy policy in German. Overall, the site is professional, trustworthy, and well-aligned with its healthcare audience.

B

Beneš a Lát a.s.

benesalat.cz

46

BENEŠ a LÁT a.s. is a well-established Czech manufacturing company specializing in aluminum and zinc casting as well as plastic injection molding. Founded in 1934, the company operates with approximately 450 employees and leverages modern technologies including 3D metal printing. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on WordPress with a modern tech stack including SEO and social media integration. Security posture is solid with HTTPS, reCAPTCHA, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is basic with cookie policies and GDPR considerations but lacks comprehensive privacy and security policies. The absence of WHOIS data limits domain trust assessment but the business information and social presence support legitimacy. Overall, the site is professional and trustworthy with room for enhanced security and compliance documentation.

DIFFERENT.VISION is a small Czech Republic based web development agency operated by provocation s.r.o., founded in 2018. The company specializes in creating websites and applications, targeting businesses or individuals seeking web presence and custom applications. The website is minimalistic, providing basic contact information and service description without extensive content or policies. Technically, the site uses modern web standards including HTTPS, Google Fonts, and Google Analytics for tracking. However, it lacks advanced security headers and privacy compliance mechanisms such as cookie consent or privacy policies. The domain registration data is consistent with the business location and entity, indicating legitimacy. Overall, the digital maturity is moderate with room for improvement in security and compliance.

F

Flight Safety Foundation

flightsafety.org

55

Flight Safety Foundation is a well-established, independent non-profit organization dedicated to advancing aviation safety globally through research, education, advocacy, and publishing. With over 80 years of history, it holds a strong market position as a trusted leader in the aviation safety sector, serving aviation professionals and stakeholders worldwide. The website reflects this professionalism with comprehensive content, clear navigation, and a consistent brand presence supported by partnerships with major aviation and aerospace companies. Technically, the website is built on WordPress using modern plugins and frameworks such as Elementor and Yoast SEO. It leverages Amazon AWS for hosting and integrates Google Analytics and Tag Manager for user tracking and performance monitoring. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a gap. Contact information is clearly provided, enhancing business credibility. Overall, the website is secure, professional, and trustworthy, with minor improvements recommended in security headers, DNS security, and privacy consent mechanisms to further strengthen its posture.

B

Bifrost Finance

bifrost.finance

70

Bifrost Finance operates a liquid staking appchain designed to support multiple blockchains through decentralized cross-chain interoperability. The platform empowers users to earn staking rewards and DeFi yields with flexibility and liquidity, positioning itself as a niche leader in the blockchain infrastructure and DeFi space. The website reflects a mature digital presence with a modern tech stack including React and Next.js, hosted via Cloudflare, and integrates Google Tag Manager for analytics. Security posture is strong with HTTPS enforced, multiple security headers, and references to multiple third-party audits, though some privacy compliance aspects like cookie consent and incident response contacts are lacking. Overall, the site is professional, trustworthy, and well-optimized for performance and user experience.

R

Rango Exchange

rango.exchange

68

Rango Exchange is a technology-driven platform specializing in cross-chain decentralized exchange (DEX) and bridge aggregation. It enables users to swap assets across more than 70 blockchains seamlessly, leveraging smart routing over 100+ DEXs and bridges. The platform targets DeFi users, developers, and crypto wallets, offering APIs, SDKs, and widgets for integration. Rango positions itself as a leading universal cross-chain aggregator with a strong ecosystem of partners and investors. Technically, the website is built on modern frameworks like Next.js and React, hosted with Cloudflare DNS, and optimized for performance and mobile use. Security posture is solid with HTTPS, clientTransferProhibited domain status, and cookie consent mechanisms, though some security headers and policies could be more explicit. Privacy compliance is well addressed with comprehensive policies and GDPR adherence. Overall, Rango Exchange presents a professional, trustworthy, and technically mature presence in the DeFi space.

P

Pro Natura

pronatura.ch

73

Pro Natura is a well-established Swiss non-profit organization dedicated to nature conservation, managing over 800 nature reserves and engaging the public through education and advocacy. The website reflects a mature digital presence built on Drupal 10, with modern technologies and compliance tools such as Usercentrics for cookie consent and Google Tag Manager for analytics. The security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and aligned with its mission, serving a broad audience interested in environmental protection.

