Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,190001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
39,351–39,400 of 99,067
- EveryWare AG
ewcs.ch
Technology · Switzerland
75Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
EveryWare AG operates an Open Cloud Authentication Service, providing identity and access management solutions primarily targeting enterprise clients. The website analyzed is a login portal leveraging modern authentication protocols such as OpenID Connect and technologies including Keycloak and PatternFly. The site is designed for secure user authentication but lacks publicly accessible information such as privacy policies, terms of service, or contact details on this page. Technically, the site uses a modern tech stack with React-based UI components and standard security practices like disabling autocomplete on password fields. However, no explicit security headers were detected, and privacy compliance indicators are absent, which could be improved to enhance trust and security posture. Overall, the site is functional and professional but minimalistic in public content.
Cloudinarycloudinary.com
Technology
75Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Cloudinary is a leading cloud-based media management platform founded in 2011, specializing in image and video upload, storage, optimization, and delivery via APIs and CDN. The company targets developers, IT teams, marketers, and enterprises across various industries, providing scalable and AI-powered media solutions. The website reflects a mature digital presence with comprehensive product information, strong branding, and clear navigation. Technically, the site leverages modern web technologies including WordPress CMS, Bootstrap framework, and integrates analytics and marketing tools such as Google Analytics and LinkedIn Insight Tag. Security posture is solid with HTTPS enforced and no exposed sensitive data, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR indicators. Overall, Cloudinary demonstrates a high level of professionalism, technical maturity, and business credibility.
- autoSense
autosense.ch
Energy · Switzerland
73Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
autoSense is a Swiss-based company specializing in intelligent mobility solutions, focusing on electric vehicle charging and fleet management. Their offerings include comprehensive charging solutions for workplaces, public charging, home charging reimbursement, and telematics services such as digital logbooks. The company targets fleet managers and drivers transitioning to electric vehicles, providing integrated software and hardware solutions to simplify and optimize electric mobility. The website is professionally designed, mobile-optimized, and uses modern web technologies including Webflow CMS, Google Tag Manager, and Facebook Pixel for analytics and marketing. From a technical perspective, the website demonstrates a mature digital infrastructure with fast performance, good SEO, and accessibility features. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit privacy policy and terms of service pages, which are critical for GDPR compliance and user trust. Cookie consent is implemented, indicating some privacy awareness. Overall, the security posture is solid but could be improved by publishing comprehensive privacy and security policies and providing clear contact information including incident response contacts. The domain registration data aligns well with the business claims, supporting legitimacy. The website content is safe and appropriate for a general audience, with no adult or questionable content detected.
Rexx Systemsrexx-recruitment.com
Technology · Germany
66Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Rexx Systems is a well-established German technology company specializing in HR software solutions tailored for medium and large enterprises. With over 25 years of experience and a customer base of approximately 3,000 clients, the company offers modular, cloud-based and on-premise HR software products including recruiting, talent management, digital personnel files, and AI-enhanced tools. Their market position is strong within the HR technology sector, supported by consistent branding and professional digital presence. Technically, the website is built on WordPress with Elementor and leverages modern web technologies such as jQuery and Google Tag Manager. The site is optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. Security measures include HTTPS enforcement and standard security headers, although there is room for improvement in public vulnerability disclosure and incident response transparency. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is good, with comprehensive privacy and cookie policies and consent mechanisms in place. However, the absence of WHOIS registration data introduces some uncertainty regarding domain registration transparency, though this is likely due to privacy protection. Overall, Rexx Systems presents a trustworthy and professional business with a secure and well-implemented web presence. Strategic recommendations include enhancing security transparency through vulnerability disclosure and incident response information, and maintaining rigorous audits of third-party scripts and data retention policies.
Volkswagenvolkswagen.com
Transportation · Finland
69Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Volkswagen Finland operates a comprehensive and professionally designed website offering detailed information about Volkswagen's vehicle lineup, services, and customer support. The site targets Finnish consumers and businesses interested in new and used Volkswagen vehicles, including electric and hybrid models. The business model includes vehicle sales, leasing, servicing, and digital connectivity services, positioning Volkswagen as a leading automotive brand in Finland. The website demonstrates a mature digital infrastructure leveraging modern web technologies such as React and Adobe Experience Manager, ensuring fast performance and excellent mobile optimization. Security measures include HTTPS enforcement, content security policies, and client-side guards to prevent unauthorized content loading. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms. Overall, the site reflects a high level of professionalism, trustworthiness, and compliance with industry standards.
