Medium-risk security reports

Pluq is a European-based company specializing in providing free electric vehicle charging stations to organizations such as businesses, offices, hotels, healthcare facilities, and parking operators. Their business model centers on offering zero upfront investment for property owners by installing and maintaining EV chargers at no cost, while sharing revenues generated from charging activities. The company positions itself as an innovative and hassle-free solution provider in the growing EV infrastructure market. Technically, the website is built on WordPress using Elementor, enhanced with multilingual support via Weglot and privacy compliance tools like Usercentrics CMP. The site demonstrates good SEO, mobile optimization, and professional design. Security-wise, the site enforces HTTPS, includes security headers, and uses consent management, but lacks a dedicated security policy or incident response information. Overall, the website is trustworthy, professional, and compliant with GDPR, making it a credible digital presence for Pluq.

billbox AG is a Swiss-based technology company specializing in digital invoice management and financial process automation. With over two decades of experience, the company offers web-based software solutions that enable businesses to digitize and control their financial workflows efficiently. Their services include business partner management, reporting, and integration with various ERP and accounting systems, positioning them as a trusted partner for companies seeking digital transformation in financial operations. The website reflects a mature, professional business with a clear focus on innovation, security, and customer-centric services. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA, ensuring a responsive and secure user experience. Security practices include HTTPS enforcement and data encryption, although some improvements like DNSSEC and security headers could enhance their posture. Overall, the domain's long history and consistent WHOIS data support the company's legitimacy. The site is fully accessible without WAF or blocking mechanisms, and privacy compliance is addressed through a privacy policy and cookie consent banner.

balneotec GmbH is a specialized service provider in the hospitality sector focused on premium hotel modernization and renovation, particularly hotel bathrooms and rooms. The company positions itself as a holistic solution provider offering aesthetic, hygienic, and sustainable renovations tailored to hotel brands. Their market position is supported by strategic partnerships with well-known manufacturers and craftsman groups, enhancing their service quality and regional capacity. The website reflects a professional and consistent brand image with comprehensive content targeting hoteliers and hotel owners seeking modernization services. Technically, the website is built on WordPress using modern plugins such as Elementor, Rank Math SEO, and UberMenu, ensuring good SEO and user experience. The site is mobile-optimized and performs moderately well, with a clean technical stack and no blocking security mechanisms detected. Privacy and cookie policies are well implemented, indicating good GDPR compliance. From a security perspective, the site enforces HTTPS and includes standard security headers, but lacks a dedicated security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be improved with explicit security disclosures and vulnerability handling mechanisms. The overall risk assessment is low with a high trustworthiness rating. Strategic recommendations include publishing a security policy, adding vulnerability disclosure information, and enhancing accessibility features to further strengthen compliance and user trust.

FutureLog AG operates a professional, cloud-based procure-to-pay software platform tailored specifically for the hospitality industry. Their solutions cover ordering, invoicing, inventory, recipe management, and business intelligence, positioning them as a market leader in hospitality procurement software. The website is well-designed, mobile-optimized, and provides comprehensive resources and customer success stories, reflecting a mature digital presence. Technically, the site uses TYPO3 CMS with integrations for analytics and cookie consent, ensuring good performance and compliance. Security posture is strong with HTTPS and ISAE 3402 certifications, though some security headers and incident response details could be improved. The absence of WHOIS data for the domain is a notable anomaly that warrants further verification. Overall, FutureLog presents a credible and professional business with a strong focus on compliance and customer trust.

ALEKS & SHANTU GmbH is a Berlin-based full-stack digital agency specializing in web development, design, animation, film production, and digital marketing services. With over 30 employees and a portfolio of more than 1000 projects, the company serves clients across diverse sectors including art, culture, industry, medicine, TV, and technology. The agency emphasizes high aesthetic standards, scalability, and technical precision, positioning itself as a trusted partner for digital-first movers and brands seeking impactful online presence. Technically, the website leverages modern frameworks such as Next.js and React, incorporates advanced multimedia elements like Lottie animations and video content, and demonstrates strong SEO and accessibility practices. The site is mobile-optimized and performs well, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, includes key security headers, and maintains secure contact forms with clear privacy policies. However, the absence of a published security policy and incident response contacts suggests room for improvement in formal security governance. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional, trustworthy, and well-structured digital presence. The main risk factor is the lack of WHOIS domain registration data, which raises questions about domain legitimacy and registration transparency. This should be investigated further to ensure full trustworthiness.

Konen & Lorenzen Management & Real Estate Solutions GmbH operates as a specialized hotel brokerage and real estate consultancy firm focused on the German hospitality and gastronomy sectors. Their website presents a professional image with detailed service offerings including hotel sales, operator placement, interim management, and feasibility studies. The company leverages a strong network within the industry to facilitate efficient transactions and management solutions. Technically, the website is built on WordPress using Elementor, incorporating modern web technologies and Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced, though improvements are recommended in security headers and incident response readiness. Privacy compliance is generally good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a gap. The missing WHOIS data for the domain raises some concerns about domain legitimacy, but the professional presentation and business consistency mitigate risk. Overall, the website is a credible digital presence for a small-sized real estate and hospitality consultancy in Germany.

