Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,190001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
39,651–39,700 of 99,067
WIGLwigl.ch
Education · Switzerland
63Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
WIGL operates as a specialized digital learning platform focused on personalized education and professional development, primarily targeting the hospitality and gastronomy sectors in Switzerland. The platform supports lifelong learning through interactive tools such as digital content, e-portfolios, quizzes, and instructional videos. The company positions itself as an innovative player in the education technology space, leveraging modern web technologies and a user-friendly interface to enhance learning experiences. Technically, the website is built on WordPress with Elementor and Yoast SEO, incorporating modern JavaScript libraries like Lottie and Swiper for animations and interactive elements. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, explicit security headers are not detected, and no formal security or incident response policies are published. Cookie consent is managed via CookieYes, indicating GDPR awareness. No vulnerability disclosure or security.txt files are present, suggesting an area for improvement. Overall, the website is professional, trustworthy, and well-aligned with its business goals. The domain registration details support legitimacy, and the site maintains a strong presence with testimonials and social media integration. Strategic recommendations include enhancing security headers, publishing security policies, and implementing a vulnerability disclosure mechanism to strengthen trust and compliance.
Education · Switzerland
58Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
SHL Schweizerische Hotelfachschule Luzern is a well-established Swiss educational institution specializing in practical and academic hospitality management training since 1909. The institution offers a range of degree programmes, training, consulting services, and international educational projects, targeting students and professionals in the hospitality and gastronomy sectors. The website reflects a strong market position with multiple accreditations and memberships, reinforcing its credibility and reputation in the education sector. Technically, the website employs modern web technologies including Pimcore CMS, UKit framework, and Google Tag Manager for analytics and marketing. The site is well-optimized for mobile devices, accessible, and performs moderately well. Security best practices such as HTTPS enforcement and cookie consent mechanisms are implemented, although a dedicated security policy and incident response information are not publicly available. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent banner aligned with GDPR requirements. The website maintains high professionalism and trustworthiness, supported by clear contact information and social media presence. Overall, SHL's digital presence is mature and secure, supporting its business objectives effectively. Strategic improvements could include publishing explicit security policies and incident response contacts to enhance transparency and trust further.
Other
50Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website hgu-shop.ch is currently inaccessible to visitors, presenting a 403 Forbidden error page indicating that access has been blocked by the administrator. Due to this restriction, no meaningful business content, metadata, or contact information is available for analysis. The lack of accessible content prevents assessment of the company's market position, services, or technical infrastructure. The website does not provide any privacy, cookie, or security policies, nor does it display any forms or social media links. From a security perspective, the absence of HTTPS information and security headers, combined with the access block, suggests a minimal security posture or a deliberate restriction by the site owner. Overall, the site cannot be evaluated for compliance, trustworthiness, or technical quality in its current state.
Hotellerie Gastronomie Verlaghotellerie-gastronomie.ch
Hospitality · Switzerland
67Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Hotellerie Gastronomie Verlag is a well-established Swiss hospitality industry publisher founded in 1886, serving as the largest and most influential trade media in the sector. The website offers news, magazines, advertising, and subscription services targeted at hospitality professionals in Switzerland. Technically, the site is built on TYPO3 CMS with modern frontend libraries and frameworks, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers are missing and could be improved. No critical vulnerabilities or blocking mechanisms were detected, and privacy compliance is adequately addressed with GDPR-aligned cookie and privacy policies. Overall, the site demonstrates high professionalism and trustworthiness, supported by consistent WHOIS data and strong partner relationships.
Swiperswiperjs.com
Technology
64Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Swiper is a leading technology company specializing in a modern mobile touch slider library widely adopted by millions of developers and top global brands. The company offers a modular, high-performance slider solution compatible with popular frameworks such as React, Vue, and Svelte. Their business model includes an open-source core product complemented by premium offerings like Swiper Studio and UI Initiative, targeting developers and businesses seeking efficient UI components. Technically, the website demonstrates a mature infrastructure with modern JavaScript frameworks, fast performance, and mobile optimization. Hosting is managed via Cloudflare, ensuring reliable delivery. Security posture is solid with HTTPS and domain transfer protections, though lacks advanced security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional, trustworthy, and well-positioned in the technology market.
Nuxtnuxtjs.org
Technology
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Nuxt is an established open source progressive web framework designed to simplify full-stack development with Vue.js. It holds a strong market position within the web development community, supported by a large GitHub presence and modern technology stack. The website demonstrates excellent design quality, mobile optimization, and user experience, reflecting a mature and professional digital infrastructure. Security posture is good with HTTPS enforced and domain registration consistent with best practices, though improvements such as enabling DNSSEC and publishing security policies are recommended. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the site is trustworthy and well-positioned in the technology sector.
