Security Directory

S

Sauter Informatik AG

si-cube.ch

52

Sauter Informatik AG is a Swiss IT company founded in 1991, specializing in IT solutions including software, hardware, and custom website development. Their proprietary CMS platform, SI-CUBE, offers fixed-price, professional, and responsive websites targeted primarily at small and medium-sized enterprises in the region. The company emphasizes ease of use, professional design, and ongoing support. Technically, the website uses a modern but basic tech stack including jQuery, Bootstrap, and custom scripts, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and CAPTCHA protections, but lacks advanced security headers and formal policies. Privacy compliance is limited due to absence of privacy and terms of service pages. Overall, the website is professional and trustworthy, reflecting a legitimate business with consistent WHOIS data and clear contact information.

H

Hawlik GmbH Pilzbrut

pilzbrut.de

53

Hawlik GmbH Pilzbrut operates an e-commerce website specializing in mushroom cultivation products, including mushroom spawn, cultivation kits, dried mushrooms, spices, and educational materials. The website targets consumers interested in home and garden mushroom cultivation, primarily in Germany. The business model is retail-focused with a niche market position supported by a well-structured online shop and product categorization. Technically, the site uses a modern tech stack including jQuery, Bootstrap, Google Analytics, Google Ads, and a consent management platform, hosted on Rackspeed infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced, consent management implemented, and secure login forms, though some security headers and explicit policies are missing. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service pages. Overall, the website is trustworthy and professional but could improve transparency and compliance documentation. No WAF or blocking mechanisms were detected, and no adult or questionable content is present.

E

Eidgenössischer Jodlerverband

ejv.ch

47

The Eidgenössischer Jodlerverband is a Swiss non-profit association dedicated to promoting traditional Swiss yodeling and related cultural activities. The organization offers educational courses, organizes events and festivals, and provides resources such as a music club for its members and the wider community interested in Swiss folk music. The website reflects a focused cultural mission with a clear target audience of choirs, instructors, and enthusiasts. The business model is typical for a non-profit cultural association, relying on membership, events, and educational offerings. The site positions itself as a key national entity in the Swiss folk music scene.

K

KulturPass

kulturpass.de

64

KulturPass is a German government-supported cultural initiative aimed at providing 18-year-old youths in Germany with a digital budget to access a wide range of cultural offerings such as books, concerts, cinema, and music. The platform is accessible via a web portal and mobile apps, facilitating budget redemption and promoting media literacy through a dedicated toolkit. The website is professionally designed, mobile-optimized, and integrates social media channels to engage its target audience effectively. Technically, it leverages TYPO3 CMS with modern JavaScript libraries and frameworks, ensuring a stable and accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms, although some security headers could be enhanced. Privacy compliance is strong, reflecting GDPR adherence with clear policies and consent management. Overall, the site demonstrates high trustworthiness and professionalism, supporting its role as a government cultural program.

R

Robinson Club GmbH

robinson.com

63

Robinson Club GmbH operates a hospitality business focused on resort holidays catering to families, couples, and singles. Their offerings include sports, childcare, wellness, and entertainment events, positioning them as a well-established player in the holiday resort market primarily in Germany. The website is built on TYPO3 CMS with modern web technologies including PWA support and uses third-party marketing tools such as Optimizely for optimization and Gigya for user engagement. Social media presence is strong and verified, enhancing brand trust. From a technical perspective, the website demonstrates moderate to good performance with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms, which is a notable gap given GDPR requirements. WHOIS data is missing or unavailable, which reduces domain trustworthiness and raises questions about domain registration transparency. However, the website content and official social media links support legitimacy. Overall, the site is professionally designed and functional but requires improvements in privacy compliance and security transparency to enhance trust and regulatory adherence.

K

Kulturstiftung Basel H. Geiger | KBH.G

kbhg.ch

46

Kulturstiftung Basel H. Geiger (KBH.G) is a small non-profit cultural foundation based in Basel, Switzerland, focused on contemporary art exhibitions and public cultural programs. The website presents a professional and consistent brand image with clear navigation and relevant content targeting art enthusiasts and the general public interested in cultural events. The business model centers on hosting exhibitions and related public programs, positioning itself as a regional cultural institution with a specialized audience. Technically, the site uses a modern but simple tech stack including jQuery, Slick Carousel, Material Design Icons, and Matomo analytics, providing a good user experience with moderate performance and mobile optimization. Security posture is adequate with HTTPS usage and privacy-respecting analytics, but lacks published privacy and cookie policies, security headers, and explicit incident response contacts. Overall, the site is trustworthy and safe with no adult or questionable content detected.

G

GWeb Solutions GmbH

gweb.de

62

GWeb Solutions GmbH is a German-based digital transformation consultancy specializing in helping organizations digitize their processes and structures. With over 12 years of experience and more than 450 completed projects, the company positions itself as a reliable and experienced partner in the technology sector. Their website reflects a professional image with a clear focus on digital innovation and client success. The company targets organizations seeking to modernize and digitally transform their operations. Technically, the website employs modern web technologies including jQuery, FontAwesome, and integrates privacy-conscious tools such as self-hosted Matomo analytics and Google reCAPTCHA for form protection. The presence of a comprehensive cookie consent mechanism and privacy policy indicates good GDPR compliance. Security-wise, while HTTPS is used and forms are protected with reCAPTCHA, the site lacks visible security headers and published security policies, suggesting room for improvement in security posture. Overall, the website is well-designed, user-friendly, and trustworthy, with no signs of malicious content or blocking mechanisms.