Geneva Helicopters is a specialized transportation company offering private helicopter transfers primarily from Geneva Airport to various alpine destinations. Established in 2005, the company operates under the parent company Mont Blanc Helicoptères and serves a niche market of affluent travelers seeking luxury and efficient air travel. Their services include helicopter transfers, private jet charter proposals, and last-minute flight options, targeting business and leisure travelers in Switzerland and neighboring regions. The website infrastructure is built on a custom platform utilizing legacy JavaScript libraries such as jQuery 1.4.2 and various jQuery plugins. Hosting and DNS services are managed through Infomaniak Network SA and Cloudflare, respectively. While the site uses HTTPS and Google Analytics for tracking, it lacks modern security headers and DNSSEC, indicating room for improvement in technical security and compliance. From a security perspective, the site demonstrates basic best practices like HTTPS enforcement and domain transfer protection but is hindered by outdated libraries and missing security headers. There is no visible cookie consent mechanism or comprehensive privacy compliance features, which may expose the company to GDPR compliance risks. Incident response and security policy information are not published, limiting transparency. Overall, Geneva Helicopters presents a professional and trustworthy business with a solid market position but should prioritize updating its technical stack, enhancing security measures, and improving privacy compliance to reduce risk and build greater customer trust.

LB Airpark SA operates a luxury jet park in Sion, Switzerland, targeting affluent private jet owners and operators. The business focuses on providing premium parking and aviation-related services, positioning itself as a niche luxury aviation real estate and service provider. The website reflects a small-sized company with a founding date consistent with the domain registration in 2013. The site content is minimal but professional, with consistent branding and clear navigation.

Eagle Valais is a specialized aerial work and transport company based in the Valais region of Switzerland, operating since 2002. The company offers a broad range of services including aerial work such as transport of materials, assembly, forest services, firefighting support, avalanche triggering, and media production via photo and film. Additionally, they provide passenger experiences like panoramic flights, VIP flights, parachutist drops, heliski, and operate a certified flight school (FHATO). Their market position is that of a trusted local expert with a professional online presence and active social media engagement. Technically, the website is built on WordPress using Elementor and several modern plugins, with good SEO practices and mobile optimization. The site employs HTTPS and cookie consent mechanisms, indicating a baseline of privacy compliance. Analytics are implemented via Google Analytics and SumoMe, with moderate user tracking. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and a public security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website presents a professional and trustworthy image with room for improvement in privacy policy publication and enhanced security headers. The risk level is low, but adding formal security and privacy documentation would strengthen compliance and trust.

Swiftcopters is a specialized helicopter company based at Geneva International Airport, offering a range of luxury and professional aviation services including VIP flights, panoramic tours, pilot training, and maintenance. The company has a strong market position as the only IFR approved helicopter operator at this strategic location, targeting affluent clients and corporate customers in Switzerland and Europe. The website reflects a professional and consistent brand image with good content quality and clear service offerings. Technically, the site is built on WordPress with Elementor and integrates modern analytics and marketing tools such as Google Analytics and Google Tag Manager. Security posture is strong with HTTPS and security headers properly configured, though there is room for improvement in privacy compliance and explicit policy disclosures. Overall, the domain registration data supports the legitimacy and trustworthiness of the business, with a domain age consistent with the company's founding date. Recommendations include adding comprehensive privacy and cookie policies, visible contact information, and incident response details to enhance compliance and user trust.

Le Pavé Gourmand is a Swiss-based restaurant integrated within a professional training center, providing culinary and hospitality apprenticeship training alongside public dining services. The website presents detailed weekly menus, business information, and social media links, reflecting a focused hospitality business model with a niche market position. Technically, the site uses legacy jQuery versions, Google Maps API, and Font Awesome icons, with moderate performance and good mobile optimization. Security posture is moderate with HTTPS usage but lacks advanced security headers and vulnerability disclosures. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but requires improvements in security and privacy practices.

GenerazionePiù is a Swiss non-profit association focused on supporting elderly individuals who have reached retirement age and wish to remain active and socially engaged. The organization offers a variety of social activities, events, and publications tailored to its target audience in the Ticino region. The website reflects a local community-oriented business model with a clear mission to enhance the quality of life for seniors. Technically, the website is built on the Joomla CMS platform, utilizing the Yootheme framework and UIkit for responsive design. It incorporates modern JavaScript libraries such as jQuery and Awesomplete, and integrates a newsletter system via AcyMailing. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. From a security perspective, the site enforces HTTPS and employs Joomla's built-in security features. However, it lacks explicit security headers like Content-Security-Policy and X-Frame-Options, which could enhance protection. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially met with a privacy policy and GDPR consent in the newsletter form, but the absence of a cookie consent banner is a notable gap. Overall, the website presents a trustworthy and professional online presence for a small non-profit organization. Strategic improvements in security headers and privacy mechanisms would further strengthen its posture and compliance.

