Security Directory

E

Etat de Fribourg

fr.ch

64

The website www.fr.ch is the official online portal for the Canton of Fribourg, Switzerland, providing comprehensive information and services related to the cantonal administration. It serves residents and citizens by offering access to government services, news, legislation, and administrative procedures. The site is well-branded, multilingual, and designed for accessibility and mobile responsiveness. Technically, the site is built on Drupal CMS, utilizing modern web technologies including Matomo for analytics and Google reCAPTCHA for security. The infrastructure demonstrates good digital maturity with privacy-respecting analytics and cookie consent mechanisms. Performance is moderate with good SEO and accessibility features. From a security perspective, the site enforces HTTPS, employs security headers, and avoids exposing sensitive data. However, it lacks a dedicated security policy or incident response contact information, which could enhance trust and preparedness. No vulnerabilities or suspicious activities were detected. Overall, the site presents a low-risk profile with strong legitimacy as a government entity. Strategic recommendations include publishing explicit security and incident response policies, adding a vulnerability disclosure mechanism, and enhancing transparency on data retention. These steps would further strengthen the site's security posture and user trust.

B

Banque Cantonale du Fribourg

bcf.ch

58

Banque Cantonale du Fribourg (BCF) is a well-established Swiss cantonal bank providing a broad range of financial services including retail and private banking, asset management, and corporate banking primarily serving the canton of Fribourg and surrounding regions. The website reflects a professional and modern digital presence built on Nuxt.js with integrated user consent management, indicating a mature technical infrastructure. Security posture is strong with HTTPS enforcement, comprehensive security headers, and GDPR-compliant privacy and cookie policies. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. Overall, the site is trustworthy, well-branded, and compliant with privacy regulations, supporting BCF's position as a reputable regional financial institution.

E

EQS Group AG

bkms-system.ch

57

The BKMS System website, operated by EQS Group AG, provides a compliance and whistleblowing platform targeted at businesses requiring secure reporting solutions. The current website content is minimal due to ongoing maintenance, limiting the availability of detailed information. The business is positioned as a specialized technology provider in compliance software, with a medium-sized presence in Switzerland. Technically, the website uses basic HTML and CSS without advanced frameworks or CMS detected. The site lacks visible security headers, privacy policies, and contact information, which reduces its compliance and security posture. No analytics or tracking technologies are present, indicating minimal user tracking. From a security perspective, the site is accessible without WAF or blocking mechanisms, but it lacks important security best practices such as HTTPS enforcement visibility and security headers. The WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the site scores moderately due to limited content and missing compliance documentation. Strategic recommendations include adding comprehensive privacy and cookie policies, improving security headers and HTTPS enforcement, providing clear contact and incident response information, and enhancing technical SEO and accessibility to improve user experience and trust.

T

The Scout Association

worldscoutshops.com

60

The website shop.scouts.org.uk/world-scout-shops serves as the official e-commerce platform for The Scout Association, offering a wide range of scouting merchandise including uniforms, badges, camping gear, and personalized items. The site targets Scouts, leaders, volunteers, and supporters, positioning itself as a trusted and official source for Scout-related products in the United Kingdom. The business model is primarily retail-focused, leveraging an online storefront to reach its audience effectively. Technically, the website is built using modern web technologies including Angular 17 and TypeScript, with rich interactive components such as carousels powered by Swiper.js. The site employs Google Tag Manager and cookie consent mechanisms to manage analytics and privacy compliance. The infrastructure appears well-maintained with HTTPS enforced and multiple security headers present, indicating a mature digital presence. From a security perspective, the site demonstrates good practices including secure forms, no visible vulnerabilities, and cookie consent management. However, the absence of explicit privacy policy and terms of service pages in the provided content suggests areas for improvement in compliance and transparency. No WHOIS data is available for the subdomain due to .uk domain naming rules, but the site’s branding and content strongly indicate legitimacy. Overall, the site presents a professional, secure, and user-friendly experience with a strong brand association to The Scout Association. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing contact transparency, and continuous monitoring of third-party scripts to maintain security posture.

W

World Association of Girl Guides and Girl Scouts

wagggs-shop.org

41

The World Association of Girl Guides and Girl Scouts Shop is an official e-commerce platform serving a global non-profit organization dedicated to supporting Girl Guides and Girl Scouts worldwide. The website offers a range of branded merchandise including clothing, badges, pins, and accessories, targeting members and supporters of the organization. The business model focuses on retail sales to support the non-profit's mission, with a clear market position as a niche provider of official scouting merchandise. The site is well-branded and consistent with the organization's identity, featuring multilingual support and clear navigation. Technically, the website employs legacy JavaScript libraries such as jQuery 1.7.1 and Cufon for font rendering, indicating an older technology stack. The site appears to be custom-built or uses an unknown CMS, hosted under a domain registered with GoDaddy. Performance and mobile optimization are moderate to basic, with room for modernization. SEO and accessibility features are present but not advanced. From a security perspective, the domain is protected with standard domain status locks but lacks DNSSEC and visible security headers. The use of outdated JavaScript libraries introduces potential vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. However, no explicit security policy or incident response information is published. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website is trustworthy and professional, with a strong business credibility score. Security posture is moderate but could be improved by updating libraries, enabling DNSSEC, and adding security headers. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include modernizing the tech stack, enhancing security configurations, and publishing security policies to improve transparency and trust.

