Security Directory

O

Omise

omise.co

65

Omise is a Thailand-based financial technology company specializing in payment solutions for global businesses and financial institutions. The company offers a comprehensive suite of services including online payment acceptance, payment links, transaction management, payment orchestration, PayFac services, acquiring technology, and professional fintech consulting. Their platform integrates AI-powered efficiency tools to enhance payment processing and revenue growth. The website is professionally designed with clear navigation and modern web technologies, hosted on Webflow with asynchronous loading of analytics and tracking scripts. Security posture is strong with HTTPS and OpenID Connect authentication, though explicit security policies and privacy compliance disclosures are missing. Overall, Omise presents a credible fintech business with a solid technical foundation but could improve transparency around privacy, cookie consent, and incident response.

R

React & Share

reactandshare.com

63

React & Share is a technology company providing website feedback tools designed to help digital communications teams improve their websites through high volume, high quality user feedback. The company positions itself as a trusted provider with presence on over 3.6 million pages worldwide and offers automated reporting and actionable insights. The website is professionally designed, mobile optimized, and uses modern web technologies including Webflow and Google Tag Manager. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though the absence of security headers and cookie consent mechanisms are areas for improvement. The lack of WHOIS registration data is a notable concern that impacts domain legitimacy assessment. Overall, the website is functional, trustworthy, and compliant with GDPR, but could enhance transparency and security policies.

A

Atelier Bruno

atelier-bruno.fr

50

Atelier Bruno is a French company specializing in vehicle branding, signage, and adhesive printing services since 1988. The company offers comprehensive in-house design, production, and installation services targeting businesses seeking to promote their image through mobile and static advertising media. Their website reflects a professional and consistent brand image with clear service offerings and client testimonials, positioning them as an established local player in the transportation and manufacturing sectors. Technically, the website is built on the Webflow platform, leveraging modern JavaScript libraries and hosted on a CDN for fast performance. It is mobile-optimized with good accessibility and SEO practices. Google Analytics is integrated via Google Tag Manager for user tracking, although privacy compliance could be improved with cookie consent mechanisms. Security posture is generally good with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and lack of published security policies or incident response contacts are areas for improvement. The missing WHOIS data reduces domain trustworthiness and should be investigated to confirm domain registration legitimacy. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing privacy compliance, implementing security headers, and verifying domain registration details to strengthen trust and security posture.

S

StreamWork

streamwork.com

64

StreamWork is a SaaS company specializing in online proofing software designed for creative teams, agencies, marketing teams, and enterprises. Their platform simplifies reviews, approvals, and project management tailored to creative workflows. The company positions itself as a niche provider in the creative technology sector, offering services such as design review and approval management. The website demonstrates a professional digital presence with clear branding and comprehensive content aimed at its target audience. Technically, the website is built on Webflow CMS and integrates multiple marketing and analytics tools including HubSpot, Google Analytics, Facebook Pixel, and Hotjar. The infrastructure supports good performance and mobile optimization, with modern security practices such as HTTPS and security headers in place. However, the absence of WHOIS registrant data raises some concerns about domain registration transparency. From a security perspective, the site employs standard best practices but lacks a publicly available security policy or incident response contact information. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The extensive use of tracking and marketing tools indicates a mature digital marketing strategy but requires ongoing vigilance to maintain privacy compliance. Overall, StreamWork presents a trustworthy and professional online presence with minor gaps in domain transparency and explicit security disclosures. Strategic recommendations include publishing a security policy, adding vulnerability disclosure information, and enhancing accessibility compliance to further strengthen trust and security posture.

S

StarApps Studio

starapps.io

59

StarApps Studio is a medium-sized Indian company specializing in developing Shopify apps aimed at enhancing e-commerce store performance, particularly variant management and user experience. Founded in 2016 and operating under XPER SOFTWARES PVT LTD, the company serves over 25,000 active merchants including 1000+ Shopify Plus stores, positioning itself as a trusted Shopify app provider with a strong market presence. Their key services include automation of product variant displays, swatches, and descriptions to boost conversions and streamline store management. Technically, the website is built on Webflow CMS, leveraging modern web technologies such as jQuery, Slick Carousel, and Google Tag Manager for analytics and marketing. Hosting is via AWS Cloudfront CDN ensuring good performance and availability. The site is mobile optimized with good accessibility and SEO practices, though some improvements in security headers and cookie consent mechanisms are recommended. From a security perspective, the site uses HTTPS with secure form inputs but lacks explicit security headers and publicly available security or incident response policies. WHOIS data is privacy protected, which is common and justified for this business type, but limits domain age verification. Overall, the security posture is moderate with room for improvement in compliance and transparency. The overall risk is low with no suspicious content or vulnerabilities detected. Strategic recommendations include implementing security headers, adding cookie consent for GDPR compliance, and publishing security policies to enhance trust and compliance posture.