Magnitespringserve.com
Media
71Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Magnite is a leading independent sell-side advertising company specializing in helping media owners maximize advertising revenue across multiple channels including Connected TV (CTV), streaming, online video, display, and audio. The company positions itself as a global technology platform offering advanced brand protection, targeting, and programmatic advertising solutions. Their website reflects a mature enterprise with comprehensive content, strong branding, and a clear focus on media owners and advertisers as their primary audience. Technically, the site is built on WordPress with modern marketing and analytics tools such as Google Tag Manager, Marketo, LinkedIn Insight, and Hotjar, indicating a digitally mature infrastructure. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though security headers could be improved. Privacy compliance is well addressed with detailed privacy and cookie policies and GDPR adherence. Overall, the domain WHOIS data is unavailable, likely due to privacy protection, which is common in this industry but slightly reduces transparency. The website is professional, trustworthy, and well-optimized for SEO and mobile use.
Other
60Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website at adnz.co is currently inaccessible beyond a default 404 error page, indicating either a misconfiguration or inactive site. No business information, metadata, or content is available to assess the company's operations, market position, or services. The lack of accessible content severely limits any meaningful analysis of the business or its digital maturity. Technically, the site lacks HTTPS and security headers, which are critical for secure web presence. The WHOIS data is privacy protected, further limiting trust and legitimacy assessment. Overall, the security posture is weak due to missing essential security controls and absence of privacy or cookie policies. The site presents a high risk due to lack of transparency and minimal content.
Healthcare · Switzerland
54Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The Fondation internationale pour la recherche en paraplégie (IRP) is a Swiss-based non-profit organization dedicated to advancing research in paraplegia and tetraplegia. The foundation supports scientific projects, offers research grants and fellowships, and organizes events to raise awareness and funds. Their website is professionally designed, multilingual, and targets researchers, donors, and patients interested in spinal cord injury research. The foundation holds a reputable position in the healthcare non-profit sector with clear contact and event information.
Non-profit · Switzerland
51Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
APRIL is a small non-profit association dedicated to preserving the ecological integrity of the shores of lakes in the Vaud canton of Switzerland. The organization focuses on balancing environmental preservation with the interests of various lake users including residents and professionals. The website serves as an informational and advocacy platform with clear contact details and social media presence. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile responsiveness and SEO optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal policies such as privacy and cookie policies. No vulnerability disclosure or incident response information is provided, indicating room for improvement in security transparency. Overall, the site is trustworthy and professional but could enhance compliance and security practices.
- Genève Tourisme
geneve.com
Hospitality · Switzerland
58Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Genève Tourisme operates the official online guide for Geneva, providing comprehensive tourism information including attractions, events, dining, accommodation, and city tours. The website is well-structured, professionally designed, and targets tourists and visitors seeking to explore Geneva's cultural and natural offerings. Technically, the site uses TYPO3 CMS, integrates Google Tag Manager, and employs modern JavaScript libraries, indicating a mature digital infrastructure. Security posture is moderate with HTTPS usage and cookie consent, but lacks visible security headers and explicit privacy policies. WHOIS data is missing or unavailable, which raises concerns about domain registration transparency. Overall, the site is trustworthy and professional but would benefit from enhanced security and compliance disclosures.
Prime Partners S.A.prime-partners.com
Finance · Switzerland
50Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Prime Partners S.A. is an independent wealth management company founded in 1998 and based in Geneva, Switzerland. The firm focuses on private investors and offers discretionary management, active investment advice, and family office services. It positions itself as a partner-oriented firm with a limited client base to ensure personalized service. The website is professionally designed, multilingual, and optimized for SEO and mobile devices. It uses WordPress CMS with modern technologies including Yoast SEO and Google Analytics for tracking. Security posture is good with HTTPS and cookie consent mechanisms, but lacks published security policies and incident response information. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the business appears credible and well-established in the finance sector, but domain registration details should be verified for full trust assurance.
Scan Compétencesscan-competences.ch
Other · Switzerland
60Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Scan Compétences is a small Swiss-based service provider specializing in competency evaluation and development services. The website is professionally designed using WordPress with modern plugins such as Yoast SEO and Divi Builder, indicating a moderate level of digital maturity. The company targets professionals and organizations seeking expert competency assessments. The site includes structured data and social media links to LinkedIn and YouTube, enhancing its online presence. Technically, the site uses HTTPS with Google Analytics tracking and an opt-out mechanism, but lacks visible security headers and published privacy or cookie policies. No incident response or vulnerability disclosure information is available, which limits transparency in security practices. Overall, the website is functional and professional but could improve in privacy compliance and security posture.
Fondation Nicolas Bogueretfondation-nicolasbogueret.ch
Real Estate · Switzerland
53Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Fondation Nicolas Bogueret is a Swiss non-profit foundation dedicated to creating and developing housing solutions for individuals and families with modest incomes, young people in training, and seniors. The website presents a professional and consistent brand image with content primarily in French, targeting a Swiss audience. The foundation operates in the real estate sector with a focus on affordable housing development. Technically, the website is built on WordPress using Divi Builder and Yoast SEO, indicating a moderate level of digital maturity. The site is well-optimized for SEO and mobile devices, with good performance and accessibility at a basic level. Security posture is adequate with HTTPS enabled and some security plugins in use, but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy and legitimate but would benefit from enhanced privacy and security practices.
