Security Directory

I

Insight Partners

go-scale.com

63

The website go-scale.com serves as a community engagement platform branded as GO, associated with Insight Partners, a global private equity and venture capital firm. It provides a networking platform for members related to Insight Partners' ecosystem. The site is professionally designed, with clear branding and social media integration linking to official Insight Partners profiles. The business model centers on investment management combined with community networking services, targeting investors and portfolio companies. The domain is appropriately aged and registered without privacy protection, indicating transparency and legitimacy. Technically, the site leverages modern web technologies including React, Mapbox for mapping, and Hivebrite as the community platform. It integrates multiple analytics and monitoring tools such as Google Analytics, Amplitude, Datadog, and Sentry, indicating a mature digital infrastructure. Hosting is via AWS Cloudfront CDN, supporting performance and scalability. Mobile optimization is good, though accessibility and SEO optimizations are basic. From a security perspective, the site enforces HTTPS with a valid SSL certificate and domain registration protections. However, DNSSEC is not enabled, and no explicit security headers are detected in the HTML content. There is no visible privacy policy, cookie consent mechanism, or terms of service on the main page, which are critical for GDPR compliance and user trust. Incident response and vulnerability disclosure information are also absent. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices. Strategic improvements in publishing privacy and cookie policies, enabling DNSSEC, and adding security headers would strengthen the security posture and regulatory compliance, thereby improving user trust and reducing risk.

S

ScaleUp:AI

scaleup.events

57

ScaleUp:AI is a well-established AI conference organized and powered by Insight Partners, targeting AI professionals, executives, and innovators globally. The website presents a professional and polished digital presence, leveraging WordPress with Elementor and multiple marketing and analytics tools to engage attendees both virtually and in-person. The event is positioned as a leading industry gathering with a strong network of speakers and partners. Technically, the site is modern and performs well with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and policies are lacking. Privacy compliance is a notable gap due to missing privacy and cookie policies. Overall, the site is credible and trustworthy but would benefit from enhanced compliance and security transparency.

M

Moravskoslezské inovační centrum Ostrava, a.s.

innoverse.cz

49

InnoVerse is a Czech-based conference platform organized by Moravskoslezské inovační centrum Ostrava, a.s., focusing on innovation, business, and technology sectors including startups, mobility, health, and digitalization. The platform serves as a nexus for business professionals, researchers, and innovators to collaborate and explore emerging trends. The website is professionally designed, mobile-optimized, and provides comprehensive event information, speaker profiles, and partner details. Technically, it leverages WordPress CMS with modern JavaScript frameworks and integrates analytics and marketing tools such as Google Tag Manager and LinkedIn Insight. Security posture is strong with HTTPS enforced and GDPR compliance evident through cookie consent mechanisms and a detailed privacy policy. However, explicit security policies and incident response contacts are not present. Overall, the site demonstrates a mature digital presence with good privacy and security practices, supporting its role as a reputable event organizer in the Czech innovation ecosystem.

B

Brněnská personalistika, spol. s r. o.

bp.cz

57

Brněnská personalistika, spol. s r. o. is a well-established Czech company specializing in human resources services including recruitment, consulting, audits, and education. Operating since 1996, it holds a stable market position with a focus on the Czech labor market and multicultural corporate environments. The website reflects a professional business model targeting companies seeking HR advisory and training services. Technically, the site uses a legacy ASP.NET WebForms platform with several JavaScript libraries including jQuery 1.7.2 and Google Analytics for tracking. While the site is accessible and functional, it shows signs of aging technology and basic mobile optimization. Security posture is moderate with HTTPS enabled but lacking advanced security headers and updated libraries. Privacy compliance is partial, with a cookie consent banner present but no clear privacy policy page. Contact information and certifications are clearly presented, enhancing business credibility. Overall, the site is professional but would benefit from modernization and enhanced security and privacy practices.

L

Lázně Darkov

lazne-darkov.cz

48

Lázně Darkov is a spa and wellness service provider based in the Czech Republic, offering therapeutic and wellness treatments. The website presents basic information about the business but lacks detailed business and contact information. The technical infrastructure includes usage of Google Tag Manager and Font Awesome for UI and analytics, indicating some level of digital maturity. However, the absence of WHOIS data and security policies reduces transparency and trust. Security posture is weak with no detected security headers or privacy compliance mechanisms. Overall, the website is accessible and safe but requires improvements in security, privacy, and business transparency to enhance trust and compliance.

R

RISJK

risjk.cz

47

RISJK is a regional innovation strategy platform focused on supporting the development of innovation in the South Bohemian Region of the Czech Republic. It serves as a foundational concept for regional economic competitiveness and value creation through innovation adoption. The website provides access to strategic documents, information about innovation ecosystems, and support programs such as Smart Accelerator initiatives. The target audience includes regional stakeholders, research organizations, startups, and government entities. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and Google Tag Manager for analytics. It is mobile-optimized and presents a professional design with clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though it lacks advanced security headers and published security policies. WHOIS data is unavailable, which reduces domain trust verification, but the website content and partner affiliations strongly indicate legitimacy. Overall, the site is a credible regional government-related resource with moderate technical maturity and good content quality.