The website ospedaledelgiocattolo.ch currently displays a PHP version unsupported error page managed by Hostpoint AG, the largest Swiss web hosting provider. The site lacks any accessible business content, contact information, or compliance policies, indicating it is either under maintenance or misconfigured. The technical infrastructure relies on an outdated PHP version and includes jQuery 3.6.0, with no visible modern frameworks or CMS. Security posture is weak due to the unsupported PHP version and absence of security headers or HTTPS enforcement. Privacy compliance is non-existent, with no privacy or cookie policies found. Overall, the site presents a low trust profile and poor user experience.

Cassa disoccupazione cristiano sociale OCST is a Swiss social unemployment fund primarily serving the Canton Ticino region. It holds a leading market position with 40% of the unemployed in the region choosing its services and is recognized by SECO as the fastest unemployment fund in Switzerland. The organization offers digital assistance, online tools, and educational resources to support unemployed individuals and companies. The website is built on WordPress and uses common plugins for analytics and cookie consent, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit published security policies. Overall, the site is professional, trustworthy, and compliant with basic privacy requirements, though it could improve transparency around incident response and vulnerability disclosure.

FORMAT Lingua Sagl is a Swiss-based language service provider established in 1999, offering translation services and language training courses for individuals and companies. The company holds EduQua certification and collaborates with recognized professional training centers, positioning itself as a trusted local player in the education sector. Their website is professionally designed, mobile-optimized, and provides clear information about their services and contact details. Technically, the site uses modern web technologies including Bootstrap, FontAwesome, Google Fonts, and Google reCAPTCHA v3 for security. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website reflects a credible and professional organization with good digital maturity.

Franz Kaldewei GmbH & Co. KG operates a professional website focused on manufacturing and retailing high-quality bathroom solutions such as bathtubs, shower surfaces, and washbasins made from steel enamel. The company targets a broad audience including consumers and professionals in Switzerland and other countries, supported by multiple localized domains. The website is built on TYPO3 CMS and incorporates modern web technologies including Google reCAPTCHA and Usercentrics for consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and anti-bot measures in place, though explicit security headers and a published security policy are absent. Privacy compliance is partially addressed through cookie consent but lacks a visible privacy policy link. Overall, the site is professional, trustworthy, and well-structured, supporting the company's market position as an established manufacturer in the bathroom industry.

Franz Kaldewei GmbH & Co. KG operates the website kaldewei.us, offering a range of bathroom products including bathtubs, showers, and washbasins made from steel enamel. The company targets a broad audience interested in high-quality bathroom fixtures and provides additional services such as an online bathroom planner. The website is part of a larger international presence with multiple country-specific domains, indicating a well-established market position in manufacturing and retail sectors. Technically, the site is built on TYPO3 CMS, integrates modern tools like Google Tag Manager and Usercentrics for consent management, and employs security measures such as HTTPS and Google reCAPTCHA. However, the absence of publicly available WHOIS data and missing explicit privacy and terms of service policies slightly reduce trust and compliance ratings. Overall, the site is professional, secure, and user-friendly, with room for improvement in transparency and contact information.

Franz Kaldewei GmbH & Co. KG operates the website www.kaldewei.pl, presenting itself as a manufacturer of high-quality steel enamel bathroom products including bathtubs, shower surfaces, and washbasins. The company targets a general audience interested in bathroom fixtures and offers tools such as an online bathroom planner. The website is built on the TYPO3 CMS platform and integrates modern technologies including Google Tag Manager, Google reCAPTCHA, and Usercentrics for consent management, reflecting a moderate to advanced digital maturity. Security posture is solid with HTTPS enforced and use of CAPTCHA for forms, though explicit security headers and a published security policy are absent. Privacy compliance is partially addressed via a cookie consent mechanism but lacks a clearly linked privacy policy or terms of service. Overall, the domain registration is consistent with the business identity, indicating legitimacy and trustworthiness.

Franz Kaldewei GmbH & Co. KG operates a professional website focused on manufacturing and selling high-quality bathroom products such as bathtubs, shower surfaces, and washbasins. The company maintains a strong international presence with multiple country-specific domains, indicating a well-established market position. The website targets a broad audience including consumers and professionals interested in bathroom design and products. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partially addressed through cookie consent but lacks visible privacy and terms of service pages. Overall, the website is trustworthy, professional, and safe for general audiences.

Franz Kaldewei GmbH & Co. KG operates the website www.kaldewei.it, presenting itself as a manufacturer specializing in high-quality bathroom products such as bathtubs, shower trays, and washbasins made from enameled steel. The company maintains a strong European presence with multiple country-specific domains, targeting a broad audience including professionals and consumers interested in bathroom design and products. The website is built on TYPO3 CMS, leveraging modern web technologies including Google Tag Manager, reCAPTCHA, and Usercentrics for cookie consent, reflecting a mature digital infrastructure. The site is well-structured, mobile-optimized, and SEO-friendly, providing a good user experience with clear navigation and multilingual support. Security measures include HTTPS enforcement and anti-bot protections, though explicit security headers and formal security policies are absent. Privacy compliance is partially addressed through cookie consent mechanisms but lacks visible privacy and terms of service documentation. Overall, the website demonstrates a high level of professionalism and business credibility with no signs of malicious or adult content.