L

Loox

loox.io

70

Loox is a well-established social proof marketing platform specializing in product reviews and customer referrals for Shopify and Shopify Plus merchants. Serving over 100,000 merchants, it offers visual review collection and referral marketing tools to enhance brand credibility and sales. The website demonstrates a professional and consistent brand presence with excellent design and user experience, targeting e-commerce businesses on Shopify. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, and multiple analytics and advertising pixels, indicating a mature digital infrastructure. Security posture is good with HTTPS and standard tracking protections, though explicit security policies and incident response contacts are absent, representing an area for improvement. Privacy compliance is basic, lacking visible privacy and terms policies, which should be addressed to meet regulatory standards fully. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

B

Belco

belco.io

67

Belco is a Dutch company specializing in customer service software tailored for webshops and e-commerce businesses. Established in 2014, it holds a strong market position as a leading provider of integrated communication management solutions that centralize multiple channels such as email, WhatsApp, and social media. The website reflects a mature SaaS business model targeting medium-sized e-commerce clients, emphasizing ease of use, integration capabilities, and customer satisfaction. The company leverages modern web technologies including Webflow CMS, Google Tag Manager, and various analytics and marketing tools to deliver a performant and user-friendly digital experience. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response details are not publicly disclosed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR, supported by customer testimonials and case studies.

S

Scaleflex

cloudimage.io

63

Cloudimage, operated by Scaleflex, is a specialized SaaS provider offering an advanced image and video CDN optimization platform. The company targets developers, e-commerce platforms, and enterprises seeking to improve web performance, SEO, and user experience through dynamic media optimization. Their service includes resizing, compression, AI background removal, and multi-CDN acceleration, supported by front-end JavaScript libraries and plugins. The website demonstrates a mature digital infrastructure with modern technologies such as Webflow CMS, Google Tag Manager, and Weglot for multilingual support. Security posture is strong with HTTPS enforcement and secure form handling, though explicit security headers and incident response policies are not publicly detailed. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Overall, Cloudimage presents a professional, trustworthy, and technically sound platform with a high level of business credibility and customer trust.

M

mgm technology partners

mgm-tp.com

51

mgm technology partners is an established international enterprise software company specializing in low code platforms and model-driven software engineering, targeting sectors such as public sector, retail, and industrial insurance. Their business model focuses on providing integrated software development, consulting, and security services, supported by a portfolio of related partner companies. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored for enterprise clients. Technically, the site leverages modern tools including Webflow CMS, Matomo analytics with privacy-conscious configurations, and Weglot for multilingual support, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data is a notable anomaly that slightly reduces trust but does not outweigh the overall professionalism and transparency of the site. Strategic recommendations include enhancing security transparency and publishing incident response information to further strengthen trust and compliance.

L

Logora

logora.fr

68

Logora is a specialized SaaS company providing a top-rated engagement and discussion system tailored for press and media websites. Their platform offers customizable comment spaces, debates, consultations, and automatic moderation, trusted by over 100 media references. The company emphasizes data ownership, GDPR compliance, and seamless integration with existing websites and mobile applications. Technically, the website is built on modern web technologies including Webflow CMS, Google Fonts, and various JavaScript libraries, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS and no cookies stored, though improvements could be made in security headers and incident response transparency. The absence of WHOIS data for the domain is a notable anomaly that warrants further verification. Overall, Logora presents a professional, trustworthy, and technically mature platform with strong privacy and compliance focus.

E

elink.io

elink.io

68

elink.io is a technology SaaS company specializing in content curation tools that enable users to save and edit web links and transform them into email newsletters, webpages, social bio links, and more. The platform targets a broad audience including marketing, sales, education, and remote teams, positioning itself as a comprehensive content creation solution. The website is professionally designed using modern web technologies such as Webflow, Google Analytics, and AWS hosting, reflecting a mature digital infrastructure. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers, and no explicit privacy or cookie policies were found in the analyzed content. Overall, the website is safe, professional, and trustworthy, though improvements in privacy compliance and security best practices are recommended.

A

Andreas Mourão dos Santos

andi-santos.com

64

Andreas Mourão dos Santos operates a professional freelance portfolio website showcasing expertise in creative development, design, and AI integration. The business targets clients seeking innovative web solutions combining art and technology. The website is well-designed, mobile-optimized, and provides clear navigation with a focus on portfolio presentation and client engagement via contact forms. Technically, the site uses modern web technologies including Webflow CMS, jQuery, and Swiper.js, hosted under a domain registered with IONOS SE. Security posture is solid with HTTPS enabled and cookie consent implemented, though improvements are possible by enabling DNSSEC and adding security headers. Privacy compliance is addressed with a dedicated privacy policy and cookie consent mechanism. Overall, the site reflects a credible and professional freelance business with a strong digital presence.

B

Beamer

getbeamer.com

81

Beamer is a SaaS company providing a customer communication platform focused on product releases, user engagement, and feedback collection. Their platform offers a modern changelog, NPS surveys, in-app notifications, and user onboarding solutions integrated with Userflow. The website is professionally designed, mobile-optimized, and rich in content targeting product and marketing teams in SaaS businesses. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, Heap Analytics, and Hotjar, ensuring good performance and user experience. Security posture is strong with HTTPS, security headers, GDPR compliance, and a bug bounty program, though WHOIS data is privacy protected or unavailable. Overall, the site demonstrates a mature digital presence with good privacy and security practices.

