Security Directory

B

Bring Dein Leergut

bring-dein-leergut.de

54

Bring-dein-leergut.de is a German website dedicated to promoting the reuse and return of reusable bottles and packaging to support environmental sustainability. The site targets environmentally conscious consumers in Germany and operates as an informational platform advocating for sustainable consumption habits. Technically, the website is built on WordPress using the Divi theme, with common web technologies such as jQuery and Swiper Carousel. Hosting is provided by rzone.de, and the site uses HTTPS with a good SSL configuration. Security posture is moderate, with HTTPS enabled but lacking advanced security headers and explicit security policies. Privacy compliance is good, with a GDPR-compliant privacy and cookie policy present. However, the site lacks explicit contact information, terms of service, and incident response details, which slightly reduces business credibility. Overall, the website is safe, professional, and well-designed for its niche audience, but could improve in security and transparency aspects.

The website perlenflasche.de represents the Genossenschaft Deutscher Brunnen eG, a cooperative of German mineral water producers, celebrating the 50th anniversary of the Perlenflasche bottle design. The site provides rich historical context, brand information, sustainability messaging, and showcases a broad portfolio of mineral water brands using this iconic bottle. The cooperative holds a strong market position in the German beverage packaging sector, emphasizing sustainability and standardization. Technically, the website employs modern JavaScript libraries such as jQuery, fullpage.js, and Owl Carousel, with video backgrounds and responsive design elements, delivering a good user experience. Security-wise, the site uses HTTPS, cookie consent with GDPR compliance, and anonymized Google Analytics tracking, but lacks explicit security headers and incident response information. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

B

BNP Paribas

histoire.bnpparibas

69

The website 'Source d'Histoire BNP Paribas' serves as a corporate heritage platform showcasing two centuries of BNP Paribas' archives and history through diverse media such as articles, podcasts, videos, and documents. It targets a general audience interested in the bank's historical narrative and brand legacy. The site is professionally designed, well-branded, and consistent with BNP Paribas' corporate identity, reflecting its position as a major player in the global finance industry. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and nonce usage, though some advanced security headers and policies are missing. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms implemented. No direct contact emails or phone numbers are publicly listed, but contact forms and social media links provide communication channels. Overall, the site is trustworthy, professional, and well-maintained, supporting BNP Paribas' brand storytelling and heritage preservation.

T

Touch Medical Media

touchmedicalmedia.com

65

Touch Medical Media is a well-established healthcare media and education company founded in 2011, specializing in delivering expert-led medical education and communications globally. The company operates multiple subsidiaries and therapy area platforms, reaching millions of healthcare professionals worldwide. Their business model focuses on medical publishing, digital education, and scientific content delivery, positioning them as a global leader in trusted medical education. Technically, the website is built on WordPress with modern performance optimizations and good mobile responsiveness. Security posture is strong with HTTPS, security headers, and Cloudflare DNS, though DNSSEC is not enabled and formal security policies are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, reflecting a mature digital presence for a healthcare-focused media company.

L

La Cucina Italiana

lacucinaitaliana.it

68

La Cucina Italiana is a prestigious Italian cooking media brand owned by Condé Nast, offering a rich portfolio of recipes, culinary news, chef stories, and multimedia content targeted at Italian-speaking cooking enthusiasts. The website demonstrates a mature digital presence with good SEO practices, structured data, and mobile optimization. Technically, it employs modern JavaScript frameworks, Google advertising and tracking technologies, and a consent management platform to comply with GDPR requirements. Security posture is strong with HTTPS and security headers in place, though explicit privacy and terms of service pages are not found in the provided content. Overall, the site is trustworthy and professionally maintained but could improve transparency by publishing detailed privacy and security policies.