Fondation Clair-Boisclairbois.ch
Non-profit · Switzerland
62Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Fondation Clair-Bois is a Swiss non-profit organization dedicated to supporting polyhandicapped individuals. The website, primarily in French, serves as an informational and possibly e-commerce platform using WordPress with the Divi theme and WooCommerce plugin. The foundation appears to be established since 2017, consistent with the domain registration date. The site targets a general audience interested in the foundation's mission and services. Technically, the site employs modern web technologies including Google Tag Manager for analytics and Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place; however, the absence of security headers and explicit privacy and terms policies suggests room for improvement. Overall, the website is professionally designed with good user experience and moderate trustworthiness, but lacks some compliance and security best practices.
Servette Rugby Club SAservetterc.ch
Other · Switzerland
66Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Servette Rugby Club SA is a Swiss-based rugby sports club focused on providing rugby team activities, events, and community engagement primarily in Geneva. The club operates a professional website offering ticket sales, merchandise, and information about matches and training academies. Their market position is that of a regional sports club with a dedicated fan base and active community involvement. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including YouTube embeds, Google Tag Manager, and Facebook Pixel, with a cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and headers. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
Servette FCservettefc.ch
Other · Switzerland
64Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Servette FC is a Swiss football club with an official website serving as a hub for club news, updates, and fan engagement. The website is built on WordPress and leverages modern SEO and cookie consent tools such as Yoast SEO and Cookiebot. It integrates multiple third-party analytics and marketing pixels including Google Analytics, Facebook Pixel, and TikTok Pixel, indicating a mature digital marketing approach. The site is well-branded and professionally designed, targeting football fans and stakeholders in Switzerland. Technically, the site is moderately performant with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and explicit privacy and terms of service pages are notable gaps. No contact information or incident response channels are directly visible, which could impact user trust and compliance. Overall, the domain registration aligns well with the business claims, supporting legitimacy. Strategic improvements include publishing comprehensive privacy and terms policies, enhancing security headers, and providing clear contact channels for security and privacy inquiries.
Government · Switzerland
70Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The Office cantonal des assurances sociales (OCAS) of Geneva is a government entity responsible for managing and coordinating key social insurance schemes including old-age and survivors insurance, disability insurance, family allowances, and loss of earnings allowances. The website serves as an official portal providing comprehensive information, e-government services, and assistance to various stakeholders such as employers, employees, independents, students, and medical professionals. The site is well-positioned as the authoritative source for social insurance in the Geneva canton. Technically, the website is built on Drupal 11, leveraging modern web technologies including Matomo and Google Tag Manager for analytics, with a focus on privacy and accessibility. The site is mobile-optimized, well-structured, and uses recognized accessibility tools, reflecting a mature digital infrastructure suitable for a government agency. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and security posture. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource for its target audience. Strategic improvements in security policy transparency and security headers would further strengthen its security maturity.
Domaine des Trois Étoilestrois-etoiles.ch
Retail · Switzerland
64Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Domaine des Trois Étoiles is a small Swiss vineyard and wine producer located in Peissy, Switzerland, specializing in organic wine production certified by Bio Suisse. The company operates an e-commerce platform hosted on Shopify, offering a selection of wines including Chardonnay, Merlot, Rosé de Gamay, and Amprô. The website is professionally designed with consistent branding and clear navigation, targeting mature wine consumers primarily in the Swiss region. The business model focuses on direct-to-consumer online sales complemented by local events such as the Saint-Martin de Peissy celebration. Technically, the site leverages Shopify's platform and CDN infrastructure, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and use of hCaptcha for form protection, though explicit security headers and vulnerability disclosure mechanisms are absent. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.
Seiji Ozawa International Academy Switzerlandozawa-academy.ch
Education · Switzerland
53Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Seiji Ozawa International Academy Switzerland is a prestigious classical music academy dedicated to training young high-level string instrumentalists worldwide. Founded by the renowned conductor Seiji Ozawa, the academy offers educational programs, concerts, auditions, and maintains a social and didactic mission. The website is professionally designed using WordPress with the Divi theme and includes multilingual support in French and English. It integrates social media channels and employs SEO best practices with Yoast SEO and structured data. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks visible privacy policies and security incident response information. Overall, the site reflects a credible and trustworthy educational institution with room for improvement in privacy and security transparency.
