Government security reports

G

GeoPortal.MV

gaia-mv.de

60

GeoPortal.MV is the official geospatial data platform for the German state of Mecklenburg-Vorpommern, providing comprehensive access to geodata, thematic maps, and geospatial web services. The platform targets government agencies, businesses, and the general public within the region, offering specialized geo applications and data downloads. The website demonstrates a mature digital presence with well-structured content, clear navigation, and compliance with GDPR and cookie consent requirements. Technically, it employs modern web standards, responsive design, and accessibility features, supported by custom JavaScript and jQuery libraries. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks explicit security policies and vulnerability disclosure mechanisms. Overall, the domain and website appear legitimate and trustworthy, consistent with a government-operated geoportal.

C

Centre for Whistle Blowing Germany

whistle.law

66

The Centre for Whistle Blowing Germany operates a secure web portal for whistleblowers and organizations to manage whistleblowing reports. The platform leverages Keycloak for authentication and uses the PatternFly CSS framework for UI styling. The website is primarily a login page with links to privacy and imprint pages, indicating a focus on compliance and user privacy. The absence of WHOIS data suggests privacy protection for the domain registration, which is appropriate given the sensitive nature of whistleblowing services. However, the lack of visible contact information and cookie consent mechanisms limits transparency and user trust. Technically, the site uses modern frameworks but has room for improvement in security headers and client-side password handling. Overall, the site is functional and moderately secure but could benefit from enhanced privacy and security practices.

NRW.Global Business is a government-affiliated trading agency focused on promoting North Rhine-Westphalia as Germany's premier investment location. The website targets foreign companies seeking to establish or expand their presence in the region, offering consulting and market entry support services. The site is built on TYPO3 CMS and integrates advanced analytics and marketing tools such as Matomo, Google Analytics, Facebook Pixel, and Cookiebot for consent management. Accessibility features are also implemented via the eyeAble tool. Security posture is strong with HTTPS enforcement and appropriate security headers, though the absence of a security.txt and incident response information is noted. The lack of WHOIS data raises some concerns about domain registration transparency, but the overall digital presence and content quality suggest a legitimate and professional operation. Strategic recommendations include publishing explicit security and incident response policies and verifying domain registration details.

M

Mesto Bratislava

esluzbyba.sk

64

The website esluzby.bratislava.sk serves as the official electronic services portal for the city of Bratislava, Slovakia. It provides citizens and businesses with digital access to a variety of municipal services such as tax declarations, waste management notifications, vehicle status reporting, and public lighting fault reporting. The portal is positioned as the primary government interface for electronic communication with city authorities, enhancing convenience and reducing the need for physical office visits. The target audience includes residents and entrepreneurs within Bratislava. Technically, the site leverages a mature ASP.NET framework with common web technologies including jQuery, Google Web Fonts, and Google Analytics for tracking. The site is served over HTTPS with HttpOnly cookies for session management, indicating a baseline of security best practices. The cookie consent mechanism complies with GDPR requirements, and the site includes a privacy policy page. However, there is room for improvement in security headers and incident response transparency. From a security perspective, the portal demonstrates a solid foundation with encrypted communications and controlled cookie usage. No critical vulnerabilities or exposed sensitive data were detected. The absence of explicit security policies, incident response contacts, or vulnerability disclosure mechanisms suggests an opportunity to enhance trust and preparedness. The use of third-party tracking services like Google Analytics and DoubleClick is disclosed via cookie consent, aligning with privacy regulations. Overall, the website is a trustworthy, well-structured government portal with good content quality and user experience. It effectively serves its public service mission with moderate technical sophistication and compliance. Strategic enhancements in security policies, headers, and transparency would further strengthen its posture and user confidence.

The website www.luebz.de serves as the official municipal portal for the city of Lübz in Germany, providing residents and visitors with local news, event information, administrative contacts, and tourism-related content. The site is structured to support community engagement and transparency, featuring a newsletter subscription and cookie consent mechanisms to comply with GDPR. The technical infrastructure relies on a government portal CMS with standard JavaScript libraries and CSS, hosted on Cloudpit servers. While the site is accessible and functional, it exhibits basic design and limited mobile optimization. Security posture is moderate, with cookie consent implemented but lacking explicit security headers and detailed security policies. No direct contact emails or phone numbers are published, relying instead on contact forms. Overall, the site is trustworthy and safe, with no adult or questionable content detected.

L

Landtag Mecklenburg Vorpommern

landtag-mv.de

69

The website www.landtag-mv.de is the official online presence of the Landtag Mecklenburg Vorpommern, the state parliament of Mecklenburg-Vorpommern, Germany. It serves as a comprehensive information portal for legislative activities, live streaming of parliamentary sessions, petitions, event calendars, and educational resources. The site targets citizens, political stakeholders, media, and visitors interested in the state's legislative processes. The business model is that of a government institution providing transparency and public services related to governance and legislation. Technically, the website is built on TYPO3 CMS with Bootstrap and Uikit frameworks, leveraging modern web technologies such as jQuery UI and JavaScript. The site demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with external content loaded via trusted CDNs. Cookie consent mechanisms are implemented with opt-in for statistics and marketing cookies, reflecting GDPR compliance. From a security perspective, the site enforces HTTPS with excellent SSL configuration and employs cookie consent for privacy compliance. However, explicit security headers and a published security policy or incident response contacts are absent. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data aligns well with the website's official government status, indicating high legitimacy. Overall, the website is professional, trustworthy, and well-maintained, with strong content quality and user experience. Strategic recommendations include publishing a dedicated security policy, adding security headers, providing incident response contacts, and implementing a vulnerability disclosure mechanism to enhance security posture and transparency.