J

Jihočeský vědeckotechnický park, a.s.

jihoczech.cz

44

Jihočzech is a regional entrepreneurial competition organized by Jihočeský vědeckotechnický park, a.s., aimed at supporting innovative business ideas and startups in the South Bohemian region of the Czech Republic. The website provides detailed information about the competition phases, prizes, and useful resources for new entrepreneurs. It targets aspiring entrepreneurs seeking professional coaching, networking, and potential investment opportunities. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing, with a responsive design optimized for mobile devices. Security posture is adequate with HTTPS enforced and cookie consent mechanisms implemented, though explicit security headers are not detected and no formal security policy or incident response information is published. The absence of WHOIS data for the domain reduces transparency and trustworthiness from a domain registration perspective. Overall, the site is professional, content-rich, and user-friendly, serving its business purpose effectively.

B

BALTRO Sp. z o.o.

baltro.pl

55

BALTRO Sp. z o.o. is a specialized manufacturing company focused on surface treatment and mechanical production, particularly using fluoropolymer coatings and thermoshrinkable sleeves. The company serves industrial clients primarily in Poland and neighboring countries, offering durable and chemically resistant solutions for production lines. The website reflects a mature digital presence built on WordPress with modern SEO and analytics integrations. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and explicit policies could be made. Overall, the domain registration and website content are consistent and trustworthy, supporting a positive business reputation.

Insight Partners is a global investment firm specializing in software and technology companies, focusing on partnering with high-growth startups and scaleups to accelerate their growth. The company positions itself as a leader in the venture capital and private equity space, providing capital and strategic support to ambitious technology businesses worldwide. Their website reflects a mature, enterprise-grade digital presence with comprehensive content, strong branding, and a clear value proposition targeting technology entrepreneurs and investors. Technically, the website is built on WordPress, leveraging modern web technologies including jQuery, Vimeo for video content, and multiple marketing and analytics tools such as Google Tag Manager, Marketo, Hotjar, and OneTrust for cookie consent. The site is well-optimized for mobile devices, SEO, and accessibility, indicating a high level of digital maturity and investment in user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes security headers like Content Security Policy and HSTS. Cookie consent mechanisms are implemented, and privacy policies are comprehensive and GDPR compliant. However, the absence of a dedicated security policy or incident response contact information is a gap. Additionally, the WHOIS data for the domain is missing, which raises questions about domain registration transparency but does not necessarily indicate malicious intent given the professional nature of the site. Overall, Insight Partners' website demonstrates a strong business and technical foundation with good security practices, though improvements in transparency around security policies and domain registration details would enhance trustworthiness. The risk level is moderate due to the WHOIS data gap, but the site is otherwise professional and secure.

M

Moravskoslezské inovační centrum (MSIC)

msic.cz

54

Moravskoslezské inovační centrum (MSIC) is a regional innovation support organization based in the Czech Republic, founded in 2017. It focuses on fostering business development and innovation within the Moravian-Silesian region by providing services such as financing, know-how, matchmaking, and infrastructure support. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Bootstrap, and multiple analytics and tracking tools. The organization maintains strong partnerships with regional government bodies and universities, enhancing its market position as a key regional innovation hub. Security posture is solid with HTTPS and reCAPTCHA implemented, though some security headers and explicit policies could be improved. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the website and domain registration data indicate a legitimate and trustworthy business with a strong digital presence.

O

Strona główna - OPI TPP 2.0

opi-tpp.pl

69

The website www.opi-tpp.pl serves as a publicly accessible information system focused on post-mining and post-industrial areas within the Silesian Voivodeship in Poland. It appears to be a government or public sector initiative aimed at providing regional stakeholders and residents with relevant data about these lands. The site uses modern web technologies including Angular, Google Tag Manager, and Cookiebot for cookie consent management, indicating a reasonable level of digital maturity. The presence of a detailed cookie consent mechanism and privacy policy hosted by Cookiebot reflects good privacy compliance practices. However, the absence of explicit contact information, terms of service, and security policies suggests areas for improvement in transparency and user trust. The domain WHOIS data is not publicly available, which is typical for .pl domains or privacy-protected registrations, and does not raise immediate concerns given the site's nature and content. Overall, the site is professionally designed, accessible, and safe for general audiences.

G

GAZ-SYSTEM S.A.

gaz-system.pl

56

GAZ-SYSTEM S.A. is a strategic Polish company operating in the energy sector, specifically as a gas transmission system operator. The company manages the transmission of natural gas, maintenance and development of gas pipeline infrastructure, and operates LNG and FSRU terminals. It serves a broad audience including business clients, suppliers, media, and stakeholders in the energy market. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. Technically, the site uses modern JavaScript libraries, Google Analytics, and Google Tag Manager for tracking, and is built on a custom CMS platform. Mobile optimization and accessibility features are well implemented. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit incident response information are missing. WHOIS data is not publicly available, indicating privacy protection which is justified given the company's strategic role. Overall, the site is trustworthy, professional, and compliant with GDPR and cookie regulations.

Dell Technologies is a global leader in technology solutions, offering a wide range of products and services including technical support, partner programs, and enterprise solutions. The Finnish localized site targets corporate customers with comprehensive resources and account management features. The technical infrastructure is robust, leveraging modern JavaScript frameworks, advanced analytics, and marketing tools, ensuring a fast, accessible, and mobile-optimized user experience. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though explicit security policies and incident response details are not publicly disclosed. Overall, the site reflects a mature digital presence consistent with a large enterprise technology company.