D

Dry January

dryjanuary.ch

52

Dry January is a Swiss-based non-profit campaign focused on encouraging individuals to abstain from alcohol during January. The website serves as an informational and engagement platform offering event details, partner programs, and merchandise sales to support the campaign. It targets a general audience with an emphasis on health and alcohol awareness. The site is built on Drupal 10 with Commerce 2, integrating modern web technologies and analytics tools such as Matomo and Google Tag Manager. The technical infrastructure is solid, with good mobile optimization and secure HTTPS implementation. However, the site lacks critical privacy and cookie policies, which impacts GDPR compliance and user trust. Security posture is generally good but could be improved by adding security headers and incident response information. Overall, the website is professional and trustworthy but should address compliance gaps to enhance user confidence and legal adherence.

B

Blaues Kreuz Schweiz

blaukreuzverlag.ch

53

Blaues Kreuz Schweiz is a well-established Swiss non-profit organization dedicated to addiction prevention, support, and education. The organization offers a range of services including counseling, prevention programs, and publishes educational materials related to addiction. The website analyzed focuses on their book offerings, which have recently transitioned to a partner publisher, Mosaicstones. The organization maintains a strong market position in Switzerland with a history spanning over 140 years, supported by trusted certifications such as ZEWO and active social media engagement. Technically, the website is built on TYPO3 CMS and integrates modern analytics and marketing tools including Google Analytics, Matomo, and Google Tag Manager. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be improved. Security posture is strong with HTTPS enforced and security headers present, but the absence of a cookie consent mechanism and published security policies indicates room for compliance enhancement. Overall, the website presents a professional and trustworthy image with clear contact information and transparent business details. The content is mature-themed focusing on addiction and health education, suitable for a broad audience including affected individuals and professionals. No blocking or WAF challenges were detected, allowing full content accessibility and analysis.

The Stiftung Jugendsozialwerk Blaues Kreuz BL operates as a Swiss non-profit organization providing a broad range of social services focused on youth and community support. Their offerings include employment assistance, housing, leisure activities, school support, and counseling, targeting children, adolescents, and families primarily in the Basel-Landschaft region. The organization maintains a professional online presence with clear navigation, multilingual support in German, and active social media engagement. Technically, the website is built using modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Bootstrap, supported by the webIQ 5.0 framework. It features responsive design optimized for mobile devices and integrates Google Analytics with IP anonymization, reflecting a moderate level of digital maturity. However, some security best practices such as security headers and incident response disclosures are absent. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is justified for a non-profit entity, though it limits transparency. Certifications such as ZEWO and SQS Swiss Made enhance trustworthiness. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with an overall AI score of 81. Strategic improvements include adding security headers, publishing a vulnerability disclosure policy, and enhancing accessibility features to further strengthen security posture and compliance.

W

Webconnex

webconnex.com

66

Webconnex is a technology company specializing in flexible event, ticketing, and fundraising software solutions. Established since 2008, it operates multiple product brands including TicketSpice, RegFox, GivingFuel, and RedPodium, serving over 60,000 organizations globally. The company positions itself as a people-first organization with a strong emphasis on team culture and customer service. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, Wistia for video hosting, and Sentry for error monitoring, ensuring a fast, responsive, and accessible user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are not publicly documented. The WHOIS data for the domain is not publicly available, likely due to privacy protection, which slightly impacts transparency but does not detract significantly from the overall trustworthiness given the professional web presence. Overall, Webconnex demonstrates a mature digital infrastructure and a credible business model with room for improvement in security policy transparency.

Z

Zindel United

zindel-united.swiss

53

Zindel United is a Swiss-based company specializing in sustainable architectural design and construction services. Their business model focuses on creating resource-conscious and generational building solutions, positioning them as a reputable player in the Swiss real estate and construction sector. The website reflects a medium-sized enterprise with a professional online presence, targeting clients interested in sustainable and innovative building projects. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and cookie consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, though there is room for improvement in implementing additional security headers. Overall, the website is trustworthy, well-structured, and compliant with GDPR and Swiss data protection laws.