D

Die Ministerpräsidentin des Landes Mecklenburg-Vorpommern

vorpommern-fonds.de

59

The website represents the Fonds für Vorpommern und das östliche Mecklenburg, a regional government fund managed under the auspices of the Ministerpräsidentin des Landes Mecklenburg-Vorpommern. It provides detailed information about funding opportunities aimed at supporting economic, social, and cultural development in the Vorpommern and eastern Mecklenburg regions. The site targets public bodies, private legal entities, and individuals involved in regional development projects. The business model is a government-funded grant program with a clear focus on regional development and cohesion. Technically, the site is built on a custom CMS platform (Gaia) commonly used by regional government entities in Mecklenburg-Vorpommern. It uses standard web technologies including JavaScript and CSS, with jQuery UI for interactive elements. The site is moderately performant, mobile-optimized, and accessible at a basic level. SEO and metadata are basic but sufficient for the target audience. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks explicit security headers and published security or incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing trust and credibility. Overall, the site is a trustworthy and professional government resource with good content quality and business credibility. Security posture and privacy compliance could be improved by implementing security headers, cookie consent, and publishing security policies. No critical vulnerabilities or blocking mechanisms were detected.

1

13°

13-grad.com

50

13° is a German branding and communication agency specializing in transforming companies into brands, providing products with distinct identities, and crafting compelling stories. The agency serves a diverse clientele including large, medium, and small enterprises as well as public sector clients such as ministries, universities, cities, and foundations, primarily based in Mecklenburg-Vorpommern but operating nationwide. Their website reflects a professional and modern digital presence with multimedia content, client showcases, and testimonials. Technically, the site is built on WordPress with SEO and cookie consent plugins, and uses Matomo for analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and incident response information could enhance their security maturity. Overall, the website is trustworthy, well-branded, and compliant with GDPR, supporting the agency's credibility and market positioning.

N

NUAKTIV

activeprocurement.sk

59

ActiveProcurement is a specialized Slovak web-based information system designed to support public procurement processes for government and other procurement entities. The platform offers modular solutions covering procurement planning, market research, contract management, and electronic communication with economic entities. The website demonstrates a professional presence with clear business focus and a client base evidenced by displayed logos. Technically, the site uses modern web technologies including ASP.NET backend, JavaScript libraries, Google Analytics, and reCAPTCHA for security. HTTPS is enforced, and cookie consent mechanisms are implemented, reflecting a moderate level of digital maturity. Security posture is solid with anti-forgery tokens and HttpOnly cookies, though explicit security policies and incident response information are absent. Overall, the site is trustworthy and well-positioned in its niche, but could improve transparency around privacy and security policies.

P

Provincie Limburg

limburg.nl

72

Provincie Limburg operates as the official provincial government entity for Limburg in the Netherlands, providing comprehensive public information and services including governance details, subsidies, permits, news, and contact resources. The website serves residents and stakeholders with a clear focus on transparency and accessibility. The business model is centered on governmental public service, with a strong market position as the authoritative source for provincial matters. Technically, the website employs a modern CMS (iprox) and integrates various web technologies such as jQuery UI, ReadSpeaker for accessibility, and Slick Carousel for dynamic content presentation. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience and digital maturity. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting compliance with privacy regulations like GDPR. While explicit security headers are not evident, no vulnerabilities or exposed sensitive data were detected. The absence of a public incident response or vulnerability disclosure page suggests room for improvement in transparency and security readiness. Overall, the website is trustworthy, professional, and well-maintained, with strong alignment between domain registration data and business claims. Strategic recommendations include enhancing security headers, publishing incident response information, and adopting a security.txt file to improve vulnerability disclosure and incident management capabilities.

R

Region Aachen Zweckverband

regionaachen.de

51

Region Aachen Zweckverband is a regional development agency focused on improving the quality of life for residents in the Aachen region and neighboring countries. The organization coordinates structural development in economy, work, education, culture, health, and infrastructure for approximately 1.3 million inhabitants. The website reflects a professional government entity with a clear mission and regional focus. Technically, the site is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. Privacy awareness is demonstrated by the use of Matomo analytics and a cookie consent mechanism, although explicit privacy and terms policies are missing. Security posture is good with HTTPS enabled but could be improved with additional security headers and published policies. Overall, the site is accessible, safe, and trustworthy, serving its public sector audience effectively.

I

Interreg Euregio Maas-Rijn

interregemr.eu

61

Interreg Euregio Maas-Rijn is a European regional cooperation program focused on cross-border collaboration between Belgium, Germany, and the Netherlands. It provides subsidies and support for projects addressing innovation, economy, education, social inclusion, and regional development. The website serves as an informational and administrative portal for the 2014-2020 program period, now archived with a redirect to the new 2021-2027 program site. The site demonstrates a moderate to good level of digital maturity, utilizing modern JavaScript libraries, Google Tag Manager for analytics, and a cookie consent mechanism. Security posture is adequate with HTTPS enforced, though improvements in HTTP security headers and explicit security policies are recommended. Overall, the website is professional, trustworthy, and compliant with GDPR, serving a government and non-profit sector audience.

R

Region Aachen

housing-emr.eu

46

Housing Monitor EMR is a regional government-backed project focused on providing transparent, cross-border housing market data for the Euregio Meuse-Rhine region. The website serves as a public resource aggregating demographic and housing industry statistics to support sustainable housing development. The project is led by Region Aachen and hosted by GeoDok GmbH, with partnerships across regional governments. Technically, the site uses standard web technologies with Matomo analytics for privacy-conscious user tracking. The site is accessible, mobile-optimized, and professionally designed, though it lacks some advanced SEO and accessibility features. Security posture is moderate with HTTPS implied but no explicit security headers or policies published. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite tracking usage. Overall, the site is trustworthy and legitimate, serving a niche government/non-profit role with good business credibility but room for improvement in security and privacy practices.