K

Kirchenbote Online

kirchenbote-online.ch

64

Kirchenbote Online is a regional Swiss media platform focused on church-related news and cultural topics across several cantons including Baselland, Basel-Stadt, Luzern, Schaffhausen, Schwyz, Solothurn, Uri, and Zug. The website offers news articles, event agendas, book recommendations, and digital e-paper services targeting residents and church community members interested in religious and societal issues. The platform maintains partnerships with other cantonal church news providers, enhancing its regional presence. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Google reCAPTCHA for bot protection. It features a cookie consent mechanism compliant with GDPR standards, ensuring user privacy choices are respected. The site is mobile-optimized with good navigation and professional design, though some accessibility and SEO aspects could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent with opt-in. However, it lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's business focus, indicating legitimacy and trustworthiness. Overall, Kirchenbote Online presents a professional, trustworthy, and GDPR-compliant media platform with moderate technical sophistication and a solid security posture. Opportunities exist to enhance security headers, publish terms of service, and improve accessibility and SEO for better user experience and compliance.

A

ALDI SUISSE TOURS

aldi-suisse-tours.ch

72

ALDI SUISSE TOURS is a travel service provider operating under the ALDI SUISSE brand, offering affordable travel packages including hotels, beach holidays, round trips, and cruises primarily targeting the Swiss market. The website is professionally designed with consistent branding and provides a comprehensive cookie consent mechanism ensuring GDPR compliance. Technically, the site uses modern web technologies including Cookiebot for consent management, Google Tag Manager for analytics, and Kameleoon for marketing optimization, hosted on AWS Cloudfront CDN. Security posture is strong with HTTPS enforced and appropriate security headers, though no explicit security policy or incident response information is publicly available. Overall, the site is trustworthy and well-positioned in the retail travel sector with good privacy compliance and user experience.

A

ALDI SUISSE AG

aldi-suisse-photos.ch

71

ALDI Suisse Fotos is an online photo printing service operated by ALDI SUISSE AG, a well-established retail company in Switzerland. The website offers customers the ability to upload, edit, and order various photo products such as prints, photo books, and gifts. The service targets ALDI customers and the broader Swiss market, leveraging the strong ALDI brand presence. The business model is e-commerce focused, integrated within the retail sector, providing value-added services to customers. The website content is professionally presented, consistent with ALDI's branding, and offers clear navigation and contact options.

A

ALDI SUISSE AG

aldi-mobile.ch

70

ALDI Mobile, operated by ALDI SUISSE AG, is a telecommunications service provider in Switzerland offering affordable mobile subscriptions and prepaid plans. The website presents a professional and user-friendly interface with clear information about their services, pricing, and contact options. The business targets general consumers seeking cost-effective mobile solutions with no minimum contract duration and lifetime discounts. Technically, the website leverages modern frameworks such as Next.js and React, ensuring good performance, mobile optimization, and accessibility. Security-wise, the site enforces HTTPS, implements standard security headers, and uses cookie consent management, although it lacks a dedicated security policy or incident response page. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements, making it a reliable platform for customers.

A

ALDI SÜD

aldi-now.ch

74

ALDI-now is an online grocery delivery platform operating in Switzerland, affiliated with the well-known retail company ALDI SÜD. The website offers a wide range of grocery products with same-day delivery service, targeting Swiss consumers seeking convenience and quality at competitive prices. The platform integrates modern web technologies including Google Tag Manager and reCAPTCHA to enhance user experience and security. Cookie consent mechanisms are implemented to comply with GDPR requirements. The website is professionally designed with consistent branding and clear navigation, providing a trustworthy shopping environment. However, explicit security policies and incident response contacts are not publicly available, which could be improved to enhance transparency and user trust. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the site.

B

Bitly, Inc.

aldi.in

71

Bitly, Inc. is a well-established technology company founded in 2003, specializing in branded link management services including URL shortening, QR codes, and analytics. The company operates a mature SaaS business model targeting marketers and enterprises, with a strong market position supported by major brand clients. The website demonstrates a high level of digital maturity, leveraging WordPress CMS, modern JavaScript libraries, and multiple marketing and analytics integrations. Security posture is robust, with HTTPS enforced, SOC 2 Type 2 certification, and compliance with GDPR and CCPA. Minor improvements such as enabling DNSSEC and publishing a security.txt file could further enhance security. Overall, the website is professional, trustworthy, and compliant, with no signs of blocking or WAF interference.

