Education security reports

F

Fleming Events

fleming.events

59

Fleming Events is a small-sized international event organizer specializing in conferences and professional training services. The company targets professionals and corporate clients seeking educational and networking opportunities. The website is built on WordPress with WooCommerce and Elementor, indicating a modern and flexible technical infrastructure. The use of Google Analytics, Google Tag Manager, and Facebook Pixel shows a moderate level of digital marketing maturity. Security posture is good with HTTPS enforced and standard security headers present, although there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website presents a professional and trustworthy front with moderate risk and good operational maturity.

A

Asociácia inštitúcií vzdelávania dospelých v Slovenskej republike

aivd.sk

42

Asociácia inštitúcií vzdelávania dospelých (AIVD) is a Slovak non-profit association dedicated to adult education. Established in 1991, it represents institutions involved in adult learning, providing certification, organizing events, and fostering international partnerships. The organization is well-established with a domain registered since 2003 and recognized certifications such as EduQua. The website serves as a professional platform to communicate its activities, membership opportunities, and sector news. Technically, the site is built on WordPress with Bootstrap and jQuery, hosted likely by Websupport, and is mobile optimized with moderate performance. Security posture is good with HTTPS and DNSSEC enabled, though it lacks some security headers and formal privacy and cookie policies. Contact information is comprehensive, supporting business credibility. Overall, the site is trustworthy and serves its target audience effectively.

M

MyMachine Slovakia

mymachine.sk

48

MyMachine Slovakia is a non-profit educational program focused on fostering creative thinking and collaboration among children and youth in Slovakia. The program facilitates the transformation of children's ideas into real inventions through a collaborative process involving students from primary, secondary, and higher education institutions. The website reflects a well-established initiative with strong partnerships, notably with the Karpatská nadácia foundation, and presents a clear mission to nurture innovation and technical education. Technically, the website is built on WordPress using Elementor, with modern web technologies and good SEO practices. It employs HTTPS and cookie consent mechanisms to comply with GDPR, although explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates a solid security posture with room for enhancement in security headers and incident response transparency.

F

Freunde der Katholischen Theresienschule in Berlin-Weißensee e.V.

theresienball.de

9

The website 'Theresienball' represents a non-profit educational event organized by the Freunde der Katholischen Theresienschule in Berlin-Weißensee e.V. It serves as a platform to promote and provide information about the annual school ball, targeting students, parents, and teachers. The site is built on WordPress with WooCommerce and Tickera plugins to support ticketing and event management functionalities. The technical infrastructure is modern and includes common web technologies such as jQuery and Font Awesome, with a responsive design suitable for mobile devices. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is basic with a privacy policy present but no cookie banner. Overall, the site is professional, trustworthy, and focused on community engagement.

S

Středisko volného času RADOVÁNEK

radovanek.cz

44

Středisko volného času RADOVÁNEK is a well-established non-profit educational and leisure center based in Plzeň, Czech Republic, with a history dating back to 2005 and organizational roots spanning 75 years. The organization offers a broad range of educational clubs, camps, cultural events, and projects targeting children, youth, and adults in the Plzeň region. The website reflects a professional and consistent brand presence, showcasing partnerships, awards, and a comprehensive offering of services. Technically, the site is built on Joomla CMS with modern frameworks like Gantry 5 and uses common libraries such as jQuery and Bootstrap, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enforced, use of Google reCAPTCHA, and a detailed cookie consent mechanism, although some security headers could be improved. Privacy compliance is well addressed with a comprehensive GDPR policy and cookie management. Overall, the site is trustworthy, user-friendly, and well-positioned in its regional educational sector.

V

Vitensenteret Sørlandet

vitensor.no

10

Vitensenteret Sørlandet is a regional science center in Norway offering educational and entertaining science activities for families and children. The website is built on WordPress using the Divi theme and includes common plugins for SEO and GDPR compliance. The technical infrastructure is modern with HTTPS enabled and reCAPTCHA implemented for form security. However, the site lacks visible privacy policy, terms of service, and explicit contact information in the provided HTML content. Security posture is moderate with room for improvement in security headers and incident response transparency. Overall, the website is professional, family-friendly, and safe, with a moderate risk profile due to missing compliance documentation.

J

Jugendliche stärken

jugendlichestaerken-niedersachsen.de

55

Jugendliche stärken Niedersachsen is a regional educational and support platform focused on strengthening youth mental health and social cohesion in schools. The platform targets students, teachers, and parents in Niedersachsen, Germany, providing educational content, guidance, and resources to foster understanding and support for psychological challenges. It is a publicly funded initiative, indicated by the presence of the Niedersachsen logo and the MSH project logo, emphasizing its non-profit and educational nature. The website is well-structured, with clear navigation and content tailored to its audience, including dedicated sections for different user groups and topics related to mental health and social influences. Technically, the website employs modern web technologies such as htmx and hyperscript for dynamic content loading and interaction, and is hosted on AWS infrastructure. It uses Matomo for privacy-conscious web analytics with explicit cookie consent and opt-out mechanisms, reflecting a strong commitment to user privacy and GDPR compliance. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and integrates cookie consent with Do Not Track settings in analytics. However, it lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data and DNS configuration align with the hosting provider and business claims, supporting the legitimacy of the domain and platform. Overall, Jugendliche stärken Niedersachsen presents a trustworthy, privacy-conscious, and professionally maintained platform serving an important educational and social function. Strategic improvements could include adding explicit security policies, enhancing security headers, and publishing incident response and vulnerability disclosure information to further strengthen trust and compliance.