Eden: People+Planetedenprojects.org
Non-profit
64Medium
NIS2 10 · GDPR 53
NIS2 10 · GDPR 53
Eden: People+Planet is a newly established environmental and social advocacy organization, launched in early 2024. The website serves as a platform to promote sustainability initiatives and community engagement. The organization appears to be small and focused on niche advocacy efforts. Technically, the website is built on WordPress using the Divi theme, hosted behind Cloudflare, and employs standard plugins such as Yoast SEO and Cookie Law Info for compliance and SEO. Performance and mobile optimization are moderate to good, with basic accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service policies. Business credibility is moderate due to the lack of explicit contact information and trust signals. Overall, the site is functional and professional but would benefit from improved security and compliance documentation.
Formeforme.ch
Media · Switzerland
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Forme is a Swiss-based creative communication agency specializing in comprehensive brand image management. The company offers services including visual identity, global communication, packaging, and campaign development, targeting businesses seeking professional branding solutions. Their market position is that of a regional creative agency with a portfolio of notable clients, supported by active social media channels on Instagram, Facebook, and LinkedIn. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as jQuery and Google Analytics for tracking. Hosting is provided via Webflow's CDN, ensuring moderate performance and good mobile optimization. SEO and accessibility features are basic but functional, with room for improvement. From a security perspective, the site enforces HTTPS with excellent SSL configuration but lacks important security headers and formal privacy or cookie policies. No vulnerability disclosures or incident response contacts are present, indicating a need for enhanced security governance. The absence of cookie consent mechanisms also raises privacy compliance concerns. Overall, the website is professional, trustworthy, and content-rich, but improvements in privacy compliance and security best practices are recommended to strengthen the security posture and regulatory adherence.
- Boomerang Marketing
boomerang.ch
Other · Switzerland
61Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Boomerang Marketing is a Swiss-based marketing and communication agency with offices in Sierre (Valais) and Lausanne (Vaud). The company offers comprehensive web, graphic design, and marketing services tailored to businesses and institutions in the region. Their service portfolio includes brand identity, print communication, and digital marketing solutions. The website is professionally designed, well-structured, and targets regional clients with clear contact information and social media presence. Technically, the site is built on WordPress and uses modern JavaScript libraries to enhance user experience and performance. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response information are not publicly available. Overall, the domain registration data aligns well with the website's claims, indicating a trustworthy and legitimate business presence.
- MMichelin
michelin.com
Transportation · France
64Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Michelin is a globally recognized leader in the manufacturing of composites and mobility experiences, with a history spanning over 130 years. The company focuses on innovation in material science and sustainable mobility solutions, targeting a broad audience including consumers, investors, and media. The website reflects a mature digital presence with comprehensive content, professional design, and consistent branding. Technically, the site leverages modern frameworks such as Astro and Svelte, integrates advanced analytics and consent management tools, and is hosted on reliable cloud infrastructure. Security posture is strong with HTTPS and GDPR compliance, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the corporate nature and quality of the site.
Forbes Travel Guideforbestravelguide.com
Hospitality · United States
73Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Forbes Travel Guide operates as a globally recognized independent rating system for luxury hotels, restaurants, spas, and ocean cruises. Established originally as Mobil Travel Guide in 1958, it has a strong market position as the originator of the Five-Star rating system. The company targets luxury travelers and hospitality professionals, offering objective inspections and ratings based on rigorous criteria. Their business model centers on providing trusted, unbiased luxury ratings and professional resources to the hospitality industry. The website reflects a mature, professional brand with consistent messaging and a clear focus on luxury hospitality.
Hotel Schweizerhof Bern & Spaschweizerhofbern.com
Hospitality · Switzerland
53Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Hotel Schweizerhof Bern & Spa is a well-established luxury 5-star hotel located in Bern, Switzerland, offering premium accommodation, gourmet dining, spa and wellness services, and event hosting. The website reflects a mature and professional hospitality business with a strong market position and consistent branding. Technically, the site uses modern frameworks like Vue.js and integrates analytics and cookie consent tools effectively, though some improvements in security headers and DNSSEC could be made. Security posture is good with HTTPS and domain transfer protections, but lacks explicit security policies and incident response contacts. Overall, the site is trustworthy and well-optimized for its target audience.
Royal Savoy Hotel & Spa Lausanneroyalsavoylausanne.com
Hospitality · Switzerland
53Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Royal Savoy Hotel & Spa Lausanne is a luxury 5-star hotel located in Lausanne, Switzerland, offering upscale accommodation, dining, spa, and event services. The website reflects a strong market position in the hospitality sector with a focus on high-end clientele seeking comfort and elegance by Lake Geneva. The digital infrastructure employs modern web technologies including Vue.js, Google Tag Manager, and Matomo analytics, ensuring a contemporary user experience with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Overall, the website is professional, trustworthy, and well-aligned with the business's luxury brand image.