Mirabaud Groupmirabaud.com
Finance · Switzerland
56Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Mirabaud Group is a well-established Swiss financial institution specializing in wealth management and asset management services. With a heritage spanning over 200 years, the company serves high net worth individuals, families, entrepreneurs, and institutional clients globally. Their business model emphasizes personalized client relationships, sustainable investment strategies, and a robust international platform. The website reflects a professional and consistent brand image, showcasing their key services and corporate responsibility initiatives. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Google Tag Manager and OneTrust for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. However, some technical improvements could be made in security headers and incident response disclosures. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security policies and incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or data unavailability, which is unusual for a financial institution. Overall, the website presents a trustworthy and professional front for Mirabaud Group, but verification of domain registration and enhancement of security disclosures are recommended to strengthen trust and compliance.
Government · Switzerland
70Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The Chambre de commerce, d’industrie et des services de Genève (CCIG) is a well-established private association founded in 1865, representing approximately 2600 member companies. It serves as a key economic actor in Geneva, promoting a strong economy and supporting its members through business networking, events, export services, legal advice, and publications. The website reflects a professional and consistent brand image, targeting local businesses and economic stakeholders. Technically, the site uses a modern tech stack including jQuery, Bootstrap, Kendo UI, and integrates analytics tools such as Google Analytics and LinkedIn Insight Tag. The site is mobile-optimized and well-structured, though performance is moderate. Security posture is good with HTTPS enforced, but lacks visible security headers and a public security policy. Privacy compliance is limited due to absence of explicit privacy and cookie policies or consent mechanisms. Overall, the domain registration data aligns well with the organization's claims, indicating a legitimate and trustworthy entity.
Rhône Avocat∙e∙srhoneavocats.ch
Other · Switzerland
54Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Rhône Avocat∙e∙s is a Swiss legal services firm offering innovative and solution-oriented legal practice. The website presents a professional image with clear branding and content focused on legal expertise and client service. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and cookie compliance, indicating a moderate to good level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy and well-positioned for its target audience, but lacks explicit privacy and terms of service documentation.
- Théâtre de Beausobre
beausobre.ch
Hospitality · Switzerland
54Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Théâtre de Beausobre is a well-established Swiss cultural venue located in Morges, attracting over 42,000 visitors per season to attend a diverse program of approximately 60 performances including theatre, dance, music, and circus. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization, supporting ticket sales and subscriptions through a partnered external platform. Technically, the site leverages WordPress with modern plugins and frameworks, ensuring good performance and SEO optimization. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, compliant, and serves its audience effectively.
- Infront Moto Racing
mxgp.com
Media
62Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
MXGP.com is the official website for the FIM Motocross World Championship and related motocross events managed by Infront Moto Racing. The site serves as a comprehensive media and information hub for motocross fans, teams, riders, and partners worldwide. It offers news, event calendars, results, photos, and multimedia content, supported by a professional digital infrastructure. The website uses Drupal 7 CMS with integrations for advertising, analytics, and social media, ensuring a modern and engaging user experience. Security posture is strong with HTTPS enforcement and GDPR-compliant privacy and cookie policies, though some security headers could be improved. The absence of WHOIS data is noted but does not detract significantly from the site's legitimacy given its professional presentation and official affiliations. Overall, MXGP.com is a credible, well-maintained sports media platform with good privacy and security practices.
Société Nautique de Genèvenautique.ch
Non-profit · Switzerland
72Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Société Nautique de Genève is a prestigious and historic non-profit nautical sports club based in Switzerland, founded in 1872. It is the largest club in Switzerland with over 4500 members and a significant presence in European nautical sports. The club promotes various water sports, supports athletes, organizes regattas and events, and offers training and membership services. The website reflects a mature digital presence with a modern WordPress-based infrastructure, including WooCommerce for e-commerce and various plugins for enhanced user experience. Privacy and cookie compliance are well implemented, with a clear privacy policy and consent mechanism. Security posture is strong with HTTPS, security headers, and error monitoring via Sentry, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for its audience.
Education · Switzerland
63Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
The International Institute in Geneva (IIG) is a private higher education institution based in Switzerland offering accredited undergraduate, graduate, and doctorate programs primarily in business administration, international relations, computer science, and digital marketing. The institution maintains strong international partnerships, notably with the University of Plymouth in the UK, enabling dual degree offerings. The website is professionally designed with clear navigation and comprehensive program information targeting prospective students and academic professionals. Technically, the site employs modern JavaScript libraries and tracking tools such as HubSpot and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, though security headers and incident response information could be enhanced. Privacy and cookie policies are present and GDPR compliant, reflecting a mature privacy stance. Overall, the website reflects a credible and established educational entity with a strong market position in international higher education.