I

Invest in Mecklenburg-Vorpommern GmbH

investguide-mv.de

54

Invest in Mecklenburg-Vorpommern GmbH operates the Investguide MV website, a regional economic development platform providing a comprehensive database of over 300 commercial real estate locations in Mecklenburg-Vorpommern, Germany. The company supports businesses seeking to establish or expand operations in the region by offering detailed location data, expert consultation, and access to funding and networks. The website targets investors and companies interested in the region's strategic advantages such as skilled labor, infrastructure, and quality of life. Technically, the website employs common web technologies including jQuery, cookie consent scripts, lazy loading, and carousel plugins. It is mobile-optimized with good SEO practices and a clear navigation structure. The site uses HTTPS and implements a cookie consent mechanism compliant with GDPR, though explicit security headers are not evident from the provided data. From a security perspective, the site shows a moderate security posture with HTTPS enabled and no visible sensitive data exposure. However, the use of an older jQuery version and lack of detected security headers suggest room for improvement. No vulnerability disclosure or incident response information is provided, indicating potential gaps in formal security policies. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. The domain WHOIS data is minimal but consistent with the business claims. The site is free from adult or questionable content and provides clear contact information and social media presence. Strategic recommendations include enhancing security headers, updating libraries, and formalizing security and incident response policies.

Staatliche Schlösser und Gärten M-V is an official government entity managing historic castles, gardens, and cultural heritage sites in Mecklenburg-Vorpommern, Germany. The website serves as a portal for visitors and tourists to explore events, tours, and digital museum experiences. It targets a broad audience including families, cultural tourists, and B2B tourism groups. The organization holds a strong market position as the official state institution for cultural heritage in the region. Technically, the website is built on WordPress 6.4.1 with a modern tech stack including jQuery, Swiper.js for sliders, Matomo for analytics, and Google reCAPTCHA v3 for form security. The site is hosted likely by mvnet.de, uses HTTPS with good SSL configuration, and implements cookie consent mechanisms for GDPR compliance. Mobile optimization and navigation are good, though accessibility could be improved. Security posture is solid with HTTPS, reCAPTCHA, and privacy-focused analytics, but lacks explicit security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is evident through a privacy policy and cookie banner, but terms of service and vulnerability disclosure are absent. Overall, the website is professional, trustworthy, and well-maintained, supporting the organization's mission to promote cultural heritage and tourism. Strategic improvements could focus on enhancing security headers, publishing security policies, and improving accessibility to further strengthen trust and compliance.

R

Regionalmuseum Neubrandenburg

museum-neubrandenburg.de

55

The Regionalmuseum Neubrandenburg is a regional cultural institution focused on preserving and presenting the history and traditions of Neubrandenburg and its surroundings. The website offers information about exhibitions, educational programs, events, and research activities, targeting local residents, families, schools, and cultural enthusiasts. The museum operates as a public or non-profit entity, providing accessible cultural content in German. Technically, the website uses a custom CMS likely provided by Advantic Systemhaus GmbH, with a technology stack including jQuery, Flexslider, and Highslide. While the site is functional and well-structured with good content quality and navigation, it uses outdated JavaScript libraries that pose potential security risks. The site includes a cookie consent banner and a privacy policy, indicating GDPR compliance efforts. Security posture is moderate, with no explicit security headers detected and unknown SSL configuration. Analytics are performed using Piwik (Matomo), respecting privacy considerations. Overall, the website is trustworthy and professional but would benefit from technical updates and enhanced security measures.

I

Inselstadt Malchow

inselstadt-malchow.de

65

Inselstadt Malchow operates as a municipal government website serving the local community and tourists in the Mecklenburgische Seenplatte region of Germany. The site provides comprehensive information about local government services, tourism, events, and community resources. It is well-positioned as an official source for residents and visitors, with a clear focus on public administration and regional promotion. The website leverages a modern technical infrastructure based on Bootstrap, jQuery, and a specialized CMS platform (verwaltungsportal.de), hosted on rzone.de servers. The site is mobile optimized, accessible, and demonstrates good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, professional, and aligned with its governmental purpose.

L

Landesverband der CDU Mecklenburg-Vorpommern

cdu-mv.de

50

The website for Landesverband der CDU Mecklenburg-Vorpommern serves as the official digital presence of the regional political party branch. It provides comprehensive information about the party's political decisions, organizational structure, events, and membership services, targeting citizens and politically engaged individuals in Mecklenburg-Vorpommern. The site features a podcast and news updates, enhancing engagement with its audience. Technically, the website is built on WordPress using the Divi theme and several plugins including Ultimate Member and Podlove Podcasting, indicating a mature and extensible infrastructure. The hosting appears to be managed via kasserver.com, a known hosting provider. Security-wise, the site enforces HTTPS, uses Google reCAPTCHA to prevent spam, and implements a GDPR-compliant cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected, though some security headers could be improved. Overall, the site demonstrates good privacy compliance and business credibility, with clear contact information and trust signals. The domain registration is consistent with the website's purpose and shows no suspicious patterns. Strategic recommendations include enhancing security headers, documenting incident response policies, and continuing regular updates to maintain security and compliance.

