Government security reports

The website represents the Sportamt Stadt Graz, a municipal government entity providing an online platform for booking district sports fields in Graz, Austria. It offers a structured multi-step booking process including service selection, appointment scheduling, user data input, and payment options. The platform is designed primarily for local residents and sports teams, facilitating fair and organized access to public sports facilities. The business model is a public service, leveraging a third-party SaaS platform (eTermin) for appointment management. Technically, the website employs standard web technologies such as jQuery and SVG for UI elements, with a responsive design suitable for mobile devices. The site includes privacy and cookie policies linked to official city resources, indicating compliance with GDPR. However, no advanced security headers or explicit SSL configuration details were found in the provided data, suggesting room for security enhancements. From a security perspective, the platform shows good practices like encrypted data transmission and user authentication mechanisms. The absence of WHOIS data for the domain www.etermin.net raises questions about domain registration legitimacy, though the website content and contact details align with a legitimate municipal service. No critical vulnerabilities or adult content were detected. Overall, the website is a functional, government-backed service with moderate technical maturity and good privacy compliance. Strategic improvements in security headers, domain registration transparency, and enhanced security audits are recommended to strengthen trust and resilience.

B

Bühnen und Orchester der Stadt Bielefeld

theater-bielefeld.de

53

Bühnen und Orchester der Stadt Bielefeld is a public cultural institution in Germany offering theater, philharmonic orchestra, and concert hall events. The website serves as an information and ticketing portal for their performances and services, targeting a general audience interested in cultural activities. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates Google Tag Manager and reCAPTCHA for analytics and security. The security posture is moderate with HTTPS enforced but lacks explicit security headers and published security policies. Privacy compliance is limited as no privacy or cookie policies were found in the provided content. Overall, the website is professional, well-structured, and trustworthy, but could improve transparency and compliance documentation.

K

Kulturamt Bielefeld

kulturamt-bielefeld.de

44

Kulturamt Bielefeld is a government cultural office serving the city of Bielefeld, Germany. The website provides comprehensive information about cultural events, funding opportunities, educational programs, and venue management. It targets the general public interested in cultural activities and local arts. The organization holds a strong local market position as a public cultural service provider. Technically, the website is built on WordPress with modern frontend libraries such as Bootstrap and Swiper, hosted likely by Deutsche Telekom. The site is mobile optimized, accessible, and SEO-friendly with structured data. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers are missing. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site is professional, trustworthy, and content-rich, but could improve compliance and security headers.

W

WEGE mbH

wege-bielefeld.de

64

WEGE mbH is the municipal economic development agency for the city of Bielefeld, Germany, providing comprehensive support to local businesses, startups, and founders. Their services include business location consulting, networking, real estate and land management, startup promotion, and city center management. The website is professionally designed using WordPress with Elementor and Yoast SEO, indicating a mature digital presence. The site is secured with HTTPS and employs a cookie consent mechanism via Borlabs Cookie, reflecting basic privacy compliance. However, the absence of a published privacy policy, terms of service, and explicit contact information limits full compliance and transparency. No security incidents or vulnerabilities were detected, and the domain registration data aligns well with the business identity, indicating high legitimacy.

K

Kommunales Integrationszentrum Bielefeld

interkulturelles-bielefeld.de

39

Kommunales Integrationszentrum Bielefeld is a government entity focused on supporting integration of newcomers, refugees, and immigrants in the city of Bielefeld, Germany. The website offers multilingual information, counseling services, and resources covering housing, education, health, language learning, and employment. It is positioned as a trusted local public service with official backing from city and state ministries. Technically, the site is built on WordPress with modern frontend libraries such as Bootstrap and jQuery, optimized for mobile and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-aligned with its public service mission.

S

Sportstiftung Hessen

sportstiftung-hessen.de

57

Sportstiftung Hessen is a regional non-profit foundation dedicated to supporting young athletes and trainers in the Hessen region of Germany. The foundation provides financial aid, scholarships, and advisory services to foster athletic talent, focusing on Olympic, Paralympic, Deaflympic, Special Olympics, and World Games disciplines. The website reflects a well-structured and professionally designed digital presence, leveraging modern web technologies including Webflow CMS, Usercentrics for consent management, and accessibility tools like eyeAble. The content is primarily in German and targets athletes, trainers, and sports supporters within Hessen. Security posture is strong with HTTPS enforced and GDPR compliance mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the website is trustworthy, accessible, and aligned with its mission to promote sports excellence in Hessen.

O

Olympiastützpunkt Hessen im Landessportbund Hessen e.V.

osph.de

47

Olympiastützpunkt Hessen is a regional elite sports support center operating under the Landessportbund Hessen e.V., focusing on athlete development, sports medicine, physiotherapy, and career dual support in Hessen, Germany. The website serves athletes, sports professionals, and governmental partners with comprehensive information and services. The organization holds a strong market position within the regional sports ecosystem, supported by partnerships with federal and state ministries and sports bodies. Technically, the website is built on TYPO3 CMS with standard web technologies like jQuery and HTML5. It demonstrates moderate performance and good mobile optimization but lacks some advanced security headers and cookie consent mechanisms. The site is well-structured, professionally designed, and provides clear navigation and relevant content. From a security perspective, the site uses HTTPS and avoids exposing sensitive data but could improve by implementing security headers and publishing explicit security policies. Privacy compliance is good with a comprehensive privacy policy linked, though cookie consent is missing. WHOIS data aligns well with the website's claims, indicating legitimacy and consistency. Overall, the website is trustworthy and professional with minor areas for security and privacy enhancement. Strategic improvements in security headers, cookie consent, and incident response transparency would strengthen its posture and compliance.