Katara Hospitality Switzerland AGburgenstockcollection.com
Hospitality · Switzerland
53Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The Bürgenstock Collection is a prestigious luxury hospitality brand with a rich Swiss heritage dating back to 1859. It operates several iconic hotels and resorts across Switzerland and London, offering premium accommodations, spa and wellness services, culinary experiences, and leisure activities. The brand targets discerning travelers seeking unique and high-end hospitality experiences. Technically, the website employs modern JavaScript frameworks such as Vue.js and integrates analytics and cookie consent tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and domain registration protections, though some security headers and DNSSEC are absent. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and well-positioned in the luxury hospitality market.
Bürgenstock Hotels & Resortburgenstockresort.com
Hospitality · Switzerland
53Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Bürgenstock Resort Lake Lucerne is a prestigious luxury hospitality business located in Switzerland, offering high-end hotel accommodations, dining, spa, and exclusive experiences. The resort has a long history dating back to 1873 and holds multiple industry certifications and awards, positioning it as a leader in the luxury resort market. The website reflects a mature digital presence with modern technologies, comprehensive content, and strong branding consistency. Technically, the site uses advanced analytics, cookie consent management, and security features such as HTTPS and reCAPTCHA, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates a high level of professionalism and trustworthiness, suitable for its target audience of luxury travelers and wellness seekers.
Amauri Champeauxtarteaucitron.io
Technology · France
60Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
tarteaucitron.io is a specialized GDPR-compliant cookie consent management platform founded in 2020 by Amauri Champeaux in France. The company offers a SaaS solution with an online dashboard, automatic service detection, and integration with Google Consent Mode v2. The platform is open source, enhancing transparency and trust. The target audience includes website owners and developers seeking to comply with privacy regulations. The website is built on WordPress with a modern theme, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and anti-spam measures, though explicit security policies and headers could be improved. Privacy compliance is strong, with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in its niche.
Other
61Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website at aswpsdkeu.com is currently inaccessible, presenting an Access Denied error that blocks all content. Due to this, no business information, metadata, or user-facing content is available for analysis. The domain is registered with MarkMonitor Inc. since 2019 and uses Google Cloud DNS services, indicating a legitimate registration and hosting setup. However, the lack of accessible content prevents evaluation of the company's market position, services, or technical maturity. Security posture cannot be assessed beyond the observation that no HTTPS or security headers are detectable from the provided data. Overall, the site appears to be protected by a generic web application firewall or access control mechanism, limiting visibility and analysis.
Kalungikalungi.com
Technology · United States
74Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Kalungi, Inc. is a specialized full-service marketing agency focused exclusively on B2B SaaS companies that have achieved product market fit. The company offers a comprehensive suite of marketing services including fractional CMOs, full marketing teams, coaching, audits, and growth services tailored for SaaS businesses and VC/PE firms. Kalungi positions itself as a market leader with strong trust signals such as high customer ratings, partner badges, and detailed client testimonials. The website is professionally designed, mobile-optimized, and built on the HubSpot CMS platform, leveraging modern marketing and analytics technologies such as Google Analytics, Microsoft Clarity, Facebook Pixel, and Wistia for video content. Despite the lack of publicly available WHOIS data, the website's professionalism and transparency in services and client success stories support its legitimacy. Privacy and cookie policies are present and indicate GDPR compliance, though explicit security policies and incident response contacts are not found. Overall, Kalungi demonstrates a mature digital presence with a strong focus on SaaS marketing growth.
Dream-Themedream-theme.com
Technology
57Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Dream-Theme is an established international web design and development studio specializing in premium WordPress themes. With over a decade of experience and a large customer base exceeding 285,000 users, the company holds a reputable position in the WordPress theme market, further validated by its membership in the Envato Hall of Fame. Their business model focuses on theme development, sales, and customer support primarily through ThemeForest and their dedicated support portal. Technically, the website is built on WordPress using Elementor and Elementor Pro, leveraging modern web technologies and Cloudflare DNS for performance and security. The site is mobile-optimized and presents a professional design with good user experience and SEO practices. Security-wise, the site uses HTTPS and has domain transfer protections but lacks advanced security headers and explicit privacy or cookie policies, which are areas for improvement. Overall, the website is trustworthy and professional but could enhance its privacy compliance and security posture to align with best practices.