Migrosmigros.ch
Retail · Switzerland
73Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Migros is a leading Swiss retail company offering an extensive online grocery shopping platform with over 12,500 products. The website demonstrates a mature digital presence using modern Angular technology and integrates cookie consent mechanisms via OneTrust, reflecting compliance with privacy regulations. The site is well-optimized for mobile users and provides a professional user experience with clear branding and consistent design. However, explicit privacy policies, terms of service, and contact information are not present in the analyzed HTML snapshot, which could be located elsewhere on the site. From a technical perspective, the infrastructure leverages modern frameworks and external services for fonts, images, and cookie management, indicating a robust and scalable platform. Performance is moderate with good mobile optimization, though accessibility features could be enhanced. Security posture is adequate with HTTPS implied and cookie consent implemented, but lacks explicit security headers and published security policies. Overall, the website is trustworthy and safe for general audiences, with no adult or questionable content detected. The WHOIS data aligns well with the business identity, confirming legitimacy. Strategic improvements include adding explicit privacy and security policies, enhancing accessibility, and publishing vulnerability disclosure information to strengthen compliance and security transparency.
Butinibutini.ch
Healthcare · Switzerland
61Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Butini is a Swiss-based senior care organization providing residential and day care services for elderly individuals with loss of autonomy or cognitive disorders. The website positions Butini as a community-centric care provider with personalized care plans and a vibrant social environment. Technically, the site is built on WordPress with modern SEO and privacy plugins, ensuring good digital maturity. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, reflecting a mature healthcare service provider.
Smeetz SAsmeetz.com
Hospitality · Switzerland
70Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Smeetz SA operates a sophisticated unified commerce platform tailored for visitor attractions such as amusement parks, zoos, museums, and live venues. Their AI-powered solutions focus on optimizing ticketing, retail, and F&B sales through centralized inventory management, dynamic pricing, marketing intelligence, and performance insights. The company positions itself as a modern leader in the hospitality technology sector, leveraging AI to enhance visitor experience and revenue growth. The website reflects a mature digital presence with professional design, multilingual support, and comprehensive content targeting B2B customers in the hospitality industry. Technically, the website is built on Webflow CMS and integrates multiple modern marketing and analytics tools including Google Tag Manager, Facebook Pixel, Hotjar, LinkedIn Insight Tag, and HubSpot forms. The site is well-optimized for performance, mobile responsiveness, and SEO, demonstrating a high level of digital maturity. Security best practices are observed with HTTPS enforcement and security headers, though explicit cookie consent mechanisms and incident response information are lacking. From a security perspective, the site shows a good posture with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain www.smeetz.com introduces some uncertainty regarding domain registration legitimacy. Despite this, the professional branding, customer testimonials, and active social media presence support the company's credibility. Privacy compliance is partially addressed with a comprehensive privacy policy, but cookie consent and GDPR explicit indicators could be improved. Overall, Smeetz SA presents a trustworthy and professional online presence with strong business and technical foundations. Strategic improvements in privacy compliance and transparency around security policies would further enhance trust and regulatory adherence.
Landidyll Weinhotel Klostermühleklostermuehle-saar.de
Hospitality · Germany
58Medium
NIS2 2 · GDPR 48
NIS2 2 · GDPR 48
Landidyll Weinhotel Klostermühle is a family-run boutique hotel located in Ockfen/Saar, Germany, specializing in wine tourism and regional culinary experiences. The business offers hotel accommodations, a restaurant with regional specialties, wine tastings from its own vineyard, and various leisure activities such as hiking and cycling. The website reflects a strong regional identity and targets tourists interested in nature and wine culture in the Saar and Mosel regions. The company holds multiple certifications that emphasize quality and accessibility, enhancing its market position as a trusted regional hospitality provider. Technically, the website is built on a modern CMS platform (likely Shopware), utilizing JavaScript frameworks, SVG icons, and video content to deliver a rich user experience. It integrates advanced analytics tools including Matomo and Google Analytics 4, alongside a consent management platform to comply with privacy regulations. The site is mobile-optimized, accessible, and SEO-friendly, with clear navigation and multilingual support. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business claims, showing consistent domain registration and no privacy protection, indicating transparency and legitimacy. Overall, the website demonstrates a high level of professionalism, content quality, and compliance with privacy standards, making it a trustworthy digital presence for the hospitality business. Strategic improvements in security headers and incident response disclosures could further enhance its security posture.
- PAPA RHEIN Hotel & Spa
paparheinhotel.de
Hospitality · Germany
58Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
PAPA RHEIN Hotel & Spa is a modern hospitality business located in Bingen am Rhein, Germany, offering upscale accommodation, spa services, dining, and event hosting. The hotel emphasizes a unique urban style combined with regional cultural elements, targeting leisure travelers, families, and wellness guests. The website reflects a strong market position with multiple awards and a professional digital presence. Technically, the site uses modern web technologies including Angular components, jQuery UI, and Swiper.js, with integrated analytics and consent-based tracking. Security posture is solid with HTTPS and some security headers, though improvements like CSP and security.txt are recommended. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.
