Security Directory

C

Circus Pikard

circus-pikard.at

45

Circus Pikard is a small family circus based in Austria, offering live circus entertainment including artists, clowns, jugglers, and animal acts. The website promotes their 2025 tour and ticket reservation options, targeting a general family audience. The business operates regionally with a focus on live performances and seasonal events such as a winter circus. Technically, the website uses older web technologies like PHP, MySQL, Prototype.js, and Scriptaculous, with a basic but functional design. The site lacks modern CMS or advanced frameworks and shows moderate performance and SEO optimization. Security posture is weak, with no visible HTTPS enforcement or security headers, and no cookie consent mechanism, which raises compliance concerns under GDPR. Contact information is minimal, limited to a phone number and a Facebook page link. Overall, the site is trustworthy for its business purpose but requires improvements in security and privacy compliance.

Ö

Österreichische Krebshilfe

dontsmoke.at

46

The website www.dontsmoke.at is a professionally developed health awareness platform operated by the Österreichische Krebshilfe, focusing on smoking cessation and lung cancer prevention. It provides educational content, symptom checking tools (LUIS), and resources to support smokers and the general public in Austria. The site benefits from strong partnerships with reputable medical and research institutions, enhancing its credibility and outreach. Technically, the site is built on TYPO3 CMS with modern web technologies, offering good mobile optimization, accessibility, and SEO. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site is trustworthy, user-friendly, and serves an important public health mission.

M

Mary Anning – Film d’animation pour enfants | Bande-annonce & avant-premières

maryanning.ch

51

The website www.maryanning.ch is a promotional platform for the children's animation film 'Mary Anning', targeting families and children primarily in Switzerland. It offers rich interactive content including a fossil hunting contest across multiple Swiss cities, educational resources for schools, and a mini-game to engage users. The site uses modern web technologies such as HTML5, CSS3, JavaScript, Swiper.js for UI components, and Kaboom.js for the game engine, alongside Google Tag Manager and Google Analytics for tracking. The design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. However, the site lacks explicit privacy and cookie policies, which is a compliance gap given the use of tracking technologies.

T

ThemezHut Themes

themezhut.com

54

ThemezHut is a specialized WordPress theme development company focused on creating high-quality magazine and corporate themes. Established in 2013, it has built a niche market presence with over 30,000 active installs, offering both free and premium themes. The company targets WordPress users including bloggers, publishers, and small businesses seeking professional and flexible themes. Their business model revolves around theme sales, support, and documentation, leveraging WordPress as their platform. Technically, the website is built on WordPress 5.9.12, utilizing common plugins such as Yoast SEO, Easy Digital Downloads for e-commerce, Google Analytics for tracking, and CookieYes for GDPR-compliant cookie consent. Hosting is provided by DreamHost, and the site uses HTTPS with a valid SSL certificate. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site employs HTTPS, Google reCAPTCHA for form protection, and cookie consent mechanisms. However, no advanced security headers were detected, and DNSSEC is not enabled. There is no published security policy or incident response information, and no vulnerability disclosure or security.txt file is present. The domain registration is transparent and consistent with the business history, enhancing trust. Overall, ThemezHut presents a professional and trustworthy online presence with a solid technical foundation and compliance with privacy regulations. Strategic improvements in security headers, vulnerability disclosure, and enhanced accessibility could further strengthen their security posture and user trust.

C

Culture accessible Genève

culture-accessible.ch

46

Culture accessible Genève operates as a non-profit platform dedicated to promoting cultural accessibility for people with disabilities in the Geneva region. The website provides comprehensive listings of accessible cultural events, venues, and accessibility measures, targeting disabled audiences and the general public interested in inclusive culture. The platform maintains partnerships with local government and accessibility organizations, reinforcing its regional leadership in this niche. Technically, the website is built on October CMS, leveraging modern web technologies including Google Analytics, Google Tag Manager, and ReadSpeaker for accessibility. The site demonstrates good mobile optimization, accessibility features, and SEO practices, although performance is moderate. The absence of explicit privacy and cookie policies indicates room for compliance improvement. From a security perspective, the site uses HTTPS and implements basic anti-spam measures in its contact form. However, it lacks explicit security headers and a vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is privacy protected but consistent with the non-profit nature of the project, supporting legitimacy. Overall, the website is trustworthy, well-designed, and focused on its mission, but should enhance privacy compliance and security headers to improve its security posture and regulatory adherence.