L

Logora

logora.com

68

Logora is a French-based company specializing in providing a comprehensive discussion and engagement system tailored for press and media websites. Their platform offers features such as comments, debates, consultations, automatic moderation, and customization, positioning them as a trusted solution for over 100 media references including prominent outlets like Der Spiegel and RTS. The business model is SaaS-based with subscription pricing, targeting media publishers seeking to increase subscriber growth and reader engagement. Technically, the website is built on modern web technologies including Webflow CMS, Google Fonts, jQuery, and integrates third-party tools like Calendly and Intellimize for marketing and scheduling. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and claims GDPR and DSA compliance, with no cookies stored and automatic moderation services. However, there is a lack of published security policies, incident response plans, and vulnerability disclosure information, which are areas for improvement. The absence of WHOIS data for the domain reduces trust slightly, though the professional presentation and business information mitigate concerns. Overall, Logora presents a credible and professional online presence with strong business and technical foundations. Strategic enhancements in transparency around security and privacy policies, along with verification of domain registration, would further strengthen their trustworthiness and compliance posture.

I

iPaper

ipaper.io

73

iPaper is a Denmark-based technology company specializing in digital catalog solutions that transform PDFs into interactive and shareable catalogs. With over 19 years of industry experience, iPaper positions itself as a leading platform focused on driving traffic and online sales for businesses. Their SaaS model targets companies seeking to enhance their digital marketing and sales through innovative catalog presentations. The website demonstrates a professional and consistent brand presence with clear contact information and social media engagement. Technically, the website is built on modern web technologies including Webflow CMS, Google Fonts, Typekit, and is secured and accelerated via Cloudflare. Analytics are managed through Piwik PRO, complemented by a comprehensive cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized, fast-loading, and accessible, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs cookie consent best practices. However, explicit security headers and published security policies are absent, representing areas for improvement. The WHOIS data is privacy protected, which is typical for commercial entities, though it limits direct verification of domain age and registrant details. No critical vulnerabilities or suspicious indicators were found. Overall, iPaper presents a trustworthy and professional online presence with strong privacy and compliance measures. Strategic enhancements in security transparency and incident response readiness would further strengthen their posture.

S

START Munich

startmunich.de

59

START Munich is a well-established student entrepreneurship hub based in Munich, Germany, founded in 2003. It serves as a vibrant community for students interested in startups and innovation, offering access to mentorship, incubators, venture capital, and a variety of events such as the Road to START Summit and Road to START Hack. The organization positions itself as a leading platform for nurturing the next generation of entrepreneurs in the Munich ecosystem. Technically, the website is built on Webflow with modern web technologies, optimized for performance and mobile devices, and integrates analytics and payment processing tools like Google Tag Manager and Stripe. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements can be made by adding security headers and formal security policies. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, but terms of service and incident response details are missing. Overall, the website is professional, trustworthy, and provides a positive user experience, supporting the organization's mission effectively.

E

Elli

elli.eco

77

Elli is a brand under the Volkswagen Group focused on providing comprehensive solutions in the E-Mobility and energy sectors. The company offers products such as Wallbox charging stations, sustainable electricity tariffs, and mobility services targeting both private consumers and business clients. The website reflects a strong market position with professional branding and a clear focus on sustainability and innovation in electric life. Technically, the site is built on modern web technologies including Webflow CMS, SVG animations, and video content, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy and professional, supporting Elli's business credibility as a Volkswagen Group brand.

S

START Munich & Legal Tech Colab

hacking-legal.org

57

Hacking Legal is a specialized event platform organizing a Legal Tech Hackathon in Munich, targeting students and young professionals interested in law and technology. The event is hosted by reputable organizations including START Munich, Liquid Legal Institute, and Legal Tech Colab, positioning it well within the niche legal tech innovation market. The website provides comprehensive event information, registration via a contact form, and leverages modern web technologies such as Webflow and Cloudflare Turnstile CAPTCHA for user experience and security. The domain registration aligns with the event timeline, indicating a legitimate and planned launch. Security posture is moderate with HTTPS enforced and anti-bot measures in place, but lacks DNSSEC and security headers. Privacy compliance is partial with a privacy policy linked via a partner site but no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

T

The European Alliance of News Agencies (EANA)

newsalliance.org

41

The European Alliance of News Agencies (EANA) is a well-established non-profit organization founded in 1956 that facilitates cooperation and information exchange among 33 European news agencies. The website reflects a professional and consistent brand presence, targeting media professionals and news agencies across Europe. The business model is membership-based, focusing on collaboration and industry events. Technically, the website is built on the Webflow CMS, hosted on DigitalOcean, and uses modern web technologies including Google Analytics and Tag Manager for tracking. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms. Contact information is minimal but includes a valid organizational email and social media links. Overall, the domain registration data supports the legitimacy and trustworthiness of the organization.

T

Tamara Finance Company

tamara.co

67

Tamara Finance Company operates a leading Buy Now Pay Later (BNPL) platform in the GCC region, primarily serving Saudi Arabia, UAE, Kuwait, and Bahrain. The company offers flexible payment solutions allowing consumers to split purchases into up to 24 months with no late fees, emphasizing Shariah compliance to align with regional financial ethics. Their business model targets both personal consumers and merchants, providing payment solutions that enhance sales conversion and customer loyalty. The website reflects a mature digital presence with multi-language support and extensive merchant partnerships.