T

Toerisme Vlaanderen

toerismevlaanderen.be

64

Toerisme Vlaanderen is the official government tourism organization for the Flanders region in Belgium, focused on strengthening tourism through strategic marketing and knowledge-driven support for tourism partners. The website serves as a comprehensive portal offering information, tools, research, and support services to tourism entrepreneurs and organizations. Technically, the site is built on Drupal 10 and integrates modern analytics and marketing technologies such as Google Tag Manager, Hotjar, and Mautic, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, consent-based cookie management, and no visible vulnerabilities, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations, making it a reliable resource for its target audience.

F

FGTB-ABVV

fgtb.be

68

FGTB-ABVV is a well-established Belgian trade union organization with a domain registered since 1998. The website provides comprehensive services and information to its members and the public, focusing on labor rights, social advocacy, and member support. The site is built on Drupal 10, uses modern web technologies, and integrates marketing and analytics tools such as Google Tag Manager and Flexmail. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly documented. Overall, the website is professional, accessible, and trustworthy, serving a large audience in the government and non-profit sectors.

P

Pour Bien Vieillir

pourbienvieillir.fr

57

Pour Bien Vieillir is a French government-affiliated platform dedicated to providing seniors and retirees with comprehensive resources on retirement preparation, health maintenance, social engagement, and home adaptation. The website is positioned as a trusted public health and retirement information portal, supported by official retirement funds and Santé publique France. It offers a wide range of services including prevention activities, educational content, and professional resources for senior care providers. Technically, the site is built on WordPress with modern frameworks like Bootstrap and enhanced by SEO and performance plugins such as Yoast SEO and Rocket Loader. The site demonstrates good mobile optimization, accessibility features, and SEO best practices. Security-wise, the site enforces HTTPS and manages cookie consent effectively but lacks some advanced security headers and explicit security policies. No WHOIS data is publicly available, likely due to privacy protection, but the site’s legitimacy is supported by its official partnerships and professional presentation. Overall, the platform is a high-quality, trustworthy resource for its target audience with room for minor security and transparency improvements.

H

Hessische Turnjugend im Hessischen Turnverband e.V.

landeskinderturnfest.de

64

The website www.landeskinderturnfest.de represents the 11th Hessian Landeskinderturnfest 2026, a regional children's gymnastics event organized by the Hessische Turnjugend im Hessischen Turnverband e.V. The site serves as an information hub for the event, targeting children, families, and sports enthusiasts in Germany. It provides event details, news updates, and contact information, positioning itself as a trusted source for community engagement in sports activities. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Bootstrap, and integrates privacy-conscious tools like Cookiebot for consent management and Matomo for analytics. The site demonstrates good mobile optimization and accessibility features, ensuring a positive user experience across devices. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and incident response information, which could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR, making it a reliable platform for its audience.

L

LOTTO Schleswig-Holstein

gluexmagazin-lotto-sh.de

69

The website 'gluexmagazin-lotto-sh.de' serves as an official regional lottery magazine for LOTTO Schleswig-Holstein, providing lottery results, news, recipes, and contests targeted at lottery players and interested individuals in Schleswig-Holstein, Germany. The site is professionally designed with consistent branding and offers relevant content for its audience. Technically, it employs modern JavaScript frameworks such as Alpine.js, uses Usercentrics for GDPR-compliant consent management, and integrates etracker analytics with cookie blocking features. Hosting is provided by a German hosting provider as indicated by the nameservers. Security posture is solid with HTTPS enforced and consent mechanisms in place, though additional security headers and published policies could enhance trust and compliance. No adult or questionable content is present, making it safe for general audiences. Overall, the site reflects a mature digital presence for a regional government lottery publication.

C

Carsat Hauts-de-France

carsat-hdf.fr

66

Carsat Hauts-de-France operates as an official regional government entity providing retirement, social action, and occupational risk prevention services to residents, retirees, enterprises, and partners in the Hauts-de-France region of France. The website serves as an information portal and gateway to online services, reflecting a clear public service mission with a strong regional focus. The site is well-structured with dedicated sections for different user groups and partners, supporting accessibility and user engagement through features like text size adjustment and dyslexia mode. Technically, the website is built on the Jahia CMS platform, leveraging Bootstrap and jQuery for responsive design and interactivity. It is hosted by OVH, a reputable provider, and employs HTTPS with a good SSL configuration. The site uses Piwik analytics and tarteaucitron.js for cookie consent management, indicating attention to privacy compliance. The technical implementation is modern and supports good performance and accessibility standards. From a security perspective, the site enforces HTTPS and includes CSRF protection mechanisms. While some security headers are not explicitly detected in the HTML, the overall posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy policies and cookie management are clearly presented, supporting GDPR compliance. WHOIS data confirms domain legitimacy, with consistent registration details and no privacy protection, appropriate for a government service. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy and security best practices. It effectively serves its target audience with relevant content and services, backed by a stable technical infrastructure and sound governance.

A

Agirc-Arrco

agirc-arrco.fr

58

Agirc-Arrco is a French government-related organization managing supplementary pension schemes for private sector employees. The website provides information and services related to retirement and pension rights, targeting private individuals and retirees. The organization holds a leading position in the French pension market, offering key services such as pension management and online account access. Technically, the website is built on Drupal 11 with modern web technologies and is mobile-optimized, providing a good user experience. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are missing. The absence of WHOIS data limits domain ownership verification but does not detract from the site's professional appearance and trustworthiness. Overall, the site is safe, well-structured, and serves its audience effectively.