T

tipic.swiss

tipic.ch

68

tipic.swiss is a small Swiss digital agency specializing in web development and graphic design, primarily serving clients in the Graubünden region. The company offers a range of digital and print services, emphasizing accessible technology solutions and professional design. Their website showcases a portfolio of selected projects and client logos, indicating a solid regional presence and trusted partnerships. Technically, the website is built on the Webflow platform, utilizing modern web technologies including jQuery and Lottie animations. The site is well-optimized for performance, mobile responsiveness, and SEO, with a clean and professional design. Cookie consent and privacy policies are implemented, reflecting awareness of privacy compliance requirements. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism but lacks explicit security headers and a published security policy or incident response contacts. The WHOIS data is privacy protected, which is common and justified for this business type. No suspicious indicators or vulnerabilities were detected in the provided content. Overall, tipic.swiss presents a trustworthy and professional digital presence with good technical maturity and privacy compliance. Strategic improvements in security headers and incident response transparency could further enhance their security posture and trustworthiness.

F

FAGLIG UTVIKLINGSSENTER FOR GRØNTANLEGGSSEKTOREN FAGUS

fagus.no

58

FAGUS.no represents a professional development center dedicated to the green landscaping sector in Norway. The organization acts as an independent umbrella entity facilitating collaboration and knowledge sharing among professionals involved in outdoor environment planning, construction, and management. Their key services include knowledge dissemination through publications, advisory services, and organizing industry events. The website is built on the Squarespace platform, featuring a professional design with good mobile optimization and clear navigation. The technical infrastructure includes modern web technologies and integration with Facebook Pixel for marketing analytics. Security posture is strong with HTTPS and HSTS enabled, though additional security headers could enhance protection. Privacy compliance is moderate, with a cookie consent banner present but lacking explicit privacy and terms of service documents. Overall, the website reflects a legitimate, small-sized non-profit organization with a clear focus and trustworthy presentation.

S

Schweizerische Bundeskanzlei (BK)

digitaldialog.swiss

55

The website digital.swiss is the official platform for the Swiss Federal Administration's Digital Switzerland Strategy, outlining the country's digital transformation guidelines. It targets government entities, cantons, communes, businesses, science, and civil society, providing strategic documents, monitoring, and news updates. The site is professionally designed with consistent branding and clear navigation, reflecting its authoritative government role. Technically, it uses standard web technologies including jQuery, Bootstrap, and Google Tag Manager with IP anonymization, hosted by Hostpoint. Security posture is good with HTTPS enabled but lacks advanced security headers and explicit privacy and cookie policies, indicating room for compliance improvement. WHOIS data confirms the domain's legitimacy and government ownership, with no signs of blocking or WAF interference. Overall, the site is trustworthy and serves as a key information hub for Switzerland's digital strategy.

S

Schweizerische Bundeskanzlei (BK)

digital.swiss

54

The website digital.swiss is the official platform for the Swiss Federal Government's Digital Switzerland Strategy, providing guidelines and updates on Switzerland's digital transformation. It targets government entities, cantons, businesses, science, and civil society, aiming to promote digital innovation and governance. The site offers strategic documents, monitoring reports, and news on focus areas such as artificial intelligence, cybersecurity, and open source software. Technically, the site uses a modern but simple tech stack including jQuery, Bootstrap, and Google Tag Manager, hosted by Hostpoint. The site is mobile optimized and professionally designed, though some accessibility and SEO aspects could be improved. Security posture is good with HTTPS and anonymized analytics, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent with the Swiss Federal Chancellery, enhancing trust. Recommendations include publishing privacy and cookie policies, enabling DNSSEC, and adding security headers to improve compliance and security.

S

Stellare Agency

stellare.global

49

Stellare Agency is a small technology-focused digital agency based in St. Moritz, Switzerland, specializing in web development, SEO, and Webflow solutions. The website presents a professional but minimal online presence targeting local businesses or individuals seeking digital services in the Engadin region. The technical infrastructure is built on the Webflow platform with jQuery, indicating a modern but straightforward tech stack. Performance and mobile optimization are adequate, though accessibility and SEO optimizations are basic. Security posture is moderate with no HTTPS or security headers explicitly detected in the provided data, and no privacy or cookie policies are present, which may impact compliance. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the website is functional but lacks comprehensive security and privacy features, limiting its credibility and compliance standing.