Franz Kaldewei GmbH & Co. KG operates the website www.kaldewei.fr, presenting itself as a manufacturer specializing in high-quality enameled steel bathroom products including bathtubs, shower surfaces, and washbasins. The company targets a broad audience including consumers and professionals in France, supported by multiple localized websites for different countries. The website is built on TYPO3 CMS and incorporates modern web technologies such as Google reCAPTCHA and Usercentrics for consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and anti-bot measures in place, though some security headers are missing and privacy policy documentation is not explicitly found on the homepage. Overall, the site is professional, well-branded, and trustworthy with no signs of malicious content or blocking mechanisms.

Franz Kaldewei GmbH & Co. KG operates the website www.kaldewei.cz, presenting itself as a manufacturer specializing in high-quality enameled steel bathroom products including bathtubs, shower trays, and washbasins. The company targets a general audience interested in bathroom fixtures and offers additional services such as an online bathroom planner. The website is professionally designed, consistent in branding, and supports multiple languages and international domains, indicating a medium-sized, established manufacturing business with a European focus. Technically, the site is built on the TYPO3 CMS platform, utilizing modern web technologies such as jQuery, Google reCAPTCHA for form security, and Usercentrics for cookie consent management. The site is mobile-optimized with good SEO practices and moderate performance. However, some accessibility features could be improved. From a security perspective, the website enforces HTTPS and uses reCAPTCHA and cookie consent mechanisms, but lacks visible security headers and a published privacy policy or terms of service. No WHOIS data was retrievable, which limits domain trust assessment. No critical vulnerabilities or suspicious content were detected. Overall, the website presents a low risk with a good security posture but would benefit from enhanced transparency in privacy and security policies and improved WHOIS data availability. Strategic recommendations include implementing security headers, publishing comprehensive privacy and terms documents, and establishing clear incident response contacts.

KALDEWEI is a well-established manufacturer specializing in high-quality bathroom fixtures including bathtubs, shower trays, and washbasins. The company operates internationally with localized websites, including the Spanish domain analyzed here. Their business model focuses on manufacturing and retail, targeting general consumers and professionals in bathroom planning and renovation. The website reflects a professional brand presence with consistent branding and good content quality. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as jQuery, Google reCAPTCHA for bot protection, and Usercentrics for cookie consent management. The site is mobile-optimized and integrates Google Tag Manager for analytics and marketing purposes. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site uses HTTPS and includes reCAPTCHA on forms, which are positive indicators. However, it lacks visible security headers and does not publish a privacy policy or terms of service pages, which are important for compliance and user trust. WHOIS data is unavailable due to registrar restrictions, limiting domain trust verification. No direct contact emails or phone numbers are exposed on the site, with contact facilitated through a dedicated contact page. Overall, the website presents a low-risk profile with good business credibility but would benefit from enhanced transparency in privacy and security policies. Strategic improvements in security headers, policy disclosures, and incident response information would strengthen the security posture and compliance standing.

Franz Kaldewei GmbH & Co. KG operates the website www.kaldewei.co.uk, offering high-quality bathroom products including bathtubs, showers, and washbasins made from steel enamel. The company targets a broad audience interested in premium bathroom solutions and provides tools such as an online bathroom planner to enhance customer engagement. The website is professionally designed, multilingual, and integrates modern web technologies including TYPO3 CMS, Google Analytics, and Usercentrics for consent management. Despite the lack of WHOIS data for the exact domain due to Nominet UK naming restrictions, the website content and branding strongly align with the established company, indicating legitimacy. Security measures include HTTPS, reCAPTCHA for forms, and cookie consent mechanisms, but there is room for improvement in security headers and published policies. Overall, the site demonstrates a good balance of business presence and technical maturity with moderate privacy compliance.

Radbazar operates as a specialized online marketplace focused on the buying and selling of used bicycles and related accessories in Austria. The platform also provides additional value through a magazine offering trends and tips related to cycling. Positioned as a leading marketplace in its niche, Radbazar targets private bicycle buyers and sellers, as well as bicycle dealers, offering a comprehensive service ecosystem. The business model centers on facilitating peer-to-peer and dealer transactions with buyer protection and insured shipping to enhance trust. Technically, the website employs modern web technologies including Laravel Livewire, Alpine.js, Tailwind CSS, and integrates Google Tag Manager and a privacy consent SDK to manage user data and compliance. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms with partner transparency, though it lacks explicit security policies or incident response contacts. Overall, Radbazar presents a professional, trustworthy, and compliant online presence with moderate technical sophistication and a solid security posture.

