Education security reports

Č

Česká obec sokolská

sesokolemdozivota.cz

38

The website 'Se sokolem do života' is an educational and non-profit project operated by Česká obec sokolská, focused on promoting physical activity and development of motor skills among children in the Czech Republic. It holds a leading position in its niche with a strong tradition and a clear mission to motivate children to integrate movement into their daily lives. The website provides educational materials, workshops, and activities primarily targeting children and educators. Technically, the site is built on WordPress with Elementor and related plugins, offering a modern and responsive design with good SEO practices. However, the Google Analytics plugin is present but not configured, indicating incomplete analytics setup. Security posture is moderate with HTTPS enabled but lacking security headers and explicit privacy and cookie policies, which are compliance gaps. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening.

P

Předškolní sport s.r.o.

hravelyzovani.cz

49

Předškolní sport s.r.o. operates the website hravesporty.cz, offering playful skiing and winter sports courses primarily for children aged 4 to 12. The company targets parents and schools near Prague, providing group lessons, individual instruction, and school ski trips in local ski resorts. The website is professionally designed with clear navigation, rich content, and strong trust signals such as Google reviews and partner logos. Technically, the site uses modern JavaScript libraries and frameworks, is mobile-optimized, and employs cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is good with HTTPS and no visible vulnerabilities, though security headers could be improved. Overall, the site is trustworthy and compliant with GDPR, with comprehensive privacy and terms documentation.

Lehrlinge-fuer-bayern.de is a professionally designed, regionally focused website operated by Bayerischer Handwerkstag e.V., promoting vocational training and apprenticeships in Bavaria. The platform offers a variety of resources including a career checker, educational blog, interactive games, and local apprenticeship listings, targeting young people interested in trades. The website leverages WordPress with modern plugins like Yoast SEO and Borlabs Cookie for SEO and privacy compliance. Social media integration and official partner links enhance its outreach and credibility. Technically, the site is well-structured, mobile-optimized, and uses HTTPS with cookie consent mechanisms, reflecting a mature digital presence. Security posture is solid with no visible vulnerabilities, though security headers could be improved. Privacy compliance is strong with clear policies and consent management. Overall, the site is trustworthy, safe, and serves its educational mission effectively.

H

Handwerkskammer für München und Oberbayern

hwk-muenchen-bildung.de

67

The Handwerkskammer für München und Oberbayern operates a comprehensive educational portal focused on handcraft training and continuing education in the Munich and Upper Bavaria region. The website offers a broad range of courses including Meisterkurse, Lehrlingskurse, and specialized training, targeting apprentices, skilled workers, and business leaders in the handcraft sector. The institution holds a strong regional market position as a trusted educational provider with clear branding and professional content. Technically, the website is built on the ODAV Content Management System and employs modern web technologies such as jQuery, Bootstrap, and accessibility tools like eyeAble. It integrates analytics via Google Analytics and Matomo, with a cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses best practices such as asynchronous script loading and cookie consent. However, explicit security headers like X-Frame-Options are not visibly set, and no public security policy or incident response contacts are provided. No vulnerabilities or suspicious content were detected, and the domain registration aligns well with the business identity, indicating high legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements could include publishing a formal security policy, enhancing security headers, and providing incident response contact information to further strengthen trust and security posture.

H

handfest

handfest-online.de

55

handfest-online.de is a German online magazine dedicated to careers and education in the skilled trades sector. It provides comprehensive information on various trades, training, internships, and career advancement opportunities. The site targets young people interested in skilled trades, as well as parents, teachers, and career advisors. The business operates as a niche educational media platform with a focus on the German market. Technically, the website is built on WordPress using popular plugins such as Yoast SEO and WPBakery Page Builder, hosted by netcup. It employs Matomo analytics for privacy-conscious user tracking and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Contact is available via a dedicated contact page, but no direct emails or phone numbers are published in the HTML. Overall, the site is professional, well-structured, and trustworthy.

P

Praktikum Westküste

praktikum-westkueste.de

47

Praktikum Westküste operates as a regional internship network platform focused on connecting students, pupils, and young people with internship opportunities in the Westküste region of Germany, including Nordfriesland, Dithmarschen, Steinburg, and Pinneberg. The platform hosts thousands of internship offers from over two thousand registered companies, positioning itself as a key regional player in educational and vocational placement services. The website is designed to serve both the internship seekers and companies looking to fill internship positions, with specialized offerings for various voluntary service programs such as FSJ, FÖJ, FKJ, and Bundesfreiwilligendienst. Technically, the website is built on the Contao Open Source CMS and leverages modern web technologies including jQuery, the Foundation framework, and FontAwesome for UI elements. It integrates Matomo Analytics for privacy-conscious visitor tracking and implements GDPR-compliant cookie consent mechanisms. The site demonstrates good mobile optimization and accessibility basics, with a clear navigation structure and professional design quality. However, some security headers are not explicitly detected, and no dedicated security or incident response policies are publicly available. From a security perspective, the site enforces HTTPS and uses cookie consent banners aligned with GDPR requirements. The use of Matomo Analytics with DoNotTrack enabled reflects a privacy-aware approach. No critical vulnerabilities or exposed sensitive data were identified in the HTML content. The WHOIS data is consistent with the website's regional focus and shows no privacy protection or suspicious registration patterns, supporting the platform's legitimacy. Overall, Praktikum Westküste presents a trustworthy, well-maintained regional educational platform with solid privacy compliance and a moderate security posture. Strategic improvements could include enhancing security headers, publishing explicit security policies, and providing clearer contact information for incident response. These steps would further strengthen trust and compliance in the evolving regulatory landscape.