P

Premium Addons for Elementor

premiumaddons.com

58

Premium Addons for Elementor is a specialized technology company providing a comprehensive library of over 90 widgets and addons to extend the Elementor page builder for WordPress. Established in 2017, the company targets WordPress developers and designers seeking to enhance website functionality and aesthetics through professional-grade addons. Their market position is solidified by a broad offering including content, contact, news, media, WooCommerce, social feed, and container addons, supported by a PRO version for advanced features. Technically, the website is built on WordPress with WooCommerce and Elementor frameworks, leveraging modern web technologies such as jQuery, Font Awesome, and Google Tag Manager. Hosting is provided by Nile Hosting, and performance is moderate with excellent mobile optimization and SEO practices. The site employs tracking and analytics tools including Hotjar and Facebook Pixel, indicating a mature digital marketing infrastructure. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks explicit privacy and cookie policies, security.txt, and incident response disclosures. Security headers are not fully detailed, and privacy compliance is weak, representing areas for improvement. No critical vulnerabilities or WAF blocking were detected, and the domain registration is consistent and legitimate. Overall, the website is professional, content-rich, and trustworthy, but would benefit from enhanced privacy compliance and security transparency to reduce risk and improve user trust.

L

LoryBau AG

lorybau.ch

45

LoryBau AG is a small Swiss construction company based in Vechigen, specializing in project accompaniment from concept to completion with a focus on quality and experience. The website presents a professional image with clear contact information and a localized market position. Technically, the site uses the Cmsbox CMS platform, integrates Google reCAPTCHA for bot protection, and employs Piwik/Matomo analytics for user tracking. However, it lacks explicit privacy and cookie policies, security headers, and terms of service, which are important for compliance and security. The site is accessible without WAF or blocking mechanisms and uses HTTPS with good SSL configuration. Overall, the security posture is moderate but could be improved with additional headers and policies. The website content is safe for general audiences and focused on construction services.

K

Kraftkeller Langnau i. E.

kraftkeller-langnau.ch

46

The website www.kraftkeller-langnau.ch represents a small local hospitality and fitness business based in Switzerland, offering event venue rental and gym services under the Kraftkeller Langnau and drehpunkt brands. The site content is minimal but focused on promoting their event space and gym facilities to the local community. Technically, the website uses modern JavaScript modules and the Livewire framework, with basic mobile optimization and navigation clarity. However, it lacks comprehensive SEO and accessibility features, and no structured data or meta tags are present to enhance search visibility. From a security perspective, the site employs a cookie consent mechanism indicating some privacy awareness, but it lacks visible security headers and published privacy or security policies. No contact information or incident response channels are provided, which limits trust and compliance posture. The absence of HTTPS enforcement details and security best practices suggests room for improvement in security hardening. Overall, the website is functional but basic, with moderate trustworthiness and limited business credibility signals. The lack of privacy and terms policies, contact details, and security disclosures are notable gaps. Strategic improvements in security, privacy compliance, and content richness would enhance the site's professionalism and user trust.

H

Helbling Holding AG

helbling.ch

53

Helbling Holding AG is a Swiss-based consultancy specializing in a broad range of services including business advisory, technology development, product lifecycle management, and sustainability consulting. The company positions itself as a trusted partner for businesses seeking innovation and sustainable growth, with a strong international presence including regional sites in Germany and the USA. The website reflects a mature digital infrastructure built on Neos CMS and Flow PHP framework, incorporating modern technologies such as Google Tag Manager and Usercentrics for consent management. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not published. Overall, the site is professional, well-structured, and compliant with GDPR, providing a positive user experience and clear business information.

M

MARIA DEGIORGI - Raumkonzepte, Bern

mariadegiorgi.ch

50

MARIA DEGIORGI is a small interior design and consulting business based in Bern, Switzerland, specializing in color and material consultations, residential consulting, interior architecture including construction supervision, and room styling. The website serves as a professional portfolio showcasing various projects and services targeted at a general audience interested in interior design. The business operates in a niche local market with a clear focus on quality and aesthetics. Technically, the website is built on WordPress, utilizing common technologies such as jQuery, Google Analytics, and Google Tag Manager. The site is moderately optimized for performance and mobile use, with basic accessibility features and good SEO practices. HTTPS is properly configured, ensuring secure communications. From a security perspective, the site has implemented HTTPS and a cookie consent banner, indicating some awareness of privacy regulations. However, it lacks advanced security headers and formal privacy or security policies, which are areas for improvement. No forms or sensitive data collection mechanisms are present on the homepage, reducing immediate risk exposure. Overall, the website presents a professional and trustworthy image but would benefit from enhanced privacy compliance documentation, improved security headers, and more comprehensive contact information to strengthen user trust and regulatory adherence.