J

JAKALA

jakala.com

51

JAKALA is a global data, AI, and experiences company focused on delivering impactful business solutions across multiple industries including consumer goods, financial services, automotive, public sector, and more. The company leverages strategy, technology, and activations to provide tailored, transformative solutions with data and AI at the core. The website demonstrates a professional digital presence built on HubSpot CMS, integrating modern technologies such as Swiper.js and Google Tag Manager for analytics and marketing. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit privacy policies indicates room for improvement. The lack of WHOIS data reduces domain trustworthiness, but the overall business credibility and content quality remain high. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving transparency around incident response and vulnerability disclosures.

T

The Events Calendar

theeventscalendar.com

64

The Events Calendar is a specialized technology company providing the leading events calendar plugin for WordPress. Their offerings include calendar management, ticketing, and marketing tools designed to help WordPress users manage events efficiently. The company targets WordPress site owners, event organizers, and marketers, positioning itself as a market leader in the WordPress event management niche. The website demonstrates a mature digital presence with extensive use of marketing and analytics technologies, including Google Analytics, Facebook Pixel, and Hotjar, indicating a strong focus on user engagement and data-driven marketing. Technically, the website is built on WordPress using the Kadence theme and Kadence Blocks plugin, enhanced by Yoast SEO for search engine optimization. The site loads a variety of third-party scripts for analytics and advertising, reflecting a modern tech stack. Performance and mobile optimization are good, though accessibility features are basic. The site uses HTTPS with good SSL configuration, but lacks explicit security headers and published security policies. From a security perspective, the site follows best practices such as HTTPS and nonce usage in scripts, but does not provide visible privacy or cookie policies, nor does it disclose incident response or vulnerability disclosure information. The absence of these policies reduces privacy compliance scores. No WAF or blocking mechanisms were detected, and the WHOIS data indicates a legitimate and consistent registration aligned with the business claims. Overall, the website is professional and trustworthy with good business credibility and technical implementation. However, it should improve privacy compliance by publishing clear privacy and cookie policies and enhance security transparency by providing security policies and incident response contacts.

S

Studio Mitte Digital Media GmbH

studiomitte.com

53

Studio Mitte Digital Media GmbH is a medium-sized Austrian digital agency specializing in the conception, design, and implementation of web and software solutions, including e-commerce platforms, custom software, and online marketing services such as SEO. The company positions itself as a trusted regional partner with a strong portfolio of clients and partnerships with leading technology providers like Shopware, Shopify, and Pimcore. Their website reflects a high level of professionalism, excellent content quality, and consistent branding. Technically, the site is built on TYPO3 CMS, employs modern JavaScript libraries, and uses Matomo for analytics, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and nonce attributes on scripts, though some security headers are not explicitly detected. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website and business present a trustworthy and professional image with no critical security or compliance issues detected.

A

Austrian Energy Agency

sharerenewables.eu

46

The SHAREs Blueprint website serves as an informational and template platform designed to support citizen-driven energy communities across several European countries. Developed under the H2020 SHAREs project and managed by the Austrian Energy Agency, it provides resources such as best practices, guidelines, tools, and communication materials to empower energy community initiatives. The site targets citizens and organizations interested in renewable energy collective actions, offering a WordPress template for national one-stop-shops. Technically, the site is built on WordPress using the Genesis Framework and related plugins, ensuring a modern and responsive user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and well-aligned with its mission, though improvements in privacy and security transparency are recommended.

K

Közenergia

kozenergia.hu

51

The website www.kozenergia.hu serves as a basic landing page for an energy sector-related business or platform based in Hungary. It primarily links to two subdomains, suggesting a network of services or partner sites. The site content is minimal, with no detailed business descriptions, contact information, or policies presented. Technically, the site uses common frontend libraries such as jQuery and Bootstrap but lacks modern SEO and accessibility optimizations. Security posture is weak due to absence of security headers, privacy policies, and no visible HTTPS verification in the provided data. Overall, the site appears legitimate but underdeveloped in terms of content, compliance, and security transparency.

Ს

საქართველოს ახალგაზრდა ენერგეტიკოსთა ასოციაცია

energy4all.ge

44

SHAREs Gateway Georgia is an informational portal dedicated to supporting citizen energy communities and collective energy projects in Georgia. The platform provides resources such as best practices, news, videos, assessment tools, and guidelines to empower citizens and accelerate the transition to clean energy systems. The website is operated in partnership with the Georgian Young Energy Professionals Association and is EU-funded, positioning it as a niche but credible resource in the Georgian energy sector. Technically, the website is built on WordPress using the Genesis Framework and related plugins, hosted by HostGator. It employs modern web technologies including jQuery and Ionicons, and is mobile-optimized with a moderate performance profile. However, there is room for improvement in accessibility and SEO optimization. The site uses HTTPS but lacks security headers and cookie consent mechanisms, indicating partial security and privacy maturity. From a security perspective, the site has no visible vulnerabilities or exposed sensitive data, but the absence of security headers and privacy policies represents compliance gaps. No incident response or vulnerability disclosure information is provided. The domain is relatively new (created in 2022) and uses privacy protection, which is justified given the organization's profile. Social media presence is limited to partner organization accounts on Facebook and LinkedIn. Overall, the website is a good informational resource with moderate technical and security posture. Strategic improvements in privacy compliance, security headers, and accessibility would enhance trust and compliance with GDPR and related regulations.