D

Département de la cohésion sociale (DCS) - Service cantonal de la culture

20ans20francs.ch

51

The website 20ans20francs.ch represents a government-supported initiative by the Canton of Geneva to provide a discount card for youth under 21 years old, facilitating access to cultural and sports activities. The service is well positioned as an official program with clear partnerships and a focused target audience. The website content is professionally presented in French, with good navigation and relevant information for its users. Technically, the site is built on WordPress with modern plugins for SEO and GDPR compliance, and it employs Facebook Pixel for marketing and analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies could enhance trust further. Overall, the site is trustworthy, compliant, and serves its intended audience effectively.

K

Krolstudio

krolstudio.com

38

Krolstudio is a small, Geneva-based design and communication agency specializing in graphic design, web design, photography, video, and event communication services. The company emphasizes high-quality visual identity creation and a multidisciplinary approach to meet client needs. The website reflects a professional business with clear service offerings and contact information, targeting businesses and individuals seeking creative design solutions. Technically, the website is built on WordPress with common plugins such as Yoast SEO, and uses jQuery and tracking tools like Google Analytics and Facebook Pixel. Hosting is provided by Infomaniak Network SA, a reputable Swiss hosting provider. The site is moderately optimized for performance and mobile, though SEO is limited by a noindex,nofollow robots meta tag. From a security perspective, the site uses HTTPS and has domain transfer protection, but lacks DNSSEC and security headers. There is no visible privacy or cookie policy, which is a compliance gap. Tracking scripts indicate moderate user tracking without explicit consent mechanisms. Overall, the security posture is average with room for improvement. The website content is safe for general audiences, with no adult or questionable content detected. The domain registration is consistent with the business age and location, supporting legitimacy. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and improving SEO settings to enhance visibility and compliance.

Monoloco is a Geneva-based digital agency specializing in custom web development, CMS solutions, intranet systems, and mobile applications for iOS and Android platforms. With over 15 years of experience, the company serves a diverse clientele, delivering tailored digital solutions that address complex business needs. Their portfolio and client testimonials demonstrate a strong market position as a trusted local technology service provider. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Swiper.js for interactive content. Google Fonts and Google Tag Manager are integrated for typography and analytics respectively. The site is mobile-optimized and presents a professional design with clear navigation, although accessibility features are basic. The CMS appears proprietary, indicating custom development capabilities. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks important security headers such as Content-Security-Policy and X-Frame-Options. No exposed sensitive data or vulnerable libraries were detected. However, the absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. No incident response or security policy information is provided. Overall, the website is professional and trustworthy with a solid business credibility score. The main risks relate to privacy compliance and security header implementation. Strategic improvements in these areas would enhance the security posture and regulatory adherence of the company’s online presence.

G

Genève Débat

genevedebat.ch

51

Genève Débat is a Geneva-based non-profit educational project founded in 2018 that promotes the art of debate among secondary school students. The organization operates by deploying young ambassadors aged 20-25 to conduct debate training modules in schools, enhancing students' argumentation and public speaking skills. The website reflects a well-established local initiative with a clear focus on youth education and engagement. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. It integrates Google Tag Manager for analytics and axept.io for cookie consent, demonstrating awareness of privacy and tracking considerations. The site is mobile-optimized and features rich content including testimonials, event information, and multimedia. From a security perspective, the site enforces HTTPS and uses some security best practices but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial due to the absence of a privacy policy and terms of service pages. Overall, Genève Débat presents a trustworthy and professional online presence with strong educational content and community engagement. Strategic improvements in privacy documentation and security headers would enhance compliance and security posture.

T

Cinema On Demand - THE ONES WE LOVE

theoneswelove.ch

67

The Ones We Love is a Swiss-based cinema on demand platform that enables users to vote for their favorite films to be screened in local cinemas. The website offers detailed information about films, screening schedules, and cinema locations, targeting a general audience interested in cinema experiences. The platform leverages modern web technologies including Next.js and React, hosted on Vercel, ensuring a responsive and visually appealing user experience. However, the site lacks explicit privacy and cookie policies, and security headers are not detected, which are areas for improvement. Overall, the security posture is moderate with HTTPS enabled and no exposed sensitive data, but enhancements in compliance and security best practices are recommended. The domain registration data aligns well with the website's Swiss focus, indicating legitimacy and trustworthiness.

H

Horus Energy SA

horus.ch

57

Horus Energy SA is a Swiss company specializing in solar-powered and ecological hosting services, including web hosting, cloud storage, email, SMS, and multimedia production. The company positions itself as a sustainable and environmentally responsible service provider, leveraging its own photovoltaic power plants to power its infrastructure. Their market niche focuses on customers valuing ecological impact and data sovereignty within Switzerland. The website is built on WordPress with modern plugins and technologies, offering a good user experience with mobile optimization and clear navigation. Privacy compliance is well addressed with cookie consent management and a comprehensive privacy policy. Security posture is solid with HTTPS, anti-spam measures, and privacy-respecting analytics, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and aligned with its business goals.