S

St.Gallen-Bodensee Tourismus

gallen-bodensee.ch

59

St.Gallen-Bodensee Tourismus operates as a regional tourism authority promoting the St.Gallen-Lake Constance region in Eastern Switzerland. The website provides cultural, scenic, and outdoor activity information targeting tourists and visitors. It positions itself as a trusted source for regional travel guidance and event promotion. The business model focuses on tourism promotion and visitor engagement through digital content and guided tours. Technically, the website is built on the Contao Open Source CMS platform, utilizing Bootstrap for responsive design and modern web standards. It integrates Cookiebot for GDPR-compliant cookie consent management, Google Tag Manager, and Plausible Analytics for data collection and marketing optimization. The site demonstrates good mobile optimization and basic accessibility features, with a moderate performance profile. From a security perspective, the site enforces HTTPS and employs standard security headers, ensuring a secure browsing experience. Cookie consent is actively managed, and no exposed sensitive data or vulnerabilities were detected in the provided content. However, the absence of a security.txt file and explicit incident response contacts suggests room for improvement in vulnerability disclosure and incident management. Overall, the website is professionally designed, trustworthy, and compliant with privacy regulations. The risk profile is low, with recommendations focusing on enhancing security transparency and formalizing incident response mechanisms.

K

Klangwelt Toggenburg

klangwelt.swiss

56

Klangwelt Toggenburg is a cultural and educational organization based in the Toggenburg region of Switzerland, offering unique experiences centered around sound, resonance, and traditional music culture. The website showcases a well-structured digital presence with rich content about events, courses, venues, and cultural offerings, targeting a broad audience interested in music, culture, and wellness tourism. The organization holds a strong regional market position with international recognition for its Klangweg sound trail and related activities. Technically, the website employs modern tracking and analytics tools such as Google Analytics, Facebook Pixel, and CookieYes for consent management, integrated with Laravel backend session management. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is solid with HTTPS enforced and session management in place, though it lacks explicit security headers and a public security policy or incident response contact. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent banner, and GDPR adherence. Overall, the website is trustworthy, professional, and well-maintained, with room for improvement in security transparency and incident response readiness.

E

Ebnat AG

ebnat.ch

57

Ebnat AG is a Swiss specialist company focused on manufacturing high-quality brushes and cleaning solutions for household and dental hygiene sectors. The company offers customized product development, private label, and white label services, emphasizing innovation, quality, and sustainability. Their market position is strong within the manufacturing industry, targeting B2B customers and brand owners. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive business information. Technically, the site uses modern technologies including Google Analytics, Google Tag Manager, Cloudflare Turnstile for bot protection, and Laravel Livewire framework. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies could be improved. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

B

Bank Frick AG

bankfrick.li

65

Bank Frick AG is a well-established full-service bank based in Liechtenstein, specializing in providing banking services to financial intermediaries and professional clients. Founded in 1998, the bank has positioned itself as an innovative leader in blockchain banking and digital financial solutions. Its modular service offerings include intermediary solutions, blockchain banking, fund and capital market solutions, and acquiring services, targeting clients primarily in the EEA/EU, Switzerland, and Liechtenstein. The website reflects a professional and trustworthy brand with comprehensive content and clear navigation.

Appenzeller Bahnen is a regional transportation company operating rail services across the Swiss cantons of Appenzell Innerrhoden, Appenzell Ausserrhoden, and St.Gallen. The company provides travel information, ticketing, and group travel services, positioning itself as a key regional mobility provider. The website reflects a professional digital presence with clear branding and relevant content tailored to travelers in the region. Technically, the site is built on the Contao CMS platform, leveraging modern web technologies including jQuery, Google Tag Manager, and Cookiebot for privacy compliance. The site is mobile-optimized and implements good SEO and accessibility practices. Security posture is strong with HTTPS enforced, multiple security headers, and no visible vulnerabilities. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the site lacks explicit terms of service and a published security policy or incident response contacts. Overall, the website is trustworthy, secure, and professionally maintained, supporting the company's business objectives effectively.