C

Czech Games Edition

czechgames.com

60

Czech Games Edition (CGE) is a reputable Czech board game publisher known for popular and award-winning titles such as Codenames, Galaxy Trucker, and Lost Ruins of Arnak. The company targets board game enthusiasts and partners in the publishing and retail sectors, offering both physical and digital game products. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content about their games and partner services. Technically, the site leverages modern web technologies including Webflow CMS, Google Fonts, Swiper.js for UI components, and Usercentrics for GDPR-compliant cookie management. Security posture is strong with HTTPS enforced and bot protection via Cloudflare Turnstile, although explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data for the domain is unusual but does not detract from the overall legitimacy indicated by the website content and external references. Strategic recommendations include publishing explicit security and incident response policies and improving transparency around domain registration. Overall, CGE demonstrates a solid business and technical foundation with good privacy compliance and user experience.

P

Perspective

perspective.co

71

Perspective is a technology company specializing in mobile-first funnel building software designed to help businesses and agencies generate leads, appointments, and applications efficiently. Their platform emphasizes ease of use, speed, and conversion optimization, positioning them as a leading solution in the marketing automation space. The company targets businesses seeking streamlined funnel creation with integrated CRM and analytics capabilities. Technically, the website is built on modern frameworks such as Webflow, integrates with reputable third-party services for analytics, video hosting, and consent management, and demonstrates excellent mobile optimization and performance. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance via Cookiebot, though there is room to enhance transparency with dedicated security policies and incident response contacts. Overall, the website is professional, trustworthy, and well-structured, supporting a high level of business credibility.

D

Datatrans

customerinitiatedpayments.com

58

The website www.customerinitiatedpayments.com serves as a demonstration and informational platform for customer initiated payment solutions powered by Datatrans, a reputable Swiss payment processor. It showcases various payment integration options including hosted payment pages, secure fields, payment links, and mobile SDKs, targeting businesses seeking seamless and secure payment processing capabilities. The site is professionally designed with good content quality, clear navigation, and mobile optimization, reflecting a mature digital presence. Technically, the site is built on Webflow with modern JavaScript libraries including jQuery and Datatrans-specific secure payment scripts. It employs HTTPS with excellent SSL configuration and integrates Cookiebot for cookie consent management, indicating attention to privacy compliance. However, some security best practices such as explicit security headers and incident response information are missing, which could be improved to enhance the security posture. From a security perspective, the site demonstrates strong use of secure payment technologies and privacy policies aligned with GDPR. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, although the content and contact email align with the Datatrans brand. No critical vulnerabilities or exposed sensitive data were detected, but the lack of a security.txt or vulnerability disclosure policy limits transparency. Overall, the website presents a trustworthy and professional front for payment solutions but would benefit from improved domain registration transparency and enhanced security documentation. Strategic recommendations include implementing security headers, publishing incident response and vulnerability disclosure policies, and verifying domain registration details to strengthen trust and compliance.

D

Discord

discordapp.com

73

Discord is a leading technology company specializing in group chat, voice, and video communication primarily targeted at gamers and online communities. The platform offers a freemium business model with additional paid features through Nitro subscriptions. The website reflects a mature digital presence with excellent design, comprehensive content, and strong user engagement features. Technically, Discord employs modern web technologies including Webflow CMS, Google Tag Manager for analytics, and Cloudflare for domain registration and likely CDN services, ensuring fast performance and robust infrastructure. Security posture is strong with HTTPS enforcement, multiple security headers, and cookie consent mechanisms, although DNSSEC is not enabled and no explicit security.txt or incident response contacts were found. Overall, the site is highly professional, trustworthy, and compliant with GDPR requirements, making it a reliable platform for its users.

F

Fundrella

fundrella.com

63

Fundrella is a finance-focused digital platform designed to streamline fund selection and distribution by connecting professional investors and asset managers. The platform offers comprehensive tools for discovering, comparing, and monitoring funds, with a strong emphasis on ESG alignment and market insights. It serves a significant user base including major global asset managers and financial companies, positioning itself as a trusted resource in the investment industry. Technically, the website is built on modern web technologies including Webflow CMS, Google Fonts, and Microsoft Clarity for analytics. The site demonstrates excellent design quality, mobile optimization, and SEO practices, ensuring a fast and user-friendly experience. Hosting is managed via Webflow's CDN, contributing to good performance and reliability. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some recommended security headers and a dedicated security or incident response policy. Privacy compliance is partially addressed with clear privacy and cookie policies, though a cookie consent mechanism is absent. WHOIS data is unavailable, which slightly reduces trust but the professional content and contact details mitigate concerns. Overall, Fundrella presents a credible and professional online presence with strong business credibility and technical maturity. Strategic improvements in security headers, privacy consent, and WHOIS transparency would enhance trust and compliance.

C

Conversion Flow

conversionflow.co

51

Conversion Flow is a specialized Webflow development agency targeting SaaS companies and startups. They offer services including Webflow website development, migration from WordPress, SEO optimization, and integration with client tech stacks. The company emphasizes fast, reliable, and transparent service with a focus on helping SaaS businesses scale their marketing websites. Their market position is that of a niche agency with 4 years of experience and a portfolio of reputable SaaS clients. Technically, the website is built on Webflow with modern technologies such as Google Fonts, jQuery, and Plausible Analytics. The site is well-optimized for performance, mobile responsiveness, and SEO. Hosting is provided by Webflow's CDN, ensuring fast load times and reliable uptime. The site uses minimal tracking and integrates a third-party booking system via iframe. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security or incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. The domain uses privacy protection in WHOIS, which is justified for this business type. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe. Overall, Conversion Flow presents a professional and trustworthy front with strong business credibility and technical implementation. The main areas for improvement include enhancing privacy compliance, publishing security policies, and adding cookie consent mechanisms to align with best practices and regulatory requirements.