- HerzogsPark GmbH & Co. KG
herzogspark.de
Hospitality · Germany
55Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
HerzogsPark GmbH & Co. KG operates a 4-star superior hotel located in Herzogenaurach near Nürnberg, Germany. The hotel specializes in business and seminar accommodations, offering modern event spaces, themed rooms inspired by sports heritage, wellness facilities, and dining options. The website reflects a well-established hospitality business targeting both corporate clients and leisure travelers, including sports teams and families. The company maintains a strong market position with trust certifications and a best price guarantee, enhancing customer confidence. Technically, the website is built on a modern stack likely powered by Shopware CMS, incorporating JavaScript frameworks such as Swiper.js for UI components and Google Analytics for visitor tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices. Consent management is implemented via a recognized platform, ensuring GDPR compliance. From a security perspective, the site enforces HTTPS and integrates cookie consent mechanisms. While some security headers are not explicitly visible, the overall posture is strong with no evident vulnerabilities or exposed sensitive data. The domain registration data aligns with the business identity, supporting legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant, providing a positive user experience and strong business credibility. Strategic recommendations include enhancing security headers, continuous monitoring of third-party scripts, and maintaining up-to-date privacy practices to adapt to evolving regulations.
SAVOYsavoy.de
Hospitality · Germany
58Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
SAVOY is a luxury hotel located in the heart of Cologne, Germany, offering upscale accommodation, spa and wellness services, dining, and event facilities. The website reflects a strong market position in the hospitality sector, targeting discerning travelers seeking premium experiences. The digital infrastructure employs modern web technologies including Matomo analytics and a consent management platform, indicating a mature approach to user privacy and data collection. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.
Nils Henkelnils-henkel.com
Hospitality · Germany
58Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Nils Henkel is a renowned culinary expert specializing in modern vegetable cuisine with a strong focus on sustainability and seasonal ingredients. The business operates primarily in the hospitality sector in Germany, offering cookbooks, consulting services, cooking courses, and restaurant kitchen concept development. The website reflects a professional and consistent brand image with rich content and clear contact information. Technically, the site uses modern JavaScript frameworks, a custom CMS, and integrates consent management and Google Analytics, indicating a mature digital infrastructure. Security posture is generally good with HTTPS and consent mechanisms, but lacks explicit security headers and incident response information. The absence of WHOIS data raises concerns about domain registration legitimacy, though the active and professional online presence mitigates some risk. Overall, the site scores well on content quality, privacy compliance, and business credibility, with recommendations to improve security headers and verify domain registration.
Hotel Weingut Weishotel-weis.de
Hospitality · Germany
58Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Hotel Weingut Weis is a family-owned 4-star hotel located in the Ruwertal region near Trier, Germany, offering accommodation, wellness spa services, culinary experiences, and wine tourism through its own winery. The website is professionally designed, well-structured, and targets tourists seeking relaxation, cultural activities, and wine enjoyment. Technically, the site uses modern web technologies including Shopware CMS, Google Analytics 4, and consent management platforms, ensuring GDPR compliance and a good user experience across devices. Security posture is solid with HTTPS and consent mechanisms, though some security headers and policies could be improved. Overall, the domain and website content align with a legitimate hospitality business with strong trust indicators and no suspicious elements.
- Scherer Gruppe
scherer-gruppe.de
Transportation · Germany
56Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Scherer Gruppe is a large, multi-brand automotive dealership group operating in Germany with 37 locations offering new and used vehicles, service, rental, and financing. The website reflects a mature digital presence with modern technologies including analytics and consent management, supporting a professional user experience. Security posture is solid with HTTPS and privacy consent mechanisms, though some security headers and incident response details are missing. Overall, the site is trustworthy and well-branded, targeting both retail and commercial automotive customers.
PerNaturam GmbHpernaturam.de
Retail · Germany
60Medium
NIS2 2 · GDPR 60
NIS2 2 · GDPR 60
PerNaturam GmbH operates a German-based e-commerce platform specializing in natural animal nutrition and supplements for dogs, cats, horses, and poultry. The company emphasizes natural ingredients, quality control, and veterinary recommendations, positioning itself as a trusted provider with over 30 years of experience. The website supports multiple languages and offers rich educational content including blogs, podcasts, and webinars, enhancing customer engagement and expertise sharing. Technically, the site employs modern analytics tools such as Matomo and Google Analytics with consent management, ensuring compliance with privacy standards. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though some security headers could be improved. Contact information is clearly presented, but formal privacy policies and terms of service were not found in the provided content. Overall, the site is professional, trustworthy, and well-structured, serving a niche retail market effectively.
Hospitality · Germany
55Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Denkmalz Disibodenberger Kapellenbrauerei GmbH operates a niche hospitality and retail business focused on craft beer production and event hosting in a historic chapel in Bad Sobernheim, Germany. The website serves as a digital storefront and information portal for their brewery, event location, and online shop. The company targets a general adult audience with a focus on mature customers due to alcohol sales. Technically, the site is built on the Shopware e-commerce platform, leveraging modern JavaScript libraries and consent management tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, featuring clear contact details and legal disclosures.