M

MuSeEn gGmbH

museenplatte.org

52

MuSeEn gGmbH operates the MuSeenPlatte website, a regional cultural portal showcasing museums and exhibitions in the Mecklenburgische Seenplatte region of Germany. The platform provides visitors with comprehensive information about museums, including locations, contact details, and a discount program encouraging cultural tourism. The website is well-structured, uses modern web technologies such as WordPress, Yoast SEO, and Leaflet.js for interactive maps, and targets cultural enthusiasts and tourists interested in the region's heritage. Technically, the site is built on WordPress with a drag-and-drop page builder and integrates SEO best practices and structured data for enhanced search visibility. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, there is a lack of privacy and cookie policies, which poses compliance risks under GDPR regulations. Security-wise, HTTPS is enforced, but the absence of security headers and incident response information indicates room for improvement. Overall, the website is trustworthy and professional in its presentation and content but would benefit from enhanced privacy compliance and security hardening. The WHOIS data is incomplete or unavailable, which slightly reduces domain trustworthiness but does not detract significantly from the site's legitimacy given its regional and cultural focus.

A

abfallplus

abfallplus.de

45

abfallplus is a German-based company specializing in digital solutions for waste management and municipal citizen services. Their offerings include smart modules for waste collection, complaint management, and communication support aimed at simplifying citizen interactions and automating administrative workflows. The website is built on WordPress using the Divi theme and incorporates modern web technologies including JavaScript ES modules and Matomo analytics for user tracking. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit security policies. Privacy compliance is limited by the absence of a clear privacy policy, though a cookie consent mechanism is present. Business credibility is supported by professional content and consistent branding, but contact information is not explicitly found in the provided content. Overall, the website is functional and professional but would benefit from enhanced security and privacy disclosures to improve trust and compliance.

B

Bundesimmobiliengesellschaft m.b.H.

big-art.at

55

BIG ART is a cultural initiative operated by the Austrian Bundesimmobiliengesellschaft m.b.H., focusing on fostering a synergetic dialogue between architects and renowned Austrian and international artists. The website serves as a platform to showcase permanent and temporary art projects in selected public buildings managed by the federal real estate company. The organization holds a significant position within the Austrian government sector, promoting art integration in public infrastructure. Technically, the website is built on WordPress with Bootstrap and jQuery, offering a modern, responsive, and accessible user experience. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not published. Privacy compliance is strong, featuring comprehensive privacy and cookie policies with consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its government affiliation.

K

Kunst- und Kulturstrategie - Kärnten | Koroška

kulturstrategie-kaernten.at

55

The website www.kulturstrategie-kaernten.at serves as a regional cultural strategy platform for Carinthia, Austria, focusing on promoting arts and cultural initiatives within the region. It appears to be a governmental or public sector initiative aimed at residents, cultural institutions, and stakeholders interested in the cultural development of Carinthia. The site uses WordPress with the The7 theme and performance optimizations via WPRocket, indicating a moderate level of technical maturity. The design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. No contact emails, phone numbers, or social media links were found, limiting direct communication channels. Overall, the domain registration aligns well with the website's regional focus, supporting its legitimacy. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, and providing clear contact and incident response information to improve compliance and trust.

W

Wirtschaftsförderung Mecklenburgische Seenplatte GmbH

wirtschaft-seenplatte.de

49

Wirtschaftsförderung Mecklenburgische Seenplatte GmbH (WMSE) is a regional economic development agency focused on supporting businesses, investors, and startups within the Mecklenburgische Seenplatte district in Germany. The organization provides a broad range of services including investor support, funding advice, startup consulting, business succession, and municipal consulting. WMSE also manages subsidiaries such as MuSeEn gGmbH, which operates local museums. The website is professionally designed, well-structured, and optimized for SEO with comprehensive content targeting regional economic stakeholders. Social media presence across major platforms enhances outreach and engagement. Technically, the website is built on WordPress 6.8.1 with modern plugins such as Yoast SEO and WPBakery Page Builder. It uses HTTPS with a good SSL configuration and is hosted on rzone.de servers. The site demonstrates good mobile optimization and moderate performance. However, some security headers are missing, and no cookie consent mechanism was detected, which could be improved for compliance. From a security perspective, the site follows best practices like email obfuscation and secure forms but lacks published security policies or incident response contacts. The WHOIS data aligns well with the business claims, showing a consistent and legitimate registration. Overall, the website presents a trustworthy and professional digital presence with minor areas for security and compliance enhancement. The risk assessment is low with no signs of malicious activity or vulnerabilities. Strategic recommendations include implementing cookie consent, enhancing security headers, and publishing security and incident response policies to strengthen compliance and trust.

L

Landesverband der CDU Mecklenburg-Vorpommern

cdu-mecklenburg-vorpommern.de

41

The Landesverband der CDU Mecklenburg-Vorpommern operates a professional and well-maintained website serving as the official online presence of the regional political party. The site provides comprehensive information about the party's activities, political programs, membership options, and multimedia content such as podcasts. It targets citizens and politically engaged individuals in Mecklenburg-Vorpommern, positioning itself as a key regional political actor. Technically, the website is built on WordPress with the Divi theme and uses modern plugins for user management, cookie consent, and podcasting, reflecting a mature digital infrastructure. Security measures include HTTPS, Google reCAPTCHA, and a robust cookie consent mechanism, although some security headers could be improved. Privacy compliance is strong, with clear GDPR-aligned policies and consent management. Overall, the site demonstrates a high level of professionalism, trustworthiness, and user experience, supporting the party's communication and engagement goals effectively.

Stadt Salzburg operates an official municipal government website serving the residents and visitors of Salzburg, Austria. The site provides comprehensive city news, event calendars, public service information, and contact details for various city departments. It positions itself as a trusted source of local government information with a clear focus on community engagement and transparency. The website is primarily in German and targets local citizens and stakeholders. From a technical perspective, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with additional libraries such as Hyphenopoly for text hyphenation and Matomo for analytics. The site appears to be well-structured with JSON-LD schema markup for news and events, enhancing SEO and data interoperability. Mobile optimization and accessibility are addressed at a basic to good level, though there is room for improvement in accessibility features. Security posture is solid with HTTPS enforced and no visible exposed sensitive data. However, the absence of security headers such as Content-Security-Policy and lack of a cookie consent mechanism indicate areas for enhancement in compliance and security best practices. No incident response or vulnerability disclosure policies are published, which could be improved to strengthen trust and readiness. Overall, the website is professional, trustworthy, and serves its public service mission effectively. Strategic improvements in privacy compliance, security headers, and transparency policies would elevate its security and compliance maturity, further reinforcing its credibility and user trust.