V

Verein Mesh Festival

meshfestival.ch

52

Mesh Festival is a Swiss non-profit cultural event focusing on the intersection of art and technology. It is organized by a consortium of educational and cultural institutions including HEK, FHNW, and iart. The festival explores digital spatial utopias and immersive public spaces, targeting artists, technologists, and the general public interested in cultural innovation. The website is professionally designed, mobile-optimized, and provides clear information about the festival, its partners, and contact details. Technically, it uses modern JavaScript libraries such as jQuery and Socket.io, and integrates Mailchimp for newsletter subscriptions. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and incident response information are lacking. Overall, the site is trustworthy and well-maintained, reflecting the festival's reputable institutional backing.

S

SOLUTRANS

solutrans.fr

63

SOLUTRANS is a prominent biennial trade fair and exhibition dedicated to industrial and urban vehicles, held in Lyon, France. It serves as a global crossroads for professionals in road and urban transport, showcasing innovations in energy transition, digitalization, and regulatory compliance. The event is organized by Comexposium and supported by key industry partners such as Michelin and Aramco. The website provides comprehensive information about the event, exhibitors, conferences, and practical visitor details, supported by a modern technical infrastructure including Sitecore CMS, Bootstrap, and compliance tools like OneTrust.

M

Musikhaus Bucher AG

musikbucher.ch

49

Musikhaus Bucher AG is a well-established Swiss retail business specializing in wind instruments, accessories, rentals, and repairs, operating since 1978. The company targets musicians of all levels primarily in the Zürich Nord region, offering both physical store services and an online shop. Their market position is that of a trusted local specialist with a strong customer service focus and a comprehensive product and service range. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and tracking tools such as Google Analytics and Facebook SDK, providing a responsive and user-friendly experience. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and incident response information are absent. Privacy compliance is addressed with visible cookie consent and privacy policies, aligning with GDPR requirements. Overall, the website is professional, trustworthy, and well-maintained, supporting the company's credibility and business goals.

B

Bühler Geigenbau

buehler-geigenbau.ch

51

Bühler Geigenbau is a specialized violin making atelier based in Winterthur, Switzerland, offering a range of services including instrument rental, sales, repairs, and restorations focused on string instruments such as violins, violas, cellos, and double basses. The business targets musicians and students seeking quality handcrafted and factory instruments along with accessories. The website is professionally designed using Webflow CMS and modern web technologies, providing clear navigation and relevant content. The technical infrastructure is solid with HTTPS enabled and minimal tracking via Plausible Analytics, reflecting a moderate digital maturity. Security posture is generally good with no visible vulnerabilities or exposed sensitive data; however, the absence of security headers and formal security policies indicates room for improvement. Privacy compliance is basic, lacking cookie consent mechanisms and detailed GDPR compliance indicators. Overall, the website presents a trustworthy and professional image appropriate for a small local business in the musical instrument sector.

C

Climatec, LLC

climatec.com

63

Climatec, LLC is a well-established provider of building technology and energy efficiency solutions, serving primarily commercial and public sector clients. Founded in 1975 and a member of the Robert Bosch family since 2015, Climatec offers key services including Energy Services, Building Automation, and Security + Life Safety. The company positions itself as a trusted partner for building safety, comfort, and efficiency across the United States. Technically, the website is built on modern web technologies including Webflow CMS, jQuery, and Google Tag Manager, with good mobile optimization and moderate performance. The site uses HTTPS and Google reCAPTCHA for form security, but lacks explicit HTTP security headers and publicly available security policies, which could be improved to enhance security posture. From a security perspective, the site shows a moderate maturity level with no critical vulnerabilities detected in the provided data. However, the absence of WHOIS domain registration data raises concerns about domain transparency and trustworthiness. The presence of a suspicious external script domain also suggests the need for further security review. Overall, Climatec's website is professional and trustworthy in content and design, but improvements in domain registration transparency and security headers are recommended to strengthen its security posture and compliance. Strategic focus on publishing security policies and incident response information would further enhance trust and compliance.

B

Bloom Facilities Management

bfm.ae

38

Bloom Facilities Management is a UAE-based company specializing in providing comprehensive facilities management services to both corporate and residential clients. Their offerings include corporate services, residential services, project management, innovation initiatives, and business excellence programs. The company positions itself as a professional and customer-centric service provider within the UAE market. Technically, the website is built on Concrete CMS, uses modern JavaScript libraries such as jQuery and jQuery UI, and integrates Google Analytics and Google reCAPTCHA for analytics and security respectively. The site is hosted under Etisalat's registrar and nameservers, consistent with its UAE location. Security posture is solid with HTTPS enforced and spam protection on forms, though there is room for improvement in security headers and published security policies. Privacy and cookie policies are not found, indicating a compliance gap. Overall, the website is professional and functional with moderate tracking and good user experience.