werk.ARCHITEKTEN Genossenschaft is a Swiss architectural cooperative specializing in architecture, urban planning, and sustainable building practices. With over two decades of experience, the firm offers comprehensive services ranging from new constructions to renovations, emphasizing resource responsibility and ecological sustainability. Their collaborative approach involves qualified partners across architecture, landscape architecture, engineering, and construction management, positioning them as a reputable regional player in the real estate and architectural sector. Technically, the website employs a modern but straightforward technology stack including Bootstrap, jQuery, FontAwesome, and Google Analytics for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some technical improvements such as updating JavaScript libraries and implementing security headers could enhance security posture. From a security perspective, the site uses HTTPS and has implemented a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The absence of explicit security policies or incident response information suggests room for improvement in transparency and preparedness. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the legitimacy of the business. Strategic recommendations include enhancing security headers, updating dependencies, and publishing security and incident response policies to strengthen trust and compliance.

H

Hof 3

hof3.ch

47

Hof 3 is a Swiss-based organization focused on sustainable agriculture through permaculture, cultural projects, and scenography services. The company operates a certified organic farm with diverse livestock and agroforestry initiatives, alongside a scenography division that designs and implements exhibitions for museums and institutions. The scenography business will be spun off into a dedicated agency, 'hof3 interaktiv', in 2025, indicating strategic business segmentation. The website is well-structured, primarily in German, and targets environmentally conscious individuals and cultural institutions within Switzerland. Technically, the site uses Concrete CMS with modern JavaScript libraries such as jQuery, Vue.js, and Bootstrap, providing a moderate level of digital maturity and mobile responsiveness. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security practices.

H

hof3 Interaktiv GmbH

hof3.com

50

hof3 Interaktiv GmbH is a Swiss-based agency specializing in scenography, communication, and design services. With approximately 20 years of experience, the company offers a comprehensive range of services including concept development, multimedia content creation, technical programming, and exhibit construction. Their clientele includes museums, NGOs, research institutes, and companies across Switzerland, positioning hof3 as a niche player with recognized industry awards. The website reflects a professional and consistent brand image, targeting organizations seeking specialized scenographic and communication solutions. Technically, the website is built on the Concrete5 CMS platform, utilizing jQuery and custom gallery plugins. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Hosting appears stable with a reputable registrar, though DNSSEC is not enabled. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response policies. From a security and compliance perspective, the site maintains GDPR compliance with a privacy policy available in German. However, cookie consent mechanisms and terms of service are absent. Contact information is clearly provided, enhancing business credibility. No signs of WAF blocking or malicious content were detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, hof3.com presents as a trustworthy, professional agency website with solid business credibility and a good technical foundation. Security improvements such as enabling DNSSEC and adding security headers are recommended to enhance protection. Privacy compliance could be improved by implementing cookie consent mechanisms and publishing terms of service.

FREITAG is a Swiss-based company specializing in the design and retail of upcycled bags and accessories made from used and circular materials. The company positions itself as a niche sustainable fashion brand targeting environmentally conscious consumers seeking unique, durable everyday companions. The website reflects a medium-sized enterprise with a consistent brand identity and a focus on quality and sustainability. Technically, the site is built on modern frameworks such as Next.js and React, leveraging cloud services like Cloudinary for media and integrating analytics and chat support tools. Performance and mobile optimization are well addressed, providing a good user experience. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security policies and incident response details are not publicly disclosed. Privacy compliance is well handled with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and aligned with the company's sustainable business model.

R

Ramseier Holzbau AG

ramseier-holzbau.ch

51

Ramseier Holzbau AG is a small Swiss company specializing in wood construction, interior finishing, and wood element construction, serving regional markets including Burgdorf, Emmental, Bern, Oberaargau, and Solothurn. The website presents a professional image with clear contact information and a focus on craftsmanship and sustainability. The technical infrastructure is based on the fuman CMS platform, utilizing modern JavaScript libraries such as Flickity for UI elements. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. From a security perspective, the website uses HTTPS and implements a cookie consent banner, indicating awareness of privacy regulations. However, no explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are present. Security headers are not detected in the provided data, suggesting room for improvement in hardening the site against common web threats. No suspicious or malicious content was found, and the WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is a good representation of a small regional manufacturing business with moderate technical maturity and privacy compliance. Security posture is adequate but could be enhanced by adding formal policies and technical security headers. The site is safe for general audiences with no adult or questionable content detected.