M

melibo

melibo.de

65

Melibo is a small technology company specializing in customer service automation solutions. Their platform aims to reduce the volume of emails, calls, and tickets by automating responses, targeting businesses seeking to improve customer support efficiency. The website is professionally designed using Webflow and integrates modern marketing and analytics tools such as Google Tag Manager, Piwik Pro, Microsoft Clarity, and Visual Website Optimizer, indicating a mature digital infrastructure. The site is hosted on Webflow's CDN, ensuring reliable performance and good mobile optimization. Security posture is solid with HTTPS enforced and Google Consent Mode implemented, although explicit security headers and detailed security policies are absent. Privacy compliance is basic, with no dedicated privacy or cookie policy pages found, but a cookie consent mechanism is present. Contact information and incident response details are not publicly available, which may impact trust. Overall, the website is safe, professional, and suitable for general audiences, with moderate user tracking and marketing transparency.

B

Berlingo Media

berlingomedia.se

53

Berlingo Media is a creative advertising agency based in Stockholm, Sweden, specializing in disruptive and alternative outdoor marketing solutions. Founded in 2020, the company offers a range of unique advertising formats including large-scale outdoor billboards, facade projections, mobile street TV advertising, and guerrilla marketing campaigns. Their market position is that of a niche player focused on innovative out-of-home advertising in the Nordic region. The website reflects a modern and professional digital presence built on Webflow, leveraging advanced animation libraries and Google Tag Manager for analytics. Security measures include HTTPS, CAPTCHA protection on contact forms, and a comprehensive cookie consent mechanism, although some security headers could be improved. Privacy compliance is strong with detailed policies and GDPR-aligned consent. Overall, the website and domain registration data indicate a legitimate, small-sized business with a clear focus and good technical maturity.

C

Coteries

coteries.com

63

Coteries is a Swiss digital agency specializing in web design, UX/UI, web and mobile development, and digital marketing services. Positioned as an expert and client-focused agency in the Swiss market, it serves a diverse clientele including startups and large enterprises such as Swisscom and EPFL. The company emphasizes quality, innovation, and close collaboration with clients. Technically, the website is built on modern platforms like Webflow and Shopify, leveraging advanced analytics and bot protection tools, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS, CAPTCHA protections, and no visible vulnerabilities, though explicit security headers could be enhanced. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site reflects a professional and trustworthy digital agency with a solid market presence.

R

Refokus

refokus.com

65

Refokus is a boutique digital agency specializing in high-end branding, web design, and Webflow development services targeted at B2B startups, venture capital firms, and large innovative organizations. The company positions itself as a fast, quality-focused agency leveraging Webflow, AI, and proprietary frameworks to deliver conversion-focused websites. Technically, the website is built on Webflow CMS with modern JavaScript libraries such as GSAP and ThreeJS, ensuring a visually engaging and performant user experience. Analytics and marketing tools like Google Analytics, Ahrefs, and Intellimize are integrated with consent mechanisms. Security posture is strong with HTTPS and some security headers, though explicit privacy and cookie policies are missing, and no contact information or security incident channels are visible. WHOIS data is unavailable, which reduces trust slightly but the professional presentation and technology use indicate a legitimate business. Overall, the site scores well on content quality, technical implementation, and security, but privacy compliance and business credibility could be improved.

E

evenito AG

evenito.com

68

evenito AG operates a decentralized event management software platform designed to empower enterprises to scale their event planning efforts while maintaining central control. The platform offers a comprehensive suite of features including guest management, event registration and ticketing, virtual and hybrid event support, automated communication, and analytics. The company targets a broad audience including corporates, SMEs, agencies, and conference organizers, positioning itself as a leading event management solution with strong trust signals such as ISO 27001 certification and GDPR compliance. Technically, the website is built on modern web technologies including Webflow CMS, Google Analytics, Microsoft Clarity, Hotjar, and Leadfeeder for analytics and user behavior tracking. The site is well-optimized for performance, mobile responsiveness, and SEO, with a professional and consistent branding approach. Hosting appears to be via Webflow's CDN, ensuring fast content delivery. From a security perspective, the site enforces HTTPS and demonstrates compliance with key standards such as ISO 27001 and GDPR. However, explicit security headers are not detected, and there is no publicly available vulnerability disclosure or incident response contact information. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating an unregistered or expired domain, which should be verified to ensure legitimacy. Overall, the website presents a professional and trustworthy front with strong business and technical maturity. The main risk lies in the missing WHOIS data, which impacts domain legitimacy assessment. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and clarifying domain registration status to improve trust and security posture.

R

Retreeb

retreeb.com

64

Retreeb is a payment application platform that enables users to support social causes financially every time they make a payment via QR code, without additional cost. The website presents a modern, mobile-optimized interface built on Webflow, integrating analytics and consent management tools to enhance user experience and compliance. However, the absence of a publicly accessible privacy policy and terms of service pages, combined with missing WHOIS registration data, introduces concerns regarding transparency and domain legitimacy. The technical infrastructure leverages contemporary tools such as Amplitude Analytics, Google Tag Manager, and Sentry for monitoring, indicating a mature digital setup. Security posture is adequate with HTTPS enforced and consent mechanisms in place, but could be improved with explicit security headers and clearer compliance documentation.