C

Creative Europe Desk Austria

creativeeurope.at

10

Creative Europe Austria is an official Austrian government portal providing comprehensive information and advisory services related to the EU's Creative Europe 2021-2027 funding program. The site targets cultural and creative sectors, offering guidance on funding opportunities across media, culture, and cross-sectoral projects. It is operated under the Bundesministerium für Wohnen, Kunst, Kultur, Medien und Sport (BMWKMS), positioning it as a trusted source for EU cultural funding in Austria. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery and Rocksolid Slider, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong, with GDPR-aligned cookie management and anonymized analytics via Matomo. Overall, the site demonstrates a professional and trustworthy presence with no detected vulnerabilities or suspicious elements.

B

Bundestheater-Holding GmbH

bundestheater.at

63

Bundestheater-Holding GmbH operates as the largest theater conglomerate globally, managing several prestigious Austrian theaters including the Burgtheater, Wiener Staatsoper, Volksoper Wien, Wiener Staatsballett, and ART for ART. The organization focuses on cultural event management, theatrical productions, and audience engagement, targeting theatergoers, cultural enthusiasts, and professionals within the arts sector. Their business model centers on providing theatrical performances, educational initiatives, and ticketing services, positioning them as a key player in Austria's cultural government sector. Technically, the website demonstrates a mature digital infrastructure with responsive design, accessibility features, and integration of modern web technologies such as lazy loading and web components. The use of Matomo analytics indicates a preference for privacy-conscious tracking. The site is well-optimized for mobile devices and SEO, with structured data enhancing search engine visibility. From a security perspective, the site enforces HTTPS and employs secure form practices, though it lacks explicit security headers and published incident response policies. No vulnerabilities or exposed sensitive data were detected, suggesting a solid baseline security posture. However, the absence of WHOIS data limits transparency regarding domain registration, which slightly impacts trust but does not undermine the site's legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving its audience effectively. Strategic improvements in security policy transparency and domain registration disclosure would further enhance its security and trust profile.

K

KHM-Museumsverband

bundesmuseencard.at

60

The website www.bundesmuseencard.at represents the official platform for the Bundesmuseen Card, a cultural annual pass granting access to 25 Austrian federal museums and the Austrian National Library's museums. The site is professionally designed, content-rich, and targets museum visitors and cultural enthusiasts in Austria. It is operated by the KHM-Museumsverband, a recognized cultural institution. The technical infrastructure is based on TYPO3 CMS with modern web technologies, providing a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are not explicitly published. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and well-positioned in its niche, with room for improvement in security transparency and privacy features.

S

Stiftung Nationale Anti Doping Agentur Deutschland (NADA)

nada.de

39

The Nationale Anti Doping Agentur Deutschland (NADA) is a German government-affiliated non-profit foundation established in 2002, serving as the authoritative body for anti-doping efforts in German sports. The organization focuses on ensuring fairness and equal opportunity in sports through testing, education, legal enforcement, and international cooperation. The website reflects this mission with professional content, clear navigation, and a focus on transparency and compliance. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs Cookiebot for GDPR-compliant cookie consent management. Matomo Analytics is used for privacy-conscious visitor tracking. The site is well-optimized for mobile devices and accessibility, with good SEO practices and a moderate performance profile. From a security perspective, the site enforces HTTPS, implements standard security headers, and manages cookie consent effectively. However, it lacks explicit published security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. No critical vulnerabilities or suspicious patterns were detected. Overall, the website presents a trustworthy, professional, and compliant digital presence for a government-related non-profit organization. Strategic improvements in security transparency and incident response readiness would further strengthen its posture.

O

O'zbekiston Savdo-sanoat palatasi

chamber.uz

55

The website represents the Chamber of Commerce and Industry of Uzbekistan, a key governmental institution supporting trade and industry sectors within Uzbekistan. It provides services such as trade facilitation, business registration, and information dissemination to businesses and government entities. The domain is well-established since 2007, reflecting a mature presence in the market. Technically, the site uses modern frontend frameworks like Bootstrap and Vue components, ensuring a responsive and professional user experience. However, there is a lack of explicit privacy and cookie policies, and no visible security headers, which are areas for improvement. The security posture is moderate, with no detected vulnerabilities but missing best practices. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security measures.

B

Bayerische Staatsforsten AöR

baysf.de

65

Bayerische Staatsforsten AöR is a publicly owned forestry organization under the Free State of Bavaria, managing the entire Bavarian state forest with a focus on sustainable, integrative forest management. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content targeting citizens, forestry professionals, and environmental stakeholders. The organization offers a broad range of services including wood production, hunting, renewable energy, and nature conservation. Technically, the site is built on Drupal CMS, uses Matomo for analytics with user consent, and supports responsive design and accessibility. Security posture is strong with HTTPS enforced and cookie consent mechanisms, though explicit security headers and policies could be improved. Overall, the domain and WHOIS data align with the organization's government affiliation, supporting legitimacy and trust. No critical vulnerabilities or suspicious content were detected.