F

Fachhochschule Westküste

fh-westkueste.de

46

Fachhochschule Westküste is a regional university of applied sciences in Germany specializing in business and technology education with a strong emphasis on sustainability and applied research. The institution serves students, academic partners, and regional businesses, offering degree programs, research initiatives, and student services including international exchange programs. The website is professionally designed using TYPO3 CMS, hosted likely by the University of Kiel, and integrates modern privacy and analytics tools such as Usercentrics CMP and self-hosted Matomo analytics. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. Overall, the site reflects a trustworthy and credible educational institution with good digital maturity.

B

Bodenseezentrum Innovation 4.0

bodensee-summit.com

23

Bodenseezentrum Innovation 4.0 operates a professional digital platform focused on the Bodensee Summit Digital 2025, a conference for digital innovation and resilience in the Bodensee region. The website targets entrepreneurs, leaders, innovators, and digital experts, providing detailed event information, speaker profiles, and interactive session descriptions. The business model centers on event organization and fostering digital transformation within a regional ecosystem. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and SEO best practices, including structured data and a cookie consent mechanism. Security posture is solid with HTTPS and no exposed sensitive data, though some security headers are missing and DNSSEC is not enabled. Privacy compliance is strong with GDPR-aligned policies and consent management. Overall, the site is professional, trustworthy, and well-optimized for its audience and purpose.

P

PAQ Research

datapaq.cz

53

DataPAQ is a Czech Republic-based data visualization platform focused on regional educational and social data. It aggregates data from official Czech institutions and provides interactive tools for analysis, targeting researchers, policymakers, and educators. The platform is developed in collaboration with PAQ Research and other educational partners, positioning itself as a niche tool for regional data insights. Technically, the website is built using modern web technologies including React and Next.js, with analytics powered by Matomo and PostHog. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some accessibility features could be improved. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks important security headers and does not provide privacy or cookie policies, which impacts compliance and user trust. The absence of WHOIS data reduces domain trustworthiness, though the partnership with recognized organizations mitigates some concerns. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security best practices, and transparent contact information to improve trust and regulatory adherence.

P

PAQ Research

mapavzdelavani.cz

38

Mapa vzdělávání is a Czech Republic-based educational research platform operated by PAQ Research, focusing on data analyses and research-backed solutions addressing educational inequalities in the country. The website offers analytical reports, data visualization tools, and a blog with research articles, targeting policymakers, educational institutions, and researchers. The platform positions itself as a specialized provider in the Czech educational sector with a small organizational size and consistent branding. Technically, the website is built using modern frameworks such as Next.js and React, with Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and well-structured, providing a good user experience and clear navigation. Security posture is adequate with HTTPS enforced, but lacks some security headers and formal security policies. Privacy compliance is incomplete due to missing privacy and cookie policies. Contact information is clearly presented with named individuals and direct emails, enhancing business credibility. Overall, the website is professional, trustworthy, and safe for general audiences.

A

Autodesk, Inc

tinkercad.com

56

Tinkercad is a free, web-based application developed by Autodesk, Inc, focused on providing accessible tools for 3D design, electronics, and coding. It targets educators, students, and hobbyists, serving as an introductory platform to Autodesk's broader design technologies. The website demonstrates a high level of digital maturity with modern frameworks like Angular, service workers for offline capabilities, and integration with Autodesk APIs. The content is rich, well-structured, and optimized for various devices, reflecting excellent user experience and design quality. Security posture is strong with HTTPS enforcement and bot protection via Google reCAPTCHA, complemented by kidSAFE COPPA certification ensuring child safety and privacy compliance. However, the absence of explicit cookie consent mechanisms and security headers suggests room for improvement in privacy compliance and security best practices. WHOIS data is unavailable, likely due to privacy protections, but the website's professional presentation and Autodesk branding support its legitimacy. Overall, the site is trustworthy, well-maintained, and suitable for its educational audience.

M

MakerBot

makerbot.com

67

MakerBot is a prominent provider of 3D printing solutions focused primarily on the education sector. Their website showcases a comprehensive ecosystem including 3D printers, software, certification programs, and extensive educational resources such as lesson plans and community support. The company targets educators, schools, and educational institutions worldwide, positioning itself as a leader in classroom 3D printing with over 10,000 schools served. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site is built on WordPress with modern JavaScript libraries and marketing integrations such as Google Tag Manager and Marketo forms, supporting interactive features like quizzes and resource downloads. Security posture is good with HTTPS enforced and secure form handling, though the absence of explicit security headers and privacy policies suggests room for improvement. The WHOIS data is notably missing, which reduces domain trustworthiness and should be investigated further. Overall, the site is safe, professional, and well-positioned in its niche, but could enhance transparency and compliance documentation.