Preisvergleich.ch is a well-established Swiss price comparison platform operated by Preisvergleich Europe GmbH. It offers users comprehensive product listings, buying guides, and test reports to facilitate informed purchasing decisions. The platform targets Swiss consumers seeking competitive prices and trustworthy product information. Technically, the site employs modern JavaScript libraries such as jQuery and Owl Carousel, integrates Google Tag Manager and Analytics for tracking, and uses JSON-LD structured data to enhance SEO and search capabilities. The website is mobile-optimized with good navigation and content quality. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

Auto Welt von Rotz AG operates a comprehensive automotive dealership website based in Switzerland, offering over 500 new and used vehicles across multiple brands, along with extensive after-sales services including repairs, tuning, rentals, and an online accessories shop. The company maintains a strong market position as a large regional dealer with a diverse inventory and multiple customer engagement channels. Technically, the website is built on WordPress with WooCommerce, leveraging modern web technologies such as Bootstrap, jQuery, and integrates marketing and analytics tools like Google Analytics, Google Tag Manager, and Facebook Pixel. The site demonstrates good SEO practices with structured data and meta tags, and provides a responsive user experience optimized for mobile devices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website reflects a professional and trustworthy business presence with strong customer trust signals including numerous positive Google reviews.

Jsabelle Forrer is a small Swiss-based design service provider specializing in graphic, web, and app design as well as illustration. The website presents a professional design with clear focus on delivering quality design experiences to consumers. The technical infrastructure is based on BaseKit CMS and hosted by Hoststar, utilizing modern web fonts and iconography. However, the site lacks critical privacy and cookie policies, contact information, and security disclosures, which impacts its compliance and trustworthiness. Security posture is minimal with no detected security headers or incident response information. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

Fullerton Tool Company is a family-owned manufacturing business specializing in the design and production of solid carbide cutting tools for various industries. The company operates primarily in North America with dedicated websites for Canada, USA, and Mexico markets. Their product offerings include end mills, drills, reamers, saws, and custom tooling services, supported by just-in-time delivery and regrinding services. The website is professionally designed, multilingual (French focus on this site), and provides clear contact information and resources for clients and distributors. Technically, the site is built on WordPress with WooCommerce and several plugins for enhanced functionality, including search filters and cookie consent management. Security posture is adequate with HTTPS and domain locks but lacks DNSSEC and explicit security headers. Privacy compliance is supported by visible cookie and privacy policies with consent mechanisms. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

STARLITE is a small, established company specializing in audio visual and lighting solutions for events, rentals, and systems integration based in Moorestown, New Jersey. The company has a strong local presence and offers services tailored to event organizers and businesses requiring professional AV and lighting support. Their website reflects a professional brand with consistent messaging and active social media engagement. Technically, the site is built on WordPress using the Divi theme and integrates modern tools such as Google Analytics, Google Tag Manager, and reCAPTCHA to enhance functionality and security. The hosting and domain registration are managed via Cloudflare, providing a solid infrastructure foundation. Security posture is generally good with HTTPS enforced and reCAPTCHA protecting forms; however, the absence of DNSSEC and security headers indicates room for improvement. Privacy compliance is lacking due to missing privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures.

Fullerton Tool Company is a well-established precision tooling manufacturer and supplier with a strong legacy dating back to 1996. The company offers a broad range of carbide cutting tools and custom tooling services, targeting manufacturing professionals and machinists. Their market position is supported by a consistent brand image, ISO certification, and a comprehensive online presence including e-commerce capabilities. Technically, the website leverages modern frameworks like Vue.js and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and domain protections, though DNSSEC is not enabled and incident response contacts are not explicitly published. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences.

INWX is a well-established domain registrar based in Germany, operating since 2004 with a strong market presence and over 100,000 customers worldwide. The company offers comprehensive domain registration services, including real-time registration, provider changes, and domain management via their Domain Robot platform. Their service portfolio also includes SSL certificates and hosting solutions, targeting businesses and individuals seeking domain-related services. The website is professionally designed, multilingual, and provides extensive TLD options with transparent pricing. Technically, the site uses a modern JavaScript stack with jQuery, Slick Carousel, and Matomo analytics, hosted behind Cloudflare for performance and security. Security posture is strong, with HTTPS, two-factor authentication, Whois privacy, DNSSEC, and Anycast DNS. However, explicit privacy and cookie policies are not found in the provided content, which is a compliance gap. No direct contact emails or phone numbers are visible, which may affect user trust and support accessibility. Overall, the domain registration data aligns well with the website content, indicating high legitimacy and trustworthiness.

firstvoucher.com is a German-based e-commerce platform specializing in providing businesses with an online voucher and ticket sales system. The company targets a broad range of businesses, from small cafes to large hotel groups, enabling them to sell vouchers and tickets online with automated processes for issuance, personalization, and redemption. The website is professionally designed, content-rich, and includes customer testimonials and logos, indicating a strong market presence with over 3000 customers. Technically, the site uses modern web technologies including JavaScript libraries, tracking and analytics tools, and a consent management platform to comply with privacy regulations. Security posture is good with HTTPS enforced and privacy-conscious analytics configurations, though some security headers are missing and no explicit security policies are published. The WHOIS data is unavailable, which raises concerns about domain registration transparency, but the active and professional website mitigates some risk. Overall, the site is trustworthy and well-positioned in its niche, but domain registration details should be verified for full assurance.