O

On-Apply GmbH

onapply.de

74

OnApply is a German-based SaaS company specializing in recruiting and applicant management software designed to streamline the hiring process for businesses. Founded in 2012, it offers a comprehensive platform that includes job posting management, applicant tracking, interview scheduling, analytics, and team collaboration tools. The company positions itself as an easy-to-use solution for HR professionals and recruiters, with a strong emphasis on GDPR compliance and data security. The website reflects a mature digital presence with positive user ratings and clear business information. Technically, OnApply leverages modern web technologies including Webflow CMS, Amazon AWS hosting, Google Tag Manager, and Cloudflare Turnstile captcha for security. The site is well-optimized for performance, mobile responsiveness, and accessibility, indicating a high level of digital maturity. The use of structured data and comprehensive metadata supports SEO and user experience. From a security perspective, the website enforces HTTPS, employs bot protection, and provides cookie consent mechanisms aligned with GDPR. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a public vulnerability disclosure or incident response contact is noted. Overall, OnApply presents a low-risk profile with a professional and trustworthy online presence. Strategic recommendations include enhancing security header implementation, publishing vulnerability disclosure policies, and improving transparency on data retention and incident response to further strengthen trust and compliance.

G

Grape Festival

grapefestival.sk

53

Grape Festival is a well-established music and cultural event organizer based in Slovakia, hosting annual festivals with a strong focus on entertainment, ticket sales, and partner engagement. The website reflects a professional and consistent brand image targeting music festival attendees and cultural event audiences primarily in Slovakia. Technically, the site uses a modern technology stack including jQuery, Bootstrap, and various analytics and marketing tools such as Google Tag Manager and TikTok Pixel, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, although formal security policies and vulnerability disclosure mechanisms are absent. Overall, the website is trustworthy, compliant with GDPR, and provides a positive user experience with clear navigation and relevant content.

F

FAST ČR, a.s.

fastcr.cz

54

FAST ČR, a.s. is a Czech Republic-based wholesale distributor and service provider specializing in consumer electronics, household appliances, and related products since 1992. The company serves retailers and end customers primarily within the Czech market, offering a broad portfolio of well-known global and local brands. Their business model focuses on wholesale sales and after-sales service, positioning them as a trusted regional partner in their sector. Technically, the website employs standard web technologies including JavaScript, CSS, and Google Analytics for tracking. The site is accessible with moderate performance and basic mobile optimization. However, there is a lack of advanced security headers and no visible CMS or hosting provider information. Privacy and cookie policies are absent, indicating room for improvement in compliance and user transparency. From a security perspective, the site uses HTTPS but lacks explicit security headers and incident response contact information. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and branding appear professional and consistent with a legitimate business. No critical vulnerabilities or adult content were detected. Overall, the website presents a professional business front with moderate technical maturity and some security and compliance gaps. Strategic improvements in privacy policies, security headers, and domain registration transparency are recommended to enhance trust and compliance.

P

PLAYGROUNDS

playgrounds.ch

60

PLAYGROUNDS is a Swiss-based platform dedicated to providing information about playgrounds, targeting families and children. The website is professionally designed with consistent branding and good content quality, serving a niche local market. Technically, it employs modern web technologies including Google Tag Manager, reCAPTCHA, and Cookiebot for consent management, running on the Umbraco CMS. The site is well-optimized for mobile and SEO, with moderate performance. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities. Privacy compliance is robust, featuring a comprehensive privacy and cookie policy with GDPR adherence. However, the site lacks explicit terms of service, incident response, and vulnerability disclosure information, which are recommended for enhanced trust and compliance. Overall, the website is trustworthy, secure, and suitable for its target audience.

O

OPTEN AG

pgfwirkt.ch

69

PGF wirkt! is a Swiss-based website realized by OPTEN AG, likely serving a community or social impact purpose targeted at German-speaking Swiss users. The website employs modern web technologies including Umbraco CMS, Google reCAPTCHA, Google Tag Manager, and Cookiebot for cookie consent management, reflecting a moderate level of digital maturity. The site is well-structured with good design and navigation, optimized for mobile devices, and uses multiple third-party analytics and marketing tools to track user interactions extensively. Security posture is solid with HTTPS enforced and bot protection in place, but lacks published security policies or incident response information. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy or terms of service pages found. Overall, the site is professional and trustworthy but could improve transparency and compliance documentation.

L

liebesexundsoweiter

liebesexundsoweiter.ch

69

liebesexundsoweiter.ch is a Swiss non-profit organization website dedicated to sexual education and related social topics. The site provides educational content, workshops, and resources aimed at a general audience in Switzerland. The organization positions itself as a niche educational provider with a focus on youth and adult education in sexual health and social awareness. The website is built on the Umbraco CMS platform and integrates modern web technologies including Google Tag Manager, reCAPTCHA, and Cookiebot for privacy compliance. Hosting and development appear to be managed by Swiss-based OPTEN AG, ensuring regional compliance and performance. Security posture is strong with HTTPS enforced, appropriate security headers, and a comprehensive cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with detailed policies and user consent management. However, the site lacks explicit terms of service and a dedicated security or incident response policy. Overall, the website is professional, trustworthy, and suitable for its educational mission, with moderate technical maturity and good security hygiene.

P

PLAYGROUNDS

lasalleouverte.ch

62

PLAYGROUNDS is a Swiss-based platform dedicated to providing information and community engagement around playgrounds, targeting families and children. The website is professionally designed with a consistent brand presence and offers detailed content relevant to its niche audience. Technically, the site leverages modern web technologies including Umbraco CMS, Google Maps API, and various JavaScript libraries to deliver an interactive user experience. Security-wise, the site enforces HTTPS, employs security headers, and integrates cookie consent mechanisms compliant with GDPR, although it lacks explicit security policy and incident response disclosures. Overall, the website demonstrates a solid security posture and good privacy compliance, with moderate technical performance and user experience.