D

Deutscher Genossenschafts- und Raiffeisenverband e.V.

erneuerbare-energie-gemeinschaften.de

53

The website erneuerbare-energie-gemeinschaften.de serves as a comprehensive German-language information platform dedicated to supporting renewable energy communities (EE-Gemeinschaften) in Germany. It provides a wide range of resources including guides, project concepts, online tools, and communication materials aimed at helping local citizens and energy cooperatives actively participate in the energy transition. The platform is affiliated with the reputable Deutscher Genossenschafts- und Raiffeisenverband e.V., enhancing its credibility and market position as a national resource for citizen-driven energy projects. Technically, the site is built on WordPress using the Genesis Framework and related plugins, ensuring a modern and responsive design with good SEO and accessibility features. The hosting and DNS setup is standard, with no indications of performance bottlenecks or technical debt. The site is mobile-optimized and provides a user-friendly navigation experience. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not publish explicit security or incident response policies. There is no cookie consent mechanism, which is a GDPR compliance gap. No tracking or advertising scripts were detected, indicating a privacy-conscious approach but also a lack of advanced analytics. Overall, the website is trustworthy and professionally maintained, with strong business credibility and good content quality. The main risks relate to privacy compliance and security policy transparency. Strategic improvements in these areas would enhance user trust and regulatory adherence.

The website energetke-zajednice.hr is currently inaccessible, returning a 403 Forbidden error page. This indicates that access to the site is blocked or restricted, preventing any meaningful content or business information from being retrieved. The domain is registered in Croatia with a reputable local registrar and has a recent creation date in October 2022, suggesting a new or developing business presence. However, the lack of accessible content, contact information, and policies severely limits the ability to assess the company's market position, services, or credibility. Technically, the site appears to be hosted on SiteGround and uses Google Fonts, but no CMS or advanced technologies are detected. Security posture cannot be fully evaluated due to lack of accessible content and headers. Overall, the site is currently non-functional for public users and requires remediation to provide business and compliance information.

Ч

Черноморски изследователски енергиен център

sharerenewables.bg

32

SHARES Gateway Bulgaria is an informational portal dedicated to supporting the development of citizen energy communities in Bulgaria. It provides comprehensive resources including project ideas, financing options, legal frameworks, best practices, and communication materials to empower citizens, SMEs, and local authorities to engage in renewable energy initiatives. The portal is positioned as a niche non-profit platform facilitating active citizen participation in the energy transition. Technically, the website is built on WordPress using the Genesis Framework and related plugins, hosted by a Bulgarian provider, and demonstrates moderate performance with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks some security headers and formal incident response documentation. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy, professional, and well-aligned with its mission, though improvements in security headers and privacy mechanisms are recommended.

Ö

Österreichische Energieagentur – Austrian Energy Agency

energie-teilen.at

44

Energie teilen is an Austrian informational platform dedicated to supporting the creation and operation of energy communities, primarily focusing on renewable energy sharing within Austria. It is funded by the EU initiative SHAREs and operated in close cooperation with the Austrian Energy Agency and the Austrian Coordination Office for Energy Communities. The platform offers decision matrices, communication campaign materials, and a collection of free tools to facilitate energy community projects. Technically, the website is built on WordPress using the Genesis Framework and related plugins, providing a modern and responsive user experience with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy, professional, and well-aligned with its stated mission and business context.

T

The StoryBoard Collective

storyboard-collective.org

59

The StoryBoard Collective is a Geneva-based philanthropic organization founded in 2020, dedicated to supporting documentary impact production and episodic storytelling. It operates through partnerships with cultural organizations, residencies, media experts, and festivals to build capacity and provide funding, focusing on underrepresented communities. The website reflects a professional and consistent brand image, with clear navigation and comprehensive content about its mission and initiatives. Technically, the site is built on Webflow, uses modern analytics and tracking tools, and implements privacy and cookie consent mechanisms aligned with GDPR standards. Security posture is good with HTTPS and anonymized analytics, though there is room for improvement in security headers and incident response documentation. Overall, the site is trustworthy and well-positioned within its niche philanthropic media sector.

M

Médecins Sans Frontières (MSF)

msf.ch

47

Médecins Sans Frontières (MSF) is a globally recognized humanitarian medical organization providing emergency aid to populations lacking access to healthcare due to conflicts, epidemics, or natural disasters. The website reflects a professional and consistent brand presence, targeting a general audience interested in humanitarian aid. The technical infrastructure is modern, leveraging Drupal 10 CMS, with integrated analytics and cookie consent management, indicating a mature digital presence. Security posture is solid with HTTPS and security headers properly configured, though explicit privacy policies and incident response contacts are not found, representing areas for improvement. Overall, the website is trustworthy and well-positioned for its non-profit healthcare mission.