S

Dynamic Pricing and Digital Solutions Enhancing the Guest Experience. | Spotlio

spotliodata.com

60

Spotlio is a technology company specializing in dynamic pricing and digital solutions aimed at enhancing the guest experience for resorts, parks, and attractions. Their platform focuses on providing seamless guest ticketing journeys to improve operational efficiency and customer satisfaction. The website is built using modern web technologies such as Gatsby, React, and Tailwind CSS, indicating a contemporary and scalable technical infrastructure. However, the absence of WHOIS registration data and lack of visible contact or compliance information limits the ability to fully verify business legitimacy and compliance posture. Security posture is weak due to missing security headers and lack of published policies, which could expose the business to risks. Overall, while the business offering appears professional and targeted, improvements in transparency, security, and compliance documentation are recommended to enhance trust and reduce risk.

B

BE MOVIE

be-movie.ch

47

BE MOVIE is a cultural event platform dedicated to showcasing Bernese films through cinema screenings and online streaming. It targets film enthusiasts, families, and youth, offering workshops and awarding film prizes. The website is built on WordPress with Elementor, using modern web technologies and includes social media integration and Google reCAPTCHA for form security. While the site demonstrates good technical implementation and business credibility, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security posture is solid with HTTPS and security headers present, but incident response information is missing. Overall, the website is trustworthy and professionally presented, serving as a regional media event hub.

O

OTS.at

ots.at

67

OTS.at is Austria's largest portal for multimedia press information, providing a platform for distribution of press releases and multimedia content including text, images, audio, and video. The website targets media professionals, journalists, and public relations entities, positioning itself as a key player in the Austrian media sector. The business model revolves around media content distribution and press release dissemination, serving a large audience within Austria. Technically, the site employs modern frontend technologies such as Angular and Material Design Components, with a cookie consent mechanism implemented via Usercentrics CMP and analytics through INFOnline Measurement Manager. The website demonstrates good digital maturity with structured data for SEO and responsive design for mobile users. Security posture is solid with HTTPS enforced and cookie consent in place, though explicit security headers and published security policies are absent. No critical vulnerabilities or blocking mechanisms were detected, and the WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, the site is professional, trustworthy, and well-positioned in its market niche.

B

BIM-Handbuch

bimhandbuch.at

45

BIM-Handbuch.at is a specialized educational platform providing comprehensive resources for Building Information Modeling (BIM) targeted at planning professionals such as architects and engineers primarily in Austria. The website offers a freely downloadable BIM handbook, print versions for sale, video tutorials, and practical downloadable materials. It is supported by professional chambers and federations, enhancing its credibility and trustworthiness. Technically, the site is built using the Hugo static site generator with Bootstrap and jQuery, delivering a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS and secure form handling, though it lacks explicit cookie consent and some security headers. Privacy compliance is basic but includes a privacy policy and GDPR consent on newsletter subscription. Overall, the site is professional, trustworthy, and well-positioned as a niche educational resource in the BIM domain.

B

Bundeskammer der Ziviltechniker:innen I Arch + Ing

arch-e.eu

46

ARCH-E is a European platform dedicated to promoting architectural design competitions (ADCs) across Europe, focusing on increasing participation especially among small and female-led architectural practices. The platform offers research, practical tools, and advocacy, supported by a consortium reaching over 560,000 architects and co-funded by the European Union. The website provides extensive resources including reports, a network, glossaries, maps, and evaluation tools to support ADCs. Technically, the site uses modern web technologies such as Bootstrap, Masonry.js, and Piwik PRO analytics, with good mobile optimization and a professional design. Security posture is solid with HTTPS and CSRF protections, though some improvements are recommended in cookie consent and security policy disclosures. Overall, the site is trustworthy, well-branded, and serves a specialized professional audience effectively.