B

Bundesministerium für Wohnen, Kunst, Kultur, Medien und Sport (BMWKMS)

sportministerium.at

63

The website www.bmwkms.gv.at represents the official online presence of the Austrian Federal Ministry for Housing, Arts, Culture, Media, and Sports (BMWKMS). It serves as a comprehensive information and service portal for citizens, cultural professionals, sports organizations, and media stakeholders in Austria. The ministry provides extensive resources including policy updates, funding opportunities, publications, and contact information. The site is well-branded, professionally designed, and clearly targeted at a broad public audience with interests in government services related to culture, sports, media, and housing. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with Bootstrap framework elements indicating responsive design. It uses eTracker for analytics, integrated with a cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized and accessible, with clear navigation and structured content. Hosting details are not explicitly disclosed, but HTTPS is enforced with a strong SSL configuration. From a security perspective, the site demonstrates good practices such as HTTPS usage and cookie consent. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visible in the provided data, and no published security policy or incident response contacts were found. No vulnerabilities or exposed sensitive data were detected. The domain WHOIS data aligns with the Austrian government entity, confirming legitimacy and trustworthiness. Overall, the website is a high-quality, trustworthy government portal with strong privacy and compliance posture. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen security and transparency.

B

Bundes-Sport GmbH

austrian-sports.at

61

Bundes-Sport GmbH is a government-affiliated non-profit organization in Austria, established in 2018 to promote and manage funding for sports associations and institutions under the Bundes-Sportförderungsgesetz 2017. The organization plays a pivotal role in supporting both elite and grassroots sports through funding allocation, control, and evaluation. The website reflects a professional and consistent brand presence, targeting sports entities and stakeholders within Austria. Technically, the site is built on WordPress with modern plugins like Elementor and Revolution Slider, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie management. No critical vulnerabilities or suspicious content were detected, and WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, the site demonstrates a mature digital presence suitable for its governmental and non-profit role.

K

Kraftfahrt-Bundesamt

kba-online.de

62

The Kraftfahrt-Bundesamt (KBA) operates as a federal government authority in Germany, providing a range of online services related to vehicle registration, recall databases, driver points information, and other transport-related data management. The website serves a broad audience including citizens, businesses, and governmental bodies, positioning itself as the authoritative source for vehicle and traffic data in Germany. The business model is centered on public service delivery through digital platforms, enhancing accessibility and efficiency for users. Technically, the website employs modern frontend technologies such as Vue.js and Vuetify, ensuring a responsive and user-friendly interface optimized for mobile devices. The site demonstrates moderate performance and basic accessibility features, with room for improvement in SEO and security header implementation. Hosting and backend details are not explicitly disclosed but the use of official German name servers indicates a stable and secure infrastructure. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries in the frontend. However, it lacks visible security headers and does not provide explicit security policies or incident response contact information, which are areas for enhancement. Privacy compliance is generally good with a comprehensive privacy policy and GDPR adherence, though the absence of a cookie consent mechanism is a minor gap. Overall, the website is trustworthy, professionally maintained, and aligned with its governmental role. Strategic recommendations include implementing security headers, adding cookie consent, publishing security and incident response policies, and enhancing accessibility to further strengthen the security posture and user trust.

G

Gemeinde Zell ZH

zell.ch

40

The website www.zell.ch serves as the official digital presence of the Gemeinde Zell ZH, a small Swiss municipality. It provides comprehensive information about the community, including local governance, services, events, and economic activities. The site targets local residents, businesses, and visitors seeking municipal information or services. The business model is centered on public service delivery and community engagement, positioning the municipality as a trusted local authority. Technically, the website employs a modern CMS platform (i-web CMS) with a clean HTML5 and CSS3 implementation, leveraging JavaScript modules and Matomo analytics for visitor insights. The site is mobile-optimized and accessible, with good SEO practices and structured navigation. Performance is moderate, with no critical technical debt observed. From a security perspective, the site enforces HTTPS and uses secure login forms. However, it lacks explicit security headers and does not publish a dedicated security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is addressed with a clear privacy and cookie policy, including user consent for analytics. Overall, the website is a well-maintained, trustworthy municipal portal with a strong focus on community service. Strategic improvements in security policy transparency and header implementation could further enhance its security posture and user trust.

G

Gemeinde Wila

wila.ch

46

Gemeinde Wila operates as a local government entity providing administrative and community services to residents of Wila, Switzerland. The website serves as an information hub and service portal, offering access to online administrative functions, news, events, and official communications. The site targets local citizens and stakeholders seeking municipal information and services. Technically, the site is built on the Swiss eGovernment CMS GOViS, leveraging modern JavaScript libraries such as jQuery and Font Awesome for UI elements, and employs Matomo for privacy-conscious analytics tracking. The website demonstrates good mobile responsiveness, accessibility, and SEO practices, ensuring a positive user experience. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR, though it lacks explicit security policies or incident response disclosures. Overall, the site is trustworthy, professionally maintained, and aligned with the expectations for a municipal government portal.

S

Sport Austria

sportaustria.at

68

Sport Austria is a prominent non-profit interest representation and service organization dedicated to organized sports in Austria. The website serves as a central hub for information, services, and communication targeted at sports organizations and stakeholders within Austria. It offers extensive resources including news, training, event information, and policy advocacy, positioning itself as a key player in the Austrian sports ecosystem. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies and Google Tag Manager for analytics. The site demonstrates good mobile optimization, accessibility basics, and SEO practices, providing a user-friendly experience. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and detailed privacy policy. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit published security policies or incident response contacts. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the website's claims, indicating a trustworthy and legitimate domain. Overall, the website presents a professional and secure digital presence suitable for its audience, with recommendations to enhance security transparency and incident response readiness to further strengthen trust and compliance.