The Umweltbildungszentrum Flensburg is a small, non-profit educational institution affiliated with the Naturwissenschaftliches Museum Flensburg, focusing on environmental education and sustainability programs. Founded in 2014, it serves local schools, kindergartens, and the general public with a variety of educational offerings including excursions, workshops, and exhibitions. The website reflects a professional and consistent brand presence with clear contact information and official city sponsorship. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern JavaScript libraries such as jQuery and Colorbox for UI enhancements. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in security headers and explicit security policy documentation. From a security perspective, the site uses HTTPS and implements a cookie consent banner, indicating awareness of privacy compliance. No critical vulnerabilities or security issues were detected in the content or scripts. The WHOIS data aligns well with the website's claims, showing a consistent and legitimate registration. No WAF or blocking mechanisms interfere with content accessibility. Overall, the website presents a trustworthy and professional digital presence for an educational institution, with moderate technical sophistication and good privacy practices. Strategic improvements in security headers and formal security policies could further enhance its posture.

B

BBZ Schleswig

bbzsl.de

46

BBZ Schleswig is a regional vocational training and continuing education institution based in Schleswig and Kappeln, Germany. The website serves as an informational portal for educational offerings targeting students and professionals seeking vocational qualifications. The technical infrastructure is built on WordPress using the Divi theme, incorporating common analytics tools such as Google Analytics and Facebook Pixel. While the site demonstrates good design quality and user experience, it lacks explicit privacy and cookie policies, as well as visible contact information, which impacts its privacy compliance and business credibility scores. Security posture is moderate with no detected security headers or vulnerability disclosures, indicating room for improvement in security best practices. Overall, the website is safe for general audiences and functions well as an educational resource.

C

CSC – Tieteen tietotekniikan keskus Oy

eduuni.fi

52

Eduuni is a Finnish service platform provided by CSC – Tieteen tietotekniikan keskus Oy, focused on enabling secure and flexible collaboration across educational and research organizations. The platform offers a suite of cloud-based services including Microsoft 365/Azure environments, SharePoint workspaces, Atlassian Confluence wiki, Jira project management, and identity management through Eduuni-ID. The website reflects a professional and consistent brand presence targeting educational institutions and their stakeholders in Finland. Technically, the website is built on WordPress hosted on WordPress.com infrastructure, leveraging modern web technologies and integrations with Microsoft and Atlassian products. The site demonstrates good performance, mobile optimization, and basic accessibility features. Analytics are implemented via Jetpack Stats with minimal user tracking. From a security perspective, the site enforces HTTPS with excellent SSL configuration but lacks some advanced security headers and explicit incident response contacts. Privacy policies and terms of service are available on linked wiki pages, though no cookie consent mechanism is present on the main site. The domain registration is transparent and consistent with the business entity, indicating high legitimacy. Overall, Eduuni presents a trustworthy and well-maintained digital presence with room for improvement in privacy compliance and security header implementation.

R

Regensburger Universitätsstiftungen

regensburger-universitaetsstiftung.de

45

The Regensburger Universitätsstiftungen website represents a non-profit foundation platform dedicated to supporting the University of Regensburg through funding and promotion of research, teaching, and international exchange. The foundation acts as a central hub for private and corporate donors aiming to enhance the university's profile and academic excellence. The website content is well-structured, professionally designed, and primarily targeted at university faculty and potential funders. Technically, the site is built on WordPress with the Foundation CSS framework and modern JavaScript libraries, ensuring good mobile responsiveness and user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and incident response disclosures. Privacy compliance is adequate with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site is trustworthy, professional, and serves its educational and funding facilitation purpose effectively.

D

DBRD Akademie GmbH

12-leads.de

54

12-Leads.de is a specialized educational platform operated by DBRD Akademie GmbH, focused on providing structured EKG assessment courses for emergency medical professionals in Germany. The website offers detailed course schedules, pricing, and booking options, targeting paramedics and healthcare providers. The business is well-established with a domain age consistent with its founding year and maintains a professional online presence with clear contact information and partner affiliations. Technically, the site is built on Joomla CMS with modern UI frameworks and demonstrates good accessibility and mobile optimization. Security posture is solid with HTTPS and CSRF protections, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy, professional, and well-suited for its educational mission.

D

DBRD Akademie GmbH

tecc-germany.de

54

TECC Germany, operated by DBRD Akademie GmbH, is a specialized educational provider offering Tactical Emergency Casualty Care courses tailored for police, fire services, personal protection, and rescue personnel in Germany. The website presents detailed course offerings, schedules, and pricing, establishing a clear market position as a niche training provider in tactical emergency medical care. The business model focuses on in-person and scenario-based training with transparent pricing and no sponsorship conflicts. Technically, the website is built on Joomla CMS with Yootheme templates and UIkit framework, incorporating modern web technologies such as Typed.js and Google Fonts. The site is mobile-optimized and includes accessibility features, providing a good user experience. However, some improvements in security headers and cookie consent mechanisms could enhance compliance and security posture. Security-wise, the site enforces HTTPS and uses CSRF tokens, with no visible sensitive data exposure. The absence of explicit security policies and incident response contacts is noted. The domain registration data is consistent with the business claims, showing legitimacy and stability. Overall, the site demonstrates a solid security posture with room for improvement in privacy compliance. The overall risk assessment is low, with recommendations focusing on enhancing privacy compliance, adding security headers, and publishing security policies to strengthen trust and regulatory adherence.