K

Kath. St. Marien - Oberschule Berlin

marienschule-berlin.de

59

Kath. St. Marien - Oberschule Berlin is a Catholic secondary school located in Berlin Neukölln, Germany, offering integrated secondary education and gymnasium programs. The website serves as an information platform for students, parents, and the local community, providing details about school life, events, job offers, and administrative services. The school is sponsored by the Archdiocese of Berlin, which is reflected in the website's branding and partner links. Technically, the site is built on Joomla CMS with modern web technologies including jQuery and Bootstrap, and it incorporates GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

K

Katholische Schule Sankt Franziskus

kssf-berlin.de

58

Katholische Schule Sankt Franziskus is a well-established Catholic educational institution in Berlin offering primary, integrated secondary, and gymnasiale oberstufe education. The website reflects a mature digital presence with comprehensive content, including news, events, and detailed service information for students and parents. The technical infrastructure is based on Joomla CMS with modern web technologies and good mobile optimization. Security posture is solid with HTTPS, GDPR-compliant cookie consent, and no evident vulnerabilities. However, some security headers could be improved. Overall, the site is trustworthy and professionally maintained, supporting the school's long-standing reputation.

K

Katholische Schule Salvator

salvator-grundschule.de

59

Katholische Schule Salvator is a Catholic primary school located in Berlin, Germany, operating under the sponsorship of the Erzbistum Berlin. The website serves as an information portal for parents, students, and the local community, providing news, event updates, and essential school information. The school emphasizes a community-oriented, faith-based educational approach. The website is built on Joomla CMS and incorporates modern web technologies and GDPR-compliant cookie consent mechanisms. It offers clear contact details and regularly updated content, reflecting an active and engaged institution. Security-wise, the site uses HTTPS and cookie consent best practices but lacks explicit security policies or vulnerability disclosures. Overall, the site is trustworthy, professional, and well-maintained, suitable for its educational purpose.

K

Katholische Theresienschule Berlin

theresienschule.de

57

Katholische Theresienschule Berlin is a well-established Catholic educational institution operating under the Archdiocese of Berlin. The website serves as an information hub for students, parents, and the school community, providing news, event updates, and service information. The school emphasizes community engagement and offers a variety of extracurricular activities and workshops. The domain age and content reflect a mature and credible organization with a long history dating back over a century. Technically, the website is built on Joomla CMS with modern web technologies including jQuery and Bootstrap. It features a GDPR-compliant cookie consent mechanism and is served over HTTPS with good security practices. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some security headers and formal security policies are missing. From a security perspective, the site demonstrates a solid baseline with HTTPS enforcement and cookie management. There are no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contact is a gap that could be addressed to improve trust and preparedness. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website is trustworthy, professional, and well-maintained, suitable for its educational purpose. Strategic recommendations include enhancing security transparency, adding incident response information, and implementing additional security headers to further harden the site against potential threats.

K

Katholische Schule Sankt Hildegard

kssh-berlin.de

61

Katholische Schule Sankt Hildegard is a recognized Catholic educational institution in Berlin providing primary and secondary education with a focus on children and youth with specific educational needs. The website serves as an information portal for students, parents, and educators, offering news, events, and service information. The school is supported by the Archdiocese of Berlin and holds a digital education certification (fobizz Schule 2024/25). The site is well-structured, professionally designed, and regularly updated with relevant content.

HÜF-NRW is a regional educational organization providing professional development and training services primarily for technical and administrative staff across 36 cooperating universities in North Rhine-Westphalia, Germany. Their offerings include a broad event program and a comprehensive e-learning platform accessible via ILIAS. The website is built on TYPO3 CMS, leveraging modern web technologies and privacy-conscious analytics through Matomo. The site demonstrates good compliance with GDPR and cookie consent regulations, providing clear contact information and social media presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the website reflects a professional and trustworthy educational service with a medium-sized organizational footprint.