P

PLAYGROUNDS

chindaktiv.ch

52

PLAYGROUNDS is a Swiss-based platform dedicated to providing information and community engagement around playgrounds, targeting families and children. The website is professionally designed with a consistent brand presence and offers key services such as playground information and event listings. The platform uses Umbraco CMS and integrates modern web technologies including Google Tag Manager, reCAPTCHA, and Google Maps API to enhance user experience and security. Cookie consent is implemented comprehensively, reflecting good privacy compliance practices. Security posture is strong with HTTPS and security headers in place, although no explicit security policy or incident response information is published. Overall, the website is trustworthy, well-maintained, and suitable for its target audience.

A

Active City

activecity.ch

66

Active City is a Swiss-based community initiative offering free sports and movement courses for all age groups, promoting outdoor and collective physical activities without registration requirements. The website is professionally designed using Umbraco CMS and integrates modern technologies such as Google Tag Manager, reCAPTCHA, and Cookiebot for privacy compliance and user experience enhancement. The technical infrastructure supports good performance and mobile optimization, with a moderate level of accessibility and SEO optimization. Security posture is solid with HTTPS enforcement and cookie consent management, though some security headers could be improved and explicit security policies are absent. Overall, the website is trustworthy, transparent, and well-aligned with its community service mission.

R

RADIX Schweizerische Gesundheitsstiftung

primokiz.ch

69

RADIX Schweizerische Gesundheitsstiftung is a Swiss non-profit health foundation focused on promoting health in communities, exemplified by their Primokiz program targeting healthy municipalities. The website reflects a professional and consistent brand presence with clear health-related content aimed at municipalities, health professionals, and families. The technical infrastructure is modern, leveraging Umbraco CMS, Google Tag Manager, Cookiebot for consent management, and Google Maps API, indicating a mature digital presence. Security posture is strong with HTTPS, security headers, CSRF protections, and bot mitigation via reCAPTCHA. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, explicit security policies and incident response information are not found, representing an area for improvement. Overall, the website is trustworthy, secure, and compliant with GDPR, serving its target audience effectively.

N

NKT A/S

nkt.cz

51

NKT A/S is a well-established company specializing in the manufacturing and supply of cables and cable accessories primarily for the energy sector. With a history dating back to 1891, NKT positions itself as a leading European supplier offering a comprehensive range of products including low, medium, and high voltage cables, as well as related services such as 24-hour cable service and cable laying via specialized vessels. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support targeting energy sector professionals and partners. Technically, the website is built on modern frameworks such as Next.js and React, incorporating advanced features like consent management via Usercentrics and analytics through Google Tag Manager. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some security headers could be enhanced. The absence of WHOIS data due to privacy protection is noted but does not detract significantly from the site's legitimacy given the professional content and certifications displayed. From a security perspective, the site enforces HTTPS and employs consent mechanisms for privacy compliance, aligning with GDPR requirements. However, explicit incident response contacts and vulnerability disclosure mechanisms are not present, representing areas for improvement. Overall, the site maintains a strong security posture with no evident vulnerabilities or malicious content. The risk assessment indicates a low risk profile with recommendations to enhance security headers and publish incident response information to further bolster trust and compliance. The company’s digital maturity and business credibility are high, supporting its market position as a trusted energy sector partner.

A

ABADIA a.s.

balkony-a-lodzie.cz

43

ABADIA a.s. is a Czech-based company specializing in the manufacturing and installation of suspended balconies and lodžies, primarily targeting panel houses. Established in 2012, the company has built a strong market presence in the Czech Republic and Slovakia, with some projects in Germany. Their services include design proposals, static assessments, 3D visualizations, manufacturing, and installation, positioning them as a leading supplier in their niche. The website reflects a professional business with clear contact information and a portfolio of completed projects, supporting their credibility. Technically, the website employs common marketing and analytics tools such as Google Tag Manager, Google Analytics, Facebook SDK, and CookieYes for cookie consent management. The site appears to be custom-built without a known CMS and is hosted via Active24. While the site has moderate performance and basic mobile optimization, some technical improvements are needed, particularly regarding HTTPS enforcement and security headers to enhance security posture. From a security perspective, the site implements a detailed cookie consent mechanism aligned with GDPR principles but lacks visible privacy policies, terms of service, or incident response information. The absence of HTTPS on some resources introduces mixed content risks. No critical vulnerabilities or blocking mechanisms were detected, but security best practices could be improved to protect user data and enhance trust. Overall, the website is functional and professional but would benefit from enhanced security measures, explicit privacy documentation, and technical modernization to improve user trust and compliance.

J

Jirsa a Záruba

jzshop.cz

58

JZShop.cz is a Czech-based e-commerce service provider specializing in the rental of customizable online shops with integrated solutions for suppliers, accounting, and inventory management. The company targets small to medium-sized businesses seeking tailored e-shop solutions with additional features such as integrated cash registers and multi-currency support. The website demonstrates a professional and modern design with clear navigation and mobile responsiveness, supported by a moderate technology stack including Google Analytics and Facebook Pixel for marketing and analytics purposes. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, although the absence of WHOIS data and explicit security headers slightly reduce trust. Overall, the site is well-structured, content-rich, and business-focused, but would benefit from enhanced transparency in domain registration and security policies.