D

DBRD Akademie GmbH

tccc-germany.de

56

DBRD Akademie GmbH operates the website tccc-germany.de, providing official Tactical Combat Casualty Care (TCCC) training courses licensed by the NAEMT. The company targets military medical personnel, infantry, special forces, and police officers preparing for foreign deployments. Their business model centers on delivering specialized medical training and certification services, positioning themselves as a trusted and official provider in Germany. The website content is professionally presented in German, with clear navigation and comprehensive course information.

D

DBRD Akademie GmbH

emfrt.de

56

The website emfrt.de represents the Emergency Medical Fire and Rescue Training (EMFRT) program operated by DBRD Akademie GmbH, a German educational organization specializing in emergency medical and rescue training. The site targets fire departments, authorities, and organizations with security tasks, offering practical and intensive courses that combine preclinical emergency medicine, technical rescue, and firefighting. The business is positioned as a specialized training provider with recognized certifications and strong partnerships, including Weber Rescue and Siegerland Airport. The courses are certified and include international certificates such as PHTLS for First Responders. Technically, the website is built on Joomla CMS with Yootheme templates and uses modern frontend technologies like jQuery, Leaflet.js, and UIkit. The site is mobile optimized, accessible, and performs moderately well. Structured data in JSON-LD format is implemented for SEO and organizational clarity. The hosting provider is not explicitly identified, but HTTPS is enforced with good SSL configuration. From a security perspective, the site uses HTTPS and includes CSRF tokens and email obfuscation techniques. However, it lacks explicit security headers and published security or incident response policies. There is no vulnerability disclosure or security.txt file. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected, which could be a GDPR compliance gap. Overall, the website is professional, trustworthy, and well-aligned with its business goals. The domain WHOIS data is consistent and legitimate, supporting the business's credibility. Strategic improvements in privacy compliance and security transparency would enhance the site's security posture and regulatory adherence.

K

Kreismusikschule Nordfriesland

kreismusikschule-nordfriesland.de

40

The Kreismusikschule Nordfriesland website serves as the online presence for a regional music school in Germany, providing music education and related services. The site is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with caching and font optimizations. The content is primarily in German and targets local residents interested in music education. While the website is functional and professionally designed, it lacks critical privacy and security documentation such as privacy and cookie policies, which are essential for GDPR compliance. No contact information or social media links were found in the provided content, limiting direct communication channels. The site uses HTTPS with a good SSL configuration but lacks security headers, which could be improved to enhance security posture.

S

Studierendenwerk Rostock-Wismar

stw-rw.de

10

Studierendenwerk Rostock-Wismar is a regional non-profit organization providing essential student services including dining facilities, student housing, financial aid, and social support primarily for students in Rostock and Wismar, Germany. The website reflects a well-structured and professional digital presence with clear navigation and relevant content tailored to its target audience. The organization maintains active social media channels and provides transparent contact information and policies, enhancing trust and accessibility. Technically, the website employs a moderate technology stack including jQuery, Google Maps API, and various UI components like LayerSlider and MegaMenu. Hosting is managed via DomainControl, and HTTPS is enforced, ensuring secure communications. While some libraries are slightly outdated, no critical vulnerabilities are evident from the content. Accessibility and mobile optimization are well addressed, though SEO could be improved. From a security perspective, the site demonstrates good practices such as cookie consent and HTTPS usage but lacks explicit security headers and an incident response contact. No vulnerabilities or suspicious patterns were detected. Privacy compliance is strong with a visible privacy policy and cookie banner. Overall, the site is safe, trustworthy, and suitable for its educational and social service mission.

H

Hochschule Wismar

hs-wismar.de

11

Hochschule Wismar is a German University of Applied Sciences specializing in technology, business, and design disciplines. It serves a diverse audience including prospective and current students, researchers, and industry partners. The institution emphasizes interdisciplinary education, practical learning, and strong regional and international collaborations. The website reflects a well-established academic entity with comprehensive services, research initiatives, and student support mechanisms. The presence of subsidiaries such as WINGS and Forschungs-GmbH further supports its academic and commercial activities. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries like jQuery and Modernizr, and includes responsive design and accessibility features. The site uses Matomo for privacy-conscious analytics and implements a cookie consent mechanism compliant with GDPR. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and anonymizes analytics data, but lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or suspicious content were detected. The domain registration data aligns well with the institution's identity, hosted on academic name servers, indicating legitimacy. Overall, the website is professional, secure, and trustworthy, serving its educational mission effectively. Strategic improvements could include enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen trust and compliance.

H

Hochschule für Musik und Theater Rostock

hmt-rostock.de

56

The Hochschule für Musik und Theater Rostock is a regional higher education institution specializing in music, theater, teacher training, and musicology. It plays a significant cultural role in Rostock and the surrounding region by offering diverse educational programs and hosting cultural events. The website reflects a professional and well-structured digital presence, leveraging TYPO3 CMS and modern JavaScript libraries to deliver a responsive and accessible user experience. The institution maintains active engagement through social media channels and provides comprehensive contact information and privacy policies, supporting trust and transparency. Security posture is solid with HTTPS enforced and obfuscated emails, though improvements can be made by implementing cookie consent mechanisms and security headers. Overall, the website and domain registration data align well, indicating a legitimate and credible educational entity.