Yourletter is a German-based small business specializing in newsletter and mailing services aimed at strengthening customer relationships and boosting sales for other businesses. Their offerings include legally compliant address management, automated news dispatch, customizable newsletter layouts, and content creation support. The website is powered by the Contentserver24 CMS and integrates modern web technologies such as Bootstrap, FontAwesome, and jQuery. The technical infrastructure is moderate in performance with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and anti-spam measures in place, but lacks explicit security headers and published security policies. Privacy compliance is strong with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the website is professional and trustworthy with a moderate security score and room for improvement in security best practices and transparency.

S

Sednove

where2watch.ca

57

Where2watch.ca is a Canadian media platform focused on providing users with comprehensive movie search capabilities, including information about movies, actresses, directors, and filmmakers. The platform offers listings for new movies in theaters, streaming services, TV schedules, and rankings across various streaming platforms. The website targets general audiences interested in movie discovery and viewing options within Canada. Technically, the site employs a modern tech stack including jQuery, Google Tag Manager, and Google Maps API, hosted by Wild West Domains Canada, Inc. The site is mobile optimized and SEO friendly, though some accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Business credibility is moderate with consistent WHOIS data and a clear business model. Overall, the site is functional and professional but would benefit from enhanced privacy and security practices.

T

Telefilm Canada Inc.

rdvcanada.ca

65

RDVCanada.ca is a professionally maintained website operated by Telefilm Canada Inc., a Canadian government agency dedicated to promoting the Canadian audiovisual industry. The site serves as a comprehensive resource for industry professionals, offering information on financing, coproduction, tax credits, shooting locations, talent, and events. It positions itself as a key partner and information hub for Canadian content creators and international collaborators. Technically, the website is built on WordPress with Elementor and employs modern web technologies including React and jQuery. SEO and accessibility are addressed with Yoast SEO and responsive design, though accessibility could be improved. Security posture is solid with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the site is trustworthy, professional, and well-branded, reflecting its government affiliation.

WasteSide is a website focused on creating sustainable change, presumably in the waste management or environmental sustainability sector. The site uses a modern React and Next.js technology stack with Material UI components, indicating a contemporary digital infrastructure. Hosting is provided via kasserver.com, a known hosting provider. The website content is minimal but professional, with a clear focus on sustainability. However, critical business and compliance information such as privacy policies, cookie policies, terms of service, and contact details are not present, which limits trust and compliance evaluation. Security posture is moderate but lacks visible security headers and incident response disclosures, which are important for business trust and regulatory compliance.

F

Fund The Planet

fundtheplanet.net

73

Fund The Planet is a small non-profit organization focused on environmental conservation through a subscription-based membership model that allows individuals to legally protect rainforest land in the Amazon. The platform leverages Shopify's e-commerce infrastructure, providing a bilingual website with clear membership plans and impact tracking. The technical infrastructure is modern and well-implemented, using Shopify apps and SDKs for localization, upselling, and analytics. Security posture is good with HTTPS and form protection via hCaptcha, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

M

Mairie de Soral

soral.ch

49

The website www.soral.ch serves as the official online presence for the Mairie de Soral, the municipal government of the Commune of Soral in Switzerland. It provides residents and visitors with information about local governance, community services, events, and practical resources. The site is well-structured with clear navigation and professional branding consistent with a small government entity. The content is primarily in French and targets local community members and stakeholders. Technically, the website is built on WordPress 6.8.2, utilizing common plugins such as Contact Form 7, The Events Calendar, and a booking plugin. It employs modern web technologies including jQuery, Bootstrap, and Google Fonts. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