V

VO2

vo2cap.se

59

VO2 is a holding company specializing in the media technology sector, focusing on acquiring, investing in, and supporting media tech companies. The website presents a professional image with clear branding and a concise business description targeting media tech industry stakeholders. The technical infrastructure leverages modern web technologies including Webflow CMS, Google Tag Manager, Google Analytics, and cookie consent management tools, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced, security headers present, and integration of Google reCAPTCHA, although the absence of explicit privacy and terms of service pages and lack of contact information limit full compliance and trust. The WHOIS data is missing or inaccessible, which raises concerns about domain legitimacy and age, suggesting the domain may be recently registered or privacy protected. Overall, the website is functional and professional but would benefit from enhanced transparency and compliance documentation.

S

SoHa Treuhand AG

soha-treuhand.ch

61

SoHa Treuhand AG is a Swiss fiduciary and consulting firm based in Zurich, specializing in personalized accounting, payroll, tax consulting, and CFO as-a-Service offerings. The company emphasizes a blend of digital solutions and personal client relationships to optimize efficiency without sacrificing service quality. Their market position targets SMEs and business owners seeking modern yet personal fiduciary services. Technically, the website is built on Webflow with modern animation libraries like GSAP and uses Cloudflare Turnstile for spam protection on contact forms, indicating a good level of digital maturity. Security posture is solid with HTTPS and captcha integration, though security headers and formal policies are absent. Overall, the site is professional, trustworthy, and well-structured, but could improve privacy compliance and security transparency.

R

rampmetrics

rampmetrics.com

66

Rampmetrics is a technology company offering a SaaS platform that automates marketing attribution and campaign tracking for B2B marketing teams. Their solution provides end-to-end analytics across the full marketing funnel, integrating online and offline touchpoints to deliver actionable insights. The company positions itself as a robust alternative to fragmented homegrown solutions, serving clients in the B2B SaaS space with a focus on Demand Generation, Digital Marketing, and Content teams. The website demonstrates a professional and consistent brand presence with strong customer testimonials and integration with major marketing and CRM platforms. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, and multiple marketing analytics tools, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS and secure form handling, though explicit security headers and formal security policies are absent. Privacy compliance is basic with a privacy policy and cookie consent mechanism, but lacks detailed GDPR compliance statements. The absence of WHOIS data for the domain is a notable concern, potentially indicating recent registration or privacy protection, which slightly reduces trustworthiness. Overall, rampmetrics presents a credible and professional marketing analytics platform with room for improvement in security transparency and privacy compliance.

D

Duss Treuhand GmbH

dusstreuhand.ch

61

Duss Treuhand GmbH is a small Swiss finance services company based in Zug, specializing in fiduciary services, tax consulting, auditing, and accounting. The company targets private individuals, SMEs, and larger enterprises, emphasizing personalized and reliable service. Their website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on Webflow, leveraging modern web technologies and providing a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and a cookie consent mechanism, but lacks advanced security headers and formal privacy or incident response policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

P

Pertinent.io - Explain anything via hotspots

pertinent.io

53

Pertinent.io is a small technology company founded in 2016 that offers a SaaS product enabling website owners to add contextual hotspots that open links in popups for enhanced user engagement and explanation. The website is built on Webflow CMS and hosting, utilizing Popupular for popup functionality and Lottie animations for visual appeal. The site is professionally designed with good mobile optimization and basic SEO and accessibility features. Security posture is moderate with HTTPS enabled but lacks advanced security headers and policies. No privacy, cookie, or terms of service policies are present, and contact information is limited to a single email address. WHOIS data shows privacy protection typical for small tech startups, with no suspicious indicators. Overall, the site is functional and professional but would benefit from improved privacy compliance and security practices.

S

Signalayer

signalayer.com

52

Signalayer is a small technology company founded in 2017 that provides digital marketing solutions focused on creating engaging, personalized, and interactive marketing experiences for brands and agencies. The website is built on the Webflow platform and uses modern web technologies including Google Fonts and jQuery. It integrates a custom Signalayer player script to enhance interactive content delivery. The website content is professional and well-structured, targeting marketing professionals and agencies seeking digital marketing tools. However, the site lacks visible privacy, cookie, and terms of service policies, which are important for compliance and user trust. No contact information is provided on the homepage, limiting direct communication channels.

J

Jetway

jetway.io

54

Jetway.io is a small technology-focused business offering a specialized user onboarding toolkit comprising a video course, workbook, and customer journey map. The website targets SaaS founders, UX designers, and product managers seeking to improve user activation through structured onboarding experiences. The business operates primarily as a digital educational resource provider with a niche market position. Technically, the site is built on Webflow with modern JavaScript libraries and CDN hosting, delivering a moderate performance and good mobile optimization. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. No incident response or vulnerability disclosure mechanisms are present, which limits trust from a security compliance perspective. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency.