M

Magistrat der Landeshauptstadt Klagenfurt am Wörthersee

klagenfurt.at

59

The website www.klagenfurt.at serves as the official digital presence of the city government of Klagenfurt am Wörthersee, Austria. It provides municipal services, public information, and resources for residents and visitors. The site is positioned as a key government portal with a focus on city services such as waste management, education, and building permits. The target audience primarily includes local residents and tourists seeking official information. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including Bootstrap Package, jQuery, and Modernizr. It integrates analytics tools such as Matomo and Google Tag Manager for user tracking and performance monitoring. The site is hosted by Webwerk Online Solutions GmbH and demonstrates moderate performance with good mobile optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and formal security or incident response policies. Privacy compliance is limited due to the absence of a privacy policy and cookie consent mechanism, which are critical for GDPR adherence. The WHOIS data confirms the domain's legitimacy and consistency with the official city government entity. Overall, the website is professional and trustworthy but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence.

Z

Ziviltechnikerkammer für Steiermark und Kärnten

ztkammer.at

57

The Ziviltechnikerkammer für Steiermark und Kärnten is a regional professional chamber representing civil engineers and architects in the Austrian regions of Styria and Carinthia. The website serves as an authoritative platform providing member services, professional regulation, architecture competitions, consulting on procurement, and public information. The site is well-structured and uses modern web technologies such as TYPO3 CMS and Bootstrap, ensuring good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though the absence of a published privacy policy and terms of service pages indicates room for compliance improvement. No contact emails or phone numbers were explicitly found in the provided content, which may affect user trust and accessibility. Overall, the website reflects a professional government-related entity with a good market position in its sector.

A

Amt der Kärntner Landesregierung, Abteilung 14 - Kunst und Kultur

kulturchannel.at

56

Kulturchannel.at is the official cultural portal of the Carinthian regional government in Austria, providing comprehensive information on arts, culture, funding opportunities, events, and cultural news. The platform targets artists, cultural institutions, event organizers, and culture enthusiasts within the Kärnten region. It serves as a government-backed resource to promote and support cultural activities and policies. Technically, the website is built on TYPO3 CMS with modern frontend libraries such as jQuery, Foundation, and Slick Carousel, ensuring a responsive and user-friendly experience. The site integrates Google Analytics and Facebook SDK for analytics and social media engagement. Security posture is solid with HTTPS enforced, though security headers are not explicitly detected and could be improved. Privacy compliance is addressed with a cookie consent banner and a privacy policy in German, aligned with GDPR requirements. Business credibility is high due to official government ownership and clear contact information. Overall, the website is professional, trustworthy, and well-positioned as a regional cultural information hub.

L

Latvijas Kara muzejs

karamuzejs.lv

58

Latvijas Kara muzejs is a Latvian national war museum dedicated to preserving and presenting Latvia's military history. The website serves as an informational and educational platform offering details about exhibitions, research, galleries, and visitor services. It targets a broad audience including the general public, history enthusiasts, researchers, and tourists. The museum operates as a non-profit cultural institution with free admission, positioning itself as a key cultural heritage entity in Latvia. Technically, the website is built on Drupal 9 CMS and incorporates modern JavaScript libraries such as FullCalendar and Matomo for analytics. The site is hosted on servers associated with online.lv and demonstrates good mobile optimization, accessibility, and SEO practices. The presence of cookie consent mechanisms and privacy policies indicates a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and formal security or incident response policies publicly available. No vulnerabilities or suspicious activities were detected. The WHOIS data aligns well with the museum's identity, supporting legitimacy and trust. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could improve security posture by adding security headers and incident response information.

S

SmartCity Dornbirn

smartcitydornbirn.com

45

SmartCity Dornbirn is a government-backed initiative focused on promoting digital innovation and smart city projects within Dornbirn, Austria. The website serves as an information hub for startups, companies, and public administration to engage with digital transformation efforts. The organization positions itself as a regional leader in smart city development, fostering innovation and community involvement. Technically, the website is built on a modern WordPress CMS platform using Elementor and Yoast SEO, ensuring good design, mobile responsiveness, and SEO optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in DNS security and explicit security policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though it lacks a terms of service page and explicit incident response information.

K

Kammer der ZiviltechnikerInnen | ArchitektInnen und IngenieurInnen Oberösterreich und Salzburg

arching-zt.at

51

The website represents the official chamber for civil engineers, architects, and engineers in the Austrian regions of Upper Austria and Salzburg. It serves as a comprehensive portal offering news, events, competitions, professional resources, and member services tailored to professionals in these fields. The site targets chamber members, professionals, students, and stakeholders in the architecture and engineering sectors. Technically, the site is built on TYPO3 CMS and employs a range of JavaScript libraries such as jQuery, Bootstrap, and DataTables to provide a functional and interactive user experience. The design is professional and consistent with the chamber's branding, though mobile optimization is basic. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the site is trustworthy and compliant with GDPR, providing a solid digital presence for the chamber.