- Università della Svizzera italiana
innosuisse-training-ticino.ch
Education · Switzerland
71Medium
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
The website innosuisse-training-ticino.ch represents the Innosuisse Entrepreneurship Training program offered in the Ticino region of Switzerland. It is organized by the Università della Svizzera italiana (USI) on behalf of Innosuisse, the Swiss innovation agency. The program offers entrepreneurship training modules aimed at startups and innovators, coordinated by the USI Startup Centre in collaboration with SUPSI. The site reflects a regional educational initiative with strong institutional backing and clear target audience focus. Technically, the website is built on Drupal 10 CMS, leveraging modern web technologies including jQuery, Google Tag Manager, Microsoft Clarity, and Usercentrics for cookie consent management. The site is mobile optimized with good SEO and accessibility basics, though some advanced accessibility features could be improved. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks published security policies, incident response contacts, or vulnerability disclosure information. No security headers were detected in the provided data, suggesting room for improvement in hardening. No vulnerabilities or exposed sensitive data were found. Overall, the security posture is adequate but could be enhanced with formal policies and additional technical controls. The domain registration data aligns well with the website's educational and governmental affiliations, indicating high legitimacy and trustworthiness. Contact information is clearly provided, and social media presence is consistent with official university channels. No adult or questionable content is present, making the site safe for general audiences. Strategic recommendations include publishing security and incident response policies, adding security headers, and maintaining regular security audits to improve trust and compliance.
Entrepreneurship Training North | Innosuisse Module 1 & 2entrepreneurship-trainingnorth.ch
Other · Switzerland
69Medium
NIS2 25 · GDPR 73
NIS2 25 · GDPR 73
The website appears to be a small-scale entrepreneurship training platform hosted on the Wix platform. It offers educational content related to entrepreneurship but lacks detailed business descriptions, contact information, and formal policies. The technical infrastructure is standard for Wix-hosted sites, utilizing JavaScript and Sentry for error tracking. Mobile optimization and accessibility are basic but present. Security posture is moderate with HTTPS enabled but lacking security headers and formal security policies. Privacy compliance is poor due to absence of privacy and cookie policies. Overall, the site lacks business credibility signals such as certifications, contact details, and comprehensive content, which limits trustworthiness.
- Hochschule Luzern
hslu.ch
Education · Switzerland
72Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Hochschule Luzern is a prominent higher education institution in Switzerland offering practical Bachelor and Master degree programs, extensive continuing education, and innovative research. It serves students, professionals, and businesses with a strong focus on applied knowledge and career development. The institution is well-positioned in the Central Switzerland region as a large employer and educational provider. Technically, the website leverages modern web technologies including ASP.NET, jQuery, and a consent management platform, ensuring a good user experience across devices. Security posture is solid with HTTPS enforced and consent-based tracking, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.
myCONVOTISmyaspectra.ch
Technology · Switzerland
70Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
myCONVOTIS operates as an IT infrastructure and managed services provider with data centers located in Zürich and Basel, Switzerland. The website serves as a status page displaying operational status, uptime metrics, and system performance charts for various components such as DNS, SSLVPN, and OpenShift platforms. The target audience appears to be business customers and internal users relying on these IT services. The business model focuses on providing reliable data center services and IT platform management.
Copybaracopybara.com
Technology
65Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Copybara is a technology company specializing in AI-powered continuous copy testing and optimization for marketers and growth teams. Their SaaS platform automates the process of A/B testing for ads and landing pages, enabling rapid experimentation and learning without requiring engineering resources. The company positions itself as a niche player focused on accelerating copy testing at scale to improve marketing performance. Technically, the website is built using modern frameworks such as Next.js and React, hosted on AWS infrastructure. The site demonstrates good performance, mobile optimization, and SEO practices. However, some security enhancements such as enabling DNSSEC and implementing security headers could improve the overall posture. The site uses third-party marketing and tracking scripts including Google Tag Manager and Leadsy.ai. From a security perspective, the site enforces HTTPS and has domain transfer protections in place, but lacks explicit security policies, incident response contacts, and cookie consent mechanisms. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is basic, with a privacy policy present but no clear GDPR compliance statements or cookie consent. Overall, the website is professional and trustworthy with moderate risk. Strategic improvements in privacy compliance, DNS security, and security policy transparency are recommended to enhance trust and security maturity.
- SAM Center
samcenter.ch
Other · Switzerland
64Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
SAM Center is a small business entity based in Switzerland, represented by a website built on the Wix platform. The site presents a professional design with moderate branding consistency but lacks detailed business descriptions and explicit contact information. The technical infrastructure relies on Wix's Thunderbolt framework and standard web technologies, offering moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but missing critical security headers and policies. Privacy compliance is minimal due to the absence of privacy and cookie policies. Overall, the website is functional but would benefit from enhanced security practices and compliance documentation.
RUAG Internationalruag.com
Technology · Switzerland
74Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
RUAG International is a large, established technology and manufacturing company specializing in aerospace and defense sectors. The company offers key services including aerostructures manufacturing, space technology, and defense technology, positioning itself as a trusted international player with a strong brand presence. The website reflects a professional corporate identity with clear navigation and relevant content targeted at industry professionals and partners. Technically, the site is built on Drupal CMS, uses modern web technologies such as Google Fonts, Matomo analytics, and Google Maps API, and implements cookie consent mechanisms for privacy compliance. Security posture is good with HTTPS enforced and security headers present, though explicit security policies and vulnerability disclosures are absent. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency but does not detract from the professional presentation of the website. Overall, RUAG International's digital presence is solid but could benefit from enhanced transparency in privacy and security documentation.