W

Wonderlink

wonderlink.de

58

Wonderlink is a German-based SaaS platform offering a GDPR-compliant 'Link in Bio' solution tailored for influencers, artists, entrepreneurs, and commercial social media users. It positions itself as a privacy-first alternative to competitors like Linktree by eliminating tracking and cookies and hosting exclusively on German servers. The platform supports legal compliance by integrating mandatory legal texts such as Impressum, Datenschutz, and AGB, appealing to commercial users concerned about regulatory adherence. With over 75,000 customers and endorsements from legal partners and media, Wonderlink holds a strong market position in the privacy-conscious segment of link management services. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and Lottie animations, delivering a fast, mobile-optimized, and accessible user experience. Hosting is managed via German-based DNS and servers, reinforcing its privacy claims. The site lacks some advanced security headers and a public vulnerability disclosure policy but maintains excellent SSL configuration and no tracking mechanisms, enhancing its security posture. From a security perspective, Wonderlink demonstrates strong GDPR compliance, no user tracking, and transparent privacy policies, making it suitable for privacy-sensitive users. However, the absence of incident response contacts and vulnerability disclosure mechanisms suggests room for improvement in security transparency and readiness. Overall, the site is professional, trustworthy, and well-aligned with its privacy-centric business model. The overall risk assessment is low, with no critical vulnerabilities or suspicious indicators detected. Strategic recommendations include publishing a security.txt file, enhancing security headers, and providing incident response contact details to further strengthen trust and security posture.

Z

zt:archiv

zt-archiv.at

63

The zt:archiv website serves as the official digital archive platform for civil engineers (Ziviltechniker:innen) in Austria, enabling secure storage, qualified electronic signing, and public access to official documents. The platform is government-authorized and targets professionals in the civil engineering sector, as well as authorities and project partners. The business model revolves around providing a legally compliant, secure, and efficient digital archiving service, supporting the professional responsibilities and legal obligations of its users. Technically, the website employs a modern React-based frontend with PDF.js integration for document handling. The site is mobile-optimized and demonstrates good performance and usability, although some accessibility features could be enhanced. The content is well-structured and professionally presented, with consistent branding and clear navigation. From a security perspective, the site enforces HTTPS and uses qualified digital signatures to ensure document authenticity. However, explicit security headers are not evident, and no incident response or security policy information is publicly available. Privacy compliance is strong, with a clear privacy policy and cookie consent mechanism. No analytics or advertising scripts were detected, indicating a privacy-conscious approach. Overall, the website is trustworthy and professionally managed, with a strong alignment between WHOIS data and business claims. Recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility to further strengthen the security posture and user trust.

B

Bundeskammer der Ziviltechniker:innen

ziviltechniker.at

59

The website for Bundeskammer der Ziviltechniker:innen serves as an official directory and information portal for licensed civil engineers and architects in Austria. It provides detailed contact information for regional chambers and the federal chamber, facilitating professional engagement and member services. The site targets professionals in engineering and architecture, offering search functionality and comprehensive listings. Technically, the site is built on Angular 13 with modern UI elements including Font Awesome icons and Google Maps integration, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks advanced security headers and formal vulnerability disclosure mechanisms. Privacy compliance is partially addressed with a privacy policy page but lacks cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its governmental role, though improvements in security and privacy practices are recommended.

B

Bundeskammer der Ziviltechniker:innen I Arch+Ing

bestevergabe.at

50

Beste Vergabe is an official portal operated by the Bundeskammer der Ziviltechniker:innen, serving as a comprehensive resource for public procurement, competitions, awards, and consulting services primarily targeting civil engineers and architects in Austria. The platform offers structured information on procurement procedures, event listings, publications, and advisory services, positioning itself as an authoritative source within the Austrian government and professional sectors. Technically, the website employs modern web technologies including Bootstrap and Piwik PRO analytics, ensuring a responsive and user-friendly experience with good SEO and accessibility features. Security-wise, the site enforces HTTPS, uses CSRF tokens, and avoids exposing sensitive data, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the site demonstrates a solid security posture and professional business credibility, with room for improvement in privacy and security transparency.

G

GreenWebspace

greenwebspace.com

51

GreenWebspace is an Austrian-based eco-social web hosting provider established in 2006, specializing in sustainable and CO2-neutral web hosting solutions primarily targeting customers in Austria, Germany, and Switzerland. Their offerings include green hosting packages, domain registration, managed Nextcloud cloud services, and online meeting tools, all emphasizing environmental responsibility and data sovereignty. The company positions itself as a niche leader in green IT with a strong commitment to GDPR compliance and customer support. Technically, the website is built on WordPress with a modern theme and performance optimizations such as LiteSpeed caching. It uses reputable third-party services like Google Tag Manager for analytics and Imunify360 for security. The infrastructure is hosted in Austria/EU, ensuring data protection compliance. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive structured data enhancing search visibility. Security posture is strong with HTTPS enforced, malware protection in place, and no exposed sensitive data. However, some security headers could be improved, and a formal security policy or incident response page is not found. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms. Business credibility is high, supported by transparent WHOIS data, customer testimonials, and certifications. Overall, GreenWebspace demonstrates a mature digital presence with a clear focus on sustainability and privacy, making it a trustworthy provider in its market segment.