C

Commune de Laconnex

laconnex.ch

56

The website www.laconnex.ch serves as the official online presence for the Commune de Laconnex, a local government entity in the Canton of Geneva, Switzerland. It provides residents and visitors with practical information, municipal news, political and social updates, local services, and community event agendas. The site targets the local population and stakeholders interested in the commune's administrative and social affairs. The business model is that of a governmental public service platform, focusing on transparency and citizen engagement. Technically, the website is built on the WordPress CMS platform, leveraging popular plugins such as Yoast SEO for search optimization, Events Calendar Pro for event management, and Complianz GDPR for privacy compliance. The site uses modern web technologies including jQuery and Matomo analytics for user tracking. The design is responsive and optimized for mobile devices, with good SEO and accessibility practices, though some accessibility features could be enhanced. From a security perspective, the website enforces HTTPS with good SSL configuration and includes standard security headers. It employs cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are recommended for improving security posture. Overall, the website is trustworthy, professional, and compliant with privacy regulations. It effectively serves its purpose as a municipal information portal. Strategic recommendations include publishing a dedicated security policy, incident response information, and a vulnerability disclosure program to enhance transparency and security readiness.

A

AT-Rack

at-rack.co.uk

74

AT-Rack Limited is a UK-based specialist in mobile data destruction solutions, focusing on secure on-site hard drive degaussing and destruction services. Founded in 2020, the company targets enterprises across sectors such as data centres, healthcare, government, and financial institutions. Their flagship product, the Mobile Destruction System (MDS), enables organizations to securely erase data onsite, ensuring compliance with data privacy regulations including GDPR. The company positions itself as a trusted provider with a strong emphasis on security, compliance, and customer assurance, supported by multiple client testimonials and a professional online presence. Technically, the website is built on WordPress using the Mesmerize Pro theme, integrated with modern analytics tools like Google Analytics and Matomo, and marketing tools such as Zoho SalesIQ. The site is well-optimized for SEO and mobile devices, with secure HTTPS implementation and CAPTCHA-protected contact forms enhancing security. While explicit security headers are not fully detailed, the overall security posture is strong with no evident vulnerabilities or exposed sensitive data. Security-wise, AT-Rack demonstrates good practices including encrypted communications, secure form handling, and compliance with privacy regulations. However, the absence of a dedicated security policy or incident response page suggests room for improvement in transparency and readiness. The domain registration is consistent with the company's founding date and business claims, reinforcing legitimacy. Overall, AT-Rack presents a credible, professional, and secure digital footprint suitable for its target market. Strategic enhancements in security policy publication and accessibility could further strengthen trust and compliance.

C

ClickExpose

clickexpose.com

56

ClickExpose Ltd is a UK-based digital marketing agency specializing in Google Ads management, SEO packages, click fraud protection, and pay monthly website design services. Established in 2023, the company positions itself as a Google Partner and a top-rated Semrush partner, serving ambitious UK businesses aiming to dominate Google search results and maximize ROI. Their business model focuses on delivering measurable results through specialized Google-centric marketing strategies, supported by advanced tools and certifications. The website reflects a high level of professionalism, with comprehensive service descriptions, client testimonials, and trust badges enhancing credibility. Technically, the website employs modern web technologies including Tailwind CSS, JavaScript, Google Tag Manager, and lazy loading techniques to ensure fast performance and excellent mobile optimization. The hosting and domain registration are consistent with a legitimate business operation, with no signs of suspicious activity. The site integrates multiple marketing and analytics tools such as Google Analytics, Reviews.io, and chat widgets, all implemented with user consent mechanisms to comply with GDPR. From a security perspective, the site uses HTTPS with a good SSL configuration and enforces cookie consent. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and there is no dedicated security policy or incident response contact information published. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the security posture is solid but could be improved with additional headers and transparency on security policies. The overall risk assessment is low, with the website demonstrating strong business credibility, technical maturity, and privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen trust and compliance.