R

RWTH Aachen University

git.nrw

53

git.nrw is an educational platform operated under the auspices of RWTH Aachen University, providing a centralized GitLab instance and related services to universities in the NRW region of Germany. The platform supports version control, issue tracking, CI/CD, and offers educational courses and profiling quizzes to enhance learning experiences. The website is professionally designed with excellent content quality and clear navigation, targeting students and experts within the academic community. Technically, the site uses modern static site generation with Hugo, Tailwind CSS, and JavaScript modules, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforced and privacy consent mechanisms implemented, though explicit security policies and vulnerability disclosure mechanisms are absent. WHOIS data confirms the domain's legitimacy and university affiliation, reinforcing trustworthiness. Overall, git.nrw represents a credible, well-maintained educational service with strong technical and privacy compliance foundations.

U

Universität Duisburg-Essen

uni-due.de

57

The Universität Duisburg-Essen is a prominent German university offering a wide range of educational and research services. The website reflects a well-established institution with a clear focus on serving students, researchers, alumni, and staff. It provides comprehensive information about study programs, research activities, campus life, and international cooperation. The university maintains a strong digital presence with official social media channels and updated news content. Technically, the website is built on the IMPERIA CMS platform and uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery. It incorporates MathJax for mathematical content rendering. The site is mobile-optimized and accessible, with good SEO practices evident. However, some modern security headers and explicit security policies are not visible, indicating room for improvement in security hardening. From a security perspective, the site uses HTTPS (implied by domain and standard practice, though SSL details are not explicit in the data). No WAF or blocking mechanisms were detected, and no critical vulnerabilities or exposed sensitive data were found in the HTML content. Privacy compliance is supported by a comprehensive GDPR privacy policy, but cookie consent mechanisms are lacking. Contact information is clearly provided, enhancing trust and credibility. Overall, the website is professional, trustworthy, and well-maintained, suitable for its educational mission. Strategic improvements in security headers, cookie consent, and incident response disclosures would further strengthen its security posture and compliance.

R

Religionspädagogisches Institut Loccum

rpi-loccum.de

61

The Religionspädagogisches Institut Loccum (RPI Loccum) is a well-established non-profit educational institution affiliated with the Evangelisch-Lutherische Landeskirche Hannovers in Germany. It specializes in religious pedagogy and theological education, offering a broad range of professional development courses, events, and educational materials primarily targeting religious educators, schools, and church communities. The website reflects a mature organization with a 75-year history, providing comprehensive content and services in German. The business model focuses on education, training, and community engagement within the religious sector.

C

CPR Certification Institute

cprcertification.com

48

CPR Certification Institute operates a professional online platform offering CPR, First Aid, Bloodborne Pathogens, Infant CPR, and Babysitting certification and recertification courses. The business targets individuals and groups seeking convenient, accredited training based on American Heart Association guidelines. Their market position is that of a trusted online education provider with nationwide acceptance and medical professional endorsement. Technically, the website uses a concrete5 CMS with modern JavaScript libraries and Google Analytics for tracking. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS and secure payment gateways, though improvements could be made by adding security headers and cookie consent mechanisms. The absence of WHOIS data limits domain trust verification, but the website content and business information appear legitimate and professional. Overall, the site is well designed and functional, serving its educational purpose effectively.

Digitale Hochschule NRW (DH.NRW) is a collaborative initiative focused on advancing digital transformation within higher education institutions in the German state of North Rhine-Westphalia. The platform supports cooperation among universities, providing shared digital infrastructure, research support, and services such as a centralized GitLab instance (git.nrw), high-performance computing resources, and open-source AI projects. The website reflects a well-established regional educational consortium with official backing from universities and the Ministry of Culture and Science of NRW. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap and jQuery. It demonstrates good mobile optimization and SEO practices, though accessibility features could be improved. The site is served over HTTPS with no visible security vulnerabilities or exposed sensitive data. However, security headers are not explicitly detected, and no cookie consent mechanism is present, which are areas for improvement. From a security perspective, the site maintains a solid posture with encrypted connections and no signs of malicious content or vulnerabilities. The WHOIS data is privacy protected, which is common for public sector domains, and the domain's legitimacy is supported by its official university partnerships and government funding. No incident response or vulnerability disclosure policies are published, indicating potential gaps in transparency. Overall, DH.NRW presents a trustworthy, professional, and secure digital presence for a public educational consortium. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, publishing security policies, and enhancing accessibility to further strengthen compliance and user trust.

E

European Natural Forest School

naturalforest.eu

53

The European Natural Forest School is a specialized educational program dedicated to natural forestry and ecology, targeting advanced students and young professionals in forestry and conservation fields. It operates as a small-scale, donor-supported initiative with partnerships including The Natural Forest Academy and donors such as the Frankfurt Zoological Society and Dieter Mennekes Umweltstiftung. The program aims to provide expert knowledge and practical field experience in natural forest ecology, conservation, and management, with the next session planned for 2026. Technically, the website is built on WordPress using Elementor and the JupiterX theme, leveraging modern plugins and libraries such as Vue.js and jQuery. The site is moderately performant, mobile-optimized, and accessible at a basic level. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional, trustworthy, and aligned with its educational mission but would benefit from enhanced privacy and security practices.