H

Hlídač státu - Hlídač státu.

hlidacstatu.cz

59

Hlídač státu is a Czech Republic based non-profit public oversight project focused on transparency and monitoring of state and public institutions. The website provides services such as contract monitoring and public web oversight, targeting citizens interested in government accountability. Technically, the site uses modern frontend technologies including Bootstrap, Font Awesome, and integrates third-party services like Microsoft Clarity for analytics and MailerLite for mailing. The site is accessible, mobile-optimized, and uses HTTPS, indicating a good baseline of digital maturity. Security posture is moderate with HTTPS enabled but lacks visible security headers and explicit privacy or cookie policies. No WHOIS data was found, which limits domain trust assessment. Overall, the site appears legitimate and trustworthy based on content and technology, but would benefit from improved transparency in privacy and security practices.

S

SZIF

myjsmebio.cz

54

MyJsmeBio.gov.cz is an official Czech government-backed website dedicated to promoting and educating about BIO certified organic farming and bio food products. The site provides comprehensive information on certification, ecological farming practices, recipes, videos, and consumer guidance. It serves as a trusted informational platform supported by national and European legislation, targeting consumers, farmers, and public institutions within the Czech Republic. The website is branded consistently with government logos and partners such as the Ministry of Agriculture and SZIF. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and Font Awesome, with good mobile optimization and clear navigation. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks explicit security headers and a privacy policy page. WHOIS data is unavailable, likely due to government domain privacy policies, which limits external verification but does not detract from the site's legitimacy given the domain and content. Overall, the site is professional, trustworthy, and serves its informational purpose well.

Zařízení služeb MZe is an official government website representing the Ministry of Agriculture of the Czech Republic. It provides informational content related to various service sections such as gastronomy, marketing, economic and operational areas, job offers, and public information disclosure. The website targets the Czech public, government stakeholders, and related service users. The business model is that of a government service provider focused on information dissemination and public service. Technically, the website is built on WordPress CMS, utilizing standard web technologies including HTML5, CSS3, JavaScript, and FontAwesome for icons. Hosting and domain registration are managed by Wedos, a Czech provider, consistent with the website's country of origin. The site shows moderate performance and basic mobile optimization but lacks advanced accessibility features and SEO optimizations. From a security perspective, the website uses HTTPS, ensuring encrypted communication. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options, which could improve protection against common web attacks. No privacy or cookie policies are present, indicating potential compliance gaps with GDPR and other privacy regulations. No contact information or incident response channels are provided, limiting transparency and user trust. Overall, the website is functional and serves its informational purpose but requires improvements in privacy compliance, security hardening, and user engagement features to enhance trust and regulatory adherence.

A

Amt der Stadt Dornbirn

dornbirn.at

60

The website www.dornbirn.at serves as the official digital portal for the city administration of Dornbirn, Austria. It provides a broad range of municipal services and information including citizen assistance, political information, economic development, environmental programs, and cultural activities. The site targets residents and visitors, offering clear navigation and comprehensive content relevant to local governance and community life. The business model is that of a government entity focused on public service delivery and community engagement. Technically, the site is built on TYPO3 CMS, a robust and widely used content management system for government and enterprise websites. The infrastructure supports modern web standards with responsive design and accessibility features, ensuring usability across devices. Performance is moderate, with no critical technical issues detected. SEO and metadata are well implemented, including JSON-LD structured data for enhanced search engine understanding. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security policies, which are recommended best practices. No vulnerability disclosures or incident response contacts are available, representing an area for improvement. Privacy compliance is partial, as no privacy or cookie policies were found, which may impact GDPR adherence. Overall, the website is trustworthy and professional, reflecting its role as a municipal government portal. The risk level is low, but strategic enhancements in privacy transparency and security policy publication would strengthen its compliance and security posture. Recommendations include adding privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure process.

P

Plattform Baukulturpolitik

baukulturpolitik.at

46

Plattform Baukulturpolitik is a non-profit advocacy platform focused on promoting Baukultur (building culture) in Austria. The organization aims to politically anchor Baukultur to enable engaged architectural policy. Their services include information dissemination, policy advocacy, event organization, and publication of reports. The website targets Austrian citizens, architects, policymakers, and stakeholders interested in Baukultur. The platform holds a niche position within the Austrian government and non-profit sectors. Technically, the website uses a simple but effective tech stack including jQuery and Featherlight for UI elements. It is moderately performant, mobile-optimized, and SEO-friendly with proper meta tags and Open Graph data. The site implements a comprehensive cookie consent mechanism with granular user controls, reflecting good privacy compliance. However, no CMS or hosting provider details were detected. From a security perspective, the site enforces HTTPS and uses cookie consent best practices but lacks advanced security headers and incident response information. No vulnerabilities or exposed sensitive data were found. The WHOIS data is consistent with the website's Austrian non-profit identity, enhancing trustworthiness. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though it could improve security headers and incident response transparency.

N

Nacionālie bruņotie spēki

mil.lv

57

The website www.mil.lv is the official online presence of the Latvian National Armed Forces, providing authoritative information on military service, reserves, training, and national defense news. It serves primarily Latvian citizens interested in defense matters and military careers. The site is well-branded, consistent, and professionally maintained, reflecting its governmental status. Technically, it is built on Drupal 9, hosted on Azure, and employs modern analytics and tracking tools such as Matomo and Facebook Pixel. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong, with a comprehensive cookie policy and consent mechanism. However, no explicit security policy, incident response contacts, or vulnerability disclosure mechanisms are present. Overall, the site is trustworthy, professional, and serves its public service mission effectively.