O

OstWestfalenLippe GmbH

ostwestfalen-lippe.de

59

OstWestfalenLippe GmbH is a regional development agency focused on promoting the OstWestfalenLippe region in North Rhine-Westphalia, Germany. The organization supports sustainable transformation, economic growth, education, and cultural initiatives, positioning itself as a key regional stakeholder. The website reflects a mature digital presence built on TYPO3 CMS, with modern design and good mobile optimization. Security posture is solid with HTTPS and spam-protected emails, though some advanced security headers and cookie consent mechanisms are missing. Overall, the site is professional, trustworthy, and well-aligned with the organization's mission.

K

Kloster Einsiedeln

wallfahrt-einsiedeln.ch

31

Kloster Einsiedeln operates as a prominent Benedictine abbey and the largest pilgrimage site in Switzerland, combining religious, cultural, and community services. The website effectively communicates its spiritual mission, pilgrimage offerings, and cultural events, targeting pilgrims, religious visitors, and cultural tourists. The institution holds a strong market position as a unique religious and cultural landmark in Switzerland. Technically, the website is built on TYPO3 CMS, a robust and mature content management system, with a modern tech stack including HTML5, CSS, and JavaScript. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some advanced security headers and a visible cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. No critical vulnerabilities or security incidents were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and content quality, with minor improvements recommended in privacy compliance and security best practices to further strengthen its posture.

A

Allgemeine Unfallversicherungsanstalt (AUVA)

auva.at

67

The Allgemeine Unfallversicherungsanstalt (AUVA) is a key Austrian government institution providing accident insurance, prevention, treatment, rehabilitation, and financial compensation services. The website serves as the official portal for AUVA, targeting Austrian residents and workers who require accident-related social insurance services. The site is professionally designed, primarily in German, and uses modern web technologies including Vue.js and the Umbraco CMS platform. It demonstrates good digital maturity with mobile optimization, accessibility features, and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though explicit security policies and incident response contacts are not found in the provided content. WHOIS data confirms the domain's legitimacy and consistency with the institution's government affiliation. Overall, the website is trustworthy and serves its public service function effectively.

W

Wallfahrtsbüro Kloster Einsiedeln

heiligesjahr.ch

35

The website heiligesjahr.ch serves as an informational portal for the Holy Year 2025 event at Einsiedeln, Switzerland, a significant Catholic pilgrimage site. It provides detailed religious content, event agendas, and invitations aimed at pilgrims and visitors interested in Catholic traditions. The site is operated by the Wallfahrtsbüro Kloster Einsiedeln, a small non-profit religious entity. Technically, the website uses legacy JavaScript libraries such as jQuery 1.3.2 and plugins like prettyPhoto and pngFix, indicating an older technology stack with moderate performance and basic mobile optimization. Security posture is moderate to low, with no visible HTTPS enforcement or modern security headers, and the use of outdated JavaScript libraries introduces potential vulnerabilities. Privacy compliance is minimal, lacking privacy and cookie policies or consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and trustworthy for its niche audience but requires modernization and improved security and privacy practices.

O

OstWestfalenLippe GmbH

startklar-owl.de

60

OstWestfalenLippe GmbH operates a professional and well-structured website promoting the startklar Businessplan-Wettbewerb, a biennial business plan competition aimed at supporting startups and entrepreneurs in the Ostwestfalen-Lippe region of Germany. The competition offers workshops, mentoring, and prizes to foster innovation and regional economic development. The website is built on TYPO3 CMS, uses Matomo for analytics, and demonstrates good SEO and mobile optimization. Contact information is clearly provided with anti-spam measures. Security posture is adequate with HTTPS and obfuscated emails, though improvements in security headers and cookie consent mechanisms are recommended. The domain WHOIS data aligns with the website's regional and organizational claims, indicating legitimacy and consistency. Overall, the site reflects a credible, government-affiliated entity focused on regional startup support.

K

Kulturbüro Riehen

eigenundartig.ch

69

Riehen Events is a municipal cultural event platform operated by the Kulturbüro Riehen, providing comprehensive information about local cultural events, exhibitions, and community activities in Riehen, Switzerland. The website serves residents and visitors by offering event calendars, venue information, permit guidance, and cultural funding details. It supports event organizers with tools to submit events and promotes local culture effectively. Technically, the site is built on Drupal 10 with modern JavaScript libraries such as Alpine.js and Splide.js, ensuring a responsive and accessible user experience. The use of Matomo analytics with a cookie consent mechanism demonstrates a commitment to privacy and GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-aligned with its municipal purpose.

O

OstWestfalenLippe GmbH

ostwestfalenlippe.de

58

OstWestfalenLippe GmbH is a regional development agency focused on promoting the OstWestfalenLippe region in North Rhine-Westphalia, Germany. The company supports sustainable transformation, workforce development, regional marketing, and innovation through various projects and events. The website is professionally designed, content-rich, and targets stakeholders including businesses, academia, government, and citizens of the region. Technically, the site uses TYPO3 CMS and Matomo analytics, indicating a modern and privacy-aware infrastructure. Security posture is good with HTTPS and spam-protected emails, though additional security headers and explicit policies could improve it. Overall, the website is trustworthy, well-maintained, and compliant with GDPR, though it lacks a cookie consent mechanism. Strategic recommendations include enhancing security headers, publishing security policies, and implementing cookie consent to improve compliance and trust.