H

Human Rights Watch

hrw.org

78

Human Rights Watch is a globally recognized non-profit organization dedicated to defending human rights in over 100 countries. The website serves as a comprehensive platform for publishing investigative reports, news releases, and advocacy materials. It targets a broad audience including the general public, human rights advocates, policymakers, and donors. The organization operates primarily through donations and maintains a strong international presence with multilingual support. Technically, the website is built on Drupal 10, employs modern analytics and tracking tools, and demonstrates good performance and accessibility standards. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response information are not publicly detailed. Overall, the site is professional, trustworthy, and well-structured, supporting the organization's mission effectively.

H

Helvetas

helvetas.org

68

Helvetas is a well-established Swiss non-profit development organization focused on building capacity and providing aid in Africa, Asia, Latin America, and Eastern Europe. The organization offers key services including emergency response, water and sanitation, agriculture, climate action, democracy promotion, and vocational training. The website reflects a strong market position as a reputable NGO with a global footprint and a clear mission. Technically, the website employs modern frameworks such as Bootstrap and integrates Google Tag Manager and OneTrust for analytics and cookie consent, indicating a mature digital infrastructure. The site is mobile optimized and accessible, with good SEO practices. Security posture is strong with HTTPS enforced and security headers present, though explicit security policies and incident response contacts are not publicly detailed. Overall, the domain and website present high legitimacy and trustworthiness, despite the absence of detailed WHOIS data due to privacy protection. Strategic recommendations include publishing a security policy, incident response information, and a vulnerability disclosure policy to enhance transparency and security readiness.

C

Caritas Switzerland

caritas.ch

65

Caritas Switzerland is a well-established non-profit organization dedicated to humanitarian aid, development cooperation, and social services. The website reflects a strong market position as a leading Swiss charity with a clear mission and professional presentation. The technical infrastructure leverages modern web technologies such as React and Gatsby, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforcement and security headers, although explicit security policies and incident response information are not prominently published. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations including GDPR. Strategic recommendations include publishing dedicated security and incident response policies and enhancing transparency around vulnerability disclosures.

A

Amnesty International Schweiz

amnesty.ch

66

Amnesty International Swiss Section operates as a non-profit organization dedicated to human rights advocacy within Switzerland. The website serves as a multilingual platform (English, German, French, Italian) providing information about campaigns, local groups, donation opportunities, and contact channels. It is positioned as a reputable national section of the global Amnesty International network, targeting the general public and supporters interested in human rights issues. Technically, the website is built on the Plone CMS platform, utilizing jQuery and Cookiebot for cookie consent management, and Piwik PRO for analytics. The site demonstrates moderate performance and good mobile optimization, with a clean and professional design. SEO and accessibility are adequately addressed, though accessibility could be improved further. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks publicly available security policies, incident response contacts, or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, supporting legitimacy and trustworthiness. Overall, the website presents a secure, professional, and trustworthy digital presence for Amnesty International's Swiss section, with room for improvement in formal security documentation and accessibility enhancements.

H

Hospice général

hospicegeneral.ch

61

Hospice général is a well-established Geneva-based public social service organization with a history spanning five centuries. It focuses on social inclusion, migrant integration, and senior citizen support, serving diverse community segments including youth, adults in difficulty, and retirees. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audiences. Technically, the site is built on Drupal 8, incorporates modern analytics and tag management tools, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be enhanced. Overall, the domain registration and WHOIS data align well with the organization's identity, supporting high legitimacy and trust. Strategic improvements in security policy transparency and vulnerability disclosure would further strengthen the site's security maturity.

G

Groover

groover.co

75

Groover is a France-based music promotion platform that connects independent artists with music industry professionals to facilitate effective music promotion and exposure. The company operates a niche online marketplace that leverages technology to streamline artist-to-professional interactions, providing feedback and promotional opportunities. The platform targets musicians, labels, radios, playlists, and influencers, positioning itself as a results-driven service in the music media sector. Technically, Groover employs modern web technologies including Vue.js, Segment, and various analytics and marketing tools, ensuring a responsive and performant user experience optimized for mobile devices. Security-wise, the website enforces HTTPS, implements modern security headers, and avoids exposing sensitive data, although it lacks a dedicated security policy or incident response page. Overall, Groover demonstrates a mature digital presence with good privacy compliance and trustworthy business information, making it a credible and professional platform in its domain.

L

Laylo

laylo.com

73

Laylo is a well-established technology platform founded in 1999 that serves artists, live events, festivals, and creators by providing tools to build fan lists and facilitate drops of music, tickets, and merchandise. The company has positioned itself as a trusted and fast solution in the entertainment industry, with over 10,000 users. Technically, the website is built on Webflow, leveraging modern web technologies and integrations such as Google Analytics 4 and PostHog for analytics, and is hosted on reliable infrastructure with AWS DNS. Security is robust, featuring HTTPS, security headers, and compliance with industry standards such as SOC 2 and ISO 27001. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant. Overall, the website demonstrates a high level of professionalism, security maturity, and business credibility.