- Rotortec AG
rotortec.ch
Transportation · Switzerland
71Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Rotortec AG is a specialized helicopter maintenance company based in Sulgen, Switzerland, offering Part-145 certified inspections and repairs. The company targets helicopter operators requiring professional maintenance services, positioning itself as a niche service provider within the Swiss transportation sector. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard JavaScript polyfills, indicating a moderate level of technical infrastructure suitable for a small business. Security posture is adequate with HTTPS enforced and some security hardening scripts present, but lacks explicit security policies and incident response contacts. Overall, the site is professional and trustworthy but could improve privacy compliance and transparency.
Site not installed - OVHcloudrotorteam.com
Other
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The domain rotorteam.com is registered with OVH sas since 2010 and hosted on OVHcloud infrastructure. However, the website currently displays a default OVH placeholder page indicating that the site is not installed. There is no business content, contact information, or policies available on the site. The technical infrastructure is minimal, with no evidence of HTTPS or security headers in the HTML content. The domain registration data is consistent with the hosting provider, but the lack of website content significantly reduces the site's credibility and trustworthiness. Security posture is weak due to missing HTTPS and security headers, and privacy compliance is absent. Overall, the site appears inactive or under development, limiting any meaningful security or business analysis.
Rose Helicopter AGroseheli.ch
Transportation · Switzerland
66Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Rose Helicopter AG is a Swiss-based small transportation business specializing in helicopter sightseeing flights, events such as weddings and corporate outings, flight school training, and heliport services. The company targets a general audience interested in unique aerial experiences and flight education. The website is professionally designed with clear navigation and good mobile optimization, reflecting a solid digital presence for a local service provider. Technically, the site uses modern web technologies including service workers for PWA support and Cookiebot for cookie consent management, though the CMS and hosting details are not explicitly identified. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, explicit security headers and formal security policies are absent, representing areas for improvement. The WHOIS data aligns well with the business claims, showing consistent registrant information and no privacy protection, supporting legitimacy. Overall, the website is safe, trustworthy, and provides relevant content for its audience, but lacks some compliance and security documentation.
Partn'Air Management / Partn'Air Trainingpartnair.ch
Transportation · Switzerland
62Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Partn'Air Management / Partn'Air Training is a Swiss-based aviation service provider established in 2011, operating primarily from Sion Airport in the Swiss Alps. The company offers a range of aeronautical services including pilot training, helicopter rental, and comprehensive aircraft management services such as CAMO, PART-NCC compliance, maintenance, and FBO services. Their market position is that of a specialized regional provider catering to individuals and businesses in the aviation sector within Switzerland. The website reflects a professional and consistent brand image with clear contact information and social media presence, supporting business credibility. Technically, the website is built on WordPress using the Divi theme, enhanced with modern SEO tools like Rank Math and analytics via Google Analytics and Tag Manager. The site is mobile optimized and performs moderately well, though there is room for improvement in accessibility and security headers. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, but lacks explicit security policies and vulnerability disclosure mechanisms. Overall, the website is trustworthy and safe, with no adult or questionable content. The WHOIS data aligns well with the business claims, showing consistent registration details and domain age matching the company's founding year. However, the absence of privacy and cookie policies indicates compliance gaps that should be addressed to meet GDPR and other privacy regulations.
Mercy Air Switzerlandmercyair.ch
Transportation · Switzerland
60Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Mercy Air Switzerland is a small non-profit organization specializing in humanitarian air transport to assist people in need, primarily in Africa. The website serves as a platform to share mission reports, newsletters, and facilitate donations. It targets donors, supporters, and the humanitarian community. The organization holds a ZEWO certification, indicating trustworthiness and compliance with Swiss charity standards. Technically, the website is built on WordPress using the Enfold theme, with modern web technologies and plugins such as CleanTalk for anti-spam and Google Translate for multilingual support. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS, uses security headers, and has anti-spam measures, but lacks a dedicated security policy or incident response information. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. Overall, the website is professional, trustworthy, and secure with minor areas for improvement in security transparency and accessibility.
mont blanc hélicoptèresmbh.fr
Transportation · France
51Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Mont Blanc Hélicoptères is a leading French helicopter company specializing in a wide range of aviation services including tourist flights, pilot training, emergency medical services (SAMU), mountain rescue, and helicopter maintenance. The company targets tourists, corporate clients, and aviation service customers, positioning itself as a market leader in France. The website is well-structured, professionally designed, and provides comprehensive information about its services and bases across France and neighboring regions. Technically, the site is built on WordPress with modern plugins and technologies, including SEO optimization and cookie consent mechanisms. Security posture is good with HTTPS and reCAPTCHA in use, though some security headers and explicit policies could be improved. The absence of WHOIS data limits domain trust analysis, but the site shows strong trust indicators such as social media presence and detailed service descriptions. Overall, the site is safe, professional, and suitable for a general audience.