B

Bc. Tomáš Paulus

tomaspaulus.com

61

Tomáš Paulus operates a professional UX design education and consulting business based in Prague, Czech Republic. The website offers online courses, mentoring, portfolio feedback, and corporate workshops focused on UX storytelling and design adoption of AI. The business targets UX designers and companies seeking to improve their user experience maturity. The site is well-branded, content-rich, and professionally designed, reflecting a niche market position in UX education and consulting within the Czech/Slovak region. Technically, the website is built on Webflow, leveraging modern web technologies including Google Tag Manager and Analytics, with good mobile optimization and performance. Security posture is adequate with HTTPS and cookie consent implemented, but lacks explicit security headers and published security policies. WHOIS data is missing, which raises legitimacy concerns, but the professional presence and active business mitigate some risk. Overall, the site scores well on content quality and technical implementation but should improve security transparency and domain registration clarity.

N

Naučmese

naucmese.cz

58

Naučmese is a Czech online educational platform offering a wide range of thematic courses, workshops, webinars, and video courses aimed at personal and professional development. The platform connects learners with instructors and provides additional services such as gift vouchers. It has a strong market presence in the Czech Republic with a medium-sized operation and a focus on community and skill sharing. Technically, the website uses modern web technologies including HTTPS, Google Analytics, Facebook Pixel, and Cloudflare Turnstile captcha for security. The platform implements a comprehensive cookie consent mechanism and complies with GDPR regulations. Security posture is good with HTTPS and bot mitigation, but lacks some advanced security headers and explicit incident response information. Overall, the website is professional, trustworthy, and user-friendly, with no adult or questionable content detected.

S

SANCTA MARIA Schule der hl. Hedwig gGmbH

sancta-maria-schule.de

53

SANCTA MARIA Schule der hl. Hedwig gGmbH is a specialized educational institution in Berlin, Germany, focusing on students with special needs in learning and intellectual development. The school operates under the Catholic Hedwigschwestern organization and collaborates with related pedagogical and social service partners. The website reflects a well-maintained digital presence using WordPress with Elementor and Astra theme, providing clear information about the school, its programs, and contact options. Privacy and security measures such as GDPR-compliant consent and Google reCAPTCHA are implemented, indicating awareness of data protection requirements. However, explicit security policies and incident response contacts are not present, which could be improved. Overall, the site is professional, trustworthy, and serves its target audience effectively.

K

Kath. Schulzentrum Edith Stein - Fachschule für Sozialpädagogik und Berufsfachschule für Sozialassistenz

schulzentrum-edithstein.de

58

Katholisches Schulzentrum Edith Stein is a medium-sized educational institution based in Berlin, specializing in social pedagogy and social assistance training. It operates under the Catholic Archdiocese of Berlin and offers state-recognized programs for aspiring educators and social assistants. The website reflects a professional and consistent brand image, targeting students seeking vocational education in social fields. Technically, the site is built on Joomla CMS with modern JavaScript libraries and analytics tools, providing a responsive and user-friendly experience. Security posture is solid with HTTPS and GDPR-compliant cookie consent, though some security headers and policies could be improved. Overall, the domain and hosting align well with the institution's profile, indicating legitimacy and trustworthiness.

C

Canisius-Kolleg

canisius.de

53

Canisius-Kolleg is a well-established Jesuit educational institution located in Berlin, offering Gymnasium education from grade 5 and an integrated secondary school from grade 9. The school emphasizes a Christian-humanist educational philosophy, fostering comprehensive development and responsibility among young people. It serves a diverse student body with over 900 students from 60 nationalities. The website reflects a mature digital presence built on WordPress with modern plugins and a responsive design, providing clear navigation and rich content. Privacy and cookie policies are comprehensive and GDPR compliant, with an active consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site projects professionalism, trustworthiness, and a strong educational brand in the Berlin region.

B

Bildungsstätte Anne Frank

hfg-jetzt.de

56

HfG.jetzt is an informational website dedicated to prospective students applying to Hochschule für Gestaltung (HfG) Offenbach, focusing on art and design study programs. The site provides application timelines, program details, and links to related university resources. It targets applicants primarily in Germany but offers an English version for international users. The business model centers on educational information dissemination without direct commercial transactions. Technically, the website is built on WordPress, utilizing modern JavaScript libraries such as Swiper.js for UI components and jQuery for scripting. The site is hosted with domain control services consistent with GoDaddy infrastructure. It employs HTTPS with good SSL configuration and includes a GDPR-compliant cookie consent mechanism that restricts cookies to necessary ones only, reflecting a strong privacy posture. Security-wise, the site enforces HTTPS and cookie consent but lacks explicit security headers and documented security policies or incident response contacts. No vulnerabilities or tracking scripts were detected, indicating a low-risk profile. The WHOIS data aligns with the website's educational purpose, showing no suspicious registration patterns. Overall, the website is professional, trustworthy, and well-suited for its educational audience. Strategic improvements could include enhancing security headers, publishing security policies, and providing clearer contact information to strengthen trust and compliance.