H

HearNow

hearnow.com

70

HearNow is a specialized media service focused on providing musicians and artists with an easy-to-use platform to create one-page promotional websites for their CD Baby album releases. The service leverages integration with CD Baby to automatically import album information, streamlining the promotional process. The business operates on a subscription model with affordable monthly and yearly plans, targeting independent musicians seeking effective online promotion tools. Technically, the website is modern, fast, and mobile-optimized, hosted behind Cloudflare with a solid security posture including HTTPS and security headers. Privacy compliance is well addressed with a clear cookie consent mechanism and accessible privacy and cookie policies. However, there is room for improvement in publishing explicit security policies and enabling DNSSEC for enhanced domain security. Overall, the website presents a professional and trustworthy front with strong business credibility and technical maturity.

S

Shazam

shazam.com

65

Shazam is a globally recognized music discovery platform that enables users to identify songs quickly and access related music content such as concerts and charts. Owned by Apple Inc., it integrates deeply with the Apple ecosystem, including Apple Music and the App Store. The website demonstrates a modern, performant, and mobile-optimized design with clear navigation and professional branding. Technically, it leverages Next.js and JavaScript frameworks, with custom beacon tracking for analytics and error reporting. Security posture is good with HTTPS enforced and error beacons implemented, though explicit security headers and vulnerability disclosure mechanisms are absent. Privacy compliance is limited as no privacy or cookie policies were detected in the provided content. WHOIS data is unavailable, likely due to privacy or registry restrictions, but the website's legitimacy is supported by strong brand presence and Apple affiliation.

New Radio S.r.l. is an Italian company specializing in streaming audio and video services, providing platforms such as Shoutcast, Icecast, and Wowza servers. Their offerings include professional streaming solutions, software for radio automation, and applications for various devices, targeting web radio and web TV broadcasters. The company maintains a niche market position with a focus on technology and media sectors. The website is built on WordPress with modern plugins and SEO optimizations, demonstrating a moderate to good level of digital maturity. Security posture is solid with HTTPS and security headers in place, though explicit security and incident response policies are not published. Cookie consent is implemented via Iubenda, indicating awareness of privacy compliance, but a dedicated privacy policy page is not found. Overall, the site is professional, trustworthy, and well-structured, serving a specialized audience effectively.

N

ne-t by Telerete Nordest S.r.l. a Socio Unico

ne-t.it

53

ne-t by Telerete Nordest S.r.l. a Socio Unico is an Italian telecommunications and cultural services company operating primarily in the Veneto region. The company provides contact center services with a focus on cultural and tourism sectors, leveraging its association with notable cultural sites such as the Cappella degli Scrovegni. The website reflects a medium-sized enterprise with a clear market position supported by its parent company, Kauri Holding S.r.l. The business model centers on service provision in telecommunications and cultural engagement, targeting both general public and business clients. Technically, the website is built on WordPress using modern plugins and themes such as Yoast SEO, Contact Form 7, and Complianz GDPR Cookie Consent. It integrates Google Analytics and Google Tag Manager for analytics and marketing, and employs Google reCAPTCHA v3 for form security. The site demonstrates good mobile optimization, SEO practices, and basic accessibility features, though some security headers could be improved. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent mechanisms compliant with GDPR. However, it lacks a published security policy, incident response contacts, and vulnerability disclosure mechanisms such as a security.txt file. No critical vulnerabilities or exposed sensitive data were detected. The overall security posture is good but could be enhanced by implementing additional security headers and formalizing incident response information. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It provides clear business and contact information, including legal company details and social media presence. The content is safe for general audiences with no adult or questionable material. The domain registration details align well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security policies, publishing incident response contacts, and improving accessibility compliance to further strengthen trust and security.

W

Domain Default page

waxmann-verlag.de

34

The website waxmann-verlag.de currently hosts only a default placeholder page generated by Plesk, indicating that no active website content or business information is published. The domain is configured with AWS DNS nameservers, suggesting hosting on Amazon infrastructure, but no SSL certificate or HTTPS enforcement is evident. The absence of privacy policies, contact information, or terms of service further indicates that the site is not yet operational or publicly serving business purposes. From a technical perspective, the site uses basic HTML, CSS, and JavaScript with Plesk platform integration but lacks advanced frameworks or CMS. Security posture is weak due to missing HTTPS and security headers, and no incident response or vulnerability disclosure mechanisms are present. Overall, the site presents a low trust profile and minimal digital maturity.

B

bildung.social

bildung.social

58

bildung.social is an independent Mastodon social network instance focused on education and digital transformation topics. It provides a federated platform for users interested in these areas to connect and share content. The platform is based on the open-source Mastodon software, version 4.4.8, and is hosted using OVH Cloud infrastructure. The website demonstrates good content quality and user experience with a consistent brand and active user engagement. Technically, the site uses modern web technologies including React and ES modules, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and some security best practices observed, though additional security headers could improve protection. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms and terms of service. WHOIS data is privacy protected, which is typical for such platforms, and does not raise immediate concerns. Overall, bildung.social is a legitimate, well-maintained social platform serving a niche educational community.