L

Landeshauptstadt St. Pölten

st-poelten.at

62

Landeshauptstadt St. Pölten operates as the official municipal government portal for the capital city of Lower Austria, providing residents and visitors with comprehensive information on public services, city news, cultural events, and administrative resources. The website targets local citizens and tourists, positioning itself as a trusted source for city-related information and services. The business model is centered on public service delivery and community engagement, with a medium-sized organizational footprint typical of a city government entity. Technically, the website leverages Joomla CMS with modern JavaScript libraries such as jQuery and plugins like DearFlip for interactive content. Cookiebot is integrated for GDPR-compliant cookie consent management. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance characteristics. Hosting details are not explicitly identified but appear stable and secure. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates a cookie consent mechanism, reflecting a mature security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy, incident response contacts, or vulnerability disclosure mechanisms suggests room for improvement in transparency and readiness. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for the city government. Strategic recommendations include publishing a formal security policy, establishing incident response contact channels, and enhancing accessibility to further strengthen the site's security and user experience.

B

Bundeskammer der Ziviltechniker:innen

zt.at

58

The website https://zt.at represents the Bundeskammer der Ziviltechniker:innen, the official Austrian chamber for civil engineers and architects. It serves as a professional platform providing information, member services, and resources for Ziviltechniker:innen across Austria. The site is well-structured, modern, and targets professionals and public entities involved in engineering and architecture. The presence of regional subdomains and comprehensive content indicates a mature and established organization with a long history dating back to 1860. Technically, the site uses modern frameworks like Nuxt.js and Vue.js, employs privacy-conscious analytics via Matomo, and is optimized for mobile and accessibility. Security posture is strong with HTTPS and security headers, though it lacks explicit cookie consent and published security policies. Overall, the site is trustworthy, professional, and compliant with GDPR, serving its audience effectively.

S

Sveriges lantbruksuniversitet

interbull.org

59

Interbull is a well-established permanent subcommittee of ICAR, hosted by Sveriges lantbruksuniversitet in Sweden, specializing in independent genetic and genomic evaluations for dairy and beef cattle. The organization provides a range of services including data exchange, breeding value calculations, and validation reports, serving a global audience of animal breeding professionals and researchers. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its specialized audience. Technically, the site is built on the Web2py framework, utilizing modern JavaScript libraries and is hosted via Loopia Group. While the site is mobile-optimized and performs moderately well, there are opportunities to enhance accessibility and SEO further. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration data aligns well with the business identity, supporting high legitimacy and trustworthiness.

Ö

Österreichischer Wasser- und Abfallwirtschaftsverband (ÖWAV)

abwasserbenchmarking.at

53

The website www.abwasserbenchmarking.at serves as a specialized benchmarking platform for wastewater treatment plants in Austria, operated by the Österreichischer Wasser- und Abfallwirtschaftsverband (ÖWAV) with support from the Austrian Federal Ministry for Agriculture, Regions and Tourism. It provides benchmarking data, cost information, publications, and participant application services targeted at wastewater operators and environmental professionals. The platform occupies a niche government/non-profit sector position with a focus on environmental and water management benchmarking. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, Font Awesome, and DataTables, delivering a responsive and professional user experience. However, no CMS or advanced analytics/tracking tools are detected, indicating a straightforward implementation. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site uses HTTPS and secure libraries but lacks visible security headers and formal policies such as privacy, cookie, or vulnerability disclosure statements. No contact information for incident response or data protection officers is provided, representing compliance and transparency gaps. No WAF or blocking mechanisms are detected, and no vulnerabilities are apparent from the content. Overall, the website is trustworthy and professionally presented but would benefit from enhanced privacy compliance, security policy disclosures, and clearer contact information to improve user trust and regulatory adherence.

A

act Řanda Havel Legal advokátní kancelář s.r.o.

randalegal.com

50

Řanda Havel Legal is a well-established Czech law firm providing comprehensive legal services to Czech and international companies, entrepreneurs, private individuals, and public institutions. Founded in 2006, the firm has a strong market presence and offers key services including commercial law, legal consultancy, and trust fund management. The website reflects a professional legal services provider with consistent branding and relevant content targeting a medium-sized audience primarily in the Czech Republic. Technically, the website uses legacy JavaScript libraries such as jQuery 1.10.1 and jQuery UI 1.8.18, hosted on websupport.cz, with Google Analytics integrated for visitor tracking. The site is moderately optimized for performance and mobile use, with basic accessibility and good SEO practices. However, the use of outdated libraries and lack of modern security headers indicate areas for technical improvement. From a security perspective, the website benefits from HTTPS encryption and a GDPR-compliant cookie consent mechanism. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. The absence of security headers and use of outdated JavaScript libraries present moderate security risks. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website scores well in business credibility and content quality but has room for improvement in technical implementation and security posture. Strategic recommendations include updating JavaScript libraries, enabling DNSSEC, implementing security headers, publishing terms of service and security policies, and enhancing incident response readiness.

Č

Česko.Digital

cesko.digital

64

Česko.Digital is a Czech non-profit organization dedicated to advancing digital public services and supporting digital transformation in the non-profit sector. The organization operates multiple projects including Služby.Digital, Nezisk.Digital, and the Festival kreativní byrokracie, collaborating with government, non-profits, businesses, and the public to improve digital service quality and inclusion. Their website reflects a professional and well-structured digital presence with clear messaging and strong partner endorsements. Technically, the site is built on Webflow with modern JavaScript libraries, uses Cloudflare Turnstile for bot protection, and integrates privacy-focused analytics via Plausible. Security posture is good with HTTPS and secure forms, though explicit security headers and cookie consent mechanisms are missing. WHOIS data is unavailable due to malformed responses, slightly reducing trust but the website content and partner affiliations support legitimacy. Overall, the site demonstrates a mature digital infrastructure and a strong commitment to digital public service innovation.