Hochschule für Gestaltung Offenbach am Main is a German university specializing in art and design education. The website serves as an information portal for students, faculty, and the public, offering news, event calendars, study counseling, job offers, and cooperation opportunities. The institution positions itself as a contemporary and future-oriented academic entity with a regional focus and active cultural engagement. Technically, the website employs standard web technologies including JavaScript and CSS, with internationalization support and autocomplete search features. The hosting appears to be managed via German academic network DNS servers, indicating institutional legitimacy. Security posture is moderate with HTTPS usage and CSRF tokens but lacks visible advanced security headers or published security policies. Privacy compliance is basic, with an accessibility declaration present but no explicit cookie or privacy policies. Overall, the site is professional, trustworthy, and safe for general audiences.

W

WBS TRAINING

wbstraining.de

67

WBS TRAINING is a large, established German education provider specializing in certified professional training, retraining, and further education courses offered both online and at over 280 physical locations. The website is built on the TYPO3 CMS platform and demonstrates a mature digital presence with good SEO, accessibility, and mobile optimization. The company employs modern analytics and marketing tools including Google Tag Manager, Cookiebot for consent management, and tracking services such as Convert Insight and Mouseflow. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are not evident. Overall, the domain registration data aligns well with the business claims, indicating a trustworthy and legitimate operation.

C

Christian-Schreiber-Haus

christian-schreiber-haus.de

52

Christian-Schreiber-Haus is a small non-profit educational and youth accommodation provider located near Berlin, Germany. The organization offers group housing, educational programs, spiritual services, and workshops primarily targeting school classes, youth groups, and church communities. The website reflects a well-established regional presence with clear contact information and legal compliance. Technically, the site is built on Joomla CMS with Yootheme and UIkit frameworks, providing a modern and accessible user experience. Security posture is solid with HTTPS, CSRF protections, and privacy consent mechanisms, though some HTTP security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

E

Erzbistum Berlin

schulen-erzbistumberlin.de

58

The website for Schulen des Katholischen Erzbistum Berlin represents a network of Catholic educational institutions in Berlin and Brandenburg, offering primary, secondary, and special education. It serves a broad audience including children, youth, parents, and educational staff, positioning itself as a regional leader in faith-based education. The site provides news, job postings, and educational offerings, reflecting a community-oriented non-profit model under the Archdiocese of Berlin. Technically, the site is built on Joomla CMS with modern web technologies, including GDPR-compliant cookie consent mechanisms and responsive design, ensuring accessibility and privacy compliance. Security posture is solid with HTTPS and cookie management, though lacks explicit security policy and incident response disclosures. Overall, the site is professional, trustworthy, and well-aligned with its educational mission.

N

NaZemi

nazemi.cz

45

NaZemi is a well-established Czech non-profit organization founded in 2005, focusing on sustainability, transformative education, and community engagement. Their website reflects a mature digital presence with clear navigation, multilingual support, and a professional design. They offer educational programs, facilitation services, community spaces, and an e-commerce platform for publications. Technically, the site is built on WordPress with WooCommerce and uses modern frameworks like Bootstrap, supported by privacy-conscious analytics such as Matomo and Google Tag Manager with consent management. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Contact information and privacy policies are clearly presented, supporting trust and compliance. Overall, the site is credible, secure, and user-friendly, serving a niche audience interested in sustainability and education.

N

NaZemi

generacesymbiocen.cz

47

Generace Symbiocén is a Czech non-profit educational program targeting young people aged 17-23, focusing on societal and environmental transformation, particularly addressing the climate crisis. The program is operated by NaZemi, a well-established organization in global education and social change. The website is built on WordPress using Elementor and integrates various plugins including Everest Forms and Instagram Feed. It uses Matomo for analytics and embeds YouTube videos for content delivery. The site is professionally designed with good navigation and mobile optimization, providing relevant and engaging content for its target audience. However, it lacks explicit privacy and cookie policies, consent mechanisms, and security headers, which are important for compliance and security posture. WHOIS data confirms the domain is recently registered in 2022, consistent with the program's founding, and is hosted on Czech servers. Overall, the site is trustworthy and credible but could improve in privacy compliance and security best practices.

E

EVS/ESC Galaxy

evsgalaxy.net

46

EVS/ESC Galaxy is a niche educational platform dedicated to providing resources, brochures, and international training courses for EVS and ESC coordinators. The website serves a specialized audience involved in European voluntary service coordination, offering curated content and tools to support their activities. The business operates primarily in the education and non-profit sectors, with a small organizational size and a founding date consistent with the domain registration in 2017. The site is hosted by WEDOS Internet, a Czech hosting provider, aligning with the regional focus of the content. Technically, the website is built on WordPress with a modern theme and plugins, including jQuery and Page Builder Framework. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. The absence of advanced security headers and DNSSEC indicates room for improvement in security hardening. No analytics or tracking scripts were detected, suggesting minimal user tracking. From a security perspective, the site uses HTTPS with a valid SSL certificate, but lacks security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No contact or incident response information is provided, limiting transparency and user trust. The domain WHOIS data is consistent and legitimate, with no privacy protection or suspicious patterns. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security best practices, and clearer contact information to improve trust and regulatory adherence.