Linth Air Service AGlinthairservice.com
Transportation · Switzerland
73Medium
NIS2 10 · GDPR 70
NIS2 10 · GDPR 70
Linth Air Service AG is a small Swiss company specializing in aircraft services including hangarage, maintenance, CAMO, flight training, and helicopter tours. The company operates from Mollis Airport and targets aircraft owners, operators, and aviation enthusiasts. The website is professionally designed using the Wix platform, featuring clear navigation and relevant business information. Technical infrastructure relies on Wix's hosting and JavaScript frameworks, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent mechanisms, but lacks explicit security headers and published privacy policies. The absence of WHOIS data raises some trust concerns, though the professional web presence and business details mitigate these. Overall, the website is functional and trustworthy but would benefit from enhanced security and compliance documentation.
Hôpitaux Universitaires Genèvehug-ge.ch
Healthcare · Switzerland
69Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Hôpitaux Universitaires Genève (HUG) is a leading university hospital in Geneva, Switzerland, providing comprehensive medical services including surgery, outpatient consultations, and specialized care. It also serves as a center for research and education in close collaboration with the University of Geneva Faculty of Medicine. The website reflects a mature digital presence with extensive content targeting patients, healthcare professionals, and researchers. It maintains a strong market position as a national and international reference institution in healthcare. Technically, the site is built on Drupal 10, uses modern web fonts and icons, and integrates Piwik PRO for analytics, indicating a modern and privacy-conscious infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant. Contact information is clearly provided, including phone numbers and physical addresses. Social media presence is robust across major platforms. Overall, the website is professional, trustworthy, and well-optimized for users.
Heli Service Belgiumheliservicebelgium.be
Transportation · Belgium
70Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Heli Service Belgium is a well-established Belgian helicopter service provider with over 30 years of experience offering a range of helicopter flights including sightseeing, medical transport, flight training, and specialized aerial operations. The company targets private individuals, businesses, and commercial institutions, positioning itself as a leading helicopter operator in Belgium with flexible and cross-border operations. The website is professionally designed using WordPress and Elementor, featuring multilingual support and comprehensive SEO optimizations. The technical infrastructure includes modern web technologies and analytics tools such as Google Analytics and Tag Manager, with a cookie consent mechanism compliant with GDPR. Security posture is strong with HTTPS enforcement and security headers, though the site lacks a dedicated security policy or incident response information. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.
Heli Rezia SAhelirezia.ch
Transportation · Switzerland
64Medium
NIS2 25 · GDPR 50
NIS2 25 · GDPR 50
Heli Rezia SA is a Swiss-based company specializing in helicopter services, likely catering to regional transportation and aerial operations. The website is built on the Wix platform, utilizing Wix Thunderbolt framework and standard web technologies such as JavaScript, CSS, and HTML5. The site demonstrates basic mobile optimization and SEO metadata but lacks comprehensive privacy and cookie policies, as well as explicit contact information. Security posture is minimal with no advanced headers or incident response contacts visible. Overall, the website presents a small business with a consistent brand but requires improvements in privacy compliance and security best practices.
Helinetwork Internationalhelinetwork.com
Transportation · France
60Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Helinetwork International is a well-established company specializing in the global procurement and distribution of civilian and military helicopter spare parts since 1995. The company holds official distributor partnerships with major aerospace manufacturers such as SAFRAN Helicopter Engine, Collins Aerospace, and Thales Avionics, positioning itself as a trusted supplier in the helicopter maintenance and repair market. Their services include new parts supply, standard exchange, MRO, consignment, and expertise, targeting helicopter operators and aerospace professionals worldwide. Technically, the website is built on a modern WordPress CMS platform using Elementor and several SEO and UI enhancement plugins. The site is mobile-optimized, has good SEO practices, and includes a cookie consent mechanism indicating GDPR compliance. However, no advanced security headers were detected, and no explicit security or incident response policies are published. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent, but lacks visible security headers and vulnerability disclosure information. The WHOIS data is unavailable or privacy protected, which reduces domain trust verification, although the website content and certifications support legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, but could improve its security posture by adding security headers, publishing security policies, and providing clearer domain registration transparency.
- Stiftung Helimission
helimission.org
Transportation · Switzerland
67Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Helimission is a Swiss non-profit foundation specializing in helicopter rescue and emergency medical services. The organization operates primarily in the transportation sector, providing critical air ambulance and rescue services. The website presents a professional and consistent brand image, targeting the general public and potential donors. The business model is based on non-profit funding and service contracts, positioning Helimission as a key regional player in emergency air rescue within Switzerland. Technically, the website is built on the Wix platform, leveraging standard web technologies such as JavaScript, CSS, and HTML5. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Security posture is moderate; HTTPS is presumably enabled (though not explicitly confirmed in the data), but no security headers or policies are evident. Privacy and cookie policies are missing, which impacts compliance and user trust. WHOIS data is unavailable or malformed, limiting domain registration transparency, but the website content and structured data support legitimacy. Overall, the site is functional and professional but would benefit from enhanced security, privacy compliance, and transparency measures.