S

Solidarité Ukraine, Genève

solidariteukraine.ch

54

Solidarité Ukraine, Genève is a small non-profit organization dedicated to supporting Ukrainian refugees in Geneva. The website provides hotline services, social and administrative assistance, accommodation offers, and volunteer engagement opportunities. It targets both refugees and local residents willing to help. The organization appears to be well-positioned locally with a clear humanitarian mission and bilingual content in French and Ukrainian. The website uses WordPress with a modern tech stack including Bootstrap and React vendor scripts, and employs SEO and multilingual plugins to enhance accessibility and reach. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and email obfuscation, but visible PHP warnings indicate minor backend issues that should be addressed. Privacy compliance is limited due to the absence of a privacy policy, though a cookie consent mechanism is present. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and professional but could improve in security hygiene and privacy transparency.

L

Lunio

lunio.ai

69

Lunio is a technology company specializing in AI-powered ad traffic verification and protection, targeting performance marketers and advertisers using paid media channels. The company offers a SaaS platform that detects and blocks invalid and fraudulent ad clicks in real time, helping clients optimize their advertising spend and improve campaign performance. Lunio integrates with major advertising platforms such as Google Ads, Meta, and Bing, providing granular analytics and automatic protection features. The website presents a professional and consistent brand image, with clear messaging focused on invalid traffic detection and prevention.

I

Innovative Web AG

i-web.ch

62

Innovative Web AG is a Swiss-based company specializing in innovative eGovernment solutions tailored for cantons, municipalities, schools, institutions, and energy providers. The company positions itself as a leading provider in Switzerland, offering a comprehensive suite of online services, software modules, and web design tailored to public sector needs. Their business model focuses on B2G and B2B engagements, delivering integrated digital solutions that streamline government and institutional processes. The website reflects a mature and professional organization with multiple physical locations across Switzerland.

A

Albertine

albertine.ch

47

Albertine.ch is the official website of the artist and illustrator Albertine, presenting a comprehensive portfolio of drawings, paintings, publications, prints, artist books, objects, posters, exhibitions, and films. The site targets art enthusiasts, collectors, galleries, and cultural institutions, serving primarily as a digital showcase for the artist's work. The business model is focused on portfolio presentation and promotion rather than direct e-commerce. Technically, the website is built with standard HTML, CSS, and JavaScript, featuring a responsive design and good navigation clarity. However, it lacks advanced frameworks or CMS indications and does not include analytics or tracking technologies. Security posture is basic, with no evident security headers or published policies, and the site uses obfuscated JavaScript to protect the contact email from scraping. No forms or data collection mechanisms are present, reducing privacy risks but also limiting user interaction. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

C

Candy Factory

candyfactory.ch

53

Candy Factory is a Swiss-based visual communication agency established in 2009, specializing in branding, graphic design, digital creations, and advertising services. The company targets individuals, businesses, groups, and institutions seeking high-quality, custom visual communication solutions. Their website reflects a professional and consistent brand image with clear service offerings and a multi-step contact form to initiate projects. Technically, the website is built on WordPress 6.7.4, utilizing modern web technologies such as jQuery, FontAwesome, Google Fonts, and Swiper.js for interactive sliders. The site is mobile-optimized with good SEO practices and moderate performance. However, some accessibility features are basic, and no hosting provider information is explicitly detected. From a security perspective, the site uses HTTPS with an excellent SSL configuration but lacks security headers and explicit incident response or security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy and terms of service present but no cookie consent mechanism or GDPR compliance indicators. Overall, the website presents a low-risk profile with a high degree of professionalism and trustworthiness. Strategic improvements in privacy compliance and security headers would enhance the security posture and regulatory adherence.

P

Post-SV Tübingen

nikolauslauf-tuebingen.de

45

The website represents the 50th itdesign-Nikolauslauf Tübingen, a local half marathon event organized by Post-SV Tübingen. It targets runners and sports enthusiasts in the Tübingen region, providing event information, registration, and promotional content. The site is well-positioned as a regional sports event organizer with a clear focus on community engagement and event promotion. Technically, the website is built on WordPress using the Enfold theme, enhanced with Yoast SEO for search optimization and Real Cookie Banner Pro for privacy compliance. It integrates multiple third-party services such as Matomo for analytics, Google Maps for location display, and social media embeds from Facebook, Instagram, YouTube, and Spotify, reflecting a mature digital presence. Security-wise, the site enforces HTTPS, employs standard security headers, and implements cookie consent mechanisms, indicating a good security posture. However, it lacks a dedicated security policy or incident response information, which could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR, serving its audience effectively with moderate technical performance and good user experience.