F

Fondazione Cologni

mestieridarte.it

49

Mestieri d'Arte e Design is a niche Italian magazine operated by Fondazione Cologni, focusing on the excellence of craftsmanship, high manufacturing, and creative design. The website serves as a digital platform for the magazine, offering articles, editorials, albums, and archives related to arts and design. The target audience is general, primarily Italian-speaking users interested in cultural and artistic content. Technically, the site is built on WordPress using the Divi theme and incorporates modern web technologies such as jQuery and Masonry.js for layout. It employs Google Analytics for traffic analysis and a cookie consent mechanism compliant with GDPR requirements. Security posture is good with HTTPS enabled and basic security best practices observed, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with cookie consent but no visible privacy policy or terms of service. Business credibility is supported by consistent branding and WHOIS data matching the foundation's identity. Overall, the site is professional, secure, and well-positioned within its niche media sector.

F

Fondazione Cologni dei Mestieri d’Arte ETS

unascuolaunlavoro.it

51

Una Scuola Un Lavoro is a project by Fondazione Cologni dei Mestieri d’Arte ETS, a Milan-based non-profit organization dedicated to preserving and promoting Italian artisanal craftsmanship. The website presents the project as an educational and cultural initiative offering master courses and internships to young artisans across Italy, fostering generational renewal in the artisanal sector. The organization is well-positioned in the non-profit cultural sector with recognized partners and sponsors. Technically, the website is built on WordPress using the Divi theme and several plugins for SEO, cookie compliance, and newsletter management, reflecting a modern and maintainable infrastructure. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong, with clear links to comprehensive privacy and cookie policies hosted on the parent foundation's domain. Overall, the website is professional, trustworthy, and serves its target audience effectively.

W

Wellmade

well-made.it

53

Wellmade is a digital platform dedicated to discovering and promoting the best Italian artisans. It serves as a community hub where users can find artisans by region or craft, learn about their bespoke products and services, and leave reviews. The platform positions itself as a niche leader in the Italian artisanal retail sector, targeting consumers interested in authentic craftsmanship and cultural heritage. The website is built on WordPress with a modern tech stack including SEO optimization and social media integration, reflecting a mature digital infrastructure. Security measures such as HTTPS, reCAPTCHA, and security headers are in place, indicating a good security posture. However, formal security policies and incident response contacts are not publicly available, suggesting room for improvement in transparency and compliance. Overall, the site is professional, trustworthy, and well-optimized for its audience.

T

Trenitalia

trenitalia.com

11

Trenitalia is the primary Italian national rail operator providing a wide range of train services including high-speed, intercity, and regional trains. The website serves as a comprehensive portal for ticket sales, travel information, loyalty programs, and additional travel-related services. It targets the general public and train travelers within Italy, positioning itself as a leading transportation service provider with a strong market presence supported by its parent company Ferrovie dello Stato Italiane and multiple subsidiaries. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies and third-party analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and OneTrust for cookie consent. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate likely due to the extensive use of external scripts. From a security perspective, the site employs HTTPS and a strict Content-Security-Policy header, minimizing risks from cross-site scripting and other common web vulnerabilities. However, there is room for improvement by adding additional security headers and publishing a security.txt file to enhance vulnerability disclosure transparency. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Trenitalia's website is professional, trustworthy, and secure, reflecting its enterprise-level status and commitment to user experience and regulatory compliance. Strategic recommendations include enhancing security header coverage, improving incident response visibility, and maintaining vigilance on third-party script security.

Wella International Operations Switzerland Sàrl operates a global hair care brand with a website that serves as a selector directing visitors to professional or retail product lines. The website is professionally designed with consistent branding and clear navigation, targeting both hair care professionals and retail consumers. The technical infrastructure includes Adobe DTM and AppMeasurement for analytics and tag management, alongside common libraries like jQuery and Bootstrap, indicating a mature digital presence. Security posture is moderate with no visible security headers in the provided data, and WHOIS information is unavailable, which is unusual but likely due to privacy protection for a well-known brand. Overall, the site is safe, compliant with privacy regulations, and trustworthy, though improvements in security headers and contact transparency are recommended.

C

Certilogo

certilogo.com

9

Certilogo operates as a leading connected product and authentication platform primarily serving the fashion and luxury sectors. The website presents a professional and modern digital presence, leveraging technologies such as React, Google Tag Manager, and OneTrust for cookie consent management. The platform aims to connect products with people to enhance brand authentication and consumer trust. Despite the professional front-end and privacy compliance, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. No contact information or detailed business policies are readily available, which may impact user trust and business credibility. Security posture is generally good with HTTPS enforced and cookie consent implemented, but additional security headers and published policies would strengthen the security framework. Overall, the website is functional, GDPR compliant, and well-designed, but domain registration opacity and limited business transparency suggest caution.