Heli-Lausanne SAheli-lausanne.ch
Transportation · Switzerland
53Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Heli-Lausanne SA is a Swiss-based helicopter company operating from the Regional Airport of Lausanne Blécherette. The company offers a range of helicopter services including pleasure flights, taxi flights, VIP transport, pilot training, and helicopter rental. Their market position is that of a regional specialist in helicopter transportation and pilot education, targeting both individual customers and businesses in Switzerland. The website is professionally designed, multilingual (French and English), and provides clear information about services and contact details. Technically, the site is built on WordPress with WooCommerce for e-commerce capabilities, enhanced by various plugins for multilingual support, analytics, and payment processing. The site uses HTTPS and modern web technologies, though some security headers could be improved. Privacy compliance is basic but includes a cookie consent mechanism. Overall, the site is trustworthy and well-maintained with no signs of blocking or malicious content.
Héli Air Monacoheliairmonaco.com
Transportation · Monaco
50Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Héli Air Monaco is a specialized luxury helicopter flight service provider operating primarily in Monaco and surrounding regions including France, Italy, and Switzerland. The company offers a range of services such as panoramic sightseeing flights, private charters, transfers, and tailored heli-packages targeting affluent tourists and private clients seeking exclusive aerial experiences. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its niche market. Technically, the website employs a modern JavaScript stack including jQuery, Google Analytics, Mailchimp, and Smartlook for analytics and marketing purposes. The site is mobile-optimized and uses standard web technologies, though no CMS or hosting provider details are evident. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site uses HTTPS and includes a cookie consent mechanism, but lacks visible security headers and explicit security or incident response policies. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration status, which impacts overall trust. No critical vulnerabilities or malicious content were detected. Overall, the website presents a solid business front with room for improvement in security posture and transparency regarding domain registration and security policies. Strategic enhancements in these areas would strengthen trust and compliance.
- Eliticino-Tarmac SA
eliticinotarmac.ch
Other · Switzerland
69Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
The website represents a small business likely operating in Switzerland, built using the Wix platform. The site content is minimal and primarily in Italian, with no explicit privacy, cookie, or terms of service policies found. The technical infrastructure relies on Wix's Thunderbolt framework and standard web technologies, with moderate performance and basic mobile optimization. Security posture is good with HTTPS and security headers properly configured, but lacks advanced security disclosures or incident response information. Overall, the site provides a basic online presence without extensive business or compliance details.
- DC Aviation Group
dc-aviation.com
Transportation · Germany
69Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
DC Aviation Group operates as a premium aircraft management company based in Germany, offering services including aircraft maintenance, aviation consulting, and executive charter. The website is professionally designed using TYPO3 CMS and targets business aviation clients and aircraft owners. The company positions itself as a premium service provider in the transportation sector with a medium-sized business profile. Technically, the website employs modern web technologies, including Google reCAPTCHA for bot protection and Cookiebot for GDPR-compliant cookie consent management. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and bot protection mechanisms in place, though the absence of explicit security headers and privacy policy pages suggests room for improvement. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, but the website content and structure indicate a legitimate business operation. Overall, the site scores well on content quality, technical implementation, and security, but should address privacy and WHOIS transparency to enhance trust.
Other
59Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website bbheli.ch is currently a parked domain with a placeholder page indicating the domain may be for sale. There is no active business presence, no privacy or cookie policies, no contact information, and no meaningful content describing any products or services. The site primarily serves as a domain sale landing page with embedded advertising scripts and an iframe redirecting to an external URL. The technical infrastructure is minimal, relying on basic HTML, CSS, and JavaScript, with content delivery via AWS Cloudfront. Mobile optimization and accessibility are basic, and SEO is poor due to lack of content and metadata. Security posture is weak, with no visible HTTPS enforcement or security headers, and no forms or inputs to assess for secure handling. The domain WHOIS is privacy protected, consistent with a domain held for resale, but this reduces trust and legitimacy. Overall, the site has low business credibility and poor content quality, with moderate technical implementation but weak security and privacy compliance.