The website 'Tag des Laufens' serves as a central platform for promoting a nationwide German running event celebrated annually on the first Wednesday of June. It is organized by prominent running associations German Road Races (GRR) and Deutscher Leichtathletik-Verband (DLV), with support from DATEV. The site provides event information, downloadable participation certificates, and promotes a charitable campaign for clean water access in Ghana. The target audience includes running enthusiasts, clubs, and socially conscious participants in Germany. Technically, the site is built on TYPO3 CMS with a combination of established frontend libraries such as Bootstrap 3 and jQuery, delivering a moderately performant and mobile-optimized experience. Security posture is adequate with HTTPS enabled and spam-protected emails, but lacks visible security headers and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its community and charitable goals.

F

FlixBus India Private Limited

flixbus.in

58

FlixBus India Private Limited operates a comprehensive online bus ticket booking platform offering affordable and comfortable intercity bus travel across India. The company leverages a large global brand presence and extensive network to connect major Indian cities with modern buses equipped with amenities such as sleeper beds, air conditioning, and real-time GPS tracking. The website reflects a mature digital infrastructure with modern technologies, strong mobile optimization, and good SEO practices. Privacy and cookie policies are implemented with user consent mechanisms, supporting GDPR compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though dedicated security policy and incident response information are absent. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

F

Flix SE

flixbus.gr

51

Flix SE operates the website www.flixbus.gr, a localized Greek portal for its international bus travel services under the FlixBus brand. The company provides extensive bus routes across Greece and internationally, offering online ticket booking, real-time trip tracking, and a mobile app for customer convenience. The website is professionally designed, mobile-optimized, and supports multiple languages and regions, reflecting a mature digital presence. Technically, the site uses modern frameworks such as React and integrates various analytics and consent management tools, ensuring good performance and compliance with privacy regulations. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-branded, and serves a large transportation market segment effectively.

F

FlixBus Inc

flixbus.ca

56

FlixBus Inc operates a leading low-cost intercity bus travel service in Canada and the US, providing affordable and comfortable transportation options with a wide network of over 8,000 destinations across more than 40 countries. The company leverages a modern digital infrastructure including a React-based website, mobile app, and cloud CDN services to deliver a seamless booking and travel experience. Their platform supports real-time trip tracking, online ticketing, and customer support through a dedicated help portal. Security posture is strong with HTTPS, modern security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data due to privacy protection is typical for commercial brands but limits domain registration transparency. Overall, FlixBus presents a professional, trustworthy, and technically mature online presence aligned with its market leadership in transportation.

F

Flix SE

flix.com

63

Flix SE operates a prominent European transportation platform offering bus and train ticket booking services across more than 40 countries and 8,000 destinations. The company emphasizes affordable, comfortable, and sustainable travel with features such as free Wi-Fi and assigned seating. The website is professionally designed, mobile-optimized, and integrates modern technologies including React-based UI components, CDN hosting, and advanced analytics tools like Datadog RUM and Usercentrics for consent management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be verified further. Privacy compliance is well addressed with clear policies and consent mechanisms. Despite the absence of WHOIS data for the domain, the website's branding, external domain relationships, and social media presence strongly support its legitimacy. Overall, Flix presents a trustworthy and user-friendly digital presence aligned with its business goals.

F

FlixBus Sverige

flixtrain.se

52

FlixBus Sverige operates as a major intercity bus transportation provider offering affordable and comfortable travel options across Sweden and Europe. The company provides a comprehensive route network with over 3,000 destinations in more than 40 countries, supported by a modern online booking platform and mobile app. Their services include airport shuttles and onboard amenities such as free Wi-Fi and charging ports, targeting general travelers seeking cost-effective and environmentally friendly transportation. Technically, the website is built on a modern stack including React and Drupal CMS, leveraging cloud-based CDN services for performance. It employs advanced analytics and consent management tools to ensure GDPR compliance and user tracking transparency. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS with strong SSL configurations and implements multiple security headers. While no explicit security or incident response policies are published, the site uses a consent management platform and avoids exposing sensitive data. The absence of WHOIS data for the www subdomain is noted but does not detract from the site's legitimacy given the professional presentation and consistent branding. Overall, FlixBus Sverige's website demonstrates a high level of professionalism, security, and compliance, supporting its position as a trusted transportation service provider. Strategic improvements include publishing explicit security policies and enhancing direct contact information for security and customer support.