S

Stadt Bielefeld

bielefeld.de

57

The website www.bielefeld.de is the official digital presence of the city of Bielefeld, Germany, serving as a comprehensive portal for municipal services, community information, city development, culture, and events. It targets residents, visitors, and businesses, providing a wide range of services including appointment scheduling, public announcements, and career opportunities. The site is well-positioned as the authoritative source for city-related information and services. Technically, the site is built on Drupal 10 with Bootstrap framework, hosted likely by Deutsche Telekom, and integrates privacy-conscious analytics via Matomo with cookies disabled and DoNotTrack respected. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and follows privacy best practices. However, it lacks explicit security policies or incident response information and could improve by adding additional security headers and a vulnerability disclosure policy. Overall, the security posture is solid but could be enhanced. The risk assessment is low given the official nature, absence of suspicious content, and good privacy compliance. Strategic recommendations include strengthening security headers, publishing security policies, and enhancing transparency around incident response and vulnerability disclosures.

D

Direktoratet for forvaltning og økonomistyring (DFØ)

doffin.no

67

Doffin.no is an official Norwegian government website operated by the Direktoratet for forvaltning og økonomistyring (DFØ). It serves as a comprehensive database for public procurement announcements, enabling public sector entities and suppliers to access procurement data to improve transparency and decision-making. The platform holds a strong market position as the national official source for public procurement information in Norway, targeting government agencies and suppliers. The website is well-branded, consistent, and professionally designed with a focus on usability and accessibility. Technically, the site leverages modern web technologies including React and Matomo analytics, ensuring a responsive and accessible user experience. The site is served over HTTPS with appropriate security headers, reflecting a good security posture. However, it lacks visible cookie consent mechanisms and published security or incident response policies, which are areas for improvement to enhance privacy compliance and transparency. Security-wise, the platform demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. The absence of a vulnerability disclosure policy and incident response contact reduces transparency but does not indicate immediate risk. Overall, the site is trustworthy and secure for its intended audience. The overall risk assessment is low, with recommendations focusing on improving privacy compliance by implementing cookie consent, publishing security policies, and adding terms of service. These steps will strengthen user trust and regulatory adherence while maintaining the platform's role as a critical government service.

L

Landeshauptstadt Mainz

mainz.de

68

Landeshauptstadt Mainz operates an official municipal government website providing comprehensive information and services related to city administration, politics, tourism, culture, and public events. The site targets residents, tourists, and businesses, offering multilingual support and various online services. The technical infrastructure is based on the Sitepark Information Enterprise Server CMS, utilizing modern JavaScript libraries such as jQuery and Modernizr, with Matomo analytics integrated for user tracking under GDPR-compliant consent mechanisms. Accessibility and mobile optimization are well implemented, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response contacts are not evident. The WHOIS data aligns with the official city domain, confirming legitimacy and trustworthiness. Overall, the website demonstrates high professionalism, good security hygiene, and strong compliance with privacy regulations.

S

Stadtverwaltung Eschborn

eschborn.de

55

The website www.eschborn.de serves as the official municipal portal for the city administration of Eschborn, Germany. It provides a comprehensive range of online services and information targeted at citizens, businesses, and visitors. The site is well-branded and includes extensive accessibility features to support diverse user needs. The content is primarily in German with multi-language support available through an integrated accessibility tool. The business model is focused on public service delivery and community engagement, positioning the city government as a trusted local authority. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs modern web technologies including Bootstrap and jQuery. Analytics are managed via Matomo and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some performance optimizations could be considered. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns with the official nature of the site, showing consistent domain registration and hosting. Overall, the website presents a professional and trustworthy digital presence for the Eschborn city administration. Strategic improvements in privacy policy publication, security header implementation, and incident response transparency would enhance compliance and security posture further.

I

IHK Frankfurt am Main

startup-pilot.online

74

IHK Frankfurt am Main operates as a regional chamber of commerce and industry, providing a comprehensive platform called Startup-Pilot FrankfurtRheinMain that aggregates over 300 regional support offerings for startups. These include networking opportunities, financing, talent activation, accelerator programs, incubators, and competitions, targeting startups and innovation-driven enterprises in the FrankfurtRheinMain region. The website serves as a key resource for startups, investors, and academic institutions, positioning IHK Frankfurt am Main as a central facilitator in the regional startup ecosystem. Technically, the website is built on the CoreMedia CMS platform, utilizing modern web technologies including JavaScript, CSS, and HTML5. It integrates third-party services such as eTracker for analytics, Userlike for chat support, and CCM19 for cookie consent management, reflecting a mature digital infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms with granular user control, and uses secure forms with CSRF tokens. While explicit security policies and incident response information are not published, no vulnerabilities or exposed sensitive data were detected. The domain and WHOIS data align with the official branding and regional chamber identity, supporting legitimacy and trustworthiness. Overall, the website presents a professional, secure, and privacy-compliant digital presence that effectively supports its business mission. Strategic improvements could include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and trust further.

S

Swiss Sport Integrity

sportintegrity.ch

63

Swiss Sport Integrity is a Swiss foundation dedicated to protecting the integrity of Swiss sports through anti-doping measures, ethical guidelines, and incident reporting services. The organization serves athletes, coaches, sports organizations, and the public by providing education, prevention, control, and legal frameworks to ensure clean and ethical sports practices. The website is professionally designed, multilingual, and provides comprehensive information and services related to sports integrity in Switzerland. Technically, the website is built on Drupal 11 with modern frontend technologies including Tailwind CSS and jQuery. It is mobile-optimized, accessible, and integrates Google Tag Manager and Analytics for user tracking. The site uses HTTPS with good SSL configuration and implements cookie consent mechanisms compliant with GDPR. From a security perspective, the site follows best practices such as secure forms and no exposed sensitive data. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data is consistent with the website's Swiss non-profit sports integrity mission, indicating legitimacy and trustworthiness. Overall, the website presents a low-risk profile with strong content quality and business credibility. Strategic improvements in security transparency and incident response readiness would further enhance trust and compliance.