U

Universität Greifswald

uni-greifswald.de

59

Universität Greifswald is a historic and research-intensive public university in Germany, founded in 1456. It offers a wide range of academic programs and research initiatives, targeting students, researchers, and international partners. The website is professionally designed, content-rich, and well-structured, reflecting the institution's academic stature and community engagement. Technically, the site uses TYPO3 CMS with modern JavaScript libraries, ensuring good performance and mobile optimization. Security posture is strong with HTTPS and DNSSEC, though some security headers could be improved. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the domain and website present a trustworthy and credible digital presence for the university.

S

State Portal Mecklenburg-Vorpommern

sea-your-future.de

49

The website www.sea-your-future.de serves as an official educational portal promoting university studies in Mecklenburg-Vorpommern, Germany. It is operated by the State Portal Mecklenburg-Vorpommern and targets prospective students, especially international ones, offering comprehensive information about study programs, universities, and regional advantages. The portal integrates official university partners and provides resources such as study course search and news about academic prizes. Technically, the site is built on TYPO3 CMS with modern web technologies including jQuery, Typekit fonts, and embedded video content. It features a cookie consent mechanism compliant with GDPR and uses email obfuscation techniques to protect contact information. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and explicit security policies. Overall, the site is professional, trustworthy, and well-structured, with good content quality and user experience.

Portal narodnih knjižnica is a Croatian national library portal established in 2016, providing comprehensive administrative data, digital and regional collections, and library-related news and projects. It serves a broad audience including the general public, researchers, and minority communities in Croatia. The website uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, and implements GDPR-compliant cookie consent mechanisms. The portal is positioned as an authoritative resource in the Croatian library sector with consistent branding and good content quality. Technically, the site is moderately performant and mobile-optimized but lacks explicit security headers and detailed security policies. Security posture is adequate with no visible vulnerabilities or exposed sensitive data, but improvements are recommended in security header implementation and incident response documentation. Overall, the site is trustworthy, safe, and professionally maintained, with a strong alignment between WHOIS registration data and website content.

H

Hrvatsko knjižničarsko društvo

hkdrustvo.hr

10

Hrvatsko knjižničarsko društvo is a well-established Croatian non-profit professional association dedicated to the advancement of librarianship since 1940. The organization provides key services including organizing professional events, publishing scholarly journals, and advocating for Croatian libraries. Their website reflects a strong market position within the Croatian educational and cultural sectors, targeting library professionals and researchers. The site is professionally designed with consistent branding and rich content relevant to its audience. Technically, the website is built on a modern WordPress platform with WooCommerce for e-commerce functionality, Yoast SEO for search optimization, and Google Analytics for user tracking. The infrastructure is hosted under Croatian academic network CARNET, ensuring regional consistency and reliability. The site demonstrates good mobile optimization and moderate performance, with room for improvement in accessibility. From a security perspective, the website enforces HTTPS and uses standard WordPress security practices but lacks explicit security headers and published security policies. There is no visible cookie consent mechanism, which is a compliance gap under GDPR. No vulnerabilities or malicious content were detected, but the absence of incident response information and vulnerability disclosure reduces the overall security maturity. Overall, the website is trustworthy and professional with a solid business credibility score. Strategic recommendations include implementing GDPR-compliant cookie consent, publishing security and incident response policies, and enhancing security headers to improve the security posture and compliance. These improvements will strengthen user trust and regulatory adherence.

K

Knjižnice grada Zagreba

kgz.hr

10

Knjižnice grada Zagreba operates as the official public library network for the City of Zagreb, Croatia. The website provides comprehensive information about library services, locations, events, and digital resources targeting a broad audience including children, youth, and adults. The organization is positioned as a key cultural and educational institution within the region, with a history dating back to 2000. The site demonstrates consistent branding and a professional online presence with active social media engagement.

G

Gradska knjižnica Sveti Ivan Zelina

knjiznica-zelina.hr

10

Gradska knjižnica Sveti Ivan Zelina is a public library serving as a cultural, educational, and social hub for the local community in Sveti Ivan Zelina, Croatia. The website provides information about library services, events, special collections, and access to an online catalog. The target audience includes children, youth, and adults interested in literature and cultural activities. The library operates as a non-profit public institution with a focus on community engagement and education. Technically, the website is built on Joomla CMS and utilizes common frontend technologies such as jQuery, Bootstrap, UIkit, and Smart Slider 3. It integrates Facebook SDK for social media and includes an accessibility widget (UserWay). The site is hosted under a Croatian academic registrar (CARNET), indicating a stable and appropriate hosting environment. The website is moderately performant and well-optimized for mobile devices with good accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and a dedicated security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic, with no dedicated privacy policy page found, which is a notable gap given GDPR requirements. Overall, the website is trustworthy and professional, serving its public service mission effectively. Strategic recommendations include adding a comprehensive privacy policy, implementing security headers, and publishing incident response contacts to enhance security posture and compliance.