- Bellevue Hotelbetriebs GmbH
bellevue-boppard.de
Hospitality · Germany
58Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Bellevue Hotelbetriebs GmbH operates a well-established hospitality business located in Boppard am Rhein, Germany. The company offers upscale hotel accommodations, gastronomy, wellness, event hosting, and regional tourism experiences. The website reflects a strong market position as a premium family-run hotel with a tradition dating back to 1887, targeting tourists and travelers seeking quality services in the Mittelrhein region. The digital presence is professional, with clear navigation, multi-language support, and comprehensive content about their offerings. Technically, the website leverages modern web technologies including Shopware CMS, JavaScript libraries such as Swiper and Flatpickr, and integrates Google Analytics and Tag Manager for analytics. The site is mobile optimized and includes a consent management platform for GDPR compliance. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies, and contact information is readily available. The WHOIS data aligns with the business information, indicating a legitimate and trustworthy domain registration. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements could include enhancing security headers and publishing incident response information to further strengthen security posture and trust.
Möbel Preiss GmbH & Co. KGmoebel-preiss.de
Retail · Germany
60Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Möbel Preiss GmbH & Co. KG operates a medium-sized retail and e-commerce business specializing in furniture, kitchens, and home decoration based in Kastellaun, Germany. The company offers a broad product range including living room, bedroom, kitchen furniture, lighting, and home accessories, supported by a large physical showroom and an online shop with secure payment options. Their market position is that of a regional leader with a strong local presence and growing digital footprint. The website reflects a professional and user-friendly design with clear navigation and relevant content targeting general consumers interested in home furnishings. Technically, the website employs modern JavaScript libraries and tracking technologies such as Google Analytics 4, Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag, all managed with user consent mechanisms. The site uses a proprietary or custom CMS framework named Website22 and demonstrates good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and integrates cookie consent management, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed HTML content. Privacy compliance is strong with comprehensive privacy and cookie policies in German, aligned with GDPR requirements. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Recommendations include enhancing security headers, publishing a security policy, and improving accessibility to further strengthen the security posture and user experience.
Appenzeller Druckerei AGtrauer-zirkular.ch
Other · Switzerland
67Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website trauer-zirkular.ch is an e-commerce portal operated by Appenzeller Druckerei AG, specializing in funeral and mourning print materials such as mourning circulars, thank you cards, and funeral meal cards. The site targets individuals in Switzerland seeking personalized funeral print products, offering a streamlined and personal ordering experience. The business operates in a niche market with a clear focus on quality and customer service. Technically, the website employs a custom or Websale-based e-commerce platform with modern web technologies including JavaScript, CSS, and AJAX. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Performance is moderate, and SEO and accessibility features are basic but adequate for the target audience. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and does not provide a public security policy or incident response contact. No vulnerabilities or suspicious activities were detected in the analysis. Overall, the website presents a trustworthy and professional front for a small specialized business. Strategic recommendations include enhancing security headers, publishing a security policy, and expanding contact information to improve trust and compliance further.
Solvevaactus.cloud
Finance · Switzerland
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Actus by Solveva is a specialized software provider offering actuarial modelling and pricing tools primarily for the insurance and reinsurance sectors. The company positions itself as a leading partner with nearly two decades of experience, delivering modular and customizable software solutions to improve underwriting productivity and profitability. The website reflects a professional and consistent brand image with clear contact information and a focus on business clients in the finance industry. Technically, the website employs standard modern web technologies including HTML5, CSS3, JavaScript, and jQuery, with Google Fonts for typography. The site is moderately optimized for performance and mobile devices but lacks advanced frameworks or CMS platforms. No analytics or tracking tools are detected, indicating a privacy-conscious approach or minimal user tracking. From a security perspective, the domain is well-managed with domain locks in place, but the website lacks published privacy and cookie policies, security headers, and incident response information. SSL configuration details are not provided, and DNSSEC is not enabled, which suggests room for improvement in security hardening and compliance. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.
—
62Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
MM Automobile Schweiz AGmitsubishi-motors.ch
Transportation · Switzerland
59Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Mitsubishi Motors Switzerland, operated by MM Automobile Schweiz AG, is a medium-sized automotive business focused on selling and leasing Mitsubishi vehicles, including advanced plug-in hybrid electric vehicles (PHEV). The website showcases a comprehensive range of models, leasing offers, and after-sales services, targeting Swiss consumers interested in modern, efficient vehicles. The company maintains a consistent brand presence and leverages social media channels to engage customers. Technically, the website is built on TYPO3 CMS and integrates modern web technologies such as Google Maps API, LiveChat, and YouTube Player API. The site is mobile-optimized with good SEO practices and moderate performance. Security is well addressed with HTTPS and Content Security Policy headers, although some improvements in privacy compliance and accessibility could be made. Security posture is strong with no critical vulnerabilities detected, but the absence of cookie consent and explicit security policies are areas for improvement. The WHOIS data confirms the legitimacy of the domain and its alignment with the business claims. Overall, the website presents a professional and trustworthy digital presence with room for enhanced privacy and security transparency. Strategic recommendations include implementing a cookie consent mechanism, publishing terms of service and security policies, enhancing accessibility, and providing clear contact information to improve user trust and regulatory compliance.