K

Kanton Basel-Stadt, Fachstelle Integration und Antirassismus

hallo-baselstadt.ch

42

The website 'Hallo Baselstadt' is an official government portal managed by the Kanton Basel-Stadt, Fachstelle Integration und Antirassismus. It serves as an informational resource for newcomers to the Basel-Stadt canton, providing multilingual content on integration, social services, housing, education, and emergency contacts. The site targets immigrants and new residents, aiming to facilitate their integration and access to local services. The business model is public service-oriented, with no commercial activities, positioning it as a trusted government information source. Technically, the website is built using the Webflow CMS platform and incorporates modern JavaScript libraries such as jQuery and MediaElement.js. It employs Matomo analytics with IP anonymization, reflecting a privacy-conscious approach. The site is mobile-optimized and features a clear navigation structure with a comprehensive sitemap. However, some technical improvements are possible, including the addition of security headers and enhanced accessibility features. From a security perspective, the site uses HTTPS with a strong SSL configuration, ensuring secure data transmission. The use of Matomo with anonymized IPs is a positive privacy measure. However, the absence of explicit privacy and cookie policies, lack of security headers, and missing contact information for security incidents represent areas for improvement. No vulnerabilities or suspicious elements were detected in the provided content. Overall, the website demonstrates a solid foundation in content quality, business credibility, and technical implementation, but could enhance privacy compliance and security posture. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, implementing security headers, and providing clear contact channels for security and privacy concerns to strengthen trust and compliance.

Radio1 AG operates a regional adult-oriented radio station based in Zürich, Switzerland, providing live radio streaming, podcasts, events, and promotional activities. The website is professionally designed with clear navigation and content targeted at mature audiences. The business maintains a consistent brand presence and provides transparent contact information, enhancing trust and credibility. Technically, the site uses modern web technologies such as jQuery and Slick Carousel, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers are absent and no formal security policy or incident response contacts are published. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

H

Horace

horace.it

49

Horace is a small Italian advertising agency specializing in strategic, creative, and media consultancy to help businesses uniquely position their brands. The website showcases a professional portfolio with detailed case studies and uses WordPress CMS with standard plugins for social sharing and cookie compliance. The technical infrastructure is modern with HTTPS and DNSSEC enabled, and the site demonstrates good privacy compliance with clear policies and consent mechanisms. Security posture is solid with no critical vulnerabilities detected, though additional HTTP security headers could enhance protection. Overall, the website is professional, trustworthy, and well-maintained, suitable for its target audience of businesses seeking advertising and communication services.

W

Westermann Gruppe

grundschuldiagnose.de

55

The website grundschuldiagnose.westermann.de is a professionally developed educational platform operated by the Westermann Gruppe, targeting German primary school educators with online diagnostic tests and differentiated learning materials for German and Mathematics. The platform offers subscription-based licenses for classes, schools, and school districts, supported by a centralized student management system and integration with partner educational services. The site is built on TYPO3 CMS with modern frontend technologies, providing a responsive and accessible user experience. Security posture is solid with HTTPS enforced, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a clear privacy policy but no cookie consent mechanism detected. Contact information is clearly provided, and the site holds a child-safe certification (fragFINN). Overall, the site is trustworthy, well-branded, and serves a clear educational niche.

G

Genolve

genolve.com

54

Genolve operates as an AI-assisted design platform specializing in generating AI images, videos, and graphics from user input phrases. The website targets creative professionals and enthusiasts seeking to leverage AI technologies for content creation, offering tools such as AI image and video generators, WordPress plugins, and social media graphic makers. The platform integrates modern web technologies and Google services to enhance user experience and authentication. However, the absence of WHOIS registration data and lack of visible privacy or cookie policies present concerns regarding domain legitimacy and compliance. The site is visually appealing, mobile-optimized, and provides a moderate level of technical sophistication.

V

VIZUAL Grafik und Code GmbH

vizual.ch

51

VIZUAL Grafik und Code GmbH is a Swiss-based agency specializing in visual and digital communication, offering services in graphic design, user-friendly websites, and practical applications. The company positions itself as a niche provider focusing on the harmonious integration of form, content, and functionality, targeting businesses and organizations seeking professional digital communication solutions. The website is built on TYPO3 CMS and incorporates modern web technologies such as jQuery, GSAP, and Flickity, reflecting a moderate to advanced digital maturity. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit incident response policies are absent. Privacy compliance is basic with a privacy policy present but lacking a cookie consent mechanism. Overall, the website and domain registration data indicate a legitimate, professional small agency with a solid online presence.

W

Warner Music Australasia

warnermusic.com.au

10

Warner Music Australasia operates as a major regional division of Warner Music Group, focusing on music production, artist promotion, and brand partnerships within Australia and New Zealand. The website reflects a professional and enterprise-grade digital presence, leveraging modern web technologies such as Webflow CMS, Adobe DTM for analytics, and OneTrust for privacy compliance. The site is well-structured, mobile-optimized, and provides comprehensive privacy and cookie policies with active consent mechanisms. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. The lack of public WHOIS data introduces some uncertainty about domain registration transparency but does not detract significantly from the site's legitimacy given the strong branding and content quality. Overall, the site demonstrates a mature digital infrastructure suitable for a large media enterprise.

B

Bischof Alois Schwarz

alois-schwarz.at

56

The website 'alois-schwarz.at' serves as an informational and religious platform dedicated to Bischof Alois Schwarz, providing sermons, gospel interpretations, videos, and event information primarily targeted at a German-speaking Austrian audience. The site is built on WordPress with a custom theme and leverages modern web technologies including Yoast SEO Premium for search optimization and Font Awesome for iconography. Social media integration is present with official Facebook, Instagram, and LinkedIn profiles linked. Technically, the site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal policies for privacy and cookies, which are compliance gaps. No contact information or incident response channels are explicitly provided, limiting direct communication avenues. Overall, the site is professionally presented with consistent branding and trustworthy domain registration data, but would benefit from enhanced privacy compliance and security best practices.