E

EDUin, o. p. s.

eduina.cz

38

EDUína is a Czech non-profit organization focused on recognizing and awarding innovative projects in formal and informal education. The organization has been active for over 10 years, celebrating educational achievements and honoring significant contributors to Czech education. The website reflects a well-structured digital presence with clear branding, contact information, and social media integration. Technically, the site is built on WordPress using popular plugins such as Yoast SEO and Elementor, ensuring good SEO and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers are missing. The absence of WHOIS data is a concern for domain legitimacy verification but does not detract from the professional presentation and trust signals on the site. Overall, EDUína presents a credible and professional front for its educational award activities.

L

Landesportal Mecklenburg-Vorpommern

studieren-mit-meerwert.de

47

The website 'Studieren mit Meerwert' serves as a comprehensive regional education portal promoting universities and study programs in Mecklenburg-Vorpommern, Germany. It targets prospective and current students, including international visitors, by providing detailed information about study opportunities, campus life, and career prospects. The platform is operated under the Landesportal Mecklenburg-Vorpommern, reflecting a public sector educational initiative with a strong regional focus. Technically, the site is built on TYPO3 CMS and employs modern web technologies such as jQuery, YouTube iframe API, and Typekit fonts. It features a responsive design with good accessibility and SEO practices. Cookie consent is implemented with an opt-in mechanism, ensuring GDPR compliance. The site integrates social media channels and interactive elements like study program search and multimedia galleries. From a security perspective, the website uses HTTPS and obfuscates email addresses to prevent spam. However, it lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or malicious content were detected. The WHOIS data aligns with the website's regional educational purpose, showing consistent domain usage and hosting. Overall, the website demonstrates a high level of professionalism, content quality, and user experience, with minor recommendations to enhance security headers and publish vulnerability disclosure information.

O

Omoguru

omoguru.com

57

Omoguru is a small education-focused company providing accessible reading and learning applications such as Lexie, w3Lexie plugin, and ReadAble widget. Their market position targets pupils, students, and individuals with reading difficulties, including dyslexia. The website is built on WordPress with modern technologies and includes standard marketing and tracking tools like Google Analytics and Facebook Pixel. Security posture is generally good with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit privacy and terms pages. WHOIS data is missing, which raises some concerns about domain registration legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security practices.

R

Response trening akademija d.o.o.

krav-maga.hr

61

Krav-maga.hr is the official website of Response trening akademija d.o.o., a Croatian company specializing in Krav Maga self-defense training and related educational services. The company operates a network of over 30 training locations across Croatia, targeting a broad audience including adults, women, children, and teenagers. Their business model combines in-person training, online courses, and an e-commerce platform selling related apparel, equipment, and educational materials. The website reflects a well-established market position with a professional online presence and active social media engagement. Technically, the website employs modern web standards including HTTPS, Google reCAPTCHA for form security, and integrates with marketing and analytics tools such as Google Analytics, Facebook Pixel, and Mailchimp. Hosting is supported by Cloudflare DNS services, and the site uses custom CMS technology. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site demonstrates good practices including encrypted connections, GDPR-compliant consent mechanisms, and secure form handling. However, some security headers are not explicitly detected and could be improved. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, krav-maga.hr is a trustworthy, professionally managed website with a solid security posture and compliance with privacy regulations. Strategic improvements in security headers and incident response transparency could further enhance its security maturity.

GSA Gesellschaft für Struktur- und Arbeitsmarktentwicklung is a government-affiliated organization based in Mecklenburg-Vorpommern, Germany, focused on labor market development, vocational training, and business consulting. The website provides news updates, service information, and resources primarily for regional businesses, job seekers, and policymakers. The organization offers services such as funding for training, business consulting, and support for startups and workforce transformation. The site is built on TYPO3 CMS with a moderate technical infrastructure and uses standard web technologies including Bootstrap and jQuery. It employs a cookie consent mechanism and disables analytics tracking by default, reflecting a privacy-conscious approach. Security posture is adequate but could be improved by adding security headers and updating legacy libraries. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, serving a medium-sized public sector entity.

The website www.filmbildung-brandenburg.de represents a small educational service provider, Stefan Röske, specializing in film and media education workshops and digital literacy. The business targets educators and learners interested in practical media applications such as podcasts, explainer videos, and digital tools. The website is built on WordPress and hosted likely on a German hosting provider, with a moderate performance and good mobile optimization. However, the site lacks critical privacy and cookie policies, and no direct contact emails or phone numbers are provided, only a contact form. Security posture is basic with HTTPS enabled but missing security headers and incident response information. WHOIS data is minimal and lacks registrant transparency, which slightly reduces trustworthiness. Overall, the site is professional and content-rich but would benefit from enhanced privacy compliance and security best practices.

V

VDI Wissensforum GmbH

vdiconference.com

70

VDI Wissensforum GmbH operates a professional website offering international conferences, congresses, and courses targeted at engineers and technical specialists. The company positions itself as a leading provider in continuing education within the engineering sector, primarily serving the German market. The website content is well-structured, professionally designed, and optimized for both desktop and mobile users, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS and integrates modern marketing and analytics tools such as Google Tag Manager, Cookiebot for consent management, and reCAPTCHA for form security. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers could be improved. The absence of publicly available WHOIS data for the domain raises concerns about domain registration legitimacy, which should be further investigated. Overall, the website demonstrates strong privacy compliance and business credibility, with clear contact information and social media engagement.