K

Kunst Raum Riehen

kunstraumriehen.ch

70

Kunst Raum Riehen is a publicly funded cultural institution serving as the official exhibition space for contemporary art in the municipality of Riehen, Switzerland. The website provides comprehensive information about current and upcoming exhibitions, events, and art mediation activities, targeting a general audience interested in culture and the arts. The institution operates with free public access and maintains active engagement through newsletters and social media channels. Technically, the website is built on Drupal 10, leveraging modern JavaScript frameworks such as Alpine.js and Splide.js for interactive components. It employs Matomo analytics with privacy-conscious settings and a cookie consent mechanism, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. From a security perspective, the site enforces HTTPS, uses cookie consent, and avoids exposing sensitive data. However, it lacks explicit security policies and incident response contacts, and could improve by adding security headers and formal vulnerability disclosure mechanisms. Overall, the security posture is solid but could benefit from enhanced transparency and formal documentation. The domain registration aligns well with the website's municipal identity, showing no suspicious patterns and indicating high legitimacy. The website content is safe for general audiences, with no adult or questionable material. The overall risk is low, and the site demonstrates good compliance with privacy regulations such as GDPR.

The website dafuer-sein-ist-alles.de is operated by the Deutscher Olympischer Sportbund e.V. (DOSB), the German Olympic Sports Confederation, serving as a platform to promote and inform about Germany's bid for the Olympic and Paralympic Games. It targets the German public and stakeholders interested in the Olympic movement, providing detailed information on bidding concepts from major German cities and regions, interactive tools, and news updates. The site enjoys strong government backing, evident from the partnership with the German Federal Ministry of the Interior and official logos displayed. Technically, the website employs modern web technologies including ES modules, Alpine.js for interactivity, and Vite for bundling. It integrates consent management via Consentmanager.net, analytics through Matomo, and uses Google reCAPTCHA for form security. The site is well-optimized for mobile devices, fast loading, and accessible, with good SEO practices and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and manages cookie consent properly. While explicit security headers like X-Content-Type-Options and X-Frame-Options are not visible in the HTML, the overall security posture is strong with no exposed sensitive data or vulnerable libraries detected. Privacy compliance is robust, with a comprehensive privacy policy and cookie consent mechanism in place. Overall, the website presents a professional, trustworthy, and secure platform aligned with its governmental and non-profit nature. It effectively balances user engagement, privacy, and security, making it a reliable source for information on Germany's Olympic bid.

S

Staatskanzlei des Landes Nordrhein-Westfalen

sportland.nrw

67

Sportland.NRW is an official government platform operated by the Staatskanzlei des Landes Nordrhein-Westfalen, dedicated to promoting sports activities, events, and funding opportunities within the North Rhine-Westphalia region. The website serves a broad audience including sports fans, athletes, clubs, and event organizers, providing comprehensive information about sports in the region, upcoming events, and government initiatives. The platform maintains a strong market position as the authoritative source for sports-related information in NRW, supported by consistent branding and official government endorsements. Technically, the website is built on Drupal 10 CMS, leveraging modern frontend technologies such as Font Awesome 6 and Bootstrap components. It integrates Matomo for privacy-conscious analytics and implements a robust cookie consent mechanism compliant with GDPR. The site is mobile-optimized and accessible, with good SEO practices and clear navigation, contributing to an excellent user experience. From a security perspective, the site enforces HTTPS and employs cookie consent controls to manage tracking. While DNSSEC is not enabled, the domain registration is consistent and transparent, with no suspicious patterns detected. No critical vulnerabilities or exposed sensitive data were found in the content. However, additional security headers and a vulnerability disclosure policy could enhance the security posture. Overall, Sportland.NRW presents a trustworthy, professional, and well-maintained digital presence for government sports promotion. The risk profile is low, with strong compliance to privacy regulations and good technical implementation. Strategic recommendations include enabling DNSSEC, adding security headers, and publishing a security.txt file to further improve security and transparency.

W

WestLotto

westlotto.de

70

WestLotto.de is the official state lottery operator for North Rhine-Westphalia (NRW), Germany, providing a range of lottery and gaming services including LOTTO, Eurojackpot, KENO, TOTO, and GlücksSpirale. The website targets adult residents of NRW and positions itself as a secure and reliable state-run gaming platform. The business model is focused on regulated lottery services under government oversight, with a strong regional market presence.

S

Sportjugend Nordrhein-Westfalen

sportjugend.nrw

47

Sportjugend Nordrhein-Westfalen is a regional youth sports organization affiliated with the Landessportbund Nordrhein-Westfalen, focusing on youth engagement, sports education, volunteer services, and community programs in the German state of North Rhine-Westphalia. The website serves as a comprehensive portal for information on various youth sports initiatives, qualification programs, and events, targeting young people, sports clubs, and volunteers. Technically, the site is built on the TYPO3 CMS platform, integrating modern web technologies such as Google Tag Manager, Google Analytics, and accessibility tools like ReadSpeaker. The website is well-structured, mobile-optimized, and includes a cookie consent mechanism aligned with GDPR requirements. Security-wise, the site enforces HTTPS and uses cookie consent but lacks explicit security headers and a published security policy or incident response contacts. The WHOIS data is privacy protected, which is typical and justified for a non-profit organization. Overall, the website demonstrates a mature digital presence with good content quality and compliance, supporting its role as a trusted regional youth sports entity.