U

updoc

updoc.com.au

60

Updoc is a reputable Australian telehealth platform founded in 2020, providing accessible online medical consultations including medical certificates, prescriptions, and specialist referrals. The platform leverages a network of AHPRA-registered doctors to deliver healthcare services digitally, targeting Australians seeking convenient healthcare solutions. The website demonstrates strong market positioning with over 200,000 users and multiple trust indicators such as ISO 27001 certification and LegitScript approval. Technically, the site is built on Webflow with modern analytics and marketing integrations, delivering a fast, mobile-optimized, and user-friendly experience. Security posture is solid with HTTPS and certifications, though improvements in security headers and vulnerability disclosure are recommended. Overall, Updoc presents a professional, trustworthy, and compliant telehealth service with room for enhanced privacy compliance and security transparency.

E

Epipoli S.p.A

epipoli.com

65

Epipoli S.p.A is a well-established Italian company specializing in prepaid cards, gift cards, and loyalty solutions, serving both consumers and businesses. With over 20 years of experience and presence in more than 70,000 retail points across Europe, Epipoli positions itself as a leading enabler of alternative payment methods and customer engagement platforms. Their services include payment solutions, gift card programs, and loyalty platforms tailored for retail and corporate clients. The website reflects a professional and comprehensive digital presence, with clear navigation, rich content, and strong branding consistency. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Fonts, jQuery, and Google Tag Manager for analytics. The site is mobile-optimized and accessible, with a cookie consent mechanism compliant with GDPR regulations. Hosting appears to be via Amazon CloudFront, ensuring reliable content delivery. However, some security best practices like explicit security headers are not evident from the provided data. From a security perspective, the site uses HTTPS and implements a granular cookie consent banner, indicating attention to privacy compliance. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of WHOIS registration data for the domain www.epipoli.com raises concerns about domain legitimacy and trustworthiness, despite the professional appearance of the website and business information. Overall, the website presents a low to moderate risk profile with strong business credibility but requires verification of domain registration details and enhancement of security headers. Strategic recommendations include publishing a security policy, adding vulnerability disclosure information, and improving transparency around domain registration to bolster trust.

S

Sprachenatelier Berlin [isk] gGmbH

sprachenatelier-berlin.de

53

Sprachenatelier Berlin [isk] gGmbH is a small, established language school located in Berlin, Germany, specializing in German language courses from beginner to advanced levels (A1 to C2), including telc German exams and over 50 foreign language offerings. The school provides both onsite and online learning options, catering to international students, professionals, and language enthusiasts. Recognized by the Berlin Senate and holding multiple certifications, the institution maintains a strong market position within the education sector. The website reflects a professional and comprehensive presentation of their services, pricing, and cultural programs, targeting a broad audience seeking language education in Berlin. Technically, the website is built on the KONTEXT-CMS platform, utilizing modern web technologies such as jQuery, Google Analytics, Google Tag Manager, and Matomo for analytics. The site is mobile-optimized with good SEO practices and moderate performance. Hosting is provided by warenform.de, consistent with the domain's nameservers and analytics endpoints. From a security perspective, the site enforces HTTPS with an excellent SSL configuration and avoids exposing sensitive data. However, it lacks visible security headers and does not provide explicit security policies or incident response contacts. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism, which is a GDPR compliance gap. The business credibility is high, supported by clear contact information, certifications, and professional content. Overall, the website is trustworthy, well-maintained, and suitable for its educational purpose. Strategic improvements in privacy compliance and security transparency would enhance its security posture and regulatory adherence.

C

Caren Lay MdB

caren-lay.de

49

The website www.caren-lay.de represents Caren Lay, a member of the German Bundestag affiliated with the DIE LINKE party. It serves as a political communication platform focusing on housing policy, social issues, and club policy. The site provides articles, brochures, and information about her political work and positions. The target audience is German-speaking citizens interested in left-wing politics and social housing matters. The business model is centered on political representation and public engagement. Technically, the site is built on KONTEXT-CMS 3.9.9, uses modern frontend technologies such as Tailwind CSS and FontAwesome, and includes jQuery 3.5.1. Hosting is provided by Warenform, with CDN usage for fonts and images. The site is mobile optimized and has good SEO practices. Analytics are handled by Matomo with an opt-in cookie consent mechanism, reflecting a privacy-conscious approach. From a security perspective, the site enforces HTTPS and uses cookie consent with opt-in for tracking. However, it lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent and legitimate, supporting trustworthiness. Overall, the site demonstrates a good security posture but could improve by adding security headers and incident response information. The overall risk is low given the nature of the site as a political information platform with no sensitive transactions or personal data collection beyond a contact form. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen trust and compliance.