Klemm Učilište is a Croatian adult education institution specializing in security-related training programs, including courses, seminars, and workshops. The website presents a professional image with clear program offerings and a focus on personal and professional development in the security sector. The business operates primarily in Croatia and targets adults seeking specialized education in protection and security services. Technically, the site is built on WordPress using popular plugins such as LearnPress for LMS functionality and GDPR compliance tools, indicating a moderate level of digital maturity. The site is mobile-optimized and performs moderately well, though some accessibility and SEO improvements are possible. Security posture is adequate with HTTPS enforced and GDPR cookie compliance, but lacks advanced security headers and explicit security policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. However, the absence of privacy and terms of service pages represents a compliance gap that should be addressed.

Ż

Żywiec Zdrój

wolewode.pl

69

The website 'Mamo, tato, wolę wodę!' is an established educational program initiated by Żywiec Zdrój, targeting preschools in Poland to promote healthy hydration habits among children. The program offers educational materials, contests, and certification, positioning itself as a trusted and recognized initiative in the Polish education sector. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google services for analytics and spam protection. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS, uses Google reCAPTCHA, and implements cookie consent mechanisms, though it lacks advanced security headers and a published security policy. The domain is stable and consistent with the business claims, enhancing trust. Overall, the site is secure, compliant with GDPR, and professionally maintained, suitable for its educational mission.

M

Minimalizace šikany

minimalizacesikany.cz

43

Minimalizace šikany is an educational program website focused on helping schools reduce the frequency and severity of bullying incidents. The site targets schools and educational institutions primarily in the Czech Republic. The business model appears to be service-oriented, providing programs and support for bullying prevention. The website uses WordPress with the Divi theme and includes SEO optimizations but lacks configured analytics and privacy compliance features. Technically, the site is moderately optimized for performance and mobile responsiveness but could improve accessibility and security headers. Security posture is basic with no evident vulnerabilities but lacks important security headers and privacy policies. Overall, the risk is moderate due to missing WHOIS data and privacy compliance gaps. Strategic recommendations include adding privacy and cookie policies, configuring analytics properly, improving security headers, and providing clear contact information to enhance trust and compliance.

openscienceASAP is an educational and community-focused platform dedicated to promoting open science practices. The website provides resources, research, education, and social engagement opportunities for researchers and advocates of open science. The platform operates as a small-scale non-profit or community resource hub with a niche focus on open science within the education sector. Technically, the website is built on WordPress with standard web technologies including PHP and JavaScript, and uses external resources such as Google Fonts and Fontello icons. The hosting and domain registration are stable and consistent with the website's age and purpose. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and security headers. Privacy and cookie policies are absent, indicating compliance gaps. No contact information or incident response details are provided, limiting transparency. Overall, the website is functional but basic in content and technical sophistication.

G

Game Lab Graz

gamelabgraz.com

42

Game Lab Graz is an academic research group led by Johanna Pirker, focusing on exploring the full potential of video games through designing and researching virtual, engaging, and immersive experiences. The website serves as a platform to showcase projects, publications, courses, and team information related to game design and virtual reality. The target audience primarily includes students, researchers, and professionals interested in game development and immersive technologies. The business model is centered around education and research within the academic sector, positioning itself as a niche player in the field of game design and virtual reality research. Technically, the website is built on WordPress CMS with Elementor page builder and uses common web technologies such as jQuery, Bootstrap grid, and FontAwesome icons. Hosting appears to be provided by Alfahosting based on DNS nameservers. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO features. The design is professional and consistent with academic branding, providing a good user experience and clear navigation. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options. No exposed sensitive data or vulnerable libraries were detected. However, the absence of privacy and cookie policies indicates compliance gaps with GDPR and other data protection regulations. No incident response or security contact information is provided, which could be improved to enhance trust and readiness. Overall, the website is trustworthy and professionally maintained, with a strong academic focus. The main risks relate to privacy compliance and security best practices, which should be addressed to improve the security posture and regulatory adherence. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear contact information for security incidents.

H

HochschülerInnenschaft an der TU Graz (HTU Graz)

htugraz.at

56

HTU Graz serves as the official student representation body at the Technical University of Graz, Austria. It advocates for student interests, provides various support services, and organizes events with a large volunteer base. The organization is well integrated within the university ecosystem and collaborates with multiple student unions and partners. The website is built on TYPO3 CMS with Bootstrap, offering a professional and accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and formal incident response disclosures. Overall, the site reflects a trustworthy and credible non-profit educational entity.