D

DRUMEXTRA s.r.o.

mapex.cz

45

Mapex, operated by DRUMEXTRA s.r.o., is a Czech-based company specializing in the manufacturing and retail of drums, drum hardware, and accessories. Established in 2007, the company offers a range of percussion instruments targeting musicians and music stores. The website presents a professional and consistent brand image with clear navigation and relevant content for its niche market. The technical infrastructure includes common web technologies such as jQuery and Google Tag Manager, indicating moderate digital maturity with room for improvement in performance and SEO. Security posture is adequate with HTTPS usage but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic, with a privacy policy implied under terms of use but no cookie consent mechanism detected. Overall, the website is functional and trustworthy but could benefit from enhanced security and privacy features.

D

Drumextra, s.r.o.

anatolian.cz

43

Anatolian is a Czech-based company specializing in the manufacturing and wholesale distribution of high-end cymbals, targeting drummers and music professionals. The website presents a professional and consistent brand image with clear contact information and a focus on quality musical instruments. The company appears to have a history dating back to 2000, although domain registration details could not be verified due to missing WHOIS data. Technically, the website uses modern web technologies including Google Tag Manager and Typekit fonts, with a responsive design and moderate performance. However, there is a lack of advanced security headers and no visible privacy or cookie policies, which indicates room for improvement in compliance and security posture. From a security perspective, the site is accessible without WAF or blocking mechanisms, but the absence of WHOIS data and security policies reduces trustworthiness. No vulnerabilities or exposed sensitive data were detected, but the site would benefit from implementing security best practices such as security headers and GDPR-compliant policies. Overall, the website is functional and professional but has gaps in privacy compliance and domain transparency. Strategic improvements in security and compliance would enhance trust and reduce risk.

C

CRAFTER Co., LTD.

crafterguitars.com

47

Crafter Guitars is a well-established Korean guitar manufacturer with a history dating back to 1972. The company focuses on handcrafted guitars combining traditional craftsmanship with modern design and technology. Their website reflects a medium-sized manufacturing and retail business targeting musicians and guitar enthusiasts, with a consistent brand presence and active social media engagement. Technically, the website uses modern JavaScript libraries and frameworks such as jQuery, GSAP, and Swiper.js, hosted on Cafe24 infrastructure, with good mobile optimization and SEO practices. Security posture is adequate with enforced HTTPS and no exposed sensitive data, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and safe for general audiences.

R

RADIX Schweizerische Gesundheitsstiftung

radix.ch

69

RADIX Schweizerische Gesundheitsstiftung is a Swiss non-profit health foundation dedicated to health promotion and prevention. The organization targets Swiss residents interested in improving their health and well-being through educational programs and services. The website reflects a professional and consistent brand image, with a clear focus on healthcare and public health sectors. The foundation operates with a medium-sized organizational footprint and leverages modern web technologies to engage its audience effectively. Technically, the website is built on the Umbraco CMS platform and integrates a variety of modern JavaScript libraries and APIs, including Google Tag Manager, reCAPTCHA, Cookiebot for consent management, and Google Maps API. The site demonstrates good mobile optimization and moderate performance, with a solid SEO foundation and basic accessibility features. From a security perspective, the site enforces HTTPS, employs strong security headers, and uses cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a publicly available security policy and incident response information represents an area for improvement. Overall, RADIX.ch presents a trustworthy and professionally maintained online presence with strong privacy compliance and a clear focus on user data protection. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility, and maintaining vigilance on third-party script security to sustain and improve its security posture.

S

SwitzerlandMobility

schweizmobil.ch

68

SwitzerlandMobility operates a national platform focused on summer mobility and outdoor activities in Switzerland, providing route planning, sightseeing, and travel report services primarily targeting tourists and outdoor enthusiasts. The website demonstrates moderate digital maturity with modern JavaScript frameworks and bundling tools, and integrates Google Analytics and Tag Manager for user tracking. However, the site lacks visible privacy and cookie policies, contact information, and explicit security headers, which impacts its compliance and security posture. The domain registration data aligns well with the business focus and country, supporting legitimacy. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security measures.

T

tegut... gute Lebensmittel GmbH & Co. KG

tegut.com

62

tegut... gute Lebensmittel GmbH & Co. KG is a well-established German supermarket chain operating approximately 350 stores across six federal states. The company specializes in offering a wide range of quality food products, including regional, organic, vegan, and vegetarian options, emphasizing sustainability and transparency since its founding in 1947. The website reflects a mature digital presence with comprehensive content, customer engagement features such as a loyalty program (tebonus), recipe collections, and nutritional plans. Technically, the site is built on TYPO3 CMS, employs modern JavaScript libraries, and integrates multiple marketing and analytics tools while maintaining GDPR compliance through a consent management platform. Security posture is strong with HTTPS enforcement and privacy controls, although explicit security headers could be improved. Despite the absence of WHOIS registration data, the website's professionalism, certifications, and trust signals indicate a legitimate and credible business. Overall, tegut demonstrates a robust online presence aligned with its brand values and customer expectations.