The Greens/EFA in the European Parliament website represents a political group focused on human rights, democracy, and climate justice within the EU. The site offers comprehensive information about their policies, members, publications, and campaigns, targeting European citizens and stakeholders interested in green politics. The website is well-structured, multilingual, and professionally designed, reflecting a mature digital presence. Technically, the site uses the Contao CMS with modern frontend frameworks like Bootstrap 4 and jQuery. It employs privacy-conscious analytics (Matomo) with cookies disabled, indicating a strong commitment to user privacy. The site is mobile-optimized and accessible, with good SEO practices. Security-wise, the site enforces HTTPS and avoids exposing sensitive data. However, no explicit security headers were detected, and no dedicated security or incident response pages are present. The WHOIS data is unavailable due to privacy protection, which is typical and justified for political organizations. Overall, the security posture is solid but could be enhanced with additional headers and transparency. The website poses low risk, is trustworthy, and serves as a credible source for political advocacy. Strategic recommendations include adding security headers, publishing incident response information, and implementing a vulnerability disclosure policy to further strengthen trust and security.

A

Airship Services Ltd.

joinerskitchen.co.uk

52

Joiners Kitchen is a demo and marketing website created by Airship Services Ltd. to showcase their CRM and guest engagement platform tailored for the hospitality industry. The site highlights personalized customer journeys, integration with booking and WiFi systems, and feedback collection to enhance guest experiences and drive revenue. The target audience includes hospitality businesses seeking advanced CRM solutions. Technically, the site is built on Webflow CMS with modern frontend technologies and hosted on Webflow's CDN, providing good performance and mobile optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers and privacy policies are lacking. The absence of WHOIS data due to a domain query error reduces trust somewhat, but the professional content, partner logos, and testimonials support credibility. Overall, the site is a well-executed marketing tool with room for improvement in privacy compliance and security best practices.

E

Esselunga

esselungajob.it

73

Esselungajob.it is the official career portal for Esselunga, a leading Italian retail company. The website provides job listings, career information, and application capabilities targeted at job seekers primarily in Italy. The site is professionally designed, mobile optimized, and uses modern web technologies including jQuery, Bootstrap, and SAP SuccessFactors platform components. Privacy and cookie policies are implemented with GDPR compliance in mind, including a cookie consent banner with accessibility features. Security posture is good with HTTPS enforced and anti-clickjacking measures, though DNSSEC is not enabled and some advanced security headers could be added. No explicit contact or incident response information is publicly available. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the site is a trustworthy and professional recruitment platform for Esselunga.

A

Antares Project GmbH

antares.net

55

Antares Project GmbH is a German company specializing in advancing digital education through its Edupool platform, which facilitates easy and fast lesson planning and a marketplace for educational media and apps. The company has a strong presence across all German federal states and is used by a majority of schools in Germany. Supported by partnerships with major educational publishers and Deutsche Telekom AG, as well as funding from the EU and regional government, Antares positions itself as a key player in the digital education sector. Technically, the website is built on modern web technologies using Webflow CMS and includes minimal but effective analytics via Plausible, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied, but lacks advanced security headers and explicit policies. Privacy compliance is reasonable with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

K

Katholische Kirche Kärnten

kath-kirche-kaernten.at

67

Katholische Kirche Kärnten operates as the official online portal for the Catholic Church in the Kärnten region of Austria, providing daily news, event information, and community engagement tools for its audience. The website serves as a comprehensive resource for parishioners and interested individuals, offering spiritual content, organizational updates, and access to church services and events. The platform maintains a consistent brand identity and high content quality, reflecting its role as a trusted religious institution's digital presence. Technically, the website employs a modern tech stack including jQuery, Slick Slider, and Google Analytics, with a responsive design optimized for mobile devices. The site uses HTTPS with strong SSL configuration and incorporates privacy and cookie consent mechanisms, demonstrating compliance with GDPR and user privacy standards. While no explicit security policies or incident response contacts are published, the site follows good security practices such as CSRF protection and encrypted form submissions. Security posture is solid with no detected vulnerabilities or suspicious domains linked. The site integrates social media channels effectively and maintains transparency through an impressum and privacy policy. Overall, the website is professional, trustworthy, and well-maintained, supporting the Catholic Church's mission in the region. Recommendations include enhancing security headers, publishing a formal security policy or incident response contact, and considering a terms of service page to further improve compliance and user trust.

C

Caritas

ife-austria.at

64

The website www.ife-austria.at represents an established non-profit organization under Caritas Austria, focused on facilitating international volunteer deployments in social projects across multiple continents. It targets individuals seeking meaningful volunteer experiences abroad, providing structured programs, risk assessments, and support. The site is well-branded, consistent, and offers comprehensive information about its services and deployment locations. Technically, the site is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Swiper, and integrates Sentry for error monitoring. It demonstrates good mobile optimization, accessibility, and SEO practices. The presence of a detailed cookie consent mechanism and GDPR-compliant privacy policy reflects a mature approach to privacy compliance. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities. However, explicit security policies and incident response information are not published, which could be improved. Analytics and tracking are implemented responsibly with user consent. Overall, the site is professional, trustworthy, and secure, with minor areas for enhancement in transparency around security policies and direct contact information.