M

MarkerCS

markercs.cz

45

MarkerCS is a small non-profit organization focused on providing non-formal education training primarily for youth workers and teachers in Slovakia and the Czech Republic. Their website offers detailed information about their training programs, educational principles, and testimonials from past participants, positioning them as a niche educational provider supported by the Erasmus+ program. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, hosted by a Czech registrar and hosting provider. The site is moderately performant, mobile-optimized, and SEO-friendly but lacks some advanced accessibility features. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but the absence of security headers and formal privacy and cookie policies indicates room for improvement. Overall, the website is professional and trustworthy but could enhance compliance and security transparency.

A

Asociace neformálního vzdělávání

neformalnivzdelavani.eu

52

The website www.neformalnivzdelavani.eu serves as an educational resource focused on non-formal education primarily targeting youth workers, teachers, social workers, camp leaders, volunteers, and parents interested in innovative educational methods. It is managed by the Asociace neformálního vzdělávání (ANEV), a Czech non-profit organization, and is supported by European Union funding. The site offers multilingual content, including Czech, English, Finnish, and Portuguese versions, enhancing its accessibility across Europe. The business model is non-profit, focusing on providing educational content, resources, and community support rather than commercial services. Technically, the website is built on WordPress with common plugins such as WPML for multilingual support and Featherlight for image lightboxes. It uses jQuery and Google Fonts, with a moderate performance profile and good mobile optimization. SEO and accessibility are basic to good, but there is room for improvement in accessibility features and security headers. The site is served over HTTPS with a valid SSL certificate, ensuring secure communications. From a security perspective, the site lacks visible security headers and does not expose sensitive data or vulnerable libraries in the provided content. However, the absence of a privacy policy and terms of service pages, as well as no explicit contact emails or phone numbers, reduces privacy compliance and user trust. The WHOIS data is unavailable due to EURid privacy policies, but the website’s association with known organizations and EU funding supports its legitimacy. No WAF or blocking mechanisms were detected, and the content is safe for general audiences. Overall, the website is a credible, well-structured educational resource with moderate technical maturity and a good security baseline. Strategic improvements in privacy documentation, security headers, and contact transparency would enhance compliance and trustworthiness.

The website 'Šlabikár neformálneho vzdelávania' serves as an educational platform focused on improving the quality of non-formal education for youth workers primarily in Slovakia and the Czech Republic. It offers a methodological guide and an interactive e-learning tool developed through a partnership between YouthWatch, ANEV, and Luducrafts, supported by Erasmus+. The site targets youth educators and non-profit organizations involved in youth work, providing free resources to enhance educational practices. Technically, the site uses modern JavaScript libraries, Google Analytics for tracking, and is served over HTTPS with a valid SSL certificate. However, it lacks visible privacy and cookie policies and does not provide direct contact information, which impacts privacy compliance and user trust. Security posture is moderate with some best practices like CSRF token usage but missing security headers. WHOIS data is unavailable due to EURid privacy policies, but the domain and content appear legitimate and consistent with the stated mission. Overall, the site is professionally designed and functional but could improve transparency and security practices.

Y

YoDel

yodel.sk

42

YoDel is a small-scale educational conference focused on new approaches to working with young people, primarily targeting youth workers and educators in Slovakia. The website provides detailed program information and workshop descriptions, demonstrating a clear business purpose and target audience. Technically, the site is built on WordPress using Elementor and Yoast SEO, with modern fonts and some SEO optimization. However, Google Analytics is installed but not configured, and no privacy or cookie policies are present, which impacts privacy compliance. Security posture is moderate with HTTPS enabled but lacking security headers and explicit security policies. Overall, the site is professional and functional but could improve in privacy and security transparency.

K

Katholische Akademie der Erzdiözese Freiburg

katholische-akademie-freiburg.de

38

The Katholische Akademie der Erzdiözese Freiburg is a regional non-profit educational and cultural institution affiliated with the Catholic Archdiocese of Freiburg, Germany. It organizes interdisciplinary events and discussions on theology, philosophy, ethics, church matters, and social topics, targeting interested individuals and the broader community. The website reflects a professional and consistent brand presence with a focus on event promotion and educational content. Technically, the website is built on the Edith CMS platform, utilizing jQuery, Bootstrap, and Matomo analytics for tracking. Hosting is provided by w-commerce.de, with multiple authoritative nameservers ensuring domain stability. The site is mobile-optimized with good navigation and SEO practices, although performance is moderate. From a security perspective, the site enforces HTTPS and uses Matomo with cookie disable options, indicating some privacy awareness. However, it lacks explicit privacy and cookie policies, security headers, and incident response information, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is safe, trustworthy, and professionally maintained but would benefit from enhanced privacy compliance and security best practices to strengthen user trust and regulatory adherence.