I

InterSucho

intersucho.cz

52

InterSucho is a Czech Republic focused environmental portal providing detailed drought monitoring and soil moisture data. It serves government agencies, researchers, and the public with up-to-date maps and forecasts related to drought intensity and impacts on agriculture and forests. The website is professionally designed with good navigation and mobile optimization, leveraging modern frontend technologies such as Alpine.js and Tailwind CSS. It integrates Google Analytics and Tag Manager for user behavior tracking while providing cookie consent mechanisms and privacy policies compliant with GDPR. Security posture is solid with HTTPS and no exposed sensitive data, though security headers could be improved. WHOIS data is unavailable due to privacy protection, which is typical for public service websites. Overall, the site is trustworthy, informative, and well-maintained.

A

Aliance pro moderní stát

modernistat.org

63

Aliance pro moderní stát is a Czech non-profit organization dedicated to promoting a transparent, fair, and efficient democratic state in the Czech Republic. The organization focuses on systemic reforms in public administration, state finance management, and democratic governance, aiming for a modern state by 2030. Their website presents a professional and well-structured digital presence, targeting Czech citizens, businesses, and public sector stakeholders interested in governance improvements. Technically, the site uses a modern CMS (Solidpixels), integrates Google Tag Manager for analytics, and employs responsive design techniques, ensuring good user experience across devices. Security-wise, the site enforces HTTPS and avoids exposing sensitive data but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The WHOIS data is incomplete or privacy-protected, limiting domain trust verification, but the website content and presentation support legitimacy. Overall, the site scores well in content quality and business credibility but has gaps in privacy compliance and security best practices.

D

Datlab institut z.s.

politickefinance.cz

51

PolitickeFinance.cz is a Czech Republic-based non-profit transparency platform operated by Datlab institut z.s. The website monitors and publishes data on political party financing, donations, and sponsors, providing financial health indices for political parties. It serves the Czech public interested in political finance transparency and is supported by recognized civic organizations. The platform uses modern web technologies including Vue.js and Bootstrap, hosted by Wedos, and integrates Google Tag Manager for analytics. While the website is well-structured, mobile-optimized, and professionally designed, it lacks published privacy and cookie policies, and security headers are not detected, indicating room for improvement in compliance and security posture. The WHOIS data confirms the domain's legitimacy and consistent registration with the operator organization. Overall, the site is trustworthy, safe, and serves a clear public interest mission.

D

Datlab Institut z.s.

zindex.cz

56

Datlab Institut z.s. operates the zIndex.cz website, providing public procurement buyers ranking data to motivate more efficient procurement in the Czech Republic. The organization is a Czech economic think-tank affiliated with Charles University, focusing on data-driven economic research impacting public policies. The website targets public sector entities including government bodies, municipalities, and hospitals, offering data analytics services related to public procurement. The business is positioned as a small, specialized non-profit entity with a professional online presence and consistent branding. Technically, the website uses modern frameworks such as Bootstrap and Vue.js, integrates multiple third-party analytics and marketing tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, and employs Google Tag Manager for tag management. The site is mobile-optimized with good design and navigation, though accessibility and SEO optimizations are basic. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal security or incident response policies. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, despite the use of tracking technologies. WHOIS data confirms domain legitimacy and consistency with the business history and location. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, improved security headers, and formalized security policies to strengthen its security posture and regulatory adherence.

M

MZV

export.cz

45

The website export.cz serves as the official economic diplomacy portal of the Czech Ministry of Foreign Affairs (MZV). It provides news, analysis, and support services related to export promotion, international markets, and investment opportunities. The site targets business professionals, exporters, government officials, and investors interested in Czech economic diplomacy. The business model is governmental, focusing on information dissemination and export support rather than commercial transactions. The site is well-branded and consistent with official government identity. Technically, the site is built on WordPress using the Extra theme and several plugins including Google Analytics and Adform for tracking. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. Security is adequate with HTTPS enforced and cookie consent implemented, though security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. From a security perspective, the site shows good compliance with privacy regulations including GDPR, with a clear privacy policy and cookie consent mechanism. However, no explicit security policy or incident response information is provided. The absence of WHOIS data is a concern for domain registration transparency but is mitigated by the official nature of the content and branding. Overall, the site is a trustworthy and professional government portal with moderate technical sophistication and good privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and improving WHOIS transparency to strengthen trust and security posture.

D

Deep Purple EU

kreislaufwirtschaft.at

52

The website kreislaufwirtschaft.at serves as a dedicated platform promoting circular economy initiatives in Austria. It targets citizens, entrepreneurs, and decision-makers by providing information, interactive tools such as a resource-sharing map, a funding database, and consulting services. The platform is supported by government funding, enhancing its credibility and positioning it as a niche but important resource in the sustainability sector within Austria. Technically, the site is built on WordPress using modern libraries like Bootstrap 4 and jQuery, with moderate performance and good mobile optimization. Security-wise, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism, though it lacks explicit security headers and a vulnerability disclosure policy. Overall, the site is professional, trustworthy, and well-aligned with its mission, but could improve security posture and transparency.

I

IÖB - Servicestelle

ioeb-innovationsplattform.at

57

The IÖB Innovationsplattform is a government-backed Austrian platform designed to connect public sector buyers with innovative companies. It serves as a showcase for innovations and facilitates public procurement challenges and a marketplace for novel products and services. The platform is supported by key Austrian ministries and the Bundesbeschaffung GmbH, positioning it as a central hub for innovation in public procurement within Austria. The website is professionally designed, content-rich, and offers multiple services including challenges, innovation presentations, and a newsletter to engage its target audience of public authorities and innovative enterprises. Technically, the site is built on TYPO3 CMS, uses modern analytics and marketing tools, and is optimized for mobile and accessibility. Security posture is strong with HTTPS, cookie consent, and secure forms, though it lacks explicit security policy and incident response contacts. Overall, the platform demonstrates high trustworthiness and professionalism, suitable for its government and innovation ecosystem role.