O

Onboarding Pro - Handcrafted user onboarding experience for your web application

onboarding.pro

56

Onboarding Pro is a specialized professional service focused on designing handcrafted user onboarding experiences for web applications. The website positions itself as an expert resource with over 400 products helped, offering onboarding reviews, case studies, and educational toolkits. The business targets web app product owners and developers seeking to improve user conversion and retention through effective onboarding. Technically, the site is built and hosted on Webflow, utilizing jQuery for some scripting. The site is mobile-optimized with a clean, professional design and clear navigation, reflecting a mature digital presence. Security posture is moderate; HTTPS is implied via Webflow hosting, but explicit security headers and privacy policies are absent, indicating room for improvement in compliance and security best practices. The WHOIS data is privacy protected, which is common for small professional services, and no suspicious patterns were detected. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

M

Movable Ink

movableink.com

71

Movable Ink is an established enterprise-level technology company specializing in AI-driven personalized marketing solutions. Their platform enables marketers to deliver dynamic, data-driven content across multiple customer touchpoints including email, mobile, and web. The company positions itself as a leader in autonomous marketing, blending creativity with machine intelligence to optimize customer engagement and revenue. The website reflects a mature digital presence with modern design, mobile optimization, and integration of advanced marketing and analytics tools such as Adobe Marketo and Intellimize. Security posture is strong with HTTPS enforcement and standard security headers, though there is room for improvement in DNS security and explicit security policy disclosures. Privacy compliance is partially addressed with cookie consent mechanisms but lacks visible privacy and terms of service documentation in the provided content. Overall, the domain registration data aligns well with the business profile, indicating a legitimate and stable online presence.

Y

YPARD e.V

ypard.net

58

YPARD e.V is a registered non-profit organization based in Berlin, Germany, focused on empowering and connecting young professionals in agri-food systems worldwide. The organization operates as an international movement providing advocacy, capacity building, and networking services to youth engaged in agricultural development. With a global presence spanning over 50 countries and a network reach exceeding 32,000 individuals, YPARD positions itself as a key player in youth-led sustainable agri-food transformation. The website reflects a professional and well-structured platform that supports its mission through events, projects, and partnerships. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies such as Google Fonts, Google Tag Manager, and Cookiebot for cookie consent management. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Performance is moderate, with no critical technical issues detected. However, the absence of explicit security headers and detailed hosting information suggests room for improvement in technical security hardening. From a security perspective, the site uses HTTPS as implied by included scripts, and employs Cookiebot for GDPR-compliant cookie consent. However, no privacy policy or terms of service pages were found, and no incident response or vulnerability disclosure information is provided. The WHOIS data is notably absent or inaccessible, raising concerns about domain registration legitimacy despite the professional appearance and active social media presence. This discrepancy warrants further verification to ensure domain ownership transparency. Overall, YPARD's website is a credible and professional platform serving a niche non-profit community. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, verifying domain registration details, and improving accessibility compliance to strengthen trust and compliance posture.

O

Onpro Team

onpro.team

55

Onpro Team is a small, specialized product team offering services in product management, UX design, and full-stack development to startups and businesses looking to build and scale web products. The team highlights their experience with multiple startup accelerators and successful product builds, positioning themselves as a nimble and experienced partner for MVP development and ongoing product tasks. Technically, the website is built on Webflow with jQuery, indicating a modern but straightforward infrastructure optimized for good mobile experience and basic SEO. However, the site lacks advanced analytics, tracking, and security headers, which limits its technical maturity. Security posture is minimal with no published policies or security best practices visible, and WHOIS data is unavailable due to TLD restrictions and privacy protections, which slightly reduces trust. Overall, the website is professional and content-rich but would benefit from enhanced security and privacy compliance measures.

A

audienzz AG

semantiq.io

57

semantIQ, operated by audienzz AG, is a Swiss-based contextual advertising platform leveraging OpenAI technology to deliver cookie-free, real-time, semantic advertising solutions for publishers and advertisers. The platform offers easy integration, comprehensive article indexing, and compatibility with all major ad servers, positioning itself as a privacy-compliant alternative in the post-cookie advertising landscape. The website is professionally designed, mobile-optimized, and provides clear contact and certification information, supporting its credibility in the media technology sector. Technically, the site uses modern frameworks such as Webflow CMS, Google Tag Manager, and Splide.js for UI components, hosted on AWS Cloudfront CDN, ensuring good performance and SEO. Security posture is generally strong with HTTPS enforced and secure forms, though the absence of security headers and cookie consent mechanisms are areas for improvement. WHOIS data is incomplete, limiting domain trust verification, but the overall business and website indicators suggest legitimacy. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and improving WHOIS transparency to strengthen trust and compliance.

A

audienzz AG

yaleo.com

64

Yaleo is a Swiss digital advertising platform operated by audienzz AG, offering premium advertising formats such as Story Ads, Video Ads, and Native Ads across a network of over 200 Swiss premium publisher websites. The platform targets advertisers seeking high-quality, brand-safe placements with strong reach and engagement in the Swiss market. The website is professionally designed, multilingual, and provides clear contact information and legal disclosures, reflecting a mature business presence. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including Google Tag Manager and Cloudflare DNS. It demonstrates fast performance, excellent mobile optimization, and good SEO practices. However, some security best practices such as DNSSEC and security headers are not implemented, representing areas for improvement. From a security perspective, the site uses HTTPS with a good SSL configuration and secure forms. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a comprehensive privacy policy linked externally but lacking a visible cookie consent mechanism. Business credibility is high, supported by certifications and partnerships with major Swiss publishers. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security headers, cookie consent, and incident response disclosures would further enhance trust and compliance.