F

Flix SE

flixbus.sk

55

FlixBus (operated by Flix SE) is a leading low-cost intercity and international bus transportation provider operating extensively in Slovakia and across Europe. The company offers a vast network of over 400,000 daily connections to approximately 2,500 destinations in more than 35 countries. Their business model focuses on affordable, convenient, and environmentally friendly travel options, supported by modern buses equipped with amenities such as free Wi-Fi and power outlets. The website targets general travelers seeking economical and reliable bus transport solutions.

F

FlixBus Sverige

flixbus.se

53

FlixBus Sverige operates as a major intercity bus transportation provider offering affordable and convenient travel options across Sweden and Europe. The website presents a professional and comprehensive platform for booking bus tickets, exploring routes, and accessing travel services including airport shuttles. The company targets general consumers seeking sustainable and cost-effective travel solutions. Technically, the website employs modern web technologies including React, Google Tag Manager, and Usercentrics for consent management, hosted on Amazon Cloudfront CDN, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policy and incident response contacts are not prominently published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site reflects a mature digital presence consistent with a large transportation business, with minor gaps in direct contact information and security transparency.

F

Flix SE

flixbus.ro

52

Flix SE operates the www.flixbus.ro website, providing affordable and extensive intercity bus travel services across Romania and Europe. The company is positioned as a leading transportation provider with a large network of routes and modern amenities such as Wi-Fi and real-time tracking. The website is professionally designed, mobile-optimized, and offers a seamless user experience for booking and managing bus tickets. Technically, the site uses modern JavaScript frameworks, CDN hosting, and integrates analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the domain and website present a trustworthy and credible business presence with good privacy compliance and user trust signals.

F

FlixBus Portugal

flixbus.pt

54

FlixBus Portugal operates as a major intercity bus transportation provider, offering extensive routes across Portugal and Europe. The company leverages a strong digital presence with a user-friendly website and mobile app, facilitating easy ticket booking and real-time travel tracking. Their market position is robust, supported by a large network and multiple subsidiary brands such as FlixTrain and Greyhound. Technically, the website employs modern technologies including React, Drupal CMS, and cloud-based CDNs, ensuring good performance and mobile optimization. Security measures are well implemented with HTTPS, security headers, and a consent management platform, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates a high level of professionalism, compliance with privacy regulations, and trustworthy branding.

F

FlixBus Polska

flixbus.pl

53

FlixBus Polska operates a comprehensive intercity bus service platform targeting travelers in Poland and across Europe. The website offers extensive travel options with over 400,000 daily connections to thousands of cities, emphasizing affordable and comfortable travel. The business is positioned as a market leader with a strong brand presence and a large customer base. Technically, the site is built on a modern stack including Drupal CMS, cloud CDN, and advanced analytics tools, delivering a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS enforcement and privacy compliance mechanisms, though explicit security policies and incident response contacts are not publicly visible. The WHOIS data is privacy protected, which is typical for commercial domains, and does not raise immediate concerns given the professional site and brand consistency. Overall, the site demonstrates high professionalism, trustworthiness, and digital maturity.

F

Flix SE

flixbus.no

58

FlixBus is a leading European intercity bus service provider offering affordable and extensive bus travel options across Norway and over 35 countries in Europe. The company operates a large route network with modern buses equipped with amenities such as free Wi-Fi and power outlets, facilitating convenient and comfortable travel. The website is professionally designed, mobile-optimized, and provides comprehensive travel information and booking capabilities through both web and mobile app platforms. Technically, the site uses modern JavaScript frameworks, CDNs, and analytics tools, ensuring fast performance and good user experience. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site reflects a mature, trustworthy, and user-friendly digital presence for a major transportation company.