The domain idqsa.com is registered with a reputable registrar and has a valid registration period until 2026. However, the website itself is inaccessible, returning a 404 Not Found error with no meaningful content or metadata. There are no visible business details, contact information, or policies published on the site. The technical infrastructure appears minimal with no detectable CMS, frameworks, or analytics tools. Security posture is basic with no advanced headers or DNSSEC enabled. Overall, the site lacks digital maturity and does not provide sufficient information to assess business credibility or security readiness.

Gewerkschaft Bau-Holz operates as a trade union representing workers in the construction and wood industries in Austria. The website serves as a media platform providing news, interviews, thematic videos, and archival content targeted primarily at union members and stakeholders. The organization maintains a consistent brand presence with official logos and social media channels, reinforcing its position as a recognized non-profit entity within Austria. Technically, the website employs standard web technologies including jQuery and Google Fonts, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data limits domain trust assessment, but the website content and external links support legitimacy. Overall, the site is professional, user-friendly, and compliant with GDPR requirements.

G

Gewerkschaft Bau-Holz

gbh-news.at

10

The website www.gbh-news.at serves as an information platform for members of the Gewerkschaft Bau-Holz (GBH), a trade union representing workers in the construction and wood industries in Austria. It provides news, member services, legal support, education, and campaign information, positioning itself as a key resource for approximately 250,000 employees across multiple sectors. The site is well-branded, professionally designed, and targets union members and stakeholders in the Austrian construction and wood sectors. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript, and jQuery, with integrations such as Matomo for analytics and Usercentrics for consent management, reflecting a moderate level of digital maturity. The site is mobile-optimized and includes CAPTCHA protections on forms to mitigate spam. However, no CMS or hosting provider details are evident, and some security headers appear to be missing. From a security perspective, the site enforces HTTPS and uses consent management to comply with GDPR. While no critical vulnerabilities or exposed sensitive data were detected, the absence of explicit security policies, incident response contacts, and a security.txt file suggests room for improvement in transparency and readiness. The lack of WHOIS data reduces trust in domain registration legitimacy, though the website content and branding appear consistent and professional. Overall, the site presents a low-risk profile with good privacy compliance and user experience but would benefit from enhanced security disclosures and WHOIS transparency to strengthen trust and compliance posture.

W

Wirtschaftskammer Wien - Marketing

meinkaufstadt.wien

10

meinkaufstadt.wien is a marketing and lifestyle platform operated by Wirtschaftskammer Wien - Marketing, focusing on promoting shopping, events, and local businesses in Vienna. The platform serves residents and visitors by providing curated content on retail, gastronomy, and cultural events, positioning itself as a trusted local guide backed by the Vienna Chamber of Commerce. Technically, the website employs modern frontend technologies such as SvelteKit, integrates user consent mechanisms for privacy compliance, and uses multiple marketing and analytics tools with proper consent management. Security posture is solid with HTTPS enforced and captcha protections on forms, though explicit security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable resource for its target audience.

L

Les communes genevoises

geneve-communes.ch

52

Les communes genevoises website serves as an official informational platform representing the 45 communes of the Geneva canton in Switzerland. It provides comprehensive information about the diverse public services offered by the communes, including childcare, education, sports, culture, public safety, and infrastructure maintenance. The site targets residents and citizens of Geneva, aiming to increase awareness and transparency of municipal activities. Technically, the website is built on Drupal 10 with Bootstrap 5, uses Matomo for analytics with privacy-conscious settings, and integrates modern web fonts and icons. The design is professional, mobile-optimized, and accessible, providing a good user experience. Security posture is solid with HTTPS and privacy-respecting analytics, but lacks explicit privacy and cookie policies, and contact information is not clearly presented. Overall, the site is trustworthy and legitimate, aligned with its government sector role, but could improve privacy compliance and user contact options.