C

carbon-connect AG

carbon-connect.ch

67

carbon-connect AG is a Swiss-based company specializing in ESG and sustainability consulting, focusing on CO2 footprint calculation, emissions reduction strategies, and climate protection projects. Established in 2013, it serves primarily SMEs, non-profits, and public sector clients in the DACH region. The company offers a comprehensive suite of services including corporate and product carbon footprinting, sustainability reporting, and verified climate compensation projects. Their market position is strengthened by ISO 9001 certification and a broad partner network. Technically, the website is built on Webflow CMS with integrations to HubSpot for forms and analytics, and Google Tag Manager for marketing and tracking. The site is well-optimized for performance, mobile responsiveness, and SEO, employing modern web technologies and consent management mechanisms to comply with GDPR. From a security perspective, the site enforces HTTPS and integrates cookie consent with Google Consent Mode and HubSpot. While no critical vulnerabilities or exposed sensitive data were found, the absence of explicit security headers and a published security policy or incident response contact are areas for improvement. No vulnerability disclosure or security.txt file is present. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. The business is legitimate, transparent, and well-positioned in its niche. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.

F

Fospha

fospha.com

74

Fospha is a technology company specializing in full-funnel marketing measurement for eCommerce brands. Their platform leverages proprietary Bayesian marketing mix modeling to provide daily, ad-level insights across multiple sales channels including direct-to-consumer, Amazon, and TikTok Shop. The company positions itself as a leader in delivering incremental growth insights and forecasting capabilities, supported by scientific rigor and a decade of research and development. Technically, the website is built on modern web technologies including Webflow CMS, HubSpot for forms and marketing automation, Google Tag Manager for analytics, and uses advanced JavaScript libraries like Swiper.js for UI components. The site is well-optimized for performance, mobile responsiveness, and accessibility, with a professional design and clear navigation. From a security perspective, the site enforces HTTPS and includes standard security headers, though explicit security policies and incident response contacts are not publicly available. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and indicate GDPR compliance, though direct contact information such as emails or phone numbers are not listed, relying instead on contact forms. Overall, Fospha presents a credible and professional online presence with strong business and technical foundations. The lack of public WHOIS data slightly reduces trust but is likely due to privacy protection. Strategic recommendations include enhancing security transparency, adding incident response information, and providing direct contact details to improve trust and compliance.

S

Simpler Checkout

simpler.so

67

Simpler.so is an e-commerce focused SaaS platform offering a streamlined checkout solution that integrates multiple payment options to help merchants save on fees and increase sales. The website presents a professional and modern design built on Webflow, leveraging various third-party marketing and analytics tools such as Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and Plausible Analytics. The presence of a comprehensive cookie consent mechanism indicates attention to privacy compliance, although no explicit privacy policy or terms of service pages were detected in the provided content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but could be improved by adding explicit security headers and publishing security policies. The lack of WHOIS registration data is a concern for domain legitimacy and reduces overall trustworthiness. Overall, the site is functional and business-focused but would benefit from enhanced transparency and contact information.

T

The COOL Company

coolmedia.ai

56

The COOL Company operates the website coolmedia.ai, offering an AI-powered platform designed to automate the creation, buying, and optimization of advertising campaigns across multiple channels. The platform targets advertisers and marketing professionals seeking to simplify complex campaign management through AI-driven ad creative generation, media strategy formulation, campaign launch, and real-time performance optimization. The company positions itself as an innovative player in the marketing technology space with a SaaS business model. Technically, the website is built on Webflow with modern web technologies including Google Fonts, jQuery, and embedded Vimeo video content, hosted on Webflow's CDN infrastructure. The site demonstrates good design quality, mobile optimization, and SEO basics but lacks comprehensive accessibility features. Security posture is adequate with HTTPS enabled and secure form handling, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies and no GDPR indicators. Contact information is limited to an email subscription form with no direct emails or phone numbers. The domain is newly registered with privacy protection, consistent with a startup profile. Overall, the website is professional and functional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

C

Craneworks Oy Ltd.

craneworks.fi

67

Craneworks Oy Ltd. is a leading Finnish company specializing in Digital Signage solutions, offering a comprehensive range of services including LED displays, content production, software development, and technical support. With over 20 years of experience and thousands of projects delivered, Craneworks holds a strong market position as a pioneer in digital display communication in Finland. Their target audience primarily consists of retail, commercial, and public sector clients seeking advanced digital marketing and communication tools. The company emphasizes high-quality, locally produced solutions and maintains a professional and consistent brand presence online. Technically, the website is built on the Webflow platform, leveraging modern web technologies and integrating multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Leadfeeder. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs standard security headers, and includes cookie consent mechanisms, though explicit security policies and incident response information are not publicly detailed. Overall, Craneworks demonstrates a strong security posture with no evident vulnerabilities or compliance gaps. The domain registration data aligns well with the company's business claims, reinforcing legitimacy and trustworthiness. Strategic recommendations include enhancing transparency around security policies and incident response, and maintaining vigilance on third-party script security.