C

Caritas Schulen

caritas-schulen.at

66

Caritas Schulen is a well-established non-profit educational institution in Austria specializing in social, health, and care profession training for youth and adults. The website reflects a professional and accessible platform with comprehensive educational offerings and strong cooperation with social organizations. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes accessibility and SEO best practices. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are absent. Overall, the site is trustworthy and compliant with GDPR, serving its target audience effectively.

C

Caritas

carla.at

68

The website www.carla.at represents the Caritas organization’s second-hand shops and service offerings across Austria. It emphasizes social responsibility, sustainability, and support for people in need through a network of regional shops and services. The site is well-branded, consistent with Caritas Austria’s identity, and targets socially conscious consumers and donors. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates accessibility features and cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and use of Sentry for monitoring, though some security headers could be improved. Privacy compliance is strong with GDPR-aligned cookie consent and a comprehensive privacy policy. Overall, the site is professional, trustworthy, and well-positioned within the non-profit sector in Austria.

C

Caritas Österreich

patenschaften.at

68

Caritas Österreich operates the website patenschaften.at to promote and facilitate child sponsorships and humanitarian aid projects primarily in Africa and Asia. The organization is a well-established non-profit entity in Austria, focusing on providing sustainable support to children, hunger relief, and disaster response. The website serves as a donation and information platform targeting donors and supporters interested in charitable sponsorships. Technically, the site is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Swiper for UI components, and integrates Sentry for error monitoring and Google Analytics for visitor insights. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security-wise, the website enforces HTTPS, employs standard security headers, and uses a robust cookie consent mechanism compliant with GDPR. However, it lacks publicly available security policies or incident response contacts, which could enhance trust and preparedness. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission, with recommendations to publish explicit security and vulnerability disclosure policies to further strengthen its security posture.

C

Caritas

caritas-jobs.at

68

Caritas Jobs is a well-established non-profit platform operated by Caritas Austria, focusing on providing job opportunities in social services, healthcare, and community support sectors. The website is professionally designed, with clear navigation and strong branding consistent with the Caritas organization. It targets job seekers interested in social and healthcare professions within Austria. The platform offers comprehensive information about career paths, internships, and volunteer opportunities, positioning itself as a leading resource in the Austrian social services job market. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries such as jQuery and Swiper.js for interactive elements. It integrates multiple third-party services including Google Analytics, Facebook Pixel, and Sentry for analytics and error monitoring. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While no explicit security policy or incident response contacts are published, the use of Sentry indicates proactive error monitoring. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of HTTP security headers and a security.txt file suggests room for improvement in security posture. Overall, Caritas Jobs presents a trustworthy, professional, and privacy-conscious web presence suitable for its non-profit mission. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and providing clearer contact information for security incidents to further strengthen trust and compliance.

C

Campus Berlin-Buch GmbH

berlinbiocube.de

57

BerlinBioCube is a specialized startup center focused on providing modern laboratory and office spaces for biotech and medtech companies within the Campus Berlin-Buch ecosystem. The website presents a professional image with clear business offerings, including event series to foster collaboration between science and industry. The technical infrastructure is modern, leveraging Bootstrap, jQuery, Video.js, and a privacy-conscious analytics solution (Matomo). Security posture is adequate with HTTPS and cookie consent implemented, though additional security headers and policies could enhance protection. Overall, the website is trustworthy, well-branded, and serves its target audience effectively.

M

Musikschule der Seegemeinden

musikschule-seegemeinden.ch

48

The Musikschule der Seegemeinden website represents a local Swiss music school serving the municipalities of Weggis, Vitznau, and Greppen. It offers a variety of music education services including instrumental lessons, singing, ensembles, and youth and adult education. The institution is supported by the local municipalities and targets children, youth, and adults residing in these areas. The website is built on TYPO3 CMS and uses modern web technologies such as jQuery and Google Analytics. The design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content focused on music education. However, the site lacks visible privacy and cookie policies, which impacts GDPR compliance and user trust.

L

Logbase

logbase.io

63

Logbase is a technology company specializing in developing Shopify apps designed to help e-commerce businesses grow by increasing sales, improving customer engagement, and streamlining logistics. Their product suite includes apps for upselling, shipping rate calculation, local delivery scheduling, appointment booking, volume discounts, and preorder management. The company targets Shopify store owners and e-commerce businesses, positioning itself as a popular and trusted app provider with a substantial customer base and positive user reviews. Technically, Logbase's website is built on the Webflow platform, leveraging modern web technologies such as Google Fonts, jQuery, and integration with third-party services like Tawk.to for live chat and Google Analytics for tracking. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience with clear navigation and professional design. From a security perspective, the website enforces HTTPS and includes domain verification mechanisms for Google and Facebook, indicating a baseline of security hygiene. However, it lacks explicit security headers and published security policies or incident response contacts, which are areas for improvement. The absence of a cookie consent mechanism also suggests partial GDPR compliance. Overall, Logbase presents a low-risk profile with strong business credibility and technical maturity. The main limitation is the lack of publicly available WHOIS data due to privacy protection, which slightly reduces domain trust verification. Strategic recommendations include enhancing security transparency, implementing cookie consent, and publishing incident response information to further strengthen trust and compliance.