The website roeye.com is currently inaccessible due to a CloudFront 403 error page indicating the request was blocked, likely due to traffic or configuration issues. No business content, metadata, or contact information is available for analysis. The domain is registered with Amazon Registrar, Inc. since 2008, showing a mature registration age and consistent WHOIS data without privacy protection. However, DNSSEC is not enabled, which is a minor security shortfall. Due to the blocked content, the technical infrastructure and digital maturity cannot be assessed. Security posture evaluation is limited, but no security policies or incident response information are published on the accessible content. Overall, the site presents a low trust and professionalism level based on the available data.

LeanData, Inc is a technology company specializing in intelligent go-to-market orchestration solutions designed to improve buyer experience, accelerate revenue, and enhance operational alignment for B2B companies. The company positions itself as an established player in the GTM orchestration space, offering SaaS-based services that integrate with sales and marketing operations. The website reflects a mature digital presence with professional design, clear messaging, and comprehensive privacy and cookie policies, indicating a strong commitment to user experience and compliance. Technically, the website is built on WordPress with a modern tech stack including jQuery, HubSpot, Clearbit, and Cookiebot for marketing, analytics, and consent management. SEO is well implemented with Yoast SEO and structured data (JSON-LD) for enhanced search visibility. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS registrant data slightly reduces trust but is common for commercial entities using privacy protection. Overall, LeanData's website demonstrates a solid business and technical foundation with good privacy compliance and marketing sophistication. Recommendations include enhancing security headers, publishing security policies, and providing clearer direct contact information to improve trust and security posture.

FXB Climate Advocates is a small, youth-focused non-profit organization dedicated to climate activism and environmental protection. Their website, built on the Wix platform, presents a professional and consistent brand image targeting young climate activists. The site provides information about their mission and encourages engagement but lacks explicit contact details and formal privacy or cookie policies. Technically, the website uses modern web technologies with HTTPS enforced, but it lacks advanced security headers and privacy compliance mechanisms. The absence of WHOIS data due to privacy protection limits the ability to fully verify domain legitimacy. Overall, the website is safe and functional but would benefit from enhanced privacy and security features to improve trust and compliance.

Skyguide S.A. is the leading Swiss air navigation service provider, offering comprehensive air traffic control and related services across Switzerland and delegated airspaces. The company maintains a strong market position with key services including flight information, aeronautical information management, drone flight coordination, and commercial aviation services. The website reflects a professional and well-structured digital presence, targeting aviation professionals, industry stakeholders, and job seekers. Technically, the site leverages modern frameworks such as Nuxt.js and Vue.js, integrates multiple analytics and marketing tools with user consent, and is optimized for mobile and accessibility. Security posture is robust with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, supporting Skyguide's reputation as a reliable aviation service entity.

The website represents the rebranding of Hinderling Volkart as part of the global digital agency Dept. It positions itself as a leading full-service digital agency in Switzerland with a broad range of services from strategy to experience design. The site is professionally designed with modern technologies such as Vue.js and Nuxt.js, and integrates analytics and marketing tools like Google Analytics and Google Tag Manager. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and explicit privacy and terms policies. The missing WHOIS data is a concern but the website's professional appearance and parent company affiliation mitigate trust issues. Overall, the site is a credible digital agency landing page with room for improvement in compliance transparency and security hardening.

Solveva is a specialized software company delivering innovative solutions tailored for the insurance and reinsurance sectors. Their flagship offering, the Actus low-code platform, empowers actuarial professionals to develop underwriting and pricing modules with minimal reliance on traditional software developers. The company positions itself as a partner for digital transformation in insurance, focusing on pricing excellence, risk management, and workflow optimization. Their market niche is well-defined, targeting insurance companies seeking flexible, scalable, and cost-effective software solutions. Technically, Solveva's website is built on the Webflow platform, leveraging modern web technologies including Google reCAPTCHA for bot protection, Google Tag Manager for analytics, and Consent Pro for privacy compliance. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital presence. However, some security best practices such as explicit security headers and published incident response policies are absent. From a security standpoint, the site enforces HTTPS and employs CAPTCHA on forms, enhancing protection against automated abuse. Privacy compliance is robust with clear cookie consent mechanisms and comprehensive privacy and cookie policies. The lack of WHOIS registrant data reduces transparency and trust slightly, but the professional presentation and business focus mitigate major concerns. Overall, Solveva presents a credible and professional business front with strong technical implementation and privacy awareness. Strategic improvements in security transparency and direct contact information could further enhance trust and compliance.

mp technology AG is a Swiss-based software development company specializing in custom business and mobile applications for both B2B and B2C markets. The company positions itself as an agile development specialist with award-winning projects such as the Smile App, indicating a strong market presence in Switzerland's technology sector. Their service offerings include e-business applications, enterprise solutions, technology consulting, and mobile app development using modern frameworks like Vaadin and Angular. Technically, the website is built on WordPress with a moderate tech stack including jQuery and FontAwesome, showing a blend of modern and legacy technologies. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks important security headers and uses an outdated jQuery version, which could pose risks. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanism. Overall, the domain registration aligns well with the business claims, supporting legitimacy and trustworthiness.