U

UGL Sicurezza Civile

uglsc.it

10

UGL Sicurezza Civile is a labor union organization focused on protecting the rights and promoting the safety of workers in the civil security sector in Italy. Founded recently in 2023, it operates primarily as a non-profit entity providing advocacy, training, and informational resources to its members. The website serves as a communication platform featuring news, articles, and updates relevant to its target audience of security workers and union members. The organization maintains an active social media presence and offers newsletter subscriptions to keep stakeholders informed. Technically, the website is built on WordPress using the Elementor page builder, supported by a CDN for content delivery. It employs modern web technologies including jQuery and LiteSpeed caching for performance optimization. The site is mobile-optimized and features good SEO practices, although accessibility features are basic. Privacy and cookie policies are clearly presented, indicating compliance with GDPR requirements. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and advanced security headers, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business claims, transparent, and legitimate. Overall, the website presents a professional and trustworthy front for the organization. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include enabling DNSSEC, implementing additional security headers, and publishing explicit security and incident response policies to further strengthen trust and compliance.

C

CoESS

coess.org

49

CoESS is a well-established European confederation representing the private security industry, advocating for quality, compliance, and public-private collaboration. The organization serves as a voice for 23 national associations across 17 EU member states, representing a significant portion of the private security sector. Their website reflects a professional and consistent brand image, targeting industry stakeholders and EU institutions. Technically, the site uses a custom or unknown CMS with common JavaScript libraries and cookie consent tools, hosted by a reputable provider. Security posture is generally good with HTTPS and cookie consent, though improvements are recommended in DNSSEC, security headers, and fixing minor PHP warnings. Privacy compliance is adequate with a privacy policy and cookie banner. Overall, the site is trustworthy and functional with moderate technical sophistication.

E

E.BI.N.VI.P., Ente Bilaterale Nazionale della Vigilanza Privata

ebinvip.it

62

E.BI.N.VI.P. is an Italian bilateral national entity dedicated to the private security sector, established by trade unions and employer associations. The website serves as an institutional portal providing information about the organization's activities, services, and partner network. The site targets companies and workers within the private security industry in Italy, offering services such as certification issuance and social contributions. The business model is non-profit and focused on sector support and labor relations. Technically, the website uses a combination of jQuery, Bootstrap, Fancybox, Owl Carousel, and Cookiebot for cookie consent management, running on OxCMS by LOstudio.it. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks visible security policies or incident response contacts. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

The website federsicurezza.it is currently inaccessible due to a bot challenge screen that blocks normal content access. This challenge uses a JavaScript proof-of-work captcha mechanism and includes a noindex meta tag, indicating a security or WAF layer is active. Due to this, no business, contact, or policy information is available for analysis. The domain WHOIS data is suspicious, showing a creation date in the future (2025), which undermines trust in the domain's legitimacy. The technical infrastructure includes use of Cloudfront CDN and modern JavaScript features for bot mitigation, but lacks visible security headers and DNSSEC. Overall, the site is not currently providing meaningful content or transparency about its operations.

D

Datalynq

datalynq.com

68

Datalynq is a technology company specializing in next-generation case management and market intelligence solutions for the electronics supply chain industry. Their platform provides extensive analytics and real-time data on over 1 billion electronic components, helping businesses optimize supply chain decisions and manage risks effectively. The company positions itself as a key player in supply chain intelligence with a SaaS business model targeting procurement and supply chain professionals. Technically, the website is built on modern web technologies including Webflow CMS, integrated with multiple marketing and analytics tools such as HubSpot, Google Analytics, Hotjar, and Apollo.io. The site uses Cloudflare DNS but lacks DNSSEC, and no advanced security headers were detected. Performance and mobile optimization are good, with a professional design and clear navigation. From a security perspective, the site uses HTTPS and has domain registration protections in place, but lacks visible privacy and cookie policies, security policies, and incident response contacts. The absence of DNSSEC and security headers presents moderate security risks. User tracking is extensive via multiple analytics and marketing scripts, but privacy compliance is limited due to missing policies. Overall, the website is professional and credible with moderate security posture. Strategic improvements in privacy compliance, security headers, and DNS security would enhance trust and reduce risk.

S

Sourceability

sourceability.com

67

Sourceability is a well-established global distributor of electronic components, founded in 2014, with a strong market position as a Top 20 Global Distributor and recognized by Inc. 5000 for rapid growth. The company offers a comprehensive suite of services including distribution, quality management, and digital tools such as Sourcengine and Datalynq, targeting electronics manufacturers, engineers, and procurement professionals worldwide. Their business model integrates traditional distribution with advanced digital platforms to streamline supply chain sourcing and risk management. Technically, the website is built on a modern stack leveraging Webflow CMS, HubSpot marketing and analytics tools, Apollo.io tracking, and other contemporary JavaScript libraries. The site is hosted behind Cloudflare DNS and CDN services, ensuring fast performance and global availability. Mobile optimization and accessibility are well addressed, providing a seamless user experience across devices. From a security perspective, the site enforces HTTPS with strong domain locking mechanisms and integrates secure form handling via HubSpot. However, DNSSEC is not enabled, and no explicit security or incident response policies are published, which could be areas for improvement. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, the website presents a professional, trustworthy, and secure digital presence with no signs of blocking or malicious content. Strategic recommendations include enabling DNSSEC, publishing a security policy, and adding a vulnerability disclosure program to further enhance trust and security posture.