E

ELB Learning

rehearsal.com

62

Rehearsal, operated by ELB Learning, is a specialized video role-play training platform designed to enhance sales enablement, call center training, and soft skills development. The platform targets corporate training professionals and sales teams, offering a SaaS model that supports video-based practice and coaching accessible anywhere. The website presents a professional and consistent brand image with clear calls to action for demos, app downloads, and support resources, positioning itself as a niche player in the education technology sector. Technically, the website leverages modern web technologies including React and Tailwind CSS, with a focus on performance and mobile optimization. Security best practices are well implemented with strong HTTP security headers and HTTPS enforcement. However, the absence of a cookie consent mechanism and explicit vulnerability disclosure pages indicates room for improvement in privacy compliance and transparency. The security posture is strong with no visible vulnerabilities or exposed sensitive data. The site demonstrates good adherence to security standards but could enhance incident response readiness by providing direct security contact channels. The lack of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, although the professional presentation and ELB Learning association mitigate concerns. Overall, Rehearsal's website is a well-executed digital presence for a specialized SaaS training platform, with solid technical and security foundations. Strategic improvements in privacy compliance and domain registration transparency would further strengthen trust and compliance.

B

Brunner Medien AG

brunner-verlag.ch

65

Brunner Medien AG operates as a Swiss-based publishing company specializing in educational, religious, and pedagogical books and music. Their website serves as an e-commerce platform targeting German-speaking audiences interested in cultural and educational content. The company maintains a clear market niche with a professional online presence and a consistent brand image. Technically, the website employs modern JavaScript libraries and custom fonts, with a responsive design that supports good user experience across devices. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security policies and headers could be improved. Privacy compliance is well addressed with accessible privacy and cookie policies. Overall, the website reflects a trustworthy and credible business with room for technical and security enhancements.

E

Elementare Vielfalt

periodensystem.de

47

The website www.periodensystem.de is a specialized educational platform offering a free interactive periodic table of elements aimed at students and professionals in chemistry-related fields. It is positioned as a niche resource within the German education sector, providing accessible and app-free learning tools. The site is powered by TYPO3 CMS and leverages modern JavaScript libraries to enhance user experience. Hosting is provided by SchlundTech, a reputable German hosting provider, ensuring reliable infrastructure. The site demonstrates good technical maturity with responsive design and SEO optimization. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent managed via Usercentrics, although some security headers are missing and no explicit security policies or incident response contacts are provided. Overall, the site is trustworthy, safe, and professionally maintained, with room for improvement in transparency and security documentation.

H

Haus Volkersberg - KdÖR Diözese Würzburg

volkersberg.de

51

Haus Volkersberg is a well-established educational and hospitality institution located in Germany, offering youth education, adult learning, and conference facilities. It operates under the Diocese of Würzburg and serves a broad audience including youth groups, adults, and families. The website reflects a mature organization with comprehensive content, clear navigation, and professional design. Technically, it is built on Joomla CMS with modern UI frameworks and privacy-conscious analytics. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. WHOIS data is limited but consistent with the institution's profile. Overall, the site is trustworthy and compliant with GDPR requirements.

W

WBS GRUPPE

wbs-gruppe.de

56

WBS GRUPPE is a leading German education provider specializing in online and offline training and further education services. The company operates under six strong brands, targeting individuals seeking professional development and vocational training. Their market position is strong within Germany and internationally, focusing on digital education solutions. The website is built on TYPO3 CMS and integrates modern consent management tools such as Cookiebot, reflecting a mature digital infrastructure. The site demonstrates good SEO, accessibility, and mobile optimization, supporting a positive user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website reflects a professional and trustworthy educational institution with strong GDPR compliance and transparent cookie policies.

C

chemmedia AG

knowledgeworker.com

65

chemmedia AG operates the Knowledgeworker platform, a comprehensive E-Learning software suite designed for corporate clients. Their offerings include an AI-integrated authoring tool, a learning management system, a scenario-based digital coach, and a microlearning app. The company emphasizes GDPR compliance, data privacy, and high-quality, modular learning solutions. The website is professionally designed, mobile-optimized, and integrates modern analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and consent management, though some security headers could be enhanced. The absence of WHOIS data is notable but does not detract from the overall legitimacy given the professional presentation and client references. Strategic recommendations include enhancing security headers and publishing explicit security policies.