Hexagon AB is a global leader in measurement technologies, providing advanced solutions that enhance productivity, quality, safety, and sustainability across vital industries such as construction, manufacturing, mining, and transportation. The company leverages cutting-edge technologies including robotics, AI, digital twins, and spatial intelligence to deliver innovative products and services tailored for enterprise clients. Hexagon's market position is strong, supported by numerous customer success stories and a consistent brand presence. Technically, the website is built on modern frameworks like Next.js and React, with content managed via Sitecore Content Hub. The site demonstrates excellent performance, mobile optimization, and SEO practices. Security is robust with HTTPS enforced and multiple security headers implemented, alongside a cookie consent mechanism indicating privacy awareness. However, explicit privacy policies, terms of service, and security incident response information are not visibly published. The security posture is solid with no detected vulnerabilities or exposed sensitive data. WHOIS data confirms the legitimacy of the domain and company information, aligning with the website's claims. The absence of direct contact emails or phone numbers and lack of published security policies represent areas for improvement. Overall, Hexagon's website reflects a mature, enterprise-grade digital presence with strong business credibility and technical implementation. Strategic enhancements in privacy and security transparency would further strengthen trust and compliance.

ERNI is a Swiss-based software engineering consultancy specializing in advising companies on innovation and technology to enhance performance through software and digitalization of critical business processes. The company positions itself as a leading provider in software engineering and digital transformation with a broad portfolio of services including software engineering, requirements engineering, quality assurance, architecture advisory, design, embedded software, digital business solutions, agile consulting, DevOps, cloud, data and AI, and cybersecurity. The website reflects a mature digital presence with multilingual support and professional branding consistent with a large enterprise. Technically, the website is built on WordPress using Elementor and several modern plugins for SEO, multilingual support, and GDPR compliance. It employs Google Analytics and Hotjar for analytics and user behavior tracking. The site is well-optimized for mobile and accessibility, with good SEO practices and performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and vulnerability disclosure policies could be improved. The WHOIS data is privacy-protected but consistent with the corporate identity of Erni Group Holding AG, indicating legitimacy. No blocking or WAF challenges were detected, allowing full content access and analysis. Overall, the website demonstrates a professional, secure, and compliant digital presence suitable for its business domain. Strategic recommendations include enhancing security header implementation, publishing a vulnerability disclosure policy, and making incident response contacts more visible to strengthen trust and security posture.

Emineo is a well-established Swiss IT consulting and software engineering company with over 200 employees and nearly two decades of experience. The company specializes in SAP consulting, software engineering, business applications, data analytics, digital supply chain, and artificial intelligence services. Their market position is strong within Switzerland, targeting businesses and organizations seeking digital transformation and IT solutions. The website reflects a professional and consistent brand image with comprehensive service offerings and a clear focus on technology-driven solutions. Technically, the website is built on WordPress using modern plugins such as Elementor and Slider Revolution, with SEO optimizations and structured data implemented. The site is mobile-optimized and performs moderately well, leveraging common marketing and analytics tools including Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. Security posture is good with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The security posture is solid but could benefit from explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is supported by a cookie consent mechanism and a privacy policy, though terms of service and data protection officer information are not evident. The WHOIS data aligns well with the business claims, showing a consistent and legitimate registration. Overall, Emineo presents a trustworthy and professional digital presence with room for enhancements in security transparency and privacy documentation. Strategic recommendations include improving security headers, publishing security and incident response policies, and enhancing accessibility features to further strengthen compliance and user trust.

Deimos AG is a Swiss technology company specializing in the development of high-quality software applications and IT system integrations. The company targets businesses and organizations seeking tailored IT integration, web and software applications, AI solutions, and business analysis with UX design. Their market position is that of a specialized, small-sized player focused primarily on the Swiss market, offering niche services such as API gateways and AI chatbots leveraging modern AI frameworks like LangChain and OpenAI's ChatGPT. Technically, the website is built on a modern CMS platform with integration of popular libraries and services such as jQuery, FontAwesome, Vimeo, and Google Tag Manager, demonstrating a moderate to good level of digital maturity and performance. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of security headers and incident response information suggests room for improvement. Overall, the website is professional, well-branded, and trustworthy, with clear contact information and compliance with GDPR indicated by privacy and cookie policies. No critical vulnerabilities or suspicious patterns were detected, supporting a high legitimacy score.

Astina AG is a Swiss technology company specializing in e-commerce, process digitization, and system integrations. Their business model focuses on providing tailored digital transformation solutions to other businesses, leveraging platforms such as the Paloma Platform and various e-commerce and automation services. The company maintains a professional online presence with a clear focus on customer success and digital innovation, supported by a portfolio of reputable clients and partners. Technically, the website employs standard web technologies including JavaScript, CSS, and HTML5, with a responsive design optimized for mobile devices. While the site performs moderately well, there is room for improvement in accessibility and SEO enhancements. No CMS or hosting provider details were explicitly identified. From a security perspective, the website uses HTTPS, indicating basic encryption standards. However, there is a lack of visible security headers and no published security or incident response policies, which could be improved to enhance trust and compliance. The absence of privacy and cookie policies represents a compliance gap, especially under GDPR regulations. Overall, the website is trustworthy and professionally maintained, with clear business contact information and no signs of malicious content or blocking mechanisms. Strategic improvements in privacy compliance and security transparency would further strengthen the company's digital maturity and customer trust.