N

NEW WORK SE

onlyfy.jobs

70

onlyfy.io is a recruiting software platform operated by NEW WORK SE, a German technology company. The platform offers a SaaS solution enabling recruiters to post jobs to over 200 boards and manage candidate applications online. The website is professionally designed, integrates with the XING ecosystem, and uses modern analytics and engagement tools such as Matomo and Braze. The technical infrastructure is hosted on AWS with DNS managed via Amazon's DNS services. Security posture is moderate with HTTPS enforced and CSRF tokens in forms, but lacks DNSSEC and explicit security headers. Privacy and cookie policies are not publicly visible on the login page, indicating room for compliance improvement. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

O

OPUS Fashion

opus-fashion.com

50

OPUS Fashion is a well-established European women's fashion brand offering a wide range of casual and feminine clothing through its e-commerce platform. The company emphasizes sustainability, fair working conditions, and provides a seamless shopping experience with multiple payment options and international shipping. Technically, the website is built on modern frameworks such as Spryker and uses Storyblok CMS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and security headers, though explicit security policies and incident response information are absent. The lack of WHOIS domain registration data is a concern but does not detract significantly from the professional presentation and trustworthiness of the site. Overall, the site is safe, compliant with GDPR, and targets a general audience interested in fashion.

D

dema dent

demadent.ch

62

dema dent is a Swiss-based dental services platform focused on providing brokerage for dental practices and offering dental seminars. The website targets dental professionals within Switzerland, offering a marketplace and educational resources. The business operates in the healthcare sector with a regional focus and a small company size. Technically, the website employs modern JavaScript libraries, Cookiebot for GDPR compliance, and Google Tag Manager for analytics, indicating a moderate level of digital maturity. The site is mobile optimized and uses HTTPS with appropriate security headers, reflecting a good security posture. However, explicit security and incident response policies are not publicly available, which could be improved. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with extensive use of tracking and marketing tools typical for its industry.

Y

yomma GmbH

sqat.eu

55

SQAT is a service product of yomma GmbH focused on providing a barrier-free feedback mechanism for websites by translating German Sign Language videos into written language and vice versa. The service targets both website operators seeking to enhance accessibility and deaf users who prefer sign language communication. The website is professionally designed, uses modern WordPress infrastructure, and complies with GDPR and cookie consent regulations. It features partnerships with reputable German government and non-profit organizations, enhancing its credibility. Technically, the site employs common plugins and SEO tools, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent, though explicit security headers and incident response policies are not published. WHOIS data is unavailable due to privacy protection, but the domain and business information align with the website content and market positioning. Overall, SQAT presents a trustworthy and professional digital presence in the niche of accessibility services.

F

fit4internet

fit4internet.at

10

fit4internet is an Austrian non-profit association dedicated to raising digital competences across Austria. The organization provides a comprehensive digital competence framework (DigComp AT), self-assessment tools, certification and accreditation services, and a course catalog to support lifelong learning in digital skills. The website reflects a professional and consistent brand with a clear focus on education and digital literacy. It targets a broad audience including the general public, education providers, and portal users interested in digital competence development. The business model revolves around standardization, evaluation, and certification of digital skills, positioning fit4internet as a key player in Austria's digital education landscape. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, and various UI and analytics libraries such as Matomo and Pinpoll. The site uses a custom CMS and shows good mobile optimization and SEO practices. Performance is moderate with room for improvement in accessibility compliance. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. However, no explicit security policy or incident response information is publicly available. Overall, the website is trustworthy, professionally maintained, and aligned with its educational mission. The WHOIS data confirms legitimacy and consistency with the website's Austrian association identity. There are no signs of malicious activity or content safety concerns. Strategic recommendations include publishing a dedicated security policy, adding incident response contacts, and enhancing accessibility standards to improve inclusivity and compliance.