O

OeAD - Austria's Agency for Education and Internationalisation

grants.at

53

The website grants.at serves as Austria's largest database for scholarships and research grants, operated by the OeAD, a government agency under the Austrian Federal Ministry of Women, Science and Research. It targets students, graduates, and researchers by providing over 1,200 entries to support educational and research funding opportunities. The platform is well-positioned as a trusted resource within the Austrian education sector, leveraging official government backing and comprehensive content offerings. Technically, the site is built on TYPO3 CMS, utilizing modern web technologies including jQuery, Matomo analytics for privacy-conscious tracking, and Usercentrics for cookie consent management. The website demonstrates good performance, mobile optimization, and accessibility standards, reflecting a mature digital infrastructure suitable for its audience. From a security perspective, the site enforces HTTPS, employs multiple security headers, and integrates a consent mechanism for privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. However, incident response contact details and vulnerability disclosure mechanisms could be enhanced to improve security posture further. Overall, the website presents a low-risk profile with strong business credibility and compliance adherence. Strategic recommendations include publishing explicit incident response contacts, adding a vulnerability disclosure policy, and potentially listing certifications to bolster trust and transparency.

C

COLA Land Group

pauldirmeyer.com

57

The website represents the COLA Land Group, an academic research group affiliated with George Mason University, focusing on land-atmosphere interactions in the physical climate system. The site provides information about the research group, its members, projects, publications, and teaching activities. The business model is academic and educational, targeting researchers, students, and the scientific community. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies. It is moderately optimized for performance and accessibility but lacks advanced mobile responsiveness and comprehensive SEO features. Security posture is adequate with HTTPS enforced but lacks security headers and privacy compliance documentation. WHOIS data is missing or unavailable, which reduces domain trustworthiness but the university affiliation and professional presentation mitigate concerns. Overall, the site is professional and trustworthy but would benefit from enhanced privacy, security, and compliance features.

J

Jednota školských informatiků

jsi.cz

57

Jednota školských informatiků (JSI) is a Czech non-profit association dedicated to supporting the effective use of digital technologies in education, primarily targeting schools and educators. Established in 2002, JSI fosters communities of teachers and ICT enthusiasts to promote digital competencies and informatics thinking among children and students. The website serves as an informational and community platform, providing news, events, and resources related to digital education in the Czech Republic. Technically, the site is built on WordPress using the Divi theme, with standard JavaScript libraries such as jQuery and Swiper.js for interactive elements. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features and comprehensive SEO optimizations. Security-wise, the website uses HTTPS but lacks several important security headers and explicit incident response contacts, which could be improved to enhance trust and compliance. Privacy and cookie policies are not present, indicating a gap in GDPR compliance. Overall, the site is trustworthy and professional in its domain but would benefit from enhanced privacy, security, and compliance measures.

E

EDUin

eduin.cz

10

EDUin is a Czech non-profit organization dedicated to informing the public about education through news articles, analyses, podcasts, and event listings. The website serves educators, policymakers, media professionals, and the general public interested in education topics. It holds a reputable position in the Czech educational media landscape, offering comprehensive and up-to-date content. Technically, the site is built on WordPress with modern optimizations including WP Rocket and uses Matomo and Google Analytics for tracking, balancing performance and privacy. The security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data and explicit privacy policy pages slightly reduce trust but do not undermine the overall legitimacy. The site is well-designed, mobile-optimized, and accessible, providing a professional user experience.

A

Asociace výchovných poradců, z.s.

asociacevp.cz

41

Asociace výchovných poradců, z.s. is a Czech non-profit association established in 2006 that supports educational and career counseling professionals across various educational institutions. The association provides networking, training, advocacy, and informational resources to its members and the public. It holds recognized status within the Czech Republic, evidenced by national awards and active event organization. The website is built on WordPress with standard plugins and technologies, presenting content primarily in Czech and targeting educational professionals and clients seeking counseling services. The site is moderately optimized technically, with good mobile responsiveness and basic accessibility features. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. WHOIS data is unavailable, which reduces transparency and trustworthiness, though the website content and presentation support legitimacy. Overall, the site is professional and functional but would benefit from enhanced security and privacy compliance measures.

A

Asociace pracovníků pedagogicko-psychologických poraden, z.s.

apppp.cz

55

The website www.apppp.cz represents the Asociace pracovníků pedagogicko-psychologických poraden, z.s., a professional association dedicated to supporting and developing pedagogical-psychological counseling services in the Czech Republic. The site targets specialists and professionals in the educational counseling sector, providing information about the association, its mission, and contact avenues primarily through a contact form. The business model is non-profit and focused on professional development and collaboration within the education sector. The website is well-branded and content is relevant and professionally presented in Czech language. Technically, the website is built on the Webnode platform, leveraging AWS Cloudfront CDN for hosting static assets, and uses standard web technologies including HTML5, CSS, and JavaScript. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. HTTPS is enforced, ensuring secure communication. However, no advanced security headers were detected, and privacy compliance is limited by the absence of a dedicated privacy policy page. From a security perspective, the site shows a moderate security posture with HTTPS and cookie consent mechanisms in place. The lack of security headers and absence of direct contact emails or phone numbers for security or incident response reduces the overall security maturity. WHOIS data is unavailable, likely due to privacy protection or domain registration issues, which slightly impacts trustworthiness but does not contradict the professional nature of the site content. Overall, the website is a credible and professional platform for a small non-profit educational association, with room for improvement in privacy compliance, security headers, and transparency of contact information. Strategic recommendations include adding a privacy policy, implementing security headers, and providing direct contact details for enhanced trust and compliance.