- CH Regionalmedien AG
telezueri.ch
Media · Switzerland
67Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
TeleZüri is a regional media company operating in Zurich, Switzerland, providing local news, television programming, and event coverage. The website offers live streaming, video news articles, and advertising opportunities, targeting residents interested in Zurich regional content. The business is positioned as a key regional media player under the parent company CH Regionalmedien AG. Technically, the website uses modern JavaScript frameworks, integrates with Kaltura for video delivery, and employs consent management and advertising networks to monetize content. Security posture is strong with HTTPS, security headers, and privacy compliance, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, serving a general audience with safe content.
von Rotz Online Shopvonrotz-shop.ch
Retail · Switzerland
62Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Von Rotz Online Shop is a Swiss-based e-commerce retailer specializing in accessories related to automotive, camping, house, and garden sectors. The website presents a professional and consistent brand image targeting general consumers interested in these product categories. The business operates a niche regional online store with a clear focus on retail sales. Technically, the website leverages modern web technologies including jQuery, Google Tag Manager, Google Analytics 4, and lazy loading for images, built on the JTL Shop e-commerce platform. The site is mobile optimized and demonstrates good SEO practices. Security-wise, the site enforces HTTPS, uses Google reCAPTCHA, and implements cookie consent mechanisms, although it lacks explicit privacy and security policies publicly available. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is secure, functional, and trustworthy but would benefit from enhanced transparency in privacy and terms documentation.
Appia Contract GmbHappia-contract.com
Hospitality · Germany
63Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Appia Contract GmbH is a medium-sized German company specializing in comprehensive hotel project services including architecture, construction, interior finishing, and custom furniture manufacturing. With over a decade of experience and more than 1000 completed hotel projects, the company positions itself as a trusted design & build partner in the hospitality sector. The website reflects a professional and well-structured digital presence, leveraging WordPress with modern technologies such as UIkit and Google Tag Manager. Privacy and cookie policies are implemented with GDPR compliance, and multiple social media channels enhance their outreach. Security posture is good with HTTPS and domain transfer protections, though DNSSEC is not enabled and no explicit security policy is published. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.
- TheMapleBrothers I Snacks, Cerealien & mehr I Ahornsirup
themaplebrothers.ch
Other · Switzerland
69Medium
NIS2 25 · GDPR 65
NIS2 25 · GDPR 65
The website www.themaplebrothers.ch is a small business site hosted on the Wix platform, targeting a German-speaking Swiss audience. The site appears to be in early stages or minimal content mode, with no explicit privacy, cookie, or terms of service pages detected. The technical infrastructure relies on Wix's Thunderbolt framework and includes standard polyfills and Facebook Pixel for marketing tracking. Security posture is moderate with HTTPS assumed and some script-based security hardening, but lacks explicit security policies or headers. Overall, the site shows basic digital maturity with room for improvement in privacy compliance and business transparency.
SAAT MUNICHsaatmunich.com
Hospitality · Germany
56Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
SAAT MUNICH is a Munich-based full-service design studio specializing in corporate fashion, design consulting, and quality goods, primarily serving the hospitality and healthcare sectors. Founded in 2015, the company emphasizes unique uniform concepts that reflect corporate identity and sustainability principles. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to corporate clients. Technically, the site is built on WordPress with modern plugins and analytics tools, including Matomo and Google Analytics with privacy-conscious configurations. Security posture is good with HTTPS enabled and cookie consent mechanisms, though DNSSEC is not enabled and some security headers are missing. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a clear privacy policy and cookie notice. Contact information is primarily via web forms, with no explicit emails or phone numbers published. Overall, the site is trustworthy, professional, and well-aligned with its business claims.
Terravigna AGterravigna.ch
Retail · Switzerland
74Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Terravigna AG operates a specialized e-commerce platform and physical retail stores focused on wine and spirits in Switzerland. The company offers a curated selection of wines, spirits, gift boxes, and organizes events and tastings, targeting wine enthusiasts and retail customers primarily in Switzerland. The website is built on the Magento platform, leveraging modern web technologies such as jQuery, Bootstrap, and integrates analytics and marketing tools like Google Analytics and Facebook Pixel. The digital infrastructure supports a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced and use of invisible reCAPTCHA on forms, but lacks some security headers and explicit cookie consent mechanisms. Privacy and terms policies are present and comprehensive, supporting GDPR compliance. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website is professional, trustworthy, and well-positioned in its niche market.