A

Anglo American plc

angloamerican.com

10

Anglo American plc is a leading global mining company specializing in the responsible production of key minerals including copper, premium iron ore, crop nutrients, nickel, diamonds, steelmaking coal, and manganese. The company operates globally with regional subsidiaries and a strong focus on sustainability and ESG principles. Their website reflects a mature digital presence with comprehensive investor relations, sustainability disclosures, and career opportunities, targeting investors, partners, customers, and job seekers. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, Google Analytics, Facebook Pixel, Hotjar, and OneTrust for cookie consent, built on the Sitecore CMS platform. The site demonstrates good performance, mobile optimization, accessibility, and SEO practices, supporting a professional user experience. From a security perspective, the site enforces HTTPS, implements security headers such as CSP and HSTS, and uses cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public vulnerability disclosure or incident response contact is noted as an area for improvement. WHOIS data was unavailable, which slightly impacts trust but is likely due to privacy or query limitations rather than malicious intent. Overall, Anglo American's website presents a secure, professional, and compliant digital front for a large enterprise in the energy and mining sector. Strategic recommendations include publishing vulnerability disclosure information, incident response contacts, and continuous monitoring of third-party scripts to maintain security posture.

B

Benjamin Moore

benjaminmoore.com

10

Benjamin Moore is a well-established premium paint and stain brand offering a wide range of colors and products for both consumers and professionals. The website showcases a comprehensive catalog of paint colors, tools, and inspiration, positioning the company as a leader in the retail paint industry. The digital presence is modern, leveraging React and Next.js frameworks, and integrates multiple marketing and analytics tools to enhance user engagement and data collection. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit privacy policies are missing from the analyzed content. The absence of WHOIS data is a notable gap, but the website's branding and content strongly support its legitimacy. Overall, the site provides a professional and trustworthy experience for its target audience.

L

Lightsource bp

lightsourcebp.com

72

Lightsource bp is a large, globally active company specializing in the development, financing, construction, and operation of onshore renewable energy and energy storage projects. As a subsidiary of bp, it holds a strong market position in the energy sector, focusing on sustainable and affordable energy solutions for utilities, businesses, and communities worldwide. The company emphasizes sustainability and social responsibility as core to its business model. Technically, the website is built on WordPress with modern technologies and is hosted on AWS infrastructure, featuring good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS, cookie consent, and bot management, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website reflects a professional and trustworthy business presence with extensive analytics and marketing tools integrated.

P

PEMEX

pemex.com

10

PEMEX is the Mexican state-owned petroleum company, a major player in the national energy sector, providing exploration, extraction, refining, logistics, and commercialization of hydrocarbons and petrochemical products. The website serves as the official digital presence, targeting the general public, investors, and stakeholders with comprehensive information about the company’s operations, transparency, and sustainability efforts. Technically, the site is built on Microsoft SharePoint, leveraging modern web technologies including jQuery, Bootstrap, and analytics tools such as Google Analytics and Microsoft Application Insights. The security posture is solid with HTTPS enforced and telemetry in place, though some security headers and explicit policies could be improved. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is professional, well-branded, and trustworthy, though WHOIS data is unavailable, which slightly reduces domain trust. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing clear incident response contacts.

I

Intramovies

intramovies.com

53

Intramovies is an independent film distribution company with a professional online presence showcasing a curated catalogue of feature films, documentaries, classics, and restorations. The company targets film industry professionals and cinephiles, offering distribution and production services. The website is built on WordPress with modern technologies such as Bootstrap and jQuery, and includes SEO optimization and mobile responsiveness. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The absence of WHOIS data for the domain is a concern, reducing trustworthiness despite the professional site and social media presence. Overall, the site is functional, secure, and compliant with basic privacy standards.

T

Triumph Italy S.r.l – Società Benefit

icd2025rome.org

10

The website www.icd2025rome.org serves as the official platform for the XIV International Congress of Dermatology 2025, an important global event in the healthcare sector focused on dermatology. It is organized under the auspices of several Italian dermatology societies and hosted by Triumph Italy S.r.l. The site provides comprehensive information about the congress, including scientific sessions, registration, sponsorship, and practical details for attendees. The target audience includes dermatologists, researchers, sponsors, and media professionals. The business model revolves around event organization, sponsorship facilitation, and knowledge dissemination within the dermatology community. Technically, the website is built on WordPress 6.8.3, utilizing modern libraries such as jQuery, Bootstrap, and Swiper.js for responsive design and user experience. It integrates Iubenda for privacy and cookie compliance, ensuring GDPR adherence. The site is mobile-optimized and SEO-friendly, with structured data enhancing search engine visibility. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism with granular controls. No critical vulnerabilities or exposed sensitive data were detected. However, security headers could be improved, and the addition of a security.txt file and incident response contact would enhance the security posture. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for the ICD 2025 event. The lack of WHOIS data limits domain trust analysis, but the content and compliance measures support legitimacy. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and continuous monitoring of third-party scripts.