L

Landessportbund Nordrhein-Westfalen e.V.

lsb-nrw.de

46

The Landessportbund Nordrhein-Westfalen e.V. is a large, non-profit regional sports umbrella organization serving the state of North Rhine-Westphalia, Germany. It provides a broad range of sports programs, information, and funding opportunities for sports clubs and individuals. The website is professionally designed, well-structured, and targets sports organizations and enthusiasts within NRW. The technical infrastructure is based on TYPO3 CMS with integration of modern analytics and marketing tools such as Google Tag Manager, Google Analytics, and Facebook Pixel. Accessibility features and cookie consent mechanisms are implemented, reflecting a mature digital presence. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though security headers could be improved. WHOIS data is privacy protected, which is typical for such organizations, and does not raise legitimacy concerns given the website's professional nature and content. Overall, the site demonstrates a strong commitment to privacy compliance and user experience.

The website bitvtest.de represents tollwerk GmbH, a specialized service provider focused on accessibility testing and consulting for websites, web applications, and native apps. Their flagship service, the BIK BITV-Test, evaluates compliance with German BITV 2.0 and European EN 301 549 standards, complemented by WCAG 2.2 testing and usability assessments. The company positions itself as a trusted expert in accessibility with a clear quality promise and a professional, well-structured online presence targeting organizations seeking to improve digital accessibility. The site is primarily German-language with English support, reflecting a regional focus with potential international reach. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries like jQuery and Font Awesome for UI elements. The site demonstrates good mobile optimization, accessibility, and SEO practices, including comprehensive metadata and social media integration. Performance is moderate, with no critical technical debt or vulnerabilities detected in the visible content. However, some security best practices such as explicit security headers and cookie consent mechanisms could be improved. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. No WAF or blocking mechanisms interfere with content access. The absence of a published security policy, incident response contacts, or vulnerability disclosure page suggests room for maturity in security governance. The domain WHOIS data is consistent with the website's business claims, supporting legitimacy and trustworthiness. Overall, bitvtest.de is a professional, trustworthy, and well-maintained website serving a niche but important market segment in digital accessibility. Strategic improvements in privacy compliance and security transparency would further enhance its credibility and user trust.

D

Deutsche UNESCO-Kommission

unesco.de

37

The Deutsche UNESCO-Kommission website serves as the central contact point for all UNESCO-related matters in Germany, acting as a mediator for foreign cultural and educational policy. The site is well-structured, content-rich, and professionally designed, targeting a general audience interested in cultural diversity, education, science, and heritage. It operates on TYPO3 CMS, indicating a mature technical infrastructure with good accessibility and SEO practices. However, the absence of explicit privacy and cookie policies, as well as security headers, represents compliance and security gaps that should be addressed to enhance trust and regulatory adherence. The domain registration data is consistent and trustworthy, supporting the legitimacy of the entity. Overall, the website reflects a stable, credible governmental non-profit organization with room for improvement in privacy and security transparency.

L

Landessportbund Berlin e.V.

familiensportfest-berlin.de

42

The website familiensportfest-berlin.de represents the Landessportbund Berlin e.V., promoting the Familiensportfest Berlin, a family-oriented sports festival held across various districts in Berlin. The event aims to engage families and local communities in diverse sports activities, fostering health, inclusion, and community spirit. The organization holds a strong regional presence with partnerships across Berlin's sports federations and clubs. Technically, the site is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and Font Awesome, integrating accessibility tools and Matomo analytics for privacy-conscious user tracking. Security posture is solid with HTTPS and some privacy measures, though explicit security headers and policies are absent. Contact information is comprehensive, supporting business credibility. Overall, the site is professional, accessible, and trustworthy, serving its community-focused mission effectively.

L

Landessportbund Berlin

berlin-hat-talent.de

44

Berlin hat Talent is a well-established non-profit initiative supported by the Landessportbund Berlin and the Berlin Senate Department for Education, Youth and Science. The initiative focuses on promoting sports and physical activity among children in Berlin through programs such as Bewegungsfördergruppen and Talentiaden. The website reflects a professional and consistent brand presence with strong government and sports federation partnerships. Technically, the site is built on WordPress with a modern plugin ecosystem, providing good SEO and mobile optimization. Security posture is adequate with HTTPS enforced, but lacks some security headers and a cookie consent mechanism, which are areas for improvement. Overall, the site is trustworthy, safe, and serves its target audience effectively.

S

Sportjugend Berlin

sportjugend-berlin.de

46

Sportjugend Berlin is a well-established youth sports organization affiliated with the Landessportbund Berlin, focusing on youth social work, educational programs, youth travel, volunteer services, and youth engagement within Berlin. The organization targets youth, sports clubs, volunteers, educators, and families, providing a broad range of community and sports-related services. The website reflects a professional and consistent brand image, with clear contact information and a strong social media presence. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap 5 and Font Awesome 6. It is hosted on Microsoft Online infrastructure and incorporates accessibility tools such as eyeAble, demonstrating a commitment to inclusive design. The site performs moderately well with good mobile optimization and SEO practices. From a security perspective, the site uses HTTPS with a good SSL configuration and disables cookies in Matomo analytics to enhance privacy. However, it lacks some security headers and does not publish a security policy or incident response contacts, which are areas for improvement. Privacy compliance is generally good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a minor gap. Overall, the website is trustworthy, professional, and serves its community effectively. Strategic improvements in security policies and privacy consent mechanisms would further strengthen its posture.