A

Asociace neformálního vzdělávání

anev.cz

50

Asociace neformálního vzdělávání (ANEV) is a Czech non-profit association specializing in non-formal education for youth workers and related professionals. The organization offers training, coaching, publications, and project coordination to improve the quality and innovation in youth education. The website is well-structured, content-rich, and targets educators and youth workers primarily in Czechia and Slovakia. Technically, the site is built on WordPress with common plugins and uses HTTPS with a cookie consent mechanism, indicating a moderate level of digital maturity. However, the absence of a privacy policy and WHOIS transparency reduces compliance and trust levels. Security posture is adequate with SSL but lacks advanced security headers. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

CertUp is a specialized audit bureau based in Belgium, focusing on quality certification and registration audits for organizations in the education, consulting, and HR sectors. With over 30 years of experience and more than 10,000 audits completed, CertUp offers a range of services including Qfor, ISO, WSE, and Qualiopi audits. The company targets training centers, consultants, HR service providers, and sector organizations, helping them achieve recognized quality certifications to enhance their market credibility and access government subsidies. Technically, the website is built with modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile-optimized with good SEO practices and a clear navigation structure. However, no explicit CMS or hosting provider information is detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious content were detected. The domain registration data is consistent with the business claims, supporting the legitimacy of the website. Overall, CertUp presents a professional and trustworthy online presence with strong business credibility. Strategic improvements in security policy transparency and security headers would enhance their security posture further.

N

Nordic CAMPUS Berufsbildungswerk Bremen gGmbH

bbw-bremen.de

56

Nordic CAMPUS Berufsbildungswerk Bremen gGmbH is a well-established non-profit vocational training institution in Germany focused on educating and supporting young people with disabilities. With over 40 years of experience and multiple locations, it offers a broad range of training programs, personal and health support services, and fosters inclusion through strong partnerships and community engagement. The website reflects a professional and inclusive brand with comprehensive content and clear navigation. Technically, the website uses a custom or unknown CMS with a technology stack including jQuery and responsive design elements. Hosting is provided by a German ISP (Ewetel). The site is mobile-optimized and SEO-friendly but lacks some modern security headers. Cookie consent mechanisms are implemented, supporting GDPR compliance. Security posture is moderate with HTTPS enforced and email obfuscation in place, but missing explicit security headers and incident response contacts. No vulnerabilities or malware indicators were found. Overall, the site is trustworthy and professionally maintained, with room for security enhancements. The risk level is low, with recommendations to improve security headers, publish a security policy, and enhance incident response transparency to further strengthen trust and compliance.

R

RM

rm.com

73

RM is a UK-based leading supplier of technology and services tailored for the education sector, supporting a wide range of educational institutions from pre-school to higher education, including examination boards and government bodies. Their offerings encompass education technology, assessment solutions, broadband, VoIP, and support services, positioning them as a comprehensive provider in the education technology market. The website reflects a professional and consistent brand presence with clear navigation and extensive content targeting schools, teachers, and educational institutions globally. Technically, the site employs a modern tech stack including C#, jQuery, Google Analytics, and OneTrust for cookie consent, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and use of reCAPTCHA, though some security headers and explicit policies are not evident in the provided data. The absence of WHOIS registration details limits domain trust verification but the overall digital footprint and related domains support legitimacy. Privacy compliance is partially addressed with cookie consent but lacks a clearly accessible privacy policy in the analyzed content. Overall, RM demonstrates a strong market position with room for improvement in transparency and security documentation.

U

Unitus

unitus.it

56

The website www.unitus.it represents the official online presence of the Università degli Studi della Tuscia, a public university based in Italy. The site provides information about degree courses, research activities, and university life, targeting students, researchers, and the academic community. It holds a regional market position as an educational institution and offers key services related to higher education and research. Technically, the website is built on WordPress with multilingual support via WPML, utilizing common web libraries such as jQuery and DataTables. Google Analytics and Google Tag Manager are employed for user tracking and analytics. The site demonstrates moderate performance and good mobile optimization, with a professional design and clear navigation structure. Security-wise, HTTPS is enforced, and a cookie consent mechanism is implemented, indicating GDPR awareness. However, the absence of security headers and explicit security policies suggests room for improvement in security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professionally maintained, though it lacks some compliance documentation such as privacy and terms of service pages. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility features.

B

Bundesforum Lernort Bauernhof

forum-lernort-bauernhof.de

49

The Bundesforum Lernort Bauernhof is a German nationwide non-profit network established in 2006 that coordinates organizations, associations, ministries, and individuals dedicated to farm-based educational initiatives. The website serves as an information hub promoting the farm as an experiential learning environment, emphasizing sustainable development education for children and youth. The organization focuses on networking, material development, certification, and advocacy to integrate farm education into school curricula across Germany. Technically, the website is built on WordPress with the Divi theme and uses modern web technologies including jQuery and Font Awesome. It features a cookie consent mechanism but lacks a dedicated privacy policy page and explicit contact information. Security posture is generally good with HTTPS enabled, but security headers are not evident and no vulnerability disclosure or incident response information is provided. WHOIS data for the domain is missing, which raises concerns about domain registration transparency and trustworthiness. Overall, the site is professional and content-rich but would benefit from improved privacy and security disclosures.