Aviaco Franceaviaco.fr
Transportation · France
55Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Aviaco France is a specialized Maintenance, Repair, and Overhaul (MRO) company focused on helicopter dismantling and spare parts distribution, particularly for Leonardo and Airbus helicopters. Established in 2014 and located in France near Marseille Provence airport, Aviaco holds important certifications such as PART 145 and is a Certified B Corporation, emphasizing quality and sustainability. The company targets helicopter operators and MRO providers, offering recertification services with EASA Form 1 and a comprehensive stock of spare parts. Technically, the website is built on WordPress with Elementor and Yoast SEO, hosted by OVH, and integrates Google Analytics and social media feeds. The site is well-structured, mobile-optimized, and SEO-friendly but lacks formal privacy and cookie policies, which are critical for GDPR compliance. Security posture is adequate with HTTPS and domain protection but could be improved with enhanced HTTP headers and incident response disclosures. Overall, Aviaco France presents a credible and professional digital presence aligned with its business focus, though privacy and security transparency need enhancement.
- Air-Glaciers SA
air-glaciers.ch
Transportation · Switzerland
54Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Air-Glaciers SA is a well-established Swiss aerial transport and mountain rescue company operating since 1965. The company offers a broad range of services including mountain rescue, helicopter transport, heliski, pleasure flights, agricultural aerial treatments, and flight training. It holds a strong market position as a leader in alpine aerial services in Switzerland, supported by multiple bases across key Swiss alpine regions. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on Joomla CMS with modern JavaScript libraries and integrates common marketing and analytics tools such as Google Analytics and Facebook Pixel. Security posture is good with HTTPS and CSRF protections, but lacks some advanced security headers and explicit privacy and cookie policies, which are compliance gaps. Overall, the website is trustworthy and serves its target audience effectively, though improvements in privacy compliance and security disclosures are recommended.
- Safran Helicopter Engines
safran-helicopter-engines.com
Transportation · France
71Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Safran Helicopter Engines is a leading global manufacturer specializing exclusively in rotorcraft turbines, operating under the Safran Group umbrella. With a workforce of approximately 6,100 employees and a customer base spanning over 2,500 clients in 155 countries, the company maintains a strong market position supported by a comprehensive product range and extensive service network. The website reflects a mature digital presence built on Drupal 10, incorporating modern analytics and consent management tools, ensuring compliance with privacy regulations. Security posture is robust with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility, aligning well with the company's industry stature.
- digifor GmbH
digifor.ch
Technology · Switzerland
58Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
digifor GmbH is a Swiss-based small technology service provider specializing in web design, IT services, digitalization consulting, and digital printing. The company targets small and medium enterprises seeking to enhance their digital presence and IT infrastructure. Their market position is regional with a focus on delivering tailored digital solutions. The website is built on TYPO3 CMS with SEO optimizations and presents a professional, consistent brand image. Contact information is clearly provided, including phone, email, and multiple contact forms, enhancing business credibility. Technically, the site uses modern frameworks and scripts, performs moderately well, and is mobile optimized. Security posture is good with HTTPS enforced and secure forms, though lacking formal published security policies and some security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and safe for general audiences.
FormulaBerryformulaberry.com
Technology
63Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
FormulaBerry is a small technology startup offering an AI-powered bot that simplifies the use of Excel and Google Sheets by generating, explaining, and correcting formulas. The website presents a professional and consistent brand image targeting businesses and individuals seeking to improve spreadsheet efficiency without coding expertise. The technical infrastructure leverages modern frontend technologies such as Bootstrap, jQuery, and Google Fonts, with Cloudflare providing DNS and likely CDN services. Analytics are handled via Plausible, emphasizing privacy-conscious tracking. Security posture is adequate with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and explicit security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is limited to an email address, with no phone or physical address provided. Overall, the website is well-designed, mobile-optimized, and content-rich, but could improve in security and privacy transparency.
Invoiceberry Limitedinvoiceberry.com
Technology · United Kingdom
72Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
InvoiceBerry is a UK-based small business SaaS company specializing in online invoicing software tailored for freelancers and small businesses. The platform offers invoice creation, expense tracking, payment management, and integrates with popular payment gateways. The website is professionally designed, mobile-optimized, and provides clear business and contact information, including customer testimonials that reinforce trust. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Cloudfront CDN, with analytics tools like Plausible and Facebook Pixel for user tracking. Security posture is good with HTTPS enforced and secure forms, though no explicit security headers or incident response contacts are published. Privacy and cookie policies are present with consent mechanisms, indicating GDPR compliance. WHOIS data is unavailable, which slightly reduces trust but the overall business presence and content quality support legitimacy.
KV Business School Zürichkv-business-school.ch
Education · Switzerland
67Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
KV Business School Zürich is a professional educational institution specializing in continuing education and business training programs. The website targets professionals and students seeking to enhance their business skills. The institution appears to have a solid regional presence in Zurich, Switzerland, with a medium-sized operation. The website is built on Drupal 10, leveraging modern web technologies and third-party services such as Cookiebot for cookie consent, Google Tag Manager, Hotjar, and LogRocket for analytics and user experience monitoring. The design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies are missing. Privacy compliance is partial, with no visible privacy policy or terms of service pages, which should be addressed to improve compliance and user trust. Overall, the website is trustworthy and professional but would benefit from enhanced transparency and security documentation.