Adcubum AG is a leading Swiss software company specializing in core insurance systems for the health and accident insurance sectors. Recently acquired by the Helsana Group, Adcubum continues to operate independently, providing modular, cloud-capable software solutions such as Syrius ad.Cloud. The company targets insurance providers in Switzerland, emphasizing digital transformation and operational efficiency. The website reflects a mature digital presence with modern technologies including React and Next.js, hosted on Vercel, and integrates comprehensive cookie consent and privacy compliance mechanisms. Security posture is strong with HTTPS, security headers, and CSRF protections in place. However, WHOIS data is unavailable, which slightly impacts transparency but does not detract from the overall legitimacy given the business context and parent company ownership. The site is well optimized for performance, mobile use, and SEO, with clear branding and professional content. No critical security vulnerabilities or compliance gaps were detected in the analyzed content.

Zühlke Group is a well-established global technology and innovation service provider specializing in digital transformation, software engineering, and business innovation. The company targets enterprise clients seeking to modernize and innovate their business processes and products. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content that aligns with the company's market positioning and services. Technically, the site leverages modern frameworks such as Nuxt.js and includes advanced UI components like Plyr and Flickity, ensuring a fast and responsive user experience across devices. Security is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, complemented by comprehensive privacy and cookie policies that demonstrate GDPR compliance. However, the absence of WHOIS registration data limits domain trust analysis, though the website's professionalism and certifications like ISO 27001 support its legitimacy. Overall, the site presents a low-risk profile with strong business credibility and technical maturity.

Netcetera AG is a well-established Swiss technology company specializing in tailored software solutions for sectors including banking, payments, healthcare, mobility, and publishing. The company positions itself as a trusted partner with over 25 years of industry experience and a strong client base including major financial institutions. Their business model focuses on B2B software development, AI integration, and cloud services, emphasizing security and user experience. Technically, the website employs modern web technologies such as Google Tag Manager, Matomo Analytics, and Usercentrics for consent management, with responsive design and accessibility features. The site demonstrates good SEO practices and a professional user experience. However, some security best practices like explicit security headers and published security policies are missing. From a security perspective, the site uses HTTPS and secure forms but lacks visible incident response contacts and vulnerability disclosure mechanisms. The absence of WHOIS data for the domain is a notable anomaly, reducing trustworthiness despite the professional web presence. Overall, the website is high quality and trustworthy in content and design but would benefit from improved transparency in domain registration and enhanced security disclosures to strengthen its risk posture and compliance standing.

Ergon Informatik AG is a well-established Swiss IT company founded in 1984, specializing in custom software development, digital transformation consulting, security solutions, and advanced technologies such as artificial intelligence and blockchain. The company holds a strong market position in Switzerland and Germany, serving diverse industries including finance, healthcare, retail, and government. Their business model focuses on delivering tailored software solutions and consulting services to ambitious organizations seeking digital innovation and operational excellence. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service descriptions. Technically, the website employs modern web technologies including JavaScript frameworks (likely Vue.js), CSS, and integrates a consent management platform (Usercentrics) alongside Google Tag Manager for analytics. The site is mobile-optimized, fast-loading, and SEO-friendly, indicating a high level of digital maturity. Security measures such as HTTPS enforcement, security headers, and privacy compliance mechanisms are in place, demonstrating a responsible approach to user data protection. From a security perspective, the site shows good practices with no visible vulnerabilities or exposed sensitive information. However, explicit security policies and incident response contacts are not publicly available, which could be improved to enhance transparency and trust. Privacy compliance is strong, with GDPR-aligned cookie consent and a detailed privacy policy. Overall, Ergon Informatik AG presents a trustworthy and professional online presence with robust technical and privacy standards. Strategic recommendations include publishing explicit security policies, adding vulnerability disclosure information, and enhancing incident response readiness to further strengthen their security posture and stakeholder confidence.

The website ijug.social serves as a decentralized social network platform powered by Mastodon, specifically targeting the Java User Groups community under the non-profit organization iJUG Interessenverbund der Java User Groups e.V. It provides a niche social networking service within the fediverse, fostering community engagement and collaboration among Java enthusiasts. The platform is administered by the iJUG e.V. infrastructure team, with clear contact information and a professional presentation. Technically, the site leverages Mastodon version 4.4.5 with modern web technologies including React and ES modules, offering a responsive and user-friendly experience. Security posture is moderate, with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. Privacy compliance is supported by a clear privacy policy, though terms of service and cookie policies are absent. Overall, the domain registration is privacy protected but consistent with the organization's identity, indicating legitimacy. The site is free from adult or questionable content, targeting a general audience of technology professionals and enthusiasts.