V

Vajra & Delibio

delibio.be

45

Vajra & Delibio is a family-owned wholesale distributor specializing in organic (BIO) food products in Belgium, offering a catalog of over 5000 references including fresh and dry goods. The website is professionally designed, leveraging the PrestaShop e-commerce platform, and integrates modern technologies such as Google Maps API and Google Tag Manager for analytics. The site is fully accessible, mobile-optimized, and provides clear navigation through extensive product categories. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security policy or incident response contacts are published. WHOIS data is restricted due to registry policy, which is typical for .be domains, but the website content and social media presence support legitimacy. Overall, the site demonstrates a mature digital presence suitable for its B2B wholesale market.

E

Ekoplaza

ekoplaza.nl

51

Ekoplaza is a well-established Dutch organic supermarket chain offering organic and sustainable food products primarily targeting consumers in the Netherlands. The website serves as an e-commerce platform enabling customers to browse and purchase organic groceries. The business is positioned as a key player in the organic retail sector with a consistent brand presence and a focus on quality organic products. Technically, the website employs modern frameworks such as Nuxt.js and Bootstrap, and integrates Google Tag Manager for analytics and marketing purposes. The site demonstrates good mobile optimization and user experience, though accessibility features are basic. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and explicit security policies. Privacy compliance is weak due to absence of visible privacy and cookie policies. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness. Strategic improvements in security headers, privacy disclosures, and contact information visibility would enhance trust and compliance.

A

ALECO GmbH

aleco.bio

46

ALECO GmbH is a well-established organic supermarket chain operating in the northwest region of Germany, with a history spanning over 25 years since its founding in 1989. The company focuses on providing a fully ecological product range with a strong emphasis on freshness, targeting consumers interested in organic and sustainable products. Their business model centers on retail through multiple physical store locations, supported by customer loyalty programs and active recruitment efforts. Technically, the website employs modern tracking technologies such as Google Tag Manager and Google Analytics, and uses Swiper.js for interactive content. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with no critical technical issues detected. However, no CMS or hosting provider details are explicitly identified. From a security perspective, the website enforces HTTPS and implements a cookie consent banner, indicating awareness of privacy regulations. However, it lacks advanced security headers and does not publish explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to privacy protection or malformed queries, but the website's legitimacy is supported by consistent branding, multiple store locations, and active social media presence. Overall, ALECO GmbH presents a credible and professional online presence with moderate technical maturity and a good security posture. Strategic improvements could include enhancing security headers, publishing security policies, and providing clearer contact information such as phone numbers to further strengthen trust and compliance.

E

ebl-naturkost GmbH & Co. KG

ebl-naturkost.de

49

ebl-naturkost GmbH & Co. KG operates as a regional organic food retailer in Germany, emphasizing sustainable, high-quality, and natural products sourced from regional and biologically certified farms. The company maintains a strong market position within the organic retail sector, offering weekly and monthly promotional offers through both physical markets and an online presence. Their target audience includes consumers seeking organic and regional food products. Technically, the website is built on the Shopware CMS platform, hosted by Timme Hosting, and incorporates modern web technologies with responsive design and SEO best practices. The site uses Google Analytics with IP anonymization and implements a cookie consent mechanism, reflecting a good level of digital maturity and privacy awareness. Security posture is solid with HTTPS enforced, though some security headers and explicit security policies are absent. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with room for improvement in security transparency and incident response readiness.

T

tegut... gute Lebensmittel GmbH & Co. KG

basicbio.de

62

tegut... gute Lebensmittel GmbH & Co. KG is a well-established German supermarket chain operating approximately 350 stores across six federal states. The company specializes in offering a wide range of products including regional foods, organic (Bio) products, vegan and vegetarian options, and items adhering to their Reinheitsversprechen (purity promise). Founded in 1947, tegut... emphasizes sustainability, fairness, and transparency as core business values. Their business model focuses on retailing quality food products with a strong commitment to environmental and social responsibility. The website reflects a mature digital presence with comprehensive customer engagement features such as a loyalty program (tebonus), recipe collections, and an online shop.

D

Denns BioMärkte

denns-biomarkt.de

69

Denns BioMärkte operates as a large-scale organic retail chain in Germany, offering a comprehensive range of organic products including food, fresh produce, bakery items, ecological drugstore goods, and natural cosmetics. The company is part of the BioMarkt Verbund, a recognized network of organic markets, and emphasizes certified organic products from reputable associations such as Bioland, Biokreis, Naturland, and Demeter. The website reflects a professional retail business model targeting general consumers interested in organic and ecological products. Technically, the website is built using modern frameworks like React and Gatsby, hosted on Microsoft Azure DNS infrastructure, and incorporates essential marketing and tracking tools such as Google Tag Manager and Facebook Pixel. The site includes a cookie consent mechanism via Cookiebot, indicating compliance efforts with GDPR regulations. Security-wise, while HTTPS is implied and cookie consent is implemented, the site lacks visible advanced security headers and formal security policies or incident response contacts. No blocking or WAF challenges were detected, allowing full content access. Overall, the website demonstrates a good balance of business credibility, technical implementation, and privacy compliance, with room for improvement in security policies and transparency.