C

Camera Nazionale della Moda Italiana

milanomodagraduate.it

66

Camera Nazionale della Moda Italiana operates as a key institution in the Italian fashion industry, organizing events such as Milano Moda Graduate to showcase emerging fashion talent. The website serves as an official platform providing event information, galleries, and partner details, targeting fashion professionals and enthusiasts. The organization holds a strong market position within Italy's fashion media sector, supported by numerous official partners and sponsors. Technically, the website employs modern web technologies including Google Analytics, Facebook SDK, and Vimeo API, with a responsive design optimized for mobile devices. Security posture is solid with HTTPS enforcement and privacy-conscious analytics configurations, although explicit security policies and incident response contacts are not published. Privacy compliance is evidenced by a cookie consent banner and a privacy policy document in Italian, indicating GDPR awareness. Overall, the site is professional, trustworthy, and well-maintained, with room for improvement in security transparency and terms of service availability.

C

Camera Nazionale della Moda Italiana

milanomodadesign.it

10

Camera Nazionale della Moda Italiana operates as a key Italian fashion industry association, organizing and promoting Milano Moda Design events that merge fashion and design excellence. The website serves as an information hub for event calendars, galleries, and industry news, targeting fashion professionals and enthusiasts. The technical infrastructure leverages modern analytics and tracking tools, with a responsive design and basic accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting the organization's market position as a leading fashion authority in Italy.

Camera Nazionale della Moda Italiana (CNMI) operates as a leading Italian fashion authority organizing and promoting Milan Fashion Week events, including the Milano Moda Uomo. The website serves as an official platform providing live streaming, event calendars, designer showcases, and industry news targeted at fashion professionals and enthusiasts. CNMI holds a strong market position within the Italian and international fashion industry, supported by partnerships and official endorsements. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, and Bootstrap, ensuring a responsive and user-friendly experience. The site is well-optimized for SEO and mobile devices, with clear navigation and professional design. Security posture is solid with HTTPS enforcement and privacy compliance, including GDPR-aligned privacy and cookie policies with explicit consent mechanisms. However, there is room for improvement in security headers and explicit incident response policies. Overall, the website demonstrates high trustworthiness and professionalism, supporting CNMI's authoritative role in the fashion sector.

C

Camera Nazionale della Moda Italiana

milanomodadonna.it

66

Camera Nazionale della Moda Italiana (CNMI) operates as a leading Italian fashion organization, primarily organizing and promoting Milan Fashion Week events such as Milano Moda Donna. The website serves as an official platform providing live streaming of fashion shows, event calendars, designer showcases, and industry news targeted at fashion professionals, media, and enthusiasts. CNMI holds a strong market position as a national fashion authority in Italy, supporting designers and the fashion ecosystem through various initiatives and partnerships. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, and Bootstrap, ensuring a responsive and user-friendly experience. Privacy and cookie policies are comprehensive and GDPR compliant, with explicit consent mechanisms implemented. Security posture is good with HTTPS enforced and anonymized IP tracking, though there is room for improvement in security headers and incident response disclosures. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

C

CNMI Fashion Trust

cameramodafashiontrust.com

57

CNMI Fashion Trust is a fashion-focused organization linked to the Camera Nazionale della Moda Italiana, dedicated to supporting fashion projects and designers primarily in Italy. The website serves as an informational and promotional platform for their grant programs and initiatives, targeting fashion industry professionals and stakeholders. The business model appears to be non-profit or grant-based, emphasizing cultural and industry development within the Italian fashion sector. The site is well-branded, consistent, and professionally presented with a clear focus on its niche audience. Technically, the website is built on WordPress with a modern tech stack including Gravity Forms, WPML for multilingual support, and integration with Google Analytics and Tag Manager for tracking. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. The domain is registered with Wix.com Ltd. and shows consistency with the business timeline and location. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent via Iubenda, indicating GDPR compliance. However, it lacks visible security headers and does not publish a security policy or incident response contacts, which could be areas for enhancement. No vulnerabilities or suspicious activities were detected. Overall, the website presents a trustworthy and professional image with solid privacy compliance and a clear business focus. Strategic improvements in security policies and technical hardening could further strengthen its posture and trustworthiness.

C

CONSORZIO DI TUTELA DELLA DENOMINAZIONE DI ORIGINE CONTROLLATA PROSECCO

prosecco.show

58

The website prosecco.show serves as the official online presence of the Consorzio di Tutela della Denominazione di Origine Controllata Prosecco, a consortium dedicated to promoting Prosecco DOC wines and their producers. It offers a curated directory of producers, links to their online shops, and facilitates consumer access to authentic Prosecco DOC products. The site targets wine consumers and enthusiasts, primarily within Italy but also internationally, positioning itself as an authoritative source for Prosecco DOC information and commerce. Technically, the website is built on WordPress and employs modern JavaScript libraries such as Swiper for interactive sliders, alongside Google Analytics and Google Tag Manager for visitor tracking. It integrates Iubenda services for privacy and cookie compliance, reflecting a mature approach to GDPR requirements. The site is mobile-optimized with a responsive design and provides a good user experience with clear navigation and professional branding. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms. However, it lacks visible security policy documentation and incident response contacts, and no advanced security headers were detected. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data aligns well with the business claims, showing a legitimate and consistent registration without privacy protection, enhancing trustworthiness. Overall, prosecco.show is a well-maintained, professional consortium website with good privacy compliance and moderate security posture. Strategic improvements in security policy transparency and header implementation could further strengthen its security stance and user trust.