M

404 Not Found

mypromomall.com

46

The website www.mypromomall.com currently serves only a 404 Not Found error page with minimal content and no business or contact information. The domain WHOIS data is unavailable, indicating the domain may be unregistered, expired, or otherwise inactive. The presence of an Incapsula WAF script suggests some level of security protection, but the lack of meaningful content and policies severely limits the website's credibility and usability. Technically, the site uses jQuery 3.5.1 but lacks modern SEO, accessibility, and security best practices. Overall, the site is not operational as a business platform and presents a high risk for trust and legitimacy.

D

Deutsches Hochschulkonsortium für Internationale Kooperationen

dhik.org

55

The Deutsches Hochschulkonsortium für Internationale Kooperationen (DHIK) operates as a consortium of 37 German universities facilitating international academic cooperation, primarily focusing on student exchange and double degree programs with partner institutions in China, Mexico, India, and South Africa. The website is professionally designed, content-rich, and targets students and academic institutions interested in international study opportunities. Technically, the site is built on WordPress with common plugins and uses Piwik for analytics, showing a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers are missing and no explicit incident response or vulnerability disclosure policies are found. Overall, the website is trustworthy and aligns well with its educational mission.

X

XO Life GmbH

medikura.com

68

XO Life GmbH operates a sophisticated digital health platform called brite™, designed to connect pharmaceutical and medical product manufacturers with patients and healthcare experts. The platform offers a unique One-Stop-Shop solution for digital product and therapy support, content publishing, real world data insights, and pharmacovigilance services. Positioned as an innovative leader in healthcare technology, XO Life targets pharma companies and patients seeking enhanced treatment support. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the website is built on Webflow CMS and integrates modern analytics tools such as Google Tag Manager and Microsoft Clarity. It demonstrates fast performance, excellent mobile optimization, and good accessibility features. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and incident response information suggests room for improvement. The WHOIS data is notably incomplete or unavailable, which raises some concerns about domain registration transparency. However, the website's extensive partner network, certifications, and professional content strongly support its legitimacy. Overall, XO Life presents a credible and trustworthy digital health business with a solid technical foundation and good privacy compliance. Strategic recommendations include enhancing security headers, publishing a formal security policy and incident response contacts, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

C

Caritas Wien

carla-wien.at

66

carla Wien is a social enterprise operated by Caritas Wien, focused on running second hand shops that convert donated goods into employment opportunities and environmental benefits. The organization targets socially disadvantaged individuals and low-income customers, providing discounted goods and social integration services. The website is built on TYPO3 CMS with modern frontend technologies and includes accessibility features and a comprehensive cookie consent mechanism. Security posture is strong with HTTPS and error monitoring via Sentry, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent management. Overall, the site reflects a professional, trustworthy non-profit organization with a clear social mission.

C

Caritas

internationalerfreiwilligeneinsatz.at

64

The website www.ife-austria.at represents an Austrian non-profit organization affiliated with Caritas, focused on facilitating international volunteer deployments in social projects across Africa, Asia, Latin America, and Europe. It targets individuals interested in meaningful volunteer experiences abroad, providing program information, preparation guidance, and safety risk assessments. The site is well-branded, consistent, and offers a good user experience with clear navigation and accessibility features. Technically, the site is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries such as jQuery and Swiper, and integrates third-party services including Google Analytics, Facebook Pixel, and Sentry for monitoring. The site is mobile-optimized and includes a comprehensive cookie consent mechanism aligned with GDPR requirements. From a security perspective, the site enforces HTTPS and uses Sentry for error tracking, but lacks explicit security policy documentation and incident response contact details. No critical vulnerabilities or suspicious content were detected. Privacy compliance is strong, with detailed cookie and privacy policies linked to the parent Caritas site. Overall, the website demonstrates a mature digital presence suitable for a medium-sized non-profit, with recommendations to enhance security transparency and incident response readiness to further strengthen trust and compliance.

C

Caritas der Diözese Graz-Seckau

streetfootball.at

65

streetfootball.at is a non-profit initiative under Caritas der Diözese Graz-Seckau focused on social inclusion through street football in Austria. The website presents a clear mission to provide free football trainings, tournaments, and workshops for socially disadvantaged individuals in multiple Austrian cities. The project is supported by reputable partners including government bodies and financial institutions, enhancing its credibility. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS and error tracking via Sentry, though some security headers could be improved. Contact information is clearly provided, but explicit security policies and incident response details are absent. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission.

C

Caritas Steiermark

homelessworldcup.at

68

The website www.homelessworldcup.at is operated by Caritas Steiermark and serves as the Austrian portal for the Homeless World Cup, a social sports initiative promoting integration of marginalized groups through street football. The site provides information about the project, upcoming tournaments, sponsors, and contact details. It is well-branded, consistent, and targets socially marginalized individuals and supporters. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes accessibility and SEO best practices. Security posture is strong with HTTPS, cookie consent, and error monitoring via Sentry, though explicit security policies and incident response details are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.