M

Manor AG

manor.ch

75

Manor AG operates a leading retail and e-commerce platform in Switzerland, offering a broad assortment of products including fashion, beauty, household goods, multimedia, and more. The website manor.ch serves as a comprehensive online shop complemented by physical stores, loyalty programs, and customer services such as store locators and wishlists. The company has a strong market position as a well-established Swiss department store chain founded in 1902. Technically, the website leverages modern web technologies including React and Next.js frameworks, integrated with marketing and personalization tools like Dynamic Yield and Google Tag Manager. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. Privacy compliance is robust with clear cookie consent mechanisms and comprehensive privacy policies. From a security perspective, the site enforces HTTPS with strong SSL configurations and implements standard security headers. However, explicit security policies and incident response contacts are not publicly detailed, which could be improved. No vulnerabilities or suspicious activities were detected in the analysis. Overall, manor.ch presents a professional, trustworthy, and secure online presence aligned with its business stature. Strategic improvements in transparency around security policies and incident response would further enhance trust and compliance.

C

Coop Pronto AG

coop-pronto.ch

56

Coop Pronto AG operates a large network of over 300 convenience retail shops with or without fuel stations across Switzerland. The company focuses on providing quick and fresh products from early morning to late night, targeting general consumers seeking convenience and fuel services. The website reflects a mature digital presence with good content quality, clear navigation, and consistent branding aligned with the Coop group. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, Facebook Pixel, and other marketing tools, indicating a well-integrated marketing and analytics infrastructure. Security posture is solid with HTTPS enforced and privacy compliance evident through cookie banners and privacy policies, although formal security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, trustworthy, and safe for general audiences.

N

nuun - webs & apps GmbH

nuun.ch

58

nuun - webs & apps GmbH is a Swiss-based digital agency specializing in custom web design, app development, and online shops, primarily serving clients in the Thurgau region, specifically Weinfelden. The company positions itself as a local expert offering tailored digital solutions including corporate branding and web hosting. The website content is professionally presented in German, targeting small and medium-sized businesses seeking bespoke digital services. The agency maintains an active presence on social media platforms such as Facebook, Instagram, and LinkedIn, and offers newsletter subscriptions to engage its audience. Technically, the website is built on the Contao Open Source CMS and leverages modern web technologies including jQuery and Slick Carousel for interactive content. It integrates Google Tag Manager and Matomo for analytics, indicating a moderate level of digital maturity and user tracking. The site is mobile-optimized with good SEO practices, although accessibility features could be enhanced. Performance is moderate, with no critical technical debt observed. From a security perspective, the website enforces HTTPS and includes several important security headers such as Content-Security-Policy and Strict-Transport-Security. Forms are protected with CSRF tokens, and no exposed sensitive data or vulnerable libraries were detected. However, the absence of a cookie consent mechanism and explicit security or incident response policies represents areas for improvement. Privacy compliance is generally good, with a clear privacy policy in place and GDPR compliance indicators, but cookie consent and terms of service pages are missing. Overall, nuun.ch presents a trustworthy and professional digital presence with a solid security posture and business credibility. Strategic recommendations include implementing a cookie consent banner, publishing terms of service and security policies, and enhancing accessibility. These steps will improve compliance, user trust, and security culture, supporting the agency's growth and reputation in the competitive Swiss digital market.

M

maerz architekten ag

maerz.ag

45

maerz architekten ag is a Swiss architecture firm specializing in architecture, development, spatial planning, and project realization. Operating as a subsidiary of RaumUnion AG, the company serves clients primarily within Switzerland, offering professional architectural services with a focus on quality and regional projects. The website presents a professional portfolio and clear contact information, reinforcing its market presence. Technically, the website is built on WordPress with modern technologies such as Alpine.js and jQuery, optimized for performance and mobile responsiveness. Hosting is provided by Hostpoint AG, inferred from DNS records. Google Analytics is integrated via Google Tag Manager, enabling moderate user tracking. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, indicating potential compliance gaps with GDPR requirements. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and enhanced security measures to strengthen its posture and user trust.

P

PCI Proxy

docvault.app

62

DocVault, operated by PCI Proxy, offers a specialized PCI compliant document vault solution enabling businesses to securely collect and validate sensitive customer documents without direct handling. Positioned as a niche leader, the company targets businesses requiring stringent PCI compliance in document processing. The website reflects a professional and consistent brand image with clear messaging and a focus on security and compliance. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, and Cookiebot for consent management, hosted on Webflow's platform with good performance and mobile optimization. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through a comprehensive privacy policy and cookie consent mechanism. However, the site lacks explicit terms of service and detailed security or incident response policies, which could enhance trust and compliance. Overall, the site demonstrates a mature digital presence suitable for its business model and audience.

W

Worldpay

globalpaymentsreport.com

75

Worldpay is a leading global payment processor providing comprehensive payment solutions for businesses of all sizes, including online, in-store, omnichannel, and embedded payments. The company targets merchants, software platforms, and enterprises, positioning itself as a market leader with a broad portfolio of services including payouts, fraud protection, and payment optimization. The website reflects a mature digital presence with modern technologies such as React and Next.js, hosted on Akamai infrastructure, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS, domain registration locks, and a vulnerability disclosure page, though explicit security policies and DPO contacts are not publicly detailed. Privacy and cookie policies are comprehensive and GDPR compliant, supported by consent management tools. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.