A

Alliance Software

allibo.com

51

Alliance Software, part of the Beetween Group, offers specialized HR software solutions under the ALLIBO® brand, serving the Italian market for over 15 years. Their product suite covers recruitment, personnel management, training, performance evaluation, and skills mapping, targeting HR departments and companies seeking digital transformation in human capital management. The company maintains a strong market position with hundreds of clients and a consistent brand presence. Technically, the website is built on WordPress with modern JavaScript libraries and integrates marketing and analytics tools such as HubSpot and Google Tag Manager. The site is well-optimized for SEO and mobile devices, providing a professional user experience. Security posture is good with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, the website reflects a mature digital presence with minor areas for security enhancement.

G

Google LLC

youtube.it

79

YouTube, owned by Google LLC, is the world's leading online video sharing and streaming platform. It offers a vast array of video content including entertainment, education, music, and user-generated videos, serving a global audience. The platform operates on an advertising-based business model supplemented by premium subscription services. Its market position is dominant in the online video industry, supported by a strong brand and extensive user base. Technically, YouTube employs a modern web technology stack including Polymer, Web Components, and Google APIs, hosted on Google Cloud infrastructure. The website is optimized for both desktop and mobile platforms, delivering fast performance and good accessibility. SEO and metadata practices are well implemented, enhancing discoverability. From a security perspective, YouTube enforces HTTPS, employs robust security headers, and integrates advanced bot protection mechanisms. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature privacy posture. No critical vulnerabilities or exposed sensitive data were detected in the analysis. Overall, YouTube demonstrates a high level of digital maturity, security, and compliance. The domain is legitimate and longstanding, with WHOIS privacy protection typical for large enterprises. The platform's extensive analytics and advertising integrations are balanced with strong privacy controls. Strategic recommendations include maintaining regular security audits, enhancing incident response transparency, and continuing to evolve privacy practices to meet emerging regulations.

The website ctaonline.it is currently a parked domain landing page with minimal content primarily aimed at advertising the domain for sale. There is no visible business presence, contact information, or privacy and security policies. The technical infrastructure relies on basic HTML, CSS, JavaScript, and an iframe loading external content over HTTP, which poses security concerns. The domain is newly registered in January 2024 and lacks DNSSEC and other trust indicators. Overall, the site lacks professionalism, security maturity, and compliance, making it unsuitable for business operations in its current state.

C

CAF ACLI SRL - CENTRO ASSISTENZA FISCALE ACLI

mycaf.it

57

CAF ACLI SRL operates as a fiscal assistance center in Italy, providing a broad range of tax-related services including tax declarations, document management, appointment scheduling, and online assistance through its myCAF platform. The website targets individuals seeking convenient and comprehensive fiscal support, leveraging digital tools to enhance user experience. The company maintains a solid market position with a medium-sized operation and a consistent brand presence. Technically, the website employs a mature technology stack based on ASP.NET WebForms and popular JavaScript libraries, integrating Google Analytics and Cookiebot for analytics and compliance. The site is mobile-optimized with good navigation and content relevance. Security posture is adequate with HTTPS enforced and privacy-conscious analytics configurations, though it lacks explicit security policies and advanced security headers. Overall, the site is trustworthy, professional, and compliant with GDPR, with room for improvement in security transparency and incident response readiness.

M

Mooney

mooneygo.it

62

MooneyGo is a mobility service platform and app developed by Mooney in partnership with myCicero, targeting users in Italy for parking payments, public transport ticketing, telepedaggio, and other mobility-related services. The website is professionally designed, mobile-optimized, and provides clear information about its services, with a strong emphasis on user privacy and GDPR compliance. The technical infrastructure is based on WordPress with modern JavaScript libraries and integrates reputable analytics and advertising tools. Security posture is strong with HTTPS, security headers, and a comprehensive cookie consent mechanism. However, explicit contact information and security policies are not prominently available, which could be improved for enhanced trust and compliance.

M

myCicero srl

mycicero.eu

50

myCicero srl operates as the first Global Distribution System (GDS) for mobility services in Italy, providing a digital platform that integrates over 600 mobility operators. The company offers a suite of services including resale of mobility services, white-label app development, API integration, and back-office software solutions. Positioned as a pioneer in the Mobility as a Service (MaaS) sector, myCicero targets companies, public entities, and large organizations seeking to digitize and expand their mobility offerings. The website demonstrates a mature digital presence with professional design, clear navigation, and compliance with GDPR and cookie regulations via Iubenda. Technically, the site is built on WordPress with modern frameworks and includes security features such as HTTPS and Google reCAPTCHA. However, security headers and incident response policies are not explicitly published. Overall, the site reflects a trustworthy and professional business with strong market positioning in the Italian transportation technology sector.

M

Musikvertrieb AG

muve.ch

41

Musikvertrieb AG is a Swiss indie music distributor and record label founded in 1935, specializing in marketing national and international artists and labels such as PIAS and muve recordings. The company targets music industry professionals and consumers interested in indie music distribution. The website is built on WordPress using the Brooklyn theme and incorporates modern technologies including Google Analytics, Facebook Pixel, and reCAPTCHA, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks visible security headers and published security policies, indicating room for improvement